last executing test programs: 41.193832892s ago: executing program 0 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1f8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/39, 0x200000, 0x800, 0x9, 0x3}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x0, 0x3}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 41.104912751s ago: executing program 0 (id=894): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300030c000000ff0e00000000000002000900380000008371068ddd711800030006003200000002000000000000000000000000000000020001000100000000000000000000e0030005003c0000000200"/91], 0x60}, 0x1, 0x7}, 0x0) r1 = getpid() futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ptrace$cont(0x9, r1, 0x7fffffffffffffff, 0xf) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r4, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 40.163011623s ago: executing program 0 (id=912): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000090a01040000000000000002000000000800cb8ca89a05450340000000080800064000000000140000001000010008000000000000000084000a"], 0x4c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r9, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0) (async) recvfrom(r10, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) 39.804865919s ago: executing program 0 (id=923): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x20040004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) flock(r2, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) r4 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x6c, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0xc, 0x112, 0x0, 0x1, [@nested={0x8, 0x28, 0x0, 0x1, [@nested={0x4, 0x85}]}]}, @generic="7981f2d259aee4265a92a7f97f613c08384ccaa855d725959b7da912450ed3e9e5df3ed15038ed094170b17308aef260d885de2db97828b95928854a7b83b977cc374ec859d41a2bb1e71d572e"]}, 0x6c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f00000007c0)="0b0312002e9b97cf5db4d0d010f6a1", 0xf, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001600)={'syztnl0\x00', &(0x7f0000001580)={'syztnl1\x00', 0x0, 0x2f, 0x95, 0x7, 0x6, 0x5, @local, @remote, 0x7, 0x7, 0x1, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001900)={'wg0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r12, 0x9362, 0x0) sendto$packet(r10, &(0x7f0000000140)="08733a3c319169675d25f0b3418a", 0xe, 0x40000, &(0x7f0000000200)={0x11, 0xe, r11, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000002180)={@rand_addr, 0x0}, &(0x7f00000021c0)=0x14) sendmmsg$inet(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="51c3efaf219b66d35d015a6c4e0b3874ed443b6fda1916734cf565acf5314497d9ff5aa77b1a51cd070404be76e21eaaf63588fc543895a6c945fa1c1d06092f82f758b33ee2372c0322306bf21ab92af2abf9a0205cebad87ebb5202c2685f4ab3b78284b42112b88314ab207a75b8529d78ef154dd96d3b0b731268827752093d65781acc2d85c3ee2f80966b0e91f6cf7cb27e1d3c1cdbd186fa8cdfc2dc354704ba3a028bc08a9ea91fd5faedf6103a17aaf7369681009f7560e91ee0869296375bdfc2b2913f5385dc8da16225ef29d368e08", 0xd5}, {&(0x7f00000011c0)="b8f7725f6f77f7f8684630978d7e994ebd0373db7b1ba8b26cfe4c112a47d1b7ec8ed0c07847022d235d", 0x2a}, {&(0x7f0000001200)="74e9", 0x2}, {&(0x7f0000001240)="efdb6eb107e5d981c04ebd1d7717173209c734db4d79e5cd173eda83901cd730986754023dfa4aa87b33bf04fe3c570891a4a054bc80de37bd32c3b531c87d89e5220a571b416f741a34360ed4779d0b5d600e360ebdeed41d2dc63e046d58a43c29214c1ae55198d96813bce8cb76f33f4ece4b1adaed35d1e0df0340fa8111e1c2eff191c92709fc09a4d2e6f9f37ee086ac153bd70b5426c084a48b522f4a8a7c1cfcbfc67f815711e49bdc2cb63ace8a730c274012b231cdf974c86fd0eae11a60fffbf0", 0xc6}], 0x5, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}}, {{&(0x7f0000001400)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001440)="5fffd11c80f25f93711f7a30a798467834d2828d6de5dbf117fd3a53404610005a0c3ec534fb01ec27a510fa6e92bacb11142a2741b5e0cead184002f62b3038e93b74c8ce50c23fb261a2cb89744569e0739b98affb8221b4597896e72cca26adb6fe11f7f525963985d1970f1d148ac8e32c6d055e243cd09de23278f777ac6b46aafc012a44f846dcb15062be50325a65e3f3e5ab4054836489f0cf7bb2b631ecf5100f7631261875aa093f7c2efec8f92114c180bd3aecdbfeea1b23e9d3a066402e8205f4461c6f51133ee4", 0xce}], 0x1, &(0x7f0000001640)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0xa}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf3}}], 0x88}}, {{&(0x7f0000001700)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001740)="805a1611e99f6408443ecc237d5f7d32f8ed0765a52782740e82f28a5530eeb5e615b64c11fc05e58c19e05758b06403d27131cae1cfff0a6c9ac3e98d566112ec790b56da6261c96e36a9b2217215b39858f9133bb1594669f8fc059624c06cc4ac021732ba64c89affbd530c010fa2785119aaace0dde1d40160464f1026dc30697e24e1a598965a54f2e4e077ccfdfe677f0ae77a4b9975acbacb69e8e02fa2bbf0d511eb40592bbb85e08ddaf06c906307d62b575d75b0732c830bcb054bb128a5be355a25b476403b6f57f30217d80bfc13114712a8cc0c4a665984454746e77736dc08b54a24c3cb0b9461", 0xee}, {&(0x7f0000001840)="6e2d7e0c3a8fb5e8afb1bbd51c3c606218482c720493633859848912bf2999d2bc720441525f854db7dd83543c8ebc0a489ed72e5db75a4bcdb8a6cb406d6ce00d73f532eaf0583deefd9bd4acab51ebd18d5a47a5", 0x55}], 0x2, &(0x7f0000001940)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="e00000017f000001000000001100000000000000000000000100000008000000000000008c000000000000000000000007000000440885000000000644144841ac1e010100000003ac1414250000e19d862a000000000111ea93c3bf7b189e629100960dd9ef660007509b00afcd060cfa62ca7fcf07268c4fd4880379441cf431ac1414aa0000000800000000000000070a010101000000020713d4ac14142200000000ffffffff7f0000019404000000000000110000000000000000000000010000000700000000000000"], 0x2b0}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001c00)="8668782ac35094e70953f0e94035ff9dc6713f3dc0926cb74abc48ea885287294466d192ed63a4e7713d0dbcd841ae0b6698471796f40df6c2cbffe254b13f", 0x3f}, {&(0x7f0000001c40)="2d1b30b6e4e328a9c9e5fbedf73583fa8ccdba01cac5ff371027060c063cd65d31afd419931ae7abf584d5bc84debcc1395d9275087461", 0x37}, {&(0x7f0000001c80)="874bff4ba57a26e62d6ef51e77033a743d874521ae93ae44025258cd71ab89ac63c4368e058c5e70aa9236910d91a54a390bdf4574cbfe679e028927a7500aca8ab3d4c860c3a457afef3ed06fdefcc9790f6ea11cc6a0e44443e3b6824cbf89ab0406b5a2f670736fa3128a054a34be0d6037b97fe93a2261b193bd76564c91581fa7bfd48cd59ef2b0b15f493ed0775cf4abdf7b97606bd7fab2a1566deb3628a96192254207666432a2f07d8a9680b20847fb0a10ea", 0xb7}, {&(0x7f0000001d40)="c6c9d13c6f3a2013f4fcf17c44820865f58eaa92094a485efddc9b5939cb17d4deac59d8cb847ab7f709a9c0fd", 0x2d}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)="235846464b98fb4f5bb3fc3b1c25f87f868fc9cb72444df398d352aba0732b891557b4c89a6d411553bd9cb34ca2514804a47f7248fbafbae7836f2f48b78367a207dd7bff197f46889eb9553d5e51eed985e44fa1c3bdc33aaac21bb456b7a5bb32149480a040626a291cdea17576729163fc768fdf5834e0861bfce2a575b7185a99781113dd6f965684fbbf3e133ad3a3853eea7e5331794b04a131b8ba4ac52b14bd0155c4fe855d4f1962a05fe22d3abed9a3fff5d11bd38ced88a6e75f4a62cac4ed70e0a2506b", 0xca}], 0x6, &(0x7f0000001f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xd9, 0x1, 0xb, [{@loopback, 0x5}, {@multicast2, 0x4}]}, @noop]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x5f, [@remote, @remote, @broadcast, @empty]}, @noop, @noop, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x30}]}, @cipso={0x86, 0x36, 0x0, [{0x0, 0x2}, {0x3, 0x8, "426fee52972f"}, {0x7, 0x5, "7e7fa9"}, {0x2, 0x8, "ba77c90de982"}, {0x2, 0xa, "e85746fde35d5aa1"}, {0x2, 0x9, "382329b8949e72"}, {0x2, 0x6, "51568ad4"}]}, @timestamp_addr={0x44, 0x14, 0x52, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x2}, {@rand_addr=0x64010101}]}, @rr={0x7, 0x7, 0x8a, [@local]}, @lsrr={0x83, 0x23, 0x6a, [@multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x20}]}, @lsrr={0x83, 0x27, 0x3b, [@private=0xa010102, @rand_addr=0x64010101, @broadcast, @multicast1, @remote, @broadcast, @remote, @remote, @private=0xa010102]}, @ssrr={0x89, 0x13, 0xdd, [@multicast2, @local, @loopback, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x138}}, {{&(0x7f0000002080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002140)=[{&(0x7f00000020c0)="ee4cf79fcd26a8d6d3a5c7637b00766f282abdb9ce3c4740c7ffd3410963e4f644b30d86c3314389a4c69663576374273fa7ccab27edfdd8da13bd1059827d8b4b9075728ff8e1d7cc8cad29cce6227419514f43ddab4eb2ceeb523b54cdd5e199782404a32d2509f11d2c78e97f6b6c756f5254d126d817b9271e40bd772e", 0x7f}], 0x1, &(0x7f0000002200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}}}], 0xc8}}], 0x5, 0x20000881) 39.640792455s ago: executing program 0 (id=926): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) (async) write(r1, &(0x7f0000000240)="94", 0x1) close(r4) tee(r0, r5, 0x8f5, 0x0) (async) write$binfmt_script(r5, 0x0, 0xd9) write(r2, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 32) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x0) (async) r9 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r9, 0x40084504, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000021c0)={0x4c, 0x0, &(0x7f0000001fc0)=[@transaction_sg={0x400c6313, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 39.411973507s ago: executing program 0 (id=935): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='fdi+\xc5r\xaefn{\xe4\x8e\xce\b') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r4, 0x0, 0x45c, 0x5) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x9, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x6, 0x10000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) close_range(r7, 0xffffffffffffffff, 0x0) 39.325502956s ago: executing program 32 (id=935): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='fdi+\xc5r\xaefn{\xe4\x8e\xce\b') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r4, 0x0, 0x45c, 0x5) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x9, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x6, 0x10000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) close_range(r7, 0xffffffffffffffff, 0x0) 27.103191697s ago: executing program 1 (id=1228): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) (async) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000240)={0x0, 0x1, 0x32, 0xffffffff80000001}) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 27.000078737s ago: executing program 1 (id=1231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x90, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0xa, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x1}, @fda={0x66646185, 0x2, 0x0, 0x2f}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x9, 0x0, 0x8}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 26.988031958s ago: executing program 1 (id=1232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000540)=0x1c, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xb20, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x7d, 0x0, 0x0, 0x0, "dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c3a17049dc942345089ee93f6223918195704fd22e15c26b0555e6a957c3f2dc86a355f4806c9e4f761"}}, 0x80}}, 0x40000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) (rerun: 32) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async, rerun: 32) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000580)={@empty, r4}, 0x14) (async, rerun: 32) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3f, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x9f, 0x100000, 0x760, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0xb0, 0x0, 0x11000, 0x3, 0x5, 0x798, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x1, 0x81, 0x2, 0x180000, 0x4007, 0x8f, 0x5, 0xfffffffe, 0xf7, 0x5, 0x2, 0x6, 0xa, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x751, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x8000002, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xd3a, 0xe9cf, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1ff, 0x145, 0x0, 0x4, 0x2, 0x40, 0x8, 0xfffffffc, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x7, 0xc5c, 0xffffffff]}}) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cde0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000880)=0x7, 0x4) (async, rerun: 32) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) (async, rerun: 32) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000700)={0x1f, 0x0, @fixed}, &(0x7f0000000740)=0xe, 0x80000) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000800)=r7) (async) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/266, 0x10a, 0x0, 0x0}, &(0x7f0000000100)=0x40) (async, rerun: 32) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x20c5) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x2d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000600)) (async) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc010000", @ANYRESDEC, @ANYBLOB="a1830000e61e39dc146520"], 0x1fc}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000127bd7099af97ccd37d1af991f43671af7018b8101da44a3e2a700ef249705e9e7bdb01011b00000008009a00010026000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0xfe812c7673b09041) 26.931244754s ago: executing program 1 (id=1233): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) write$tcp_mem(r0, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000000)={0x7, 0x4}) 26.931014574s ago: executing program 1 (id=1234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r1}) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a60560808df823412449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1df1000000000000000c9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073034d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6afcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8f0dbf6ee3e169279ce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139af06fc76957227ffff2de20a4b8e370000000000000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2398f0c09d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0xfffffffffffffd7f) (async) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) (async) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) syz_open_procfs(r1, &(0x7f0000000000)='net/tcp6\x00') (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 26.121754993s ago: executing program 1 (id=1243): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010330030904000001020d00000524000001052400"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 10.675979101s ago: executing program 33 (id=1243): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010330030904000001020d00000524000001052400"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 5.337594076s ago: executing program 4 (id=1618): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00009b2000/0x1000)=nil, 0x1000, 0x0) setreuid(0xee00, 0x0) setpriority(0x2, 0x0, 0xd2f4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r4, 0x29, 0x3a, &(0x7f0000000200)=""/220, &(0x7f0000000340)=0xdc) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988", 0xd}, {&(0x7f0000000500)="e9", 0x1}], 0x2) read(r1, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x80) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 5.076675681s ago: executing program 4 (id=1625): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01c366b93f08000066b8f1ffffff66baffffffff0f300fe5e8fe4600360f01c8640f23c966b80500000066b9060000000f01c166f0800847f30f01d8ba410066ed", 0x42}], 0x1, 0x6, &(0x7f0000000100)=[@cr4={0x1, 0xc0}, @cstype0={0x4, 0x1}], 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000180)={0x1, 0x9, 0x4, 0x5, 0x8}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x8, 0xfffffff9, 0x7fff, 0x16, "82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x17) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x8}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.681353788s ago: executing program 5 (id=1659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socketpair(0xf, 0x5, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 3.679029779s ago: executing program 5 (id=1661): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "c5fba9f4ac236b58a955ad036df048268f5c73f92aa0e635cd944a9e02afe9bdf7072f59f8678c0d65aabec9709473d387cc229f6e6dda33ea1afa95d77459af", 0x22}, 0x48, 0x0) keyctl$unlink(0x9, r1, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_io_uring_setup(0x2bf3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x20040814) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = accept4(r3, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000180)=0x80, 0x800) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0xfffffffffffffff2}}], 0x10}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) close(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x639, 0x0, 0x32feb97c}]}) 2.148363389s ago: executing program 3 (id=1675): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000003900)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000001ac0)={0xa, 0x4e22, 0x1d04, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000002040)="2d12", 0x2}], 0x1, &(0x7f0000003a00)=ANY=[@ANYBLOB="300000000000000029000000370000003202000000000000c910000000000000000000000097ff0000000000000000001400000000000000290000000b0000000000000100000000780000000000000029000000390000003b0c020c0000000000000000000000000000ffffe000000200000000000000000000ffff0a010101fe8000000000000000000000000000aafc0000000000000000000000000000002001000000000000000000000000000200000000000000000000000000000001300000000000000029000000360000002c02000000000000c910fe8000000000000000000000000000bb040106000000140000000000000029000000080000000100000000000000300000000000000029000000370000008902000000000000c910fc010000000000000000000000000001050200070000480000000000000029000000390000008706010300000000fe8000000000000000000000000000bbfe8000000000000000000000000000aafe80000000000000000000000000003a140000000000000029000000080000000000000000000000a8000000000000002900"], 0x240}}], 0x2, 0x40000) 2.102594914s ago: executing program 3 (id=1676): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000400)=ANY=[@ANYBLOB="1603000000000000c91000000000000000000000000000000001010000000d480401060000000002d85a9ac28d36e5adce0e9160c84f5db2b556e2e8090f2567ae710a2524774974e3ad4f6962ec57f98566a30f19412b1e6d294fc9fc991aa3c98dde8365f693f7c0367b978bf6ec22f1914c9939943b7ef6e75b41cf79e532528120b2bae6320babae0d2615f16516493b435a8dc4fbfebc69ddf5ee53921b4aed8f396b2d249d0b0d8ac4da4a271b03d49b571f8c23eee8e50000000000007725fee38c6ba42a3cff9fdf7608eb70d85b58a19449648f20312d7b6707755b00"/238], 0x28) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000240)=""/52, &(0x7f0000000280)=0x34) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000200)='E', 0x1}], 0x1, 0x6000000, 0xa15, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r8, 0x3309) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r7) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011005418cbdf840015b1f500115fe928928aa7959b69e54f04d978c156831b0d446c6b337157716273f1b24e6789450f12b045b58950b8bffa9ba1eae2ebba820ec6a26013b6b0b7aafe1efce212480dbfb0322cf65fce2199af225e2c304530a8cc7e890c781293e48c641fd5b439cd46aa859d2080702b7c1e4f5212bc22"], 0x4c) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) 2.102273994s ago: executing program 3 (id=1677): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002080)={0x0, "3f2c59fb2e4e4adaff7a43740b05071a"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000003100)={0x0, "245f6072b46b75307e2b1fae4613d7ff"}) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000480)={0x0, 0xffffffffffff6232, 0xeea, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000880)={0x0, 0x6, {0x401, @struct={0x0, 0x8}, r5, 0x5, 0x7, 0x9, 0x1, 0x8000000000000001, 0x0, @struct={0xfff, 0x6}, 0x6, 0x101, [0x3, 0x3, 0x6, 0xa, 0xfffffffffffffffc]}, {0x200, @usage=0x4, r6, 0x1, 0x7, 0x5, 0xfffffffffffffffa, 0x9, 0x2, @usage=0xffffffffffffffff, 0x4, 0x7f, [0x32, 0xaf, 0x6, 0x8000000000000001]}, {0x5, @struct={0x1, 0x6}, r7, 0x4, 0x100000001, 0x89b, 0x9, 0x0, 0x80, @usage=0x80000001, 0x0, 0x2, [0x2, 0x3, 0x2, 0x800, 0x3, 0x100000001]}, {0x55, 0xe8c2, 0x7ff}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lremovexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00') recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) 2.101617364s ago: executing program 3 (id=1678): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000000)=ANY=[@ANYBLOB="7374612e60073f73fe0abacbbb45b0d86c2c00"]) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0x9, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x7, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0x4000bc, 0x4002, 0x3, 0x7ff, 0x12b, 0x5, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x9, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2b0000000400000000000000000000000300000000000000e6ff3400"/43], 0x2b) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000040)=0x8, 0x4) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="100029bd7000fbdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff0000090007000104f2679d00000011000700bdc3749c76355b75b50c276b510000000e000a00645ab00a1b1f11da6f2a00000500080002000000d47bb52b5c5323bdf773ae28a30a00340001010101010100000a000600d81f50fa11c9000008003500031900005d9ad9b6976976bb43b9e7f31ffcefb58e9efa6cc5ceae2f1a16a0ec1bd042f842ba199a9abb28d8e70b37021a34cb5ece2bb3c198130ab4c1aa0ab23346e7b9908458251b667292d8328b1203"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 2.047214199s ago: executing program 3 (id=1679): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 2.046479629s ago: executing program 3 (id=1680): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) shutdown(0xffffffffffffffff, 0x1b02b45625ec67d5) openat(0xffffffffffffffff, 0x0, 0x200002, 0x62) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x0, 0x900, 0x1, 0x2000008}) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x2, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x6044841}, 0x8080) listen(r1, 0xfffffff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0xffff, @private=0xa010101}, 0x72) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x101, 0x400, 0xe}, {0xffffff44, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xf4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800090200ffe6000000000002"], 0x20}}, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000) 2.046194969s ago: executing program 4 (id=1681): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x564b143a, 0x81, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40806685, &(0x7f0000000440)=ANY=[]) 1.789520065s ago: executing program 5 (id=1686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 1.775960256s ago: executing program 5 (id=1687): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r1, 0x1, &(0x7f0000000140)={0x2000000000000005, 0x2000800000000088}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@wrmsr={0x1e, 0x20, {0x669, 0x6}}, @set_irq_handler={0xbe, 0x20, {0x6c}}, @in_dx={0x82, 0x20, {0x9734}}, @wrmsr={0x1e, 0x20, {0xad, 0x56}}, @wrmsr={0x1e, 0x20, {0x830, 0x5}}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @in_dx={0x82, 0x20, {0x6784, 0x6}}, @uexit={0x0, 0x18, 0x40}, @code={0xa, 0x54, {"0f20c035000000400f22c0c40229bd2ab9fe0200000f32c42280f34c3c0066440f3a40dc00b9800000c00f3235008000000f300fc7f666b846008ee00fe3c1670f01d1"}}, @in_dx={0x82, 0x20, {0x9398, 0x2}}], 0x16c}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000c030100000000400000fffffadae5e0f654c6b52fd1fad04b39fffeffff"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x4000080}, 0x14004084) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000180)={0x80}) 1.208887842s ago: executing program 4 (id=1689): madvise(&(0x7f0000428000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x200000f, 0x20031, 0xffffffffffffffff, 0x43bc7000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000f40)={'syztnl1\x00', 0x0, 0x40, 0x0, 0xa, 0x0, {{0x5, 0x4, 0x3, 0x21, 0x14, 0x68, 0x0, 0x8b, 0x2f, 0x0, @multicast1, @broadcast}}}}) getcwd(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0xd0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)=ANY=[]) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x9) getcwd(&(0x7f0000000080)=""/156, 0x9c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x200}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000040)=0x7) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x1f) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001e0021002dbd7000000000000700000005000000000000001400020000000000000000000000ffffe0000001a189c0c2720045e4df53cf818b84b4445cb800f43a19032104c4244fc4c8883e85cb1197a9c39b752d4382aafb1b3ef950cb3bbdf38513bd6c911fe5d182dad7269a52c56b4a3c3b06a6b77e6646a74e8a662851bff733c9a1f87fdcef65910bee3106ef68d74496fa"], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4008004) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000180)={0x50, 0x0, r8, {0x7, 0x2b, 0x4, 0x40000012, 0x0, 0x9, 0x9, 0xa, 0x0, 0x0, 0x80, 0x6}}, 0x50) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r9, 0x6628) 1.179718374s ago: executing program 4 (id=1690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$uinput_user_dev(r3, &(0x7f0000000140)={'syz1\x00', {0x8, 0xc299, 0x7, 0x6}, 0x3d, [0x9, 0x7, 0x6, 0x4, 0x101, 0xffffffff, 0xfffffffb, 0x8000, 0x0, 0x8, 0x3, 0x8, 0x5, 0x8f59, 0x8, 0xd, 0x14d95ff2, 0xc29, 0x7, 0x79ca, 0x2, 0x5, 0x7fff, 0x2, 0xfffffffe, 0x7fffffff, 0xffff, 0x4, 0x1be, 0xe752, 0xb, 0x5, 0x1, 0x4, 0x8, 0x3, 0x2, 0x8, 0x9, 0xb83, 0x10001, 0x59, 0xe4e, 0x6, 0x2, 0x1, 0xa63d, 0xffffffff, 0xfffffff8, 0x1, 0x2, 0x3, 0x8, 0x1, 0xd9e, 0x5, 0xa9fa, 0xff, 0x6, 0x2, 0x877, 0x4, 0x81], [0x6, 0x7, 0x1ff, 0x10, 0xebc, 0xdae, 0x3ff, 0x8, 0x2, 0x4a, 0x6, 0x8, 0x7, 0xfffffeb3, 0xc66, 0x8, 0x200000, 0xfffff4b5, 0x5, 0x2, 0xf, 0x5327, 0x7fffffff, 0x4f, 0x3, 0x4, 0x10, 0x2, 0x5, 0x80, 0x1000000, 0xffff, 0x5, 0x1ff, 0x0, 0x8000, 0x80000000, 0x4, 0x32a, 0x6, 0x8, 0x10001, 0x1ff, 0x87, 0x6, 0x2, 0x10000, 0x9, 0x7fff, 0x101, 0x8001, 0x5, 0xb67, 0x0, 0x8, 0x10001, 0x3, 0xfffffffa, 0x1, 0x6, 0x37d771c2, 0xa, 0x9, 0x2], [0x8, 0x58f, 0x8, 0xa, 0x10001, 0x40, 0x463, 0xc2ae, 0x4, 0x0, 0x3, 0x3, 0x2000000, 0x5, 0x2, 0xfffffff9, 0xa, 0x8, 0x9, 0x5db, 0xea01, 0xc, 0xc, 0x1, 0xfb9, 0x7fff, 0xffffffff, 0x1, 0x7, 0x10, 0x2, 0x1, 0x3, 0x9, 0xa, 0x7, 0x8, 0x6778ff23, 0xfffff000, 0x40, 0x6b16, 0x5, 0x3, 0x8000, 0x66dd, 0x5678, 0x6, 0xe74e, 0x9, 0x9, 0x51, 0x48, 0x9, 0x680, 0x4, 0x9, 0x2, 0x4, 0x7, 0xf4, 0x3, 0x10000, 0xf], [0x9, 0x8511, 0x7, 0xe, 0x4, 0x1, 0x29e7, 0x9, 0x5b, 0xa42, 0x9, 0x9, 0x1ff, 0x4, 0x5, 0x3c, 0x7, 0x5, 0x4, 0x4, 0x8, 0x10, 0x6, 0x3ff, 0x7, 0x1, 0x80000001, 0xae, 0xb, 0x400, 0x3, 0x7, 0x7fff, 0x54, 0xffff129b, 0x9, 0xffffff8a, 0x3, 0x4d, 0xf, 0x0, 0x1000, 0x9, 0x10000, 0x2, 0x170f, 0x2, 0x8, 0x0, 0x3, 0xa0, 0xfffffffb, 0x87, 0x6, 0x0, 0x8001, 0xb9af, 0x9, 0x4, 0x1, 0x7, 0x1, 0x2639f222, 0x4]}, 0x45c) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes m'], 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) read(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) tee(r1, r3, 0xfffffffffffffc01, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$eventfd(r2, &(0x7f00000000c0)=0x4, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x14, 0x0, &(0x7f0000000300)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.102893112s ago: executing program 4 (id=1691): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000400)='.\x00', 0x200) r1 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x71) lseek(r1, 0x5, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0xc000, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100124b09e20d5543f9582820102030109022400010000100009040d0702080200000905060200020df4a843d3d2fb5667d106713fdd36a0f4186ec04001e83a08eaac6fb59a08abdd7ebce673e181636ed8d434301918e8266c003e30095707b674a302a798a896419aabf12f277b66d08fa821a7e29b96c36d9feefed438d9c9c4017b850803330e9ecf84793f3a5286f58fc73ece32b3bbe23261f4c87bb60f8a59fdc5d295bfe3bdc06f7c8e5653"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), &(0x7f0000000bc0)={0x0, 0xfb, 0x1015, 0x3, 0xf7, "a97cf22acd770bfd2d48b5b2ada8198e", "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"}, 0x1015, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x4008011) getsockopt(r2, 0x28, 0x400, 0xfffffffffffffffc, &(0x7f0000000000)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x22040, 0x2, 0x10}, 0x18) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 923.54835ms ago: executing program 5 (id=1692): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1bb30100000002000000010000000c00060002"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x48c4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000b40)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb425705d6cdbb4a07ea786417aac814e03e5d80b297abe644830816977ccba1f493", 0x5a}], 0x3}}], 0x1, 0x8040) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000000)={0x1}) close_range(r5, 0xffffffffffffffff, 0x0) 897.289502ms ago: executing program 5 (id=1693): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x20}, 0x40488cd) dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x20000000, 0xff78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="ea"}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x4044020}, 0x4c800) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x4008010) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES16=r7, @ANYRES16], 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES16=r7, @ANYRES16], 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='mountinfo\x00') r9 = open(0x0, 0x141a42, 0x186) sendfile(r9, r8, 0x0, 0xffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r10, 0x6, 0x0) 762.796386ms ago: executing program 2 (id=1700): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 762.452566ms ago: executing program 2 (id=1701): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}) (async) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000080)=0x800, 0x4) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000000c0)={0x2, 0xc6}) (async) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344}, 0x8, 0x6) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x6007}, @void, @mpls={[{0xffff7, 0x0, 0x1}], @ipv6=@tcp={0x6, 0x6, "fe35bc", 0x1a8, 0x6, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, {[@routing={0x67, 0x2, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x4, 0x7, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x101, [0x8, 0x400]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xc57a}, @ra, @enc_lim={0x4, 0x1, 0x5}]}, @routing={0x87, 0xa, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @loopback, @loopback]}, @dstopts={0x2b, 0x2, '\x00', [@ra={0x5, 0x2, 0x3ff}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e20, 0x41424344, r4, 0x0, 0x0, 0x9, 0x8, 0x5, 0x0, 0x400, {[@sack={0x5, 0xe, [0x1, 0x94, 0x6]}]}}, {"ca57c295477a84ce4bbb2c1a96f8db9e30b41aec2aba7d7e257c7501788591b4e68274d93975b1ed48fb61ab3598c991293343450272400f95b4680e88df75b8800b44c6f5115b6981766d878dee9bd7830720379fbfa35b468416dfe344d2d01bbad0817d972149ccf2af0738918579a6548e264dc2ae7eac9a810d8f3e4246ec8cad06ccf77bfdd181e180bac0d4f043cbe1c0207019f597f164420f2724cb5d621cf2f12986da60ea82e5"}}}}}}, 0x1d8) (async) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, '{-}'}], 0xa, "705d1356661bd38184cd13c095beac121ef4740828a1992521e9d38e7603b70387b256a6896cab85289bc29105455ba16822152e17e10849ab50743ae1a2d61877d722f563917feb0bf619900c17f57bb4bbb3e2abbfe95611d220ce205d73754609e3ed798dde4a655820987af9d4f3907ed3d9da386e495290c87560364b213d1864a340efa618627cb8bba45aa1bdda100c5bcc26725b26d61cc180"}, 0xac) (async) syz_extract_tcp_res$synack(&(0x7f0000000400), 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000440), 0xf5, 0x10001) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000480)="62bbed4e4e006c378e6cbcf1ed8086c390a762edbb8e37aae97690625279ae2d2e4bdf7ccba1fa3f62acfb472d2fe1ca7dd47de719fbe25e3518e275f775d380bd4cacf8466aa60960cdc523d158d72c8a23c98908fe967e4ffc87228a968b1ec4ee", 0x62) syz_extract_tcp_res$synack(&(0x7f0000000500), 0x1, 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000540)) (async) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="753bcc5b7ad70cfdfd4ab475738a6f4e99d61ec1aea70e428e16f092b155b823e3cef3b63a5303ff4edb31c9544ac9b2d04f05ef7664a7a57d44", 0x3a}, {&(0x7f00000005c0)="e31217e35f0b8bb860d496d218e4c87a14d4fd11da377edb8c4b8c92f676a49c7170241200362829ed78072aa253a7c5a30f40c2467bfe20cfafd4e42d5731078f9e32da620d31a09de0e0e8020252758b96fe3350c1407ccd42d5ca7acdf53e439ceb29e2cceaa02c5fe317ef401586b0366b171b8b455586e7c3db2a7101b1e638a5ff65b01c2b2b27c8e9ae88fa4d2711dbd245081825b5fa4ed2b3109b1d1917d1d055ff79944fd0de07dd4b6a7b6190cffc612a70", 0xb7}], 0x2}, 0x24000001) r5 = dup3(r0, r1, 0x80000) ioctl$KVM_GET_TSC_KHZ_cpu(r5, 0xaea3) (async) write$tun(r2, &(0x7f0000000700)={@val={0x0, 0x892f}, @val={0x1, 0x3, 0x1, 0x2, 0x6, 0x8000}, @llc={@snap={0x1, 0x1, "bb35", "becb54", 0x9000, "bac23a719cc71c5e7493870c62b9e5a7790a69730da1c054a7ce3d6ea77b3c6b3fe316b370ad87522c98bd3578b5699c957a7d1a1d70e7623d7f180501aa68f5327392ea5c08145f29d3b140a79171ec3c5239d32bc47b048c5f8ca9620adf3230818c7899c6410c9b9e5b69d398394e755ca1d0af674dbd1a7b17abe74b1a2afb198c6e22f6c992f4fc187c4210d8a241085280a38c7acac1dbd7a2495ba627ac2e805188027062863b6f33b6ad44f855153d"}}}, 0xca) syz_extract_tcp_res(&(0x7f0000000800), 0x81, 0x8) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000840)=0x0) syz_open_procfs(r6, &(0x7f0000000880)='children\x00') (async) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) syz_extract_tcp_res$synack(&(0x7f0000002900), 0x1, 0x0) (async) r7 = accept$packet(r5, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002980)=0x14) getpeername$packet(r7, &(0x7f00000029c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002a00)=0x14) (async) fgetxattr(r3, &(0x7f0000002a40)=@random={'osx.', '\x00'}, &(0x7f0000002a80)=""/172, 0xac) (async) eventfd(0x6) (async) syz_extract_tcp_res(&(0x7f0000002b40), 0x9, 0x4) 762.031746ms ago: executing program 2 (id=1702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) getpgrp(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) close_range(r0, r0, 0x2) 761.648535ms ago: executing program 2 (id=1703): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r0, 0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r4 = dup(r3) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) setresuid(r2, r2, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) 227.877118ms ago: executing program 2 (id=1704): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0xfffffffffffffffa, 0x7b, 0xffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mlockall(0x1) syz_clone3(&(0x7f0000001880)={0x88841200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$sock_int(r5, 0x1, 0xf, 0x0, &(0x7f00000042c0)) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1705): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) r1 = accept(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000280)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@remote, @initdev}, &(0x7f0000000300)=0xc) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844032,\x00']) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mount$bind(&(0x7f0000000140)='\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1a800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000005c0)={{r4}, r5, 0x10, @inherit={0x78, &(0x7f0000000540)={0x1, 0x6, 0x7ff, 0x3, {0x30, 0x6, 0x8, 0x9, 0x8}, [0x101, 0xf8, 0x600000000000000, 0xbd63, 0x1, 0x4]}}, @devid}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) (async) accept(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000280)=0x80) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@remote, @initdev}, &(0x7f0000000300)=0xc) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844032,\x00']) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mount$bind(&(0x7f0000000140)='\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1a800, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000180)) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) (async) socket$inet6(0xa, 0x2, 0x3a) (async) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000005c0)={{r4}, r5, 0x10, @inherit={0x78, &(0x7f0000000540)={0x1, 0x6, 0x7ff, 0x3, {0x30, 0x6, 0x8, 0x9, 0x8}, [0x101, 0xf8, 0x600000000000000, 0xbd63, 0x1, 0x4]}}, @devid}) (async) kernel console output (not intermixed with test programs): 992444][ T45] usb 2-1: Manufacturer: 儖鼓쪳爺盬ﰮ๳鹢蔡좦Ꜥ愖⯂〘᭍硓㱔밁蟊璅먓ፌǩၧ᮶续ꊲ灡쥭˘긒妊፵༆陓Õ靁徸괸䧖ᗤ邥闹ⵥ嵿岪蓏습횠荅殙⣨Ⳡॖ荽砵ٽᾠ趋졥쯱᪎䡦菮ꫵ䎏큑⌞쎳栊뤆搬㐘䅦ㄟ륃良襳룦뇹煮人깩뒩誶㬧뀛ԏ葚Ǚဇ瑅倓 [ 38.025116][ T45] usb 2-1: SerialNumber: 鏨Ὸ豧ᙣˆ蠾㞋䝜씪推筆ꮐ빃촥衊კ嫟뙈㫾뼜홉揾㇬ㆃạᜉ磳䞕ᜈ禿ߔ従䐵䲆垴⓯ [ 38.185996][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.201238][ T479] capability: warning: `syz.0.48' uses 32-bit capabilities (legacy support in use) [ 38.235772][ T483] rust_binder: Write failure EFAULT in pid:37 [ 38.242178][ T459] rust_binder: Write failure EFAULT in pid:19 [ 38.260206][ T45] usb 2-1: 0:2 : does not exist [ 38.277061][ T45] usb 2-1: USB disconnect, device number 3 [ 38.300620][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.346096][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 38.359136][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 38.367826][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 38.386205][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 38.395388][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.409464][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 38.427979][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.441382][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 38.450852][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.472036][ T9] usb 3-1: config 0 descriptor?? [ 38.496292][ T487] rust_binder: Error while translating object. [ 38.496339][ T487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.502580][ T487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 38.569145][ T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.578810][ T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 38.578926][ T489] rust_binder: Write failure EFAULT in pid:44 [ 38.588862][ T492] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.603864][ T492] rust_binder: Read failure Err(EFAULT) in pid:37 [ 38.678662][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 38.788153][ T505] tmpfs: Unknown parameter '00000000000000000003' [ 38.815787][ T507] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.881334][ T10] usb 3-1: USB disconnect, device number 2 [ 38.888108][ T477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.888324][ T477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.47'. [ 38.906023][ T10] usblp0: removed [ 38.911551][ T372] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 38.925146][ T513] rust_binder: Error while translating object. [ 38.925209][ T513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.932479][ T477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 38.936050][ T513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 38.964555][ T516] netlink: 'syz.1.61': attribute type 4 has an invalid length. [ 38.981355][ T516] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.61'. [ 39.003673][ T521] rust_binder: Error while translating object. [ 39.003716][ T521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.010252][ T521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 39.041839][ T523] rust_binder: Error while translating object. [ 39.046038][ T372] usb 4-1: device descriptor read/64, error -71 [ 39.050999][ T523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.063427][ T523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 39.183463][ T529] overlayfs: failed to resolve './file1': -2 [ 39.211349][ T534] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 39.224213][ T536] rust_binder: Error while translating object. [ 39.232206][ T536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.238620][ T536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:51 [ 39.248346][ T536] SELinux: security_context_str_to_sid () failed with errno=-22 [ 39.296089][ T372] usb 4-1: device descriptor read/64, error -71 [ 39.466760][ T545] rust_binder: 53: no such ref 0 [ 39.471810][ T545] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 39.478920][ T545] rust_binder: 53: no such ref 2 [ 39.483921][ T545] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 39.519394][ T552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.554974][ T558] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.561595][ T557] rust_binder: Failed to allocate buffer. len:200, is_oneway:true [ 39.561611][ T372] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 39.682161][ T569] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 168, size: 238) [ 39.682195][ T569] rust_binder: Error while translating object. [ 39.692848][ T569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.699105][ T371] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.716012][ T372] usb 4-1: device descriptor read/64, error -71 [ 39.716082][ T569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 39.722936][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.867166][ T371] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 39.881898][ T371] usb 2-1: config 0 has no interface number 1 [ 39.888077][ T371] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 39.897181][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.905910][ T371] usb 2-1: config 0 descriptor?? [ 39.929227][ T575] rust_binder: Error while translating object. [ 39.929275][ T575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.937122][ T575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 39.966134][ T372] usb 4-1: device descriptor read/64, error -71 [ 40.086212][ T372] usb usb4-port1: attempt power cycle [ 40.436025][ T372] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 40.457139][ T372] usb 4-1: device descriptor read/8, error -71 [ 40.586979][ T372] usb 4-1: device descriptor read/8, error -71 [ 40.706059][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.732965][ T595] binder: Unknown parameter '' [ 40.743272][ T597] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 40.753599][ T600] rust_binder: Error while translating object. [ 40.753646][ T600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.757585][ T597] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 40.760118][ T600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 40.836000][ T372] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 40.877236][ T372] usb 4-1: device descriptor read/8, error -71 [ 41.007056][ T372] usb 4-1: device descriptor read/8, error -71 [ 41.116121][ T372] usb usb4-port1: unable to enumerate USB device [ 41.645638][ T609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.645669][ T609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.649091][ T610] netlink: 'syz.0.91': attribute type 27 has an invalid length. [ 41.652280][ T609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.689076][ T36] kauditd_printk_skb: 126 callbacks suppressed [ 41.689096][ T36] audit: type=1400 audit(1761124999.840:268): avc: denied { create } for pid=614 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.731793][ T36] audit: type=1400 audit(1761124999.880:269): avc: denied { getopt } for pid=619 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.737141][ T622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.763541][ T622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.768317][ T36] audit: type=1400 audit(1761124999.910:270): avc: denied { setopt } for pid=619 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.799036][ T36] audit: type=1400 audit(1761124999.950:271): avc: denied { setopt } for pid=628 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.818706][ T36] audit: type=1400 audit(1761124999.950:272): avc: denied { ioctl } for pid=628 comm="syz.0.97" path="socket:[5318]" dev="sockfs" ino=5318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.843176][ T36] audit: type=1400 audit(1761124999.950:273): avc: denied { write } for pid=628 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.878312][ T631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70 [ 41.924628][ T36] audit: type=1400 audit(1761125000.070:274): avc: denied { append } for pid=632 comm="syz.0.99" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.926724][ T633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.956357][ T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72 [ 41.980574][ T635] virtiofs: Unknown parameter 'always' [ 42.076653][ T36] audit: type=1400 audit(1761125000.230:275): avc: denied { create } for pid=640 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 42.077470][ T642] overlayfs: cannot append lower layer [ 42.096794][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 42.257513][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 42.266168][ T10] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.279125][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 42.287822][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 42.296937][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.304925][ T10] usb 4-1: Product: ⟒쒬 [ 42.309382][ T10] usb 4-1: Manufacturer: ࠉ [ 42.313995][ T10] usb 4-1: SerialNumber: 㠊 [ 42.429344][ T514] usb 2-1: USB disconnect, device number 4 [ 42.447447][ T645] raw_sendmsg: syz.1.103 forgot to set AF_INET. Fix it! [ 42.454734][ T644] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 42.462141][ T644] rust_binder: Write failure EINVAL in pid:62 [ 42.527608][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 42.539729][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 42.550436][ T10] usb 4-1: USB disconnect, device number 6 [ 42.739635][ T658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 42.749095][ T36] audit: type=1400 audit(1761125000.900:276): avc: denied { getopt } for pid=656 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.749214][ T658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 42.771072][ T658] rust_binder: Read failure Err(EFAULT) in pid:75 [ 42.866011][ T503] Bluetooth: hci0: command 0x1003 tx timeout [ 42.878622][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.904891][ T660] rust_binder: Write failure EFAULT in pid:83 [ 42.911581][ T36] audit: type=1400 audit(1761125001.060:277): avc: denied { setattr } for pid=659 comm="syz.0.108" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.981522][ T664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.020869][ T668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87 [ 43.089827][ T673] rust_binder: Write failure EINVAL in pid:90 [ 43.394379][ T693] rust_binder: Write failure EFAULT in pid:101 [ 43.776018][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 43.786013][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.936045][ T31] usb 2-1: device descriptor read/64, error -71 [ 43.938052][ T10] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32 [ 43.952179][ T10] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.969909][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 43.992731][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 43.994386][ T716] rust_binder: 59: no such ref 3 [ 44.002449][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.007314][ T716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 44.014895][ T10] usb 3-1: Product: syz [ 44.033790][ T10] usb 3-1: Manufacturer: syz [ 44.038664][ T10] usb 3-1: SerialNumber: syz [ 44.049943][ T703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.051869][ T720] rust_binder: Error while translating object. [ 44.057364][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 44.063647][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63 [ 44.178099][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.287141][ T735] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 44.295225][ T735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=735 comm=syz.0.136 [ 44.456022][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.487548][ T514] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.497883][ T741] input: syz0 as /devices/virtual/input/input6 [ 44.527899][ T741] kvm: user requested TSC rate below hardware speed [ 44.596071][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.602889][ T745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 44.656018][ T514] usb 4-1: Using ep0 maxpacket: 8 [ 44.671487][ T514] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 44.679651][ T514] usb 4-1: config 0 has no interface number 0 [ 44.688312][ T514] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 44.697481][ T514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.705519][ T514] usb 4-1: Product: syz [ 44.709771][ T514] usb 4-1: Manufacturer: syz [ 44.714406][ T514] usb 4-1: SerialNumber: syz [ 44.720233][ T514] usb 4-1: config 0 descriptor?? [ 44.774335][ T750] netlink: 104 bytes leftover after parsing attributes in process `syz.0.141'. [ 44.846023][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.956112][ T31] usb usb2-port1: attempt power cycle [ 45.009763][ T733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2340085918 (2340085918 ns) > initial count (281086070 ns). Using initial count to start timer. [ 45.099882][ T514] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 45.108480][ T514] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 45.129739][ T514] usb 4-1: USB disconnect, device number 7 [ 45.296013][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.337083][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.467186][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.489392][ T778] rust_binder: Got transaction with invalid offset. [ 45.489437][ T778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.496195][ T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 45.585540][ T787] mmap: syz.0.153 (787) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.706030][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.727075][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.846052][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.857190][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.939260][ T802] tipc: Enabling of bearer rejected, failed to enable media [ 45.949313][ T802] rust_binder: got new transaction with bad transaction stack [ 45.949332][ T802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 45.970222][ T31] usb usb2-port1: unable to enumerate USB device [ 45.979097][ T806] rust_binder: Error while translating object. [ 45.979376][ T45] usb 1-1: device descriptor read/64, error -71 [ 45.986099][ T806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 45.999133][ T806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 46.226058][ T45] usb 1-1: device descriptor read/64, error -71 [ 46.478016][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.482808][ T10] usb 3-1: USB disconnect, device number 3 [ 46.626046][ T45] usb 1-1: device descriptor read/64, error -71 [ 46.674040][ T834] binder: Bad value for 'max' [ 46.697730][ T838] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 46.705503][ T838] netlink: 'syz.1.172': attribute type 2 has an invalid length. [ 46.743706][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 46.743723][ T36] audit: type=1400 audit(1761125004.890:330): avc: denied { ioctl } for pid=843 comm="syz.1.174" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.743793][ T836] rust_binder: got new transaction with bad transaction stack [ 46.774377][ T836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 46.830843][ T853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 46.849877][ T36] audit: type=1400 audit(1761125005.000:331): avc: denied { read } for pid=848 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.868999][ T45] usb 1-1: device descriptor read/64, error -71 [ 46.918731][ T36] audit: type=1400 audit(1761125005.070:332): avc: denied { create } for pid=857 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 46.919377][ T858] rust_binder: Write failure EFAULT in pid:105 [ 46.939734][ T36] audit: type=1400 audit(1761125005.070:333): avc: denied { write } for pid=857 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 46.971857][ T36] audit: type=1400 audit(1761125005.120:334): avc: denied { read } for pid=859 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.993000][ T45] usb usb1-port1: attempt power cycle [ 47.085993][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 47.131771][ T872] netlink: 'syz.3.185': attribute type 12 has an invalid length. [ 47.140634][ T872] rust_binder: validate_parent_fixup: new_min_offset=155, sg_entry.length=0 [ 47.140652][ T872] rust_binder: Error while translating object. [ 47.149669][ T872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.156118][ T872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 47.197926][ T876] cgroup: fork rejected by pids controller in /syz3 [ 47.237089][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 47.248321][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 47.257481][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.265524][ T10] usb 3-1: Product: syz [ 47.269780][ T10] usb 3-1: Manufacturer: syz [ 47.274392][ T10] usb 3-1: SerialNumber: syz [ 47.279777][ T10] usb 3-1: config 0 descriptor?? [ 47.346064][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.358156][ T329] bridge_slave_1: left allmulticast mode [ 47.364124][ T329] bridge_slave_1: left promiscuous mode [ 47.370399][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.378430][ T45] usb 1-1: device descriptor read/8, error -71 [ 47.378728][ T329] bridge_slave_0: left allmulticast mode [ 47.390451][ T329] bridge_slave_0: left promiscuous mode [ 47.396145][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.512055][ T36] audit: type=1400 audit(1761125005.660:335): avc: denied { mounton } for pid=881 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.534586][ T45] usb 1-1: device descriptor read/8, error -71 [ 47.549870][ T329] veth1_macvtap: left promiscuous mode [ 47.555667][ T329] veth0_vlan: left promiscuous mode [ 47.591834][ T10] usb 3-1: USB disconnect, device number 4 [ 47.611028][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.670804][ T881] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.678251][ T881] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.685507][ T881] bridge_slave_0: entered allmulticast mode [ 47.692067][ T881] bridge_slave_0: entered promiscuous mode [ 47.699806][ T881] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707693][ T881] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.714885][ T881] bridge_slave_1: entered allmulticast mode [ 47.724613][ T881] bridge_slave_1: entered promiscuous mode [ 47.734591][ T886] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 47.776021][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.797255][ T45] usb 1-1: device descriptor read/8, error -71 [ 47.819234][ T895] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 47.838191][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.853371][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.864097][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.871229][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.905001][ T881] veth0_vlan: entered promiscuous mode [ 47.918608][ T881] veth1_macvtap: entered promiscuous mode [ 47.938551][ T45] usb 1-1: device descriptor read/8, error -71 [ 48.046577][ T45] usb usb1-port1: unable to enumerate USB device [ 48.052012][ T36] audit: type=1400 audit(1761125006.200:336): avc: denied { name_bind } for pid=906 comm="syz.1.195" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.133478][ T912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 48.133511][ T912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:127 [ 48.170564][ T916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.181071][ T916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 48.291625][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 48.311846][ T923] __vm_enough_memory: pid: 923, comm: syz.2.197, bytes: 18014402804453376 not enough memory for the allocation [ 49.084521][ T949] rust_binder: Error while translating object. [ 49.084573][ T949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.091866][ T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 49.121586][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.143975][ T957] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 49.160252][ T36] audit: type=1400 audit(1761125007.310:337): avc: denied { read } for pid=956 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.259032][ T964] syz.3.210 uses obsolete (PF_INET,SOCK_PACKET) [ 49.267149][ T964] rust_binder: Read failure Err(EFAULT) in pid:22 [ 49.282198][ T967] binder: Unknown parameter '' [ 49.372610][ T36] audit: type=1326 audit(1761125007.520:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.3.213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f986b385e67 code=0x0 [ 49.429481][ T980] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 68) [ 49.429516][ T980] rust_binder: Error while translating object. [ 49.448599][ T980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.459781][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 49.925995][ T331] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 50.087459][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 50.096436][ T331] usb 2-1: config 1 interface 0 altsetting 46 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.107048][ T331] usb 2-1: config 1 interface 0 altsetting 46 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.121053][ T331] usb 2-1: config 1 interface 0 has no altsetting 0 [ 50.129690][ T331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.138872][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.146985][ T331] usb 2-1: Product: Х [ 50.151169][ T331] usb 2-1: Manufacturer: ㏅౛滹邷졫凸耲䎭ꄑ쬚㴙鮡྄ᦢ⾥鈺褀넯蕪ꂮ䍵ᨂ꼛࢏⾤늯坑ℳ쾠㍸펁䁂ॏ霄뺯灌ᕾӆᯑᓔ櫪ᦴꤕꚤ䒘姕豑笟셲⳱ᇹ㛢繯䳰䷱ﾭ軒鍫潮㪣␝谗뜮涵轑㝫ꨋ⹃ӵ鳝椠蚾₨ᡷ抃沁웨ɉ [ 50.177131][ T331] usb 2-1: SerialNumber: 紭 [ 50.219879][ T36] audit: type=1400 audit(1761125008.370:339): avc: denied { connect } for pid=987 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.244992][ T990] input: syz1 as /devices/virtual/input/input7 [ 50.591557][ T986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.600925][ T986] rust_binder: Write failure EFAULT in pid:145 [ 50.601631][ T986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.602747][ T331] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 50.610115][ T986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.646330][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 50.706913][ T514] usb 2-1: USB disconnect, device number 9 [ 50.724642][ T1021] capability: warning: `syz.1.232' uses deprecated v2 capabilities in a way that may be insecure [ 50.735550][ T1021] incfs_lookup_dentry err:-13 [ 50.740488][ T1021] incfs: Can't find or create .index dir in ./bus [ 50.747121][ T1021] incfs: mount failed -13 [ 50.795990][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 50.802277][ T45] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 50.820939][ T45] usb 4-1: config 0 has no interface number 0 [ 50.827206][ T45] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 50.839171][ T45] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 50.850382][ T45] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 50.861726][ T45] usb 4-1: config 0 interface 200 has no altsetting 0 [ 50.870387][ T45] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 50.884632][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.894049][ T45] usb 4-1: Product: syz [ 50.898579][ T1025] binder: Bad value for 'stats' [ 50.903539][ T45] usb 4-1: Manufacturer: syz [ 50.908251][ T45] usb 4-1: SerialNumber: syz [ 50.914165][ T45] usb 4-1: config 0 descriptor?? [ 50.936255][ T1009] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 51.146235][ T45] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input9 [ 51.172204][ T45] usb 4-1: USB disconnect, device number 8 [ 51.184550][ T1030] netlink: 72 bytes leftover after parsing attributes in process `syz.2.236'. [ 51.224249][ T1030] input: syz1 as /devices/virtual/input/input10 [ 51.247879][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.267008][ T1037] /dev/rnullb0: Can't open blockdev [ 51.493405][ T1042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 51.493615][ T1042] rust_binder: Read failure Err(EFAULT) in pid:56 [ 51.520169][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 51.540309][ T1046] rust_binder: Write failure EFAULT in pid:60 [ 51.603708][ T1057] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 51.617568][ T1057] SELinux: failed to load policy [ 51.688997][ T1068] fuse: Unknown parameter 'f1)gd' [ 51.866000][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.936078][ T1094] netlink: 'syz.3.259': attribute type 13 has an invalid length. [ 51.945492][ T1094] erspan0: refused to change device tx_queue_len [ 51.952461][ T1094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=1094 comm=syz.3.259 [ 52.007805][ T1108] netlink: 156 bytes leftover after parsing attributes in process `syz.3.262'. [ 52.017288][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 52.021192][ T1108] 9pnet_fd: Insufficient options for proto=fd [ 52.026620][ T1095] netlink: 31 bytes leftover after parsing attributes in process `syz.0.254'. [ 52.041623][ T1095] netlink: 'syz.0.254': attribute type 3 has an invalid length. [ 52.050008][ T1095] netlink: 'syz.0.254': attribute type 2 has an invalid length. [ 52.057831][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.057867][ T1095] netlink: 31 bytes leftover after parsing attributes in process `syz.0.254'. [ 52.071118][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.087019][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.095623][ T45] usb 2-1: config 0 descriptor?? [ 52.165712][ T1118] fuse: Bad value for 'fd' [ 52.515348][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 52.521839][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 52.535210][ T45] usb 2-1: USB disconnect, device number 10 [ 52.542609][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 52.542628][ T36] audit: type=1400 audit(1761125010.690:354): avc: denied { map } for pid=1128 comm="syz.1.270" path="pipe:[8961]" dev="pipefs" ino=8961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 52.859582][ T1142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.868850][ T1142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.883874][ T36] audit: type=1400 audit(1761125011.030:355): avc: denied { map } for pid=1137 comm="syz.0.274" path="socket:[8983]" dev="sockfs" ino=8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 52.907953][ T36] audit: type=1400 audit(1761125011.060:356): avc: denied { setattr } for pid=1133 comm="syz.3.272" name="" dev="pipefs" ino=8970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.096006][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.226008][ T45] usb 1-1: device descriptor read/64, error -71 [ 53.266170][ T503] Bluetooth: hci0: command 0x1003 tx timeout [ 53.266421][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.339318][ T1204] netlink: 'syz.2.283': attribute type 5 has an invalid length. [ 53.364583][ T36] audit: type=1400 audit(1761125011.510:357): avc: denied { connect } for pid=1206 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.466002][ T45] usb 1-1: device descriptor read/64, error -71 [ 53.579812][ T1219] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 53.580345][ T1219] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 53.602296][ T36] audit: type=1400 audit(1761125011.750:358): avc: denied { connect } for pid=1220 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.643293][ T1223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.662209][ T36] audit: type=1400 audit(1761125011.810:359): avc: denied { getattr } for pid=1224 comm="syz.2.291" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.691114][ T36] audit: type=1400 audit(1761125011.810:360): avc: denied { shutdown } for pid=1224 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.710815][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.718891][ T36] audit: type=1400 audit(1761125011.870:361): avc: denied { block_suspend } for pid=1224 comm="syz.2.291" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.802468][ T1228] rust_binder: Error while translating object. [ 53.802517][ T1228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.809094][ T1228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 53.866150][ T45] usb 1-1: device descriptor read/64, error -71 [ 54.116036][ T45] usb 1-1: device descriptor read/64, error -71 [ 54.226088][ T45] usb usb1-port1: attempt power cycle [ 54.515550][ T36] audit: type=1400 audit(1761125012.660:362): avc: denied { ioctl } for pid=1244 comm="syz.3.300" path="socket:[9314]" dev="sockfs" ino=9314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.566030][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 54.587079][ T45] usb 1-1: device descriptor read/8, error -71 [ 54.717667][ T45] usb 1-1: device descriptor read/8, error -71 [ 54.956008][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.977093][ T45] usb 1-1: device descriptor read/8, error -71 [ 55.107225][ T45] usb 1-1: device descriptor read/8, error -71 [ 55.216115][ T45] usb usb1-port1: unable to enumerate USB device [ 55.238916][ T36] audit: type=1400 audit(1761125013.390:363): avc: denied { create } for pid=1256 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 55.243820][ T1257] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 55.258350][ T1257] rust_binder: Error while translating object. [ 55.267154][ T1257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.273411][ T1257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 55.489264][ T1277] netlink: 'syz.2.312': attribute type 46 has an invalid length. [ 55.506489][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 55.544405][ T1283] netlink: 9 bytes leftover after parsing attributes in process `syz.2.314'. [ 55.553383][ T1283] z00X: renamed from gretap0 (while UP) [ 55.560387][ T1283] z00X: entered allmulticast mode [ 55.840812][ T1313] tipc: Can't bind to reserved service type 0 [ 55.867952][ T1317] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.885479][ T1317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 55.936952][ T1322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:196 [ 55.981659][ T1329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.985241][ T1327] overlayfs: failed to resolve '/# 7XuLɻ34#Lm[ցxa5۹{9)iN^': -2 [ 56.159033][ T1344] overlayfs: failed to clone lowerpath [ 56.209659][ T1348] rust_binder: 183: no such ref 2 [ 56.214771][ T1348] rust_binder: 183: no such ref 2 [ 56.239062][ T1348] rust_binder: 183: no such ref 2 [ 56.248059][ T1348] rust_binder: 183: no such ref 2 [ 56.253411][ T1348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 56.268741][ T1348] __vm_enough_memory: pid: 1348, comm: syz.1.335, bytes: 18014402804453376 not enough memory for the allocation [ 56.329090][ T1366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.339'. [ 56.398604][ T1372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.486369][ T1375] rust_binder: Error in use_page_slow: ESRCH [ 56.500635][ T1375] rust_binder: use_range failure ESRCH [ 56.513643][ T1375] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 56.524977][ T1375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 56.545382][ T1375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:191 [ 57.064768][ T1378] rust_binder: 209: no such ref 0 [ 57.079516][ T1378] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 57.086876][ T1378] rust_binder: 209: no such ref 2 [ 57.092153][ T1378] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 57.195184][ T1391] binder: Bad value for 'stats' [ 57.286259][ T1395] netlink: 'syz.2.350': attribute type 27 has an invalid length. [ 57.295710][ T1395] z00X: left allmulticast mode [ 57.329866][ T1401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.329919][ T1401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.339071][ T1400] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 57.347144][ T1405] overlayfs: failed to clone lowerpath [ 57.366254][ T1406] overlayfs: failed to clone lowerpath [ 57.382900][ T1409] rust_binder: 228: no such ref 0 [ 57.395298][ T1410] rust_binder: 228: no such ref 0 [ 57.400610][ T1409] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 57.408216][ T1410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 57.416180][ T1410] rust_binder: 228: no such ref 2 [ 57.421255][ T1409] rust_binder: 228: no such ref 2 [ 57.421272][ T1410] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 57.432084][ T1409] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 57.433286][ T1416] 9pnet_fd: Insufficient options for proto=fd [ 57.528317][ T1433] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388857856 i:1 err:EFAULT [ 57.528353][ T1433] rust_binder: Error in use_page_slow: EFAULT [ 57.539140][ T1433] rust_binder: use_range failure EFAULT [ 57.545264][ T1433] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 57.551011][ T1433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.560966][ T1433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:235 [ 57.576651][ T1442] fuse: Bad value for 'fd' [ 57.591792][ T1442] fuse: Bad value for 'fd' [ 57.611403][ T1453] 9pnet: Could not find request transport: xen [ 57.615900][ T1414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.618234][ T1414] rust_binder: Error in use_page_slow: ESRCH [ 57.620406][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 57.620426][ T36] audit: type=1400 audit(1761125015.770:379): avc: denied { accept } for pid=1451 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.624701][ T1414] rust_binder: use_range failure ESRCH [ 57.624722][ T1414] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 57.624745][ T1414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 57.670634][ T1414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195 [ 57.763242][ T36] audit: type=1400 audit(1761125015.910:380): avc: denied { setattr } for pid=1461 comm="syz.2.373" name="NETLINK" dev="sockfs" ino=9805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.796318][ T36] audit: type=1400 audit(1761125015.910:381): avc: denied { setattr } for pid=1461 comm="syz.2.373" name="XDP" dev="sockfs" ino=9806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.847508][ T36] audit: type=1400 audit(1761125016.000:382): avc: denied { getopt } for pid=1467 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.956020][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 58.033852][ T1479] fuse: Bad value for 'fd' [ 58.033875][ T1480] fuse: Bad value for 'fd' [ 58.106091][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 58.112622][ T45] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 58.120887][ T45] usb 1-1: config 0 has no interface number 0 [ 58.127089][ T45] usb 1-1: config 0 interface 159 has no altsetting 0 [ 58.135355][ T45] usb 1-1: New USB device found, idVendor=0930, idProduct=f1dc, bcdDevice=a4.9a [ 58.144474][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.152763][ T45] usb 1-1: Product: syz [ 58.157291][ T45] usb 1-1: Manufacturer: syz [ 58.161903][ T45] usb 1-1: SerialNumber: syz [ 58.167651][ T45] usb 1-1: config 0 descriptor?? [ 58.280235][ T36] audit: type=1400 audit(1761125016.430:383): avc: denied { setattr } for pid=1501 comm="syz.1.387" name="NETLINK" dev="sockfs" ino=9844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.369090][ T1515] 9pnet_fd: p9_fd_create_unix (1515): problem connecting socket: ./file0: -111 [ 58.410781][ T1522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 58.423310][ T1522] binder: Bad value for 'stats' [ 58.429084][ T1523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 58.560063][ T1532] netlink: 64 bytes leftover after parsing attributes in process `syz.2.396'. [ 58.730973][ T45] usb 1-1: USB disconnect, device number 10 [ 58.877878][ T36] audit: type=1400 audit(1761125017.030:384): avc: denied { write } for pid=1544 comm="syz.0.401" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.899830][ T36] audit: type=1400 audit(1761125017.030:385): avc: denied { remove_name } for pid=1544 comm="syz.0.401" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.923408][ T36] audit: type=1400 audit(1761125017.030:386): avc: denied { unlink } for pid=1544 comm="syz.0.401" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.112431][ T1558] /dev/loop0: Can't lookup blockdev [ 59.146218][ T1563] overlayfs: failed to clone lowerpath [ 59.163239][ T1569] netlink: 'syz.3.409': attribute type 30 has an invalid length. [ 59.252242][ T1591] 9pnet_fd: Insufficient options for proto=fd [ 59.288009][ T1593] netlink: 'syz.3.417': attribute type 4 has an invalid length. [ 59.306070][ T1593] netlink: 17 bytes leftover after parsing attributes in process `syz.3.417'. [ 59.391482][ T36] audit: type=1400 audit(1761125017.540:387): avc: denied { mount } for pid=1610 comm="syz.3.423" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 59.420306][ T1615] /dev/loop0: Can't lookup blockdev [ 59.471185][ T36] audit: type=1400 audit(1761125017.620:388): avc: denied { create } for pid=1628 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 59.751402][ T1646] 8021q: VLANs not supported on ip_vti0 [ 59.813873][ T1651] __vm_enough_memory: pid: 1651, comm: syz.0.440, bytes: 18014402804453376 not enough memory for the allocation [ 59.863863][ T1654] rust_binder: Error while translating object. [ 59.863917][ T1654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.870506][ T1654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 60.157946][ T1677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.296300][ T1695] binder: Unknown parameter '' [ 60.662525][ T1702] fuse: Bad value for 'fd' [ 61.091481][ T1709] incfs: Error accessing: ./file0. [ 61.096749][ T1709] incfs: mount failed -20 [ 61.120341][ T1714] incfs: Backing dir is not set, filesystem can't be mounted. [ 61.128085][ T1714] incfs: mount failed -2 [ 61.152497][ T1721] rust_binder: Error while translating object. [ 61.152561][ T1721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.160013][ T1721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 61.197794][ T1730] netlink: 140 bytes leftover after parsing attributes in process `syz.1.467'. [ 61.227630][ T1730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.467'. [ 61.596032][ T514] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 61.747301][ T514] usb 1-1: Invalid ep0 maxpacket: 16 [ 61.876026][ T514] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 62.026036][ T514] usb 1-1: Invalid ep0 maxpacket: 16 [ 62.032850][ T514] usb usb1-port1: attempt power cycle [ 62.386558][ T514] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 62.407090][ T514] usb 1-1: Invalid ep0 maxpacket: 16 [ 62.537254][ T514] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 62.557497][ T514] usb 1-1: Invalid ep0 maxpacket: 16 [ 62.562981][ T514] usb usb1-port1: unable to enumerate USB device [ 62.898664][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 62.898683][ T36] audit: type=1400 audit(1761125021.050:396): avc: denied { nlmsg_tty_audit } for pid=1820 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 62.899741][ T1821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2052 sclass=netlink_audit_socket pid=1821 comm=syz.1.498 [ 63.061492][ T1845] overlayfs: failed to clone upperpath [ 63.061772][ T1846] overlayfs: failed to clone upperpath [ 63.117868][ T36] audit: type=1400 audit(1761125021.270:397): avc: denied { accept } for pid=1856 comm="syz.1.510" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.540613][ T36] audit: type=1400 audit(1761125021.690:398): avc: denied { setattr } for pid=1940 comm="syz.2.539" name="NETLINK" dev="sockfs" ino=11845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.643442][ T1949] fuse: Unknown parameter 'user_ad' [ 64.065872][ T1962] overlay: ./file0 is not a directory [ 64.242773][ T1972] tipc: Enabling of bearer rejected, media not registered [ 64.251381][ T36] audit: type=1400 audit(1761125022.400:399): avc: denied { write } for pid=1971 comm="syz.2.552" name="file2" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.273928][ T36] audit: type=1400 audit(1761125022.400:400): avc: denied { ioctl } for pid=1971 comm="syz.2.552" path="/153/file2" dev="tmpfs" ino=834 ioctlcmd=0x1284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.301527][ T1974] overlayfs: failed to resolve './file1': -2 [ 64.372444][ T36] audit: type=1400 audit(1761125022.520:401): avc: denied { write } for pid=1975 comm="syz.0.554" name="vlan0" dev="proc" ino=4026532814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.373223][ T1976] @: renamed from vlan0 (while UP) [ 64.405039][ T1976] Z7nz>RA: renamed from lo (while UP) [ 64.412030][ T36] audit: type=1400 audit(1761125022.560:402): avc: denied { setopt } for pid=1975 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.643277][ T2002] overlay: ./file0 is not a directory [ 64.649686][ T2002] incfs: Options parsing error. -22 [ 64.655084][ T2002] incfs: mount failed -22 [ 64.755990][ T371] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 64.833008][ T2012] cgroup: Need name or subsystem set [ 64.838535][ T2012] cgroup: Need name or subsystem set [ 64.843944][ T2012] cgroup: Need name or subsystem set [ 64.849424][ T2012] cgroup: Need name or subsystem set [ 64.854810][ T2012] cgroup: Need name or subsystem set [ 64.860285][ T2012] cgroup: Need name or subsystem set [ 64.865685][ T2012] cgroup: Need name or subsystem set [ 64.871324][ T2012] cgroup: Need name or subsystem set [ 64.876852][ T2012] cgroup: Need name or subsystem set [ 64.882303][ T2012] cgroup: Need name or subsystem set [ 64.887798][ T2012] cgroup: Need name or subsystem set [ 64.893299][ T2012] cgroup: Need name or subsystem set [ 64.898721][ T2012] cgroup: Need name or subsystem set [ 64.904118][ T2012] cgroup: Need name or subsystem set [ 64.909589][ T2012] cgroup: Need name or subsystem set [ 64.915152][ T2012] cgroup: Need name or subsystem set [ 64.915782][ T371] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.920959][ T2012] cgroup: Need name or subsystem set [ 64.930775][ T371] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.936607][ T2012] cgroup: Need name or subsystem set [ 64.945676][ T371] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 64.952042][ T2012] cgroup: Need name or subsystem set [ 64.959526][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.965201][ T2012] cgroup: Need name or subsystem set [ 64.972842][ T371] usb 1-1: SerialNumber: syz [ 64.978587][ T2012] cgroup: Need name or subsystem set [ 64.986551][ T371] usb 1-1: 0:2 : does not exist [ 64.988586][ T2012] cgroup: Need name or subsystem set [ 64.998420][ T2012] cgroup: Need name or subsystem set [ 65.003991][ T2012] cgroup: Need name or subsystem set [ 65.009677][ T2012] cgroup: Need name or subsystem set [ 65.015072][ T2012] cgroup: Need name or subsystem set [ 65.020634][ T2012] cgroup: Need name or subsystem set [ 65.026305][ T2012] cgroup: Need name or subsystem set [ 65.031880][ T2012] cgroup: Need name or subsystem set [ 65.037352][ T2012] cgroup: Need name or subsystem set [ 65.042755][ T2012] cgroup: Need name or subsystem set [ 65.048411][ T2012] cgroup: Need name or subsystem set [ 65.053814][ T2012] cgroup: Need name or subsystem set [ 65.059268][ T2012] cgroup: Need name or subsystem set [ 65.064716][ T2012] cgroup: Need name or subsystem set [ 65.070157][ T2012] cgroup: Need name or subsystem set [ 65.075560][ T2012] cgroup: Need name or subsystem set [ 65.081016][ T2012] cgroup: Need name or subsystem set [ 65.086554][ T2012] cgroup: Need name or subsystem set [ 65.091965][ T2012] cgroup: Need name or subsystem set [ 65.097402][ T2012] cgroup: Need name or subsystem set [ 65.102843][ T2012] cgroup: Need name or subsystem set [ 65.108297][ T2012] cgroup: Need name or subsystem set [ 65.113701][ T2012] cgroup: Need name or subsystem set [ 65.120399][ T2012] cgroup: Need name or subsystem set [ 65.125811][ T2012] cgroup: Need name or subsystem set [ 65.131294][ T2012] cgroup: Need name or subsystem set [ 65.136731][ T2012] cgroup: Need name or subsystem set [ 65.142104][ T2012] cgroup: Need name or subsystem set [ 65.147533][ T2012] cgroup: Need name or subsystem set [ 65.152961][ T2012] cgroup: Need name or subsystem set [ 65.158399][ T2012] cgroup: Need name or subsystem set [ 65.163782][ T2012] cgroup: Need name or subsystem set [ 65.169233][ T2012] cgroup: Need name or subsystem set [ 65.174629][ T2012] cgroup: Need name or subsystem set [ 65.180063][ T2012] cgroup: Need name or subsystem set [ 65.185471][ T2012] cgroup: Need name or subsystem set [ 65.191312][ T2012] cgroup: Need name or subsystem set [ 65.196769][ T2012] cgroup: Need name or subsystem set [ 65.202172][ T2012] cgroup: Need name or subsystem set [ 65.207643][ T2012] cgroup: Need name or subsystem set [ 65.213055][ T2012] cgroup: Need name or subsystem set [ 65.218547][ T2012] cgroup: Need name or subsystem set [ 65.223987][ T2012] cgroup: Need name or subsystem set [ 65.231317][ T2012] cgroup: Need name or subsystem set [ 65.252005][ T36] audit: type=1400 audit(1761125023.400:403): avc: denied { map } for pid=2016 comm="syz.3.569" path="socket:[13215]" dev="sockfs" ino=13215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.381774][ T2037] netlink: 224 bytes leftover after parsing attributes in process `syz.3.576'. [ 65.390833][ T371] usb 1-1: USB disconnect, device number 15 [ 65.516947][ T2060] netlink: 48 bytes leftover after parsing attributes in process `syz.3.584'. [ 65.694277][ T2081] netlink: 76 bytes leftover after parsing attributes in process `syz.3.591'. [ 65.796810][ T36] audit: type=1326 audit(1761125023.950:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2095 comm="syz.3.596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986b38efc9 code=0x0 [ 65.952882][ T2105] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.952913][ T2105] rust_binder: Read failure Err(EFAULT) in pid:305 [ 65.979170][ T2110] rust_binder: Write failure EFAULT in pid:310 [ 66.020177][ T2115] binder: Unknown parameter 'fscontext?}' [ 66.054188][ T2117] cgroup: Invalid name [ 66.068030][ T2121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.116459][ T2127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:319 [ 66.160386][ T2131] rust_binder: Write failure EFAULT in pid:321 [ 66.479128][ T36] audit: type=1400 audit(1761125025.633:405): avc: denied { getopt } for pid=2149 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.529265][ T2164] 9pnet_fd: Insufficient options for proto=fd [ 67.313053][ T2202] tmpfs: Unknown parameter '' [ 67.381265][ T2218] netlink: 140 bytes leftover after parsing attributes in process `syz.2.641'. [ 67.390484][ T2218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.641'. [ 67.400640][ T2219] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 67.539946][ T2231] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 67.547808][ T2231] netlink: 5 bytes leftover after parsing attributes in process `syz.2.646'. [ 67.556809][ T2231] bridge_slave_1: left promiscuous mode [ 67.562476][ T2231] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.571604][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 67.615289][ T2235] x_tables: duplicate underflow at hook 4 [ 67.657438][ T2242] rust_binder: Error while translating object. [ 67.657488][ T2242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.663982][ T2242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333 [ 67.785130][ T2249] Invalid logical block size (14) [ 67.816650][ T2249] rust_binder: inc_ref_done called when no active inc_refs [ 68.043283][ T2255] binder: Bad value for 'max' [ 68.085754][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 68.085774][ T36] audit: type=1400 audit(1761125027.233:418): avc: denied { write } for pid=2259 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.190381][ T2263] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.190409][ T2263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 68.243704][ T2265] netlink: 'syz.0.657': attribute type 6 has an invalid length. [ 68.299884][ T36] audit: type=1400 audit(1761125027.453:419): avc: denied { getopt } for pid=2266 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.107801][ T2285] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 69.117334][ T36] audit: type=1400 audit(1761125028.273:420): avc: denied { relabelto } for pid=2283 comm="syz.0.663" name="full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 69.143907][ T36] audit: type=1400 audit(1761125028.273:421): avc: denied { associate } for pid=2283 comm="syz.0.663" name="full" dev="devtmpfs" ino=6 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_auth_t:s0" [ 69.592321][ T2319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 69.980135][ T2341] fuse: Bad value for 'fd' [ 69.986680][ T2341] incfs: Error accessing: ./file0. [ 69.991960][ T2341] incfs: mount failed -20 [ 70.135981][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 70.182283][ T36] audit: type=1400 audit(1761125029.333:422): avc: denied { listen } for pid=2368 comm="syz.3.695" path=2F3138342FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 70.206841][ T36] audit: type=1400 audit(1761125029.343:423): avc: denied { mount } for pid=2368 comm="syz.3.695" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.294394][ T2334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.305026][ T2334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.315900][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.321369][ T36] audit: type=1400 audit(1761125029.473:424): avc: denied { create } for pid=2374 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.325277][ T9] usb 1-1: too many configurations: 94, using maximum allowed: 8 [ 70.352360][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 70.360048][ T9] usb 1-1: can't read configurations, error -71 [ 70.374622][ T2379] fuse: Bad value for 'group_id' [ 70.379673][ T2379] fuse: Bad value for 'group_id' [ 70.591594][ T2402] fuseblk: Bad value for 'user_id' [ 70.596894][ T2402] fuseblk: Bad value for 'user_id' [ 70.896232][ T36] audit: type=1400 audit(1761125030.053:425): avc: denied { execute } for pid=2441 comm="syz.0.721" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 70.955564][ T2446] tc_dump_action: action bad kind [ 70.972859][ T2448] netlink: 104 bytes leftover after parsing attributes in process `syz.0.724'. [ 71.025167][ T2460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:380 [ 71.038963][ T2464] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.048364][ T2463] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 71.054838][ T2463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.062995][ T2463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:383 [ 71.074844][ T2464] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 71.084139][ T2464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.092169][ T2464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:383 [ 71.298080][ T2476] overlayfs: failed to clone lowerpath [ 71.313235][ T2479] overlayfs: failed to clone upperpath [ 71.344761][ T36] audit: type=1400 audit(1761125030.493:426): avc: denied { wake_alarm } for pid=2487 comm="syz.2.737" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.426075][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 71.575994][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 71.582296][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.593253][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.614966][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 71.625850][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.635148][ T9] usb 1-1: config 0 descriptor?? [ 72.045292][ T2467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.053946][ T2467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.064097][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 72.070231][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 72.081513][ T9] usb 1-1: USB disconnect, device number 17 [ 72.188645][ T2513] overlayfs: failed to clone upperpath [ 72.207532][ T2515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.006018][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 73.155983][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 73.162213][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.173146][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.186036][ T45] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 73.195077][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.203745][ T45] usb 1-1: config 0 descriptor?? [ 73.298556][ T36] audit: type=1400 audit(1761125032.453:427): avc: denied { create } for pid=2582 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.538319][ T36] audit: type=1400 audit(1761125032.693:428): avc: denied { map } for pid=2596 comm="syz.1.770" path="/209/file0" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 73.561130][ T36] audit: type=1400 audit(1761125032.693:429): avc: denied { execute } for pid=2596 comm="syz.1.770" path="/209/file0" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 73.620740][ T2610] rust_binder: Error while translating object. [ 73.620784][ T2610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 73.623526][ T45] hid-rmi 0003:06CB:81A7.0001: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 73.637029][ T2610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:394 [ 73.813380][ T514] usb 1-1: USB disconnect, device number 18 [ 73.883413][ T36] audit: type=1400 audit(1761125033.033:430): avc: denied { accept } for pid=2641 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.347667][ T36] audit: type=1400 audit(1761125033.503:431): avc: denied { setopt } for pid=2653 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.399989][ T2660] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 74.410683][ T2660] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 74.418706][ T2662] netlink: 'syz.3.793': attribute type 32 has an invalid length. [ 74.491674][ T2683] overlayfs: failed to clone upperpath [ 74.497707][ T2684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.571640][ T2701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 74.587622][ T2701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 74.652076][ T36] audit: type=1400 audit(1761125033.803:432): avc: denied { watch_reads } for pid=2720 comm="syz.2.810" path="/189" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.756503][ T2734] /dev/loop0: Can't lookup blockdev [ 75.316900][ T2755] netlink: 'syz.2.824': attribute type 3 has an invalid length. [ 75.348442][ T36] audit: type=1326 audit(1761125290.502:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2692 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448d18efc9 code=0x7fc00000 [ 75.375685][ T36] audit: type=1326 audit(1761125290.502:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2692 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f448d18efc9 code=0x7fc00000 [ 75.401543][ T36] audit: type=1326 audit(1761125290.502:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2692 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448d18efc9 code=0x7fc00000 [ 75.420151][ T2768] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 75.425732][ T2768] __vm_enough_memory: pid: 2768, comm: syz.0.830, bytes: 18014402804453376 not enough memory for the allocation [ 75.483032][ T2780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.485206][ T2783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.544959][ T2799] netlink: 57 bytes leftover after parsing attributes in process `syz.2.841'. [ 75.637016][ T36] audit: type=1326 audit(1761125290.792:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.2.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33a698efc9 code=0x0 [ 75.718540][ T2817] overlayfs: failed to clone upperpath [ 76.449587][ T2843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 76.524125][ T2852] netlink: 'syz.1.860': attribute type 16 has an invalid length. [ 76.531947][ T2852] netlink: 'syz.1.860': attribute type 2 has an invalid length. [ 76.539978][ T2852] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.860'. [ 76.667875][ T2870] 9pnet_fd: p9_fd_create_tcp (2870): problem connecting socket to 127.0.0.1 [ 77.025531][ T2905] syz.2.879 (2905): attempted to duplicate a private mapping with mremap. This is not supported. [ 77.123684][ T2913] overlayfs: failed to clone upperpath [ 77.151852][ T2916] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 78.090292][ T2969] overlayfs: failed to clone upperpath [ 78.238259][ T2988] 9pnet: Could not find request transport: |d [ 78.348728][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 78.348747][ T36] audit: type=1400 audit(1761125293.502:441): avc: denied { relabelfrom } for pid=2991 comm="syz.2.911" name="NETLINK" dev="sockfs" ino=15711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.349174][ T2992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 78.366345][ T36] audit: type=1400 audit(1761125293.502:442): avc: denied { relabelto } for pid=2991 comm="syz.2.911" name="NETLINK" dev="sockfs" ino=15711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 78.416229][ T36] audit: type=1400 audit(1761125293.532:443): avc: denied { ioctl } for pid=2991 comm="syz.2.911" path="socket:[15711]" dev="sockfs" ino=15711 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 78.532217][ T36] audit: type=1326 audit(1761125293.682:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0dd8efc9 code=0x7fc00000 [ 78.553036][ T3016] process 'syz.1.919' launched './file1' with NULL argv: empty string added [ 78.555785][ T36] audit: type=1326 audit(1761125293.682:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d0dd8efc9 code=0x7fc00000 [ 78.587668][ T3024] sit0: entered promiscuous mode [ 78.599754][ T3024] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 78.601620][ T36] audit: type=1326 audit(1761125293.682:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0dd8efc9 code=0x7fc00000 [ 78.607754][ T3024] netlink: 1 bytes leftover after parsing attributes in process `syz.1.920'. [ 78.630753][ T36] audit: type=1326 audit(1761125293.682:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0dd8efc9 code=0x7fc00000 [ 78.664584][ T36] audit: type=1326 audit(1761125293.682:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0dd8efc9 code=0x7fc00000 [ 78.666240][ T3025] x_tables: unsorted underflow at hook 4 [ 78.688225][ T36] audit: type=1326 audit(1761125293.682:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0dd8efc9 code=0x7fc00000 [ 78.726606][ T36] audit: type=1326 audit(1761125293.682:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0dd8efc9 code=0x7fc00000 [ 78.772128][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.782494][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.792639][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.801796][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.811200][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.820311][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.830046][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.839105][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.848977][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.857989][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.868071][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.877405][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.886208][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.895010][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.903799][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.913643][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.922833][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.931775][ T329] bridge_slave_1: left allmulticast mode [ 78.931885][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.945987][ T329] bridge_slave_1: left promiscuous mode [ 78.946453][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.956070][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.961115][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.976942][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.986160][ T329] bridge_slave_0: left allmulticast mode [ 78.998785][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.002063][ T329] bridge_slave_0: left promiscuous mode [ 79.016209][ T3031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 79.022944][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.035103][ T3031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.157201][ T3062] EXT4-fs: dax option not supported [ 79.190087][ T329] veth1_macvtap: left promiscuous mode [ 79.195666][ T329] veth0_vlan: left promiscuous mode [ 79.418234][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.425411][ T3077] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.432567][ T3077] bridge_slave_0: entered allmulticast mode [ 79.439083][ T3077] bridge_slave_0: entered promiscuous mode [ 79.447775][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.455012][ T3077] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.463252][ T3077] bridge_slave_1: entered allmulticast mode [ 79.471035][ T3077] bridge_slave_1: entered promiscuous mode [ 79.483581][ T3078] fuse: Unknown parameter 'ߣEVhh)Tațԗ6uck#Ħ#FmQ!J' [ 79.566605][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.573731][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.581091][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.588277][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.627929][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.635498][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.645781][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.652890][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.662506][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.669625][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.704039][ T3077] veth0_vlan: entered promiscuous mode [ 79.729506][ T3077] veth1_macvtap: entered promiscuous mode [ 79.881834][ T3133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 79.881870][ T3133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:7 [ 80.236830][ T331] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 80.298487][ T3179] tipc: Started in network mode [ 80.303471][ T3179] tipc: Node identity ac14140f, cluster identity 4711 [ 80.310618][ T3179] tipc: New replicast peer: 255.255.255.255 [ 80.317107][ T3179] tipc: Enabled bearer , priority 10 [ 80.407339][ T331] usb 5-1: not running at top speed; connect to a high speed hub [ 80.417066][ T331] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 80.427709][ T331] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.440810][ T331] usb 5-1: config 1 interface 0 has no altsetting 0 [ 80.449805][ T331] usb 5-1: string descriptor 0 read error: -22 [ 80.456634][ T331] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.465734][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.476942][ T331] usb 5-1: bad CDC descriptors [ 80.678096][ T3152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.686749][ T3152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.695878][ T3152] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 80.704207][ T3152] rust_binder: Write failure EINVAL in pid:12 [ 80.705189][ T514] usb 5-1: USB disconnect, device number 2 [ 80.967706][ T3223] fuse: Unknown parameter '0x00000000000000030x000000000000000500000000000000000004' [ 81.252746][ T3256] netlink: 'syz.4.1001': attribute type 2 has an invalid length. [ 81.354305][ T3265] rust_binder: Read failure Err(EAGAIN) in pid:26 [ 81.436034][ T331] tipc: Node number set to 2886997007 [ 81.494843][ T3278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 81.658372][ T3292] 9pnet_fd: Insufficient options for proto=fd [ 81.725970][ T514] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.742882][ T3306] /dev/sg0: Can't lookup blockdev [ 81.885976][ T514] usb 5-1: Using ep0 maxpacket: 16 [ 81.892521][ T514] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 81.904029][ T514] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 81.914251][ T514] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.928286][ T514] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.937722][ T514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.946089][ T514] usb 5-1: SerialNumber: syz [ 81.952391][ T3277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.165754][ T514] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 82.175502][ T514] usb 5-1: USB disconnect, device number 3 [ 82.358733][ T3319] /dev/rnullb0: Can't lookup blockdev [ 83.026139][ T331] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 83.177747][ T331] usb 5-1: config 9 has an invalid interface number: 51 but max is 0 [ 83.186011][ T331] usb 5-1: config 9 has no interface number 0 [ 83.194357][ T331] usb 5-1: string descriptor 0 read error: -22 [ 83.200848][ T331] usb 5-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 83.210129][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.218026][ T3384] overlayfs: failed to clone upperpath [ 83.360883][ T3386] /dev/rnullb0: Can't lookup blockdev [ 83.380695][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 83.380715][ T36] audit: type=1400 audit(1761125298.532:506): avc: denied { map } for pid=3387 comm="syz.1.1048" path="socket:[17644]" dev="sockfs" ino=17644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.422468][ T514] usb 5-1: USB disconnect, device number 4 [ 83.718778][ T3416] fuse: Unknown parameter '}0+va3P;Uڹ۴%a7B87 T(%0Z{7 ׌ IȔ2r^ŌuMogUď(vС_Ej]-tQo3\Crnno:؜ӝđ|eNfq]*6C5yĢp (Q?#pHpԣ9&ea9z';W. dePS' [ 83.746326][ T3416] @: renamed from vlan0 (while UP) [ 83.770383][ T36] audit: type=1400 audit(1761125298.922:507): avc: denied { remount } for pid=3421 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.809021][ T36] audit: type=1326 audit(1761125298.962:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3430 comm="syz.1.1062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d0dd8efc9 code=0x0 [ 83.951317][ T3450] rust_binder: Error while translating object. [ 83.951367][ T3450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 83.957718][ T3450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:46 [ 83.989126][ T3459] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 84.013792][ T3463] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 84.031088][ T3463] overlayfs: failed to clone upperpath [ 84.038959][ T3464] tipc: Started in network mode [ 84.044014][ T3464] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 84.053439][ T3464] tipc: Enabled bearer , priority 10 [ 84.059792][ T3463] tipc: Enabling of bearer rejected, already enabled [ 84.100816][ T3473] netlink: 'syz.2.1075': attribute type 16 has an invalid length. [ 84.108680][ T3475] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1077'. [ 84.143453][ T36] audit: type=1400 audit(1761125812.296:509): avc: denied { audit_write } for pid=3472 comm="syz.2.1075" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.162745][ T3480] rust_binder: Write failure EFAULT in pid:53 [ 84.183930][ T36] audit: type=1107 audit(1761125812.296:510): pid=3472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 84.192462][ T36] audit: type=1400 audit(1761125812.316:511): avc: denied { setopt } for pid=3479 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.700952][ T3528] sock: sock_timestamping_bind_phc: sock not bind to device [ 84.705019][ T3529] /dev/rnullb0: Can't lookup blockdev [ 84.824098][ T3543] /dev/rnullb0: Can't lookup blockdev [ 84.853598][ T3547] /dev/rnullb0: Can't lookup blockdev [ 85.053963][ T3556] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1104'. [ 85.160548][ T3571] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 85.169842][ T65] tipc: Node number set to 4269801494 [ 85.319986][ T36] audit: type=1400 audit(1761125813.476:512): avc: denied { mount } for pid=3575 comm="syz.4.1111" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.343164][ T3576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 85.707872][ T3595] 9pnet_fd: Insufficient options for proto=fd [ 85.959326][ T3616] overlayfs: empty lowerdir [ 86.610075][ T3628] tipc: Enabling of bearer rejected, failed to enable media [ 87.478066][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 87.499105][ T36] audit: type=1400 audit(1761125815.656:513): avc: denied { ioctl } for pid=3663 comm="syz.2.1143" path="socket:[18114]" dev="sockfs" ino=18114 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.775233][ T36] audit: type=1400 audit(1761125815.926:514): avc: denied { mount } for pid=3701 comm="syz.1.1156" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.817813][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 87.850875][ T3710] /dev/rnullb0: Can't lookup blockdev [ 87.938711][ T3725] ./cgroup: Can't lookup blockdev [ 87.944061][ T3725] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 87.954032][ T36] audit: type=1400 audit(1761125816.098:515): avc: denied { relabelto } for pid=3724 comm="syz.1.1166" name="syz1" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0" [ 88.005426][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 88.595342][ T3752] incfs: Can't find or create .index dir in ./file0 [ 88.602164][ T3752] incfs: mount failed -1 [ 88.607616][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 88.607829][ T36] audit: type=1400 audit(1761125816.758:519): avc: denied { setattr } for pid=3751 comm="syz.4.1175" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.662794][ T36] audit: type=1400 audit(1761125816.808:520): avc: denied { load_policy } for pid=3753 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.662809][ T3754] SELinux: truncated policydb string identifier [ 88.662839][ T3754] SELinux: failed to load policy [ 89.148281][ T3780] overlayfs: failed to clone upperpath [ 89.206111][ T3786] overlayfs: failed to resolve './file1': -2 [ 89.212414][ T3787] overlayfs: failed to resolve './file1': -2 [ 89.512369][ T36] audit: type=1326 audit(1761125817.658:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3788 comm="syz.4.1188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04fe38efc9 code=0x0 [ 89.733223][ T3795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=3795 comm=syz.3.1189 [ 89.793801][ T3806] /dev/loop0: Can't lookup blockdev [ 89.799581][ T3806] IPv6: Can't replace route, no match found [ 90.360563][ T36] audit: type=1326 audit(1761125818.508:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.4.1201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04fe38efc9 code=0x0 [ 90.900697][ T3851] overlayfs: failed to clone upperpath [ 90.980632][ T3858] overlayfs: cannot append lower layer [ 91.312783][ T36] audit: type=1400 audit(1761125819.458:523): avc: denied { create } for pid=3875 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 91.415034][ T3898] fuse: Unknown parameter '00000000000000000000003' [ 91.425206][ T3901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3901 comm=syz.2.1225 [ 91.539983][ T36] audit: type=1400 audit(1761125819.688:524): avc: denied { getattr } for pid=3916 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.959531][ T3935] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1235'. [ 92.105604][ T3937] rust_binder: 104: no such ref 2 [ 92.110821][ T3937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 92.111111][ T3937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 92.134879][ T36] audit: type=1400 audit(1761125820.278:525): avc: denied { read } for pid=3938 comm="syz.4.1237" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.166674][ T36] audit: type=1400 audit(1761125820.278:526): avc: denied { open } for pid=3938 comm="syz.4.1237" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.357901][ T36] audit: type=1400 audit(1761125820.508:527): avc: denied { ioctl } for pid=3955 comm="syz.2.1242" path="socket:[19493]" dev="sockfs" ino=19493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.475981][ T331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.546396][ T3972] overlay: ./file0 is not a directory [ 92.625977][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 92.635600][ T331] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 92.643856][ T331] usb 5-1: config 0 has no interface number 0 [ 92.650035][ T331] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 92.661745][ T331] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.671633][ T331] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.683111][ T331] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 92.692277][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.700326][ T331] usb 5-1: Product: syz [ 92.704516][ T331] usb 5-1: Manufacturer: syz [ 92.709164][ T331] usb 5-1: SerialNumber: syz [ 92.714392][ T331] usb 5-1: config 0 descriptor?? [ 92.916289][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 92.945521][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 92.955173][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 93.007673][ T331] usb 5-1: invalid MIDI in EP 0 [ 93.016673][ T331] snd-usb-audio 5-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 93.028315][ T331] usb 5-1: USB disconnect, device number 5 [ 93.043194][ T3985] udevd[3985]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.526878][ T4024] tipc: Enabling of bearer rejected, failed to enable media [ 93.536108][ T4024] rust_binder: Error while translating object. [ 93.536142][ T4024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 93.542422][ T4024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 93.709668][ T4036] fuse: Unknown parameter '0x0000000000000013' [ 93.740050][ T4040] __vm_enough_memory: pid: 4040, comm: syz.4.1270, bytes: 18014402804453376 not enough memory for the allocation [ 93.770501][ T36] audit: type=1400 audit(1761125821.918:528): avc: denied { map } for pid=4041 comm="syz.4.1271" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 93.789433][ T4042] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1271'. [ 94.185979][ T3957] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.337338][ T3957] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.348234][ T3957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.359232][ T3957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.369016][ T3957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 94.382817][ T3957] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 94.386376][ T36] audit: type=1400 audit(1761125822.528:529): avc: denied { ioctl } for pid=4070 comm="syz.3.1282" path="socket:[19736]" dev="sockfs" ino=19736 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.392460][ T3957] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 94.424815][ T3957] usb 5-1: Manufacturer: syz [ 94.430611][ T3957] usb 5-1: config 0 descriptor?? [ 94.838390][ T3957] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 94.845724][ T3957] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 94.854398][ T3957] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 95.350590][ T65] usb 5-1: USB disconnect, device number 6 [ 95.642003][ T4091] netlink: 'syz.3.1289': attribute type 15 has an invalid length. [ 95.650096][ T4091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1289'. [ 95.659621][ T4091] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 95.667475][ T4091] netlink: 'syz.3.1289': attribute type 2 has an invalid length. [ 95.868307][ T4173] binder: Bad value for 'defcontext' [ 95.886383][ T4175] netlink: 'syz.3.1298': attribute type 6 has an invalid length. [ 95.908228][ T4182] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.908248][ T4182] rust_binder: Read failure Err(EFAULT) in pid:153 [ 96.022769][ T4194] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 96.029425][ T4194] rust_binder: Error while translating object. [ 96.038281][ T4194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.044478][ T4194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 96.084544][ T4200] rust_binder: Error while translating object. [ 96.094170][ T4200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 96.100549][ T4200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:171 [ 96.297680][ T4209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 96.307042][ T4209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:176 [ 96.358672][ T4218] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1313'. [ 96.359329][ T4219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.539504][ T36] audit: type=1400 audit(1761125824.688:530): avc: denied { map } for pid=4246 comm="syz.3.1321" path="socket:[19896]" dev="sockfs" ino=19896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.672788][ T4252] Unsupported ieee802154 address type: 0 [ 96.698701][ T4257] 9pnet_fd: Insufficient options for proto=fd [ 96.926037][ T65] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 97.066037][ T65] usb 5-1: device descriptor read/64, error -71 [ 97.305993][ T65] usb 5-1: device descriptor read/64, error -71 [ 97.546056][ T65] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 97.675984][ T65] usb 5-1: device descriptor read/64, error -71 [ 97.916865][ T65] usb 5-1: device descriptor read/64, error -71 [ 98.026110][ T65] usb usb5-port1: attempt power cycle [ 98.366018][ T65] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 98.388607][ T65] usb 5-1: device descriptor read/8, error -71 [ 98.441364][ T36] audit: type=1400 audit(1761125826.588:531): avc: denied { create } for pid=4299 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.517339][ T65] usb 5-1: device descriptor read/8, error -71 [ 98.549153][ T4312] 9pnet_fd: Insufficient options for proto=fd [ 98.755959][ T65] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 98.777201][ T65] usb 5-1: device descriptor read/8, error -71 [ 98.860463][ T36] audit: type=1326 audit(1761125827.008:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.3.1350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986b38efc9 code=0x0 [ 98.917498][ T65] usb 5-1: device descriptor read/8, error -71 [ 99.027193][ T65] usb usb5-port1: unable to enumerate USB device [ 99.604252][ T4367] cgroup: fork rejected by pids controller in /syz2 [ 99.832802][ T4421] fuse: Bad value for 'fd' [ 100.013751][ T36] audit: type=1400 audit(1761125828.158:533): avc: denied { ioctl } for pid=4450 comm="syz.4.1370" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.089167][ T36] audit: type=1400 audit(1761125828.238:534): avc: denied { watch watch_reads } for pid=4454 comm="syz.2.1371" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 100.135620][ T4463] vlan1: entered promiscuous mode [ 100.140990][ T4463] vlan1: entered allmulticast mode [ 100.146601][ T4463] veth0_vlan: entered allmulticast mode [ 100.732527][ T4471] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1376'. [ 100.843796][ T4489] usb usb9: usbfs: process 4489 (syz.4.1383) did not claim interface 47 before use [ 100.853517][ T4489] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 100.891235][ T36] audit: type=1400 audit(1761125829.038:535): avc: denied { create } for pid=4499 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.910904][ T36] audit: type=1400 audit(1761125829.038:536): avc: denied { write } for pid=4499 comm="syz.2.1388" path="socket:[20227]" dev="sockfs" ino=20227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.951297][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 101.132876][ T4520] 9pnet_fd: Insufficient options for proto=fd [ 101.202195][ T4530] rust_binder: Write failure EFAULT in pid:261 [ 101.465990][ T65] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.635994][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 101.642521][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.649334][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 101.658825][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.676353][ T65] usb 5-1: config 0 descriptor?? [ 101.903551][ T4549] netlink: 'syz.3.1404': attribute type 4 has an invalid length. [ 101.911601][ T4549] netlink: 'syz.3.1404': attribute type 2 has an invalid length. [ 102.086503][ T65] hid (null): unknown global tag 0xd [ 102.091968][ T65] hid (null): invalid report_size 22610 [ 102.165844][ T36] audit: type=1400 audit(1761125830.308:537): avc: denied { ioctl } for pid=4579 comm="syz.3.1413" path="socket:[20553]" dev="sockfs" ino=20553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 102.216485][ T4589] sit0: entered promiscuous mode [ 102.237541][ T4589] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 102.237935][ T4591] /dev/loop0: Can't lookup blockdev [ 102.255581][ T4589] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1416'. [ 102.272491][ T4593] 9pnet: Could not find request transport: gd [ 102.322098][ T331] usb 5-1: USB disconnect, device number 11 [ 102.352170][ T4609] overlayfs: failed to clone upperpath [ 103.011014][ T4657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4657 comm=syz.4.1440 [ 103.561311][ T4675] rust_binder: Fixups oob 178 180 369 186 [ 103.561340][ T4675] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 103.568225][ T4675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.576959][ T36] audit: type=1326 audit(1761125831.728:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 103.613292][ T4675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 103.618514][ T36] audit: type=1326 audit(1761125831.728:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 103.651180][ T36] audit: type=1326 audit(1761125831.728:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 103.677633][ T36] audit: type=1326 audit(1761125831.728:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33a698d810 code=0x7ffc0000 [ 103.684377][ T4684] netlink: 'syz.3.1450': attribute type 4 has an invalid length. [ 103.786482][ T4693] bpf: Bad value for 'uid' [ 103.791954][ T4695] rust_binder: Write failure EFAULT in pid:288 [ 103.820902][ T4697] fuse: Unknown parameter '0x0000000000000000' [ 104.394389][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 104.394407][ T36] audit: type=1326 audit(1761125832.538:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 104.514428][ T4723] can: request_module (can-proto-0) failed. [ 104.558791][ T4731] netlink: 'syz.2.1468': attribute type 16 has an invalid length. [ 105.462153][ T36] audit: type=1326 audit(1761125833.608:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.1477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986b38efc9 code=0x0 [ 105.686303][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 105.727537][ T4761] batadv_slave_0: entered promiscuous mode [ 105.734548][ T4760] batadv_slave_0: left promiscuous mode [ 105.753463][ T4763] rust_binder: Write failure EFAULT in pid:302 [ 105.794319][ T36] audit: type=1326 audit(1761125833.928:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.4.1481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04fe38efc9 code=0x0 [ 105.862847][ T36] audit: type=1400 audit(1761125834.008:606): avc: denied { read write } for pid=4781 comm="syz.4.1485" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.886748][ T36] audit: type=1400 audit(1761125834.008:607): avc: denied { open } for pid=4781 comm="syz.4.1485" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.151372][ T4785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.151414][ T4785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 106.231200][ T4796] mmap: syz.4.1491 (4796): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 106.253557][ T4796] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 106.269575][ T4797] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 106.297087][ T36] audit: type=1400 audit(1761125834.448:608): avc: denied { relabelto } for pid=4789 comm="syz.2.1488" name="rnullb0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:shell_exec_t:s0" [ 106.325874][ T36] audit: type=1400 audit(1761125834.448:609): avc: denied { associate } for pid=4789 comm="syz.2.1488" name="rnullb0" dev="tmpfs" ino=536 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:shell_exec_t:s0" [ 106.353678][ T36] audit: type=1400 audit(1761125834.478:610): avc: denied { read } for pid=4806 comm="syz.3.1495" name="/" dev="configfs" ino=2139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.375896][ T36] audit: type=1400 audit(1761125834.478:611): avc: denied { open } for pid=4806 comm="syz.3.1495" path="/" dev="configfs" ino=2139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.595988][ T65] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 106.747368][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.758596][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.768440][ T65] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 106.777623][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.788103][ T65] usb 5-1: config 0 descriptor?? [ 106.873359][ T4816] overlayfs: failed to clone upperpath [ 107.018059][ T4823] fuse: Bad value for 'fd' [ 107.195510][ T65] samsung 0003:0419:0600.0004: unknown main item tag 0x1 [ 107.205191][ T65] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 107.212380][ T65] samsung 0003:0419:0600.0004: unknown main item tag 0x3 [ 107.232219][ T65] samsung 0003:0419:0600.0004: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 107.315165][ T4844] 9pnet_fd: Insufficient options for proto=fd [ 107.374762][ T36] audit: type=1326 audit(1761125835.518:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.2.1508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x0 [ 107.400856][ T4813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.400889][ T4813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 107.411197][ T31] usb 5-1: USB disconnect, device number 12 [ 108.079750][ T4867] rust_binder: got new transaction with bad transaction stack [ 108.079774][ T4867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 108.126740][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.148137][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.155505][ T4862] bridge_slave_0: entered allmulticast mode [ 108.168928][ T4862] bridge_slave_0: entered promiscuous mode [ 108.180333][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.194673][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.208501][ T4862] bridge_slave_1: entered allmulticast mode [ 108.216367][ T4862] bridge_slave_1: entered promiscuous mode [ 108.318104][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.325286][ T4862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.332646][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.340056][ T4862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.375029][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.384046][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.395149][ T4150] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.402299][ T4150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.420700][ T4150] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.427822][ T4150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.467869][ T4862] veth0_vlan: entered promiscuous mode [ 108.483687][ T4862] veth1_macvtap: entered promiscuous mode [ 108.526877][ T4912] rust_binder: Write failure EFAULT in pid:359 [ 108.529124][ T4912] input: syz0 as /devices/virtual/input/input14 [ 108.555189][ T4916] rust_binder: Write failure EINVAL in pid:4 [ 108.555532][ T4916] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1530'. [ 108.676441][ T4939] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 108.684320][ T4939] SELinux: failed to load policy [ 108.691410][ T4939] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 108.875982][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.026222][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 109.032653][ T31] usb 6-1: config 254 has an invalid interface number: 215 but max is 0 [ 109.041324][ T31] usb 6-1: config 254 has no interface number 0 [ 109.047894][ T31] usb 6-1: config 254 interface 215 has no altsetting 0 [ 109.056522][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0478, bcdDevice=a8.dd [ 109.065703][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.073963][ T31] usb 6-1: Product: syz [ 109.078455][ T31] usb 6-1: Manufacturer: syz [ 109.083091][ T31] usb 6-1: SerialNumber: syz [ 109.276409][ T4952] /dev/rnullb0: Can't open blockdev [ 109.289972][ T4932] rust_binder: Read failure Err(EAGAIN) in pid:11 [ 109.290284][ T4953] rust_binder: Read failure Err(EAGAIN) in pid:11 [ 109.362243][ T4957] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 109.368851][ T4957] rust_binder: Error while translating object. [ 109.379863][ T4957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.386149][ T4957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 109.415144][ T4959] 9pnet_fd: Insufficient options for proto=fd [ 109.465390][ T31] usb 6-1: unknown interface protocol 0x2, assuming v1 [ 109.473833][ T31] usb 6-1: cannot find UAC_HEADER [ 109.480988][ T31] snd-usb-audio 6-1:254.215: probe with driver snd-usb-audio failed with error -22 [ 109.493550][ T31] usb 6-1: USB disconnect, device number 2 [ 109.505732][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:254.215/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.529378][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 109.529515][ T36] audit: type=1400 audit(1761125837.678:614): avc: denied { getopt } for pid=4966 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.529571][ T4967] tmpfs: Invalid uid '0x00000000ffffffff' [ 109.567636][ T36] audit: type=1400 audit(1761125837.718:615): avc: denied { mount } for pid=4966 comm="syz.3.1547" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 109.601413][ T36] audit: type=1400 audit(1761125837.748:616): avc: denied { mounton } for pid=4968 comm="syz.4.1548" path="/125/file0" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.625021][ T4975] overlayfs: failed to clone upperpath [ 109.632503][ T4974] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 109.643116][ T36] audit: type=1400 audit(1761125837.788:617): avc: denied { relabelto } for pid=4972 comm="syz.2.1549" name="file0" dev="tmpfs" ino=2129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 109.680255][ T36] audit: type=1400 audit(1761125837.788:618): avc: denied { associate } for pid=4972 comm="syz.2.1549" name="file0" dev="tmpfs" ino=2129 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 109.777909][ T4997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4997 comm=syz.2.1556 [ 110.227018][ T65] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 110.386993][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 110.393539][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.404655][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.414840][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.427949][ T65] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.437122][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.449630][ T65] usb 5-1: config 0 descriptor?? [ 110.759515][ T36] audit: type=1400 audit(1761125838.908:619): avc: denied { execute } for pid=5046 comm="syz.3.1575" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.791376][ T36] audit: type=1400 audit(1761125838.908:620): avc: denied { execute_no_trans } for pid=5046 comm="syz.3.1575" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.830218][ T36] audit: type=1400 audit(1761125838.978:621): avc: denied { mount } for pid=5051 comm="syz.3.1576" name="/" dev="ramfs" ino=22707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 110.864659][ T5052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1576'. [ 110.880403][ T65] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 110.896868][ T65] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 110.934761][ T65] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 110.945757][ T65] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 110.953179][ T65] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 110.961033][ T65] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 110.961728][ T5066] netlink: 'syz.3.1581': attribute type 4 has an invalid length. [ 110.969821][ T65] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 110.983816][ T65] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 110.999127][ T65] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 111.017450][ T5071] netlink: 'syz.3.1582': attribute type 4 has an invalid length. [ 111.022493][ T65] microsoft 0003:045E:07DA.0005: no inputs found [ 111.045669][ T65] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 111.120556][ T65] usb 5-1: USB disconnect, device number 13 [ 111.343896][ T5082] overlayfs: failed to clone upperpath [ 111.463302][ T36] audit: type=1400 audit(1761125839.607:622): avc: denied { watch watch_reads } for pid=5083 comm="syz.2.1587" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 111.541655][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 111.871895][ T36] audit: type=1400 audit(1761125840.017:623): avc: denied { sys_nice } for pid=5109 comm="syz.3.1595" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 112.210424][ T5125] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 112.210448][ T5125] rust_binder: Error while translating object. [ 112.222846][ T5125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.229209][ T5125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402 [ 112.253448][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.262727][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.269370][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.275873][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.282465][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.288983][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.295526][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.302005][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.308537][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.315005][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.321531][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.328025][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.334468][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.340963][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.347458][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.353900][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.360383][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.366855][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.373298][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.379793][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.386292][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.392756][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.399363][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.405816][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.412296][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.418801][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.425250][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.431723][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.438222][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.444819][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.451515][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.458177][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.556347][ T5138] rust_binder: 415: no such ref 3 [ 112.568175][ T5138] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 112.575379][ T5138] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 112.582665][ T5138] rust_binder: Write failure EFAULT in pid:415 [ 113.204336][ T5175] rust_binder: 433: no such ref 1 [ 113.215627][ T5175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 113.341291][ T5179] incfs: Can't find or create .index dir in ./file0 [ 113.357274][ T5179] incfs: mount failed -1 [ 113.543337][ T5196] x_tables: unsorted underflow at hook 2 [ 113.766030][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 113.895962][ T45] usb 5-1: device descriptor read/64, error -71 [ 114.015131][ T5216] binder: Unknown parameter '' [ 114.146047][ T45] usb 5-1: device descriptor read/64, error -71 [ 114.396006][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 114.502173][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 114.512005][ T5235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5235 comm=syz.2.1638 [ 114.525973][ T45] usb 5-1: device descriptor read/64, error -71 [ 114.747145][ T5269] 9pnet_fd: Insufficient options for proto=fd [ 114.768057][ T45] usb 5-1: device descriptor read/64, error -71 [ 114.886399][ T45] usb usb5-port1: attempt power cycle [ 115.105990][ T514] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.225980][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 115.247025][ T45] usb 5-1: device descriptor read/8, error -71 [ 115.257205][ T514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.269068][ T514] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.278388][ T514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.287717][ T514] usb 6-1: config 0 descriptor?? [ 115.357973][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 115.357992][ T36] audit: type=1326 audit(1761125843.507:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.387480][ T36] audit: type=1326 audit(1761125843.507:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.411201][ T36] audit: type=1326 audit(1761125843.507:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.412577][ T45] usb 5-1: device descriptor read/8, error -71 [ 115.434939][ T36] audit: type=1326 audit(1761125843.507:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.475766][ T36] audit: type=1326 audit(1761125843.507:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.500155][ T36] audit: type=1326 audit(1761125843.507:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.523769][ T36] audit: type=1326 audit(1761125843.507:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.547421][ T36] audit: type=1326 audit(1761125843.507:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.574498][ T36] audit: type=1326 audit(1761125843.507:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.598300][ T36] audit: type=1326 audit(1761125843.507:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a698efc9 code=0x7ffc0000 [ 115.696165][ T45] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 115.721365][ T45] usb 5-1: device descriptor read/8, error -71 [ 115.728609][ T514] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 115.740514][ T514] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0006/input/input15 [ 115.814197][ T514] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 115.857202][ T45] usb 5-1: device descriptor read/8, error -71 [ 115.966104][ T45] usb usb5-port1: unable to enumerate USB device [ 116.297509][ T514] usb 6-1: USB disconnect, device number 3 [ 116.463158][ T5345] overlayfs: failed to clone upperpath [ 116.603361][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'. [ 116.824947][ T5375] netlink: 'syz.5.1687': attribute type 3 has an invalid length. [ 117.431039][ T5382] rust_binder: got new transaction with bad transaction stack [ 117.431077][ T5382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 117.462796][ T5384] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 117.679518][ T5386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1692'. [ 117.718848][ T65] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 117.841596][ T5415] overlayfs: failed to clone upperpath [ 117.886021][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 117.892548][ T65] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 117.900966][ T65] usb 5-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 117.911236][ T65] usb 5-1: config 0 has no interface number 0 [ 117.917393][ T65] usb 5-1: config 0 interface 13 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.930582][ T65] usb 5-1: config 0 interface 13 has no altsetting 0 [ 117.938740][ T65] usb 5-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82 [ 117.946008][ T3957] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 117.947973][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.963425][ T65] usb 5-1: Product: syz [ 117.967632][ T65] usb 5-1: Manufacturer: syz [ 117.972260][ T65] usb 5-1: SerialNumber: syz [ 117.978015][ T65] usb 5-1: config 0 descriptor?? [ 117.983940][ T65] usb-storage 5-1:0.13: USB Mass Storage device detected [ 118.107262][ T3957] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 118.117223][ T3957] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 118.128617][ T3957] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 118.137749][ T3957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.145777][ T3957] usb 6-1: Product: syz [ 118.150021][ T3957] usb 6-1: Manufacturer: syz [ 118.154636][ T3957] usb 6-1: SerialNumber: syz [ 118.160069][ T3957] usb 6-1: config 0 descriptor?? [ 118.165374][ T5388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 118.172834][ T5388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 118.380455][ T5388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 118.388094][ T5388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 118.600118][ T5422] ------------[ cut here ]------------ [ 118.605704][ T5422] WARNING: CPU: 0 PID: 5422 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 118.615218][ T5422] Modules linked in: [ 118.619214][ T5422] CPU: 0 UID: 0 PID: 5422 Comm: syz.2.1705 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 118.630931][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.641083][ T5422] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 118.647059][ T5422] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 118.666845][ T5422] RSP: 0018:ffffc9000ecc7860 EFLAGS: 00010246 [ 118.672967][ T5422] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 118.681113][ T5422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ecc7918 [ 118.689184][ T5422] RBP: ffffc9000ecc7988 R08: ffffc9000ecc7917 R09: 0000000000000000 [ 118.697225][ T5422] R10: ffffc9000ecc7900 R11: fffff52001d98f23 R12: ffffc9000ecc78a0 [ 118.705224][ T5422] R13: dffffc0000000000 R14: 1ffff92001d98f10 R15: 0000000000000000 [ 118.713328][ T5422] FS: 00007f33a78746c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 118.722324][ T5422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.728983][ T5422] CR2: 0000200000001000 CR3: 0000000141cea000 CR4: 00000000003526b0 [ 118.737026][ T5422] Call Trace: [ 118.740340][ T5422] [ 118.743341][ T5422] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.749497][ T5422] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 118.755419][ T5422] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 118.761264][ T5422] ___kmalloc_large_node+0x81/0x220 [ 118.766578][ T5422] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 118.772360][ T5422] __kmalloc_large_node_noprof+0x1e/0xe0 [ 118.778088][ T5422] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 118.783783][ T5422] __kmalloc_noprof+0x336/0x530 [ 118.788900][ T5422] ? __cfi_lockref_get+0x10/0x10 [ 118.793903][ T5422] incfs_realloc_mount_info+0xa7/0x4d0 [ 118.797038][ T3957] Error reading MAC address [ 118.799627][ T5422] ? incfs_add_sysfs_node+0x118/0x240 [ 118.809565][ T5422] incfs_alloc_mount_info+0x479/0x600 [ 118.814981][ T5422] incfs_mount_fs+0x3ca/0x960 [ 118.819760][ T5422] ? __cfi_incfs_mount_fs+0x10/0x10 [ 118.825006][ T5422] ? vfs_parse_fs_string+0x102/0x170 [ 118.830350][ T5422] ? selinux_capable+0x38/0x50 [ 118.835187][ T5422] legacy_get_tree+0x106/0x1b0 [ 118.840028][ T5422] ? __cfi_incfs_mount_fs+0x10/0x10 [ 118.845273][ T5422] vfs_get_tree+0x9e/0x290 [ 118.849783][ T5422] do_new_mount+0x251/0xb40 [ 118.854328][ T5422] ? security_capable+0xcf/0xf0 [ 118.859296][ T5422] path_mount+0x688/0x1050 [ 118.863770][ T5422] ? putname+0x113/0x150 [ 118.867073][ T3957] usb 6-1: USB disconnect, device number 4 [ 118.868088][ T5422] __se_sys_mount+0x2bd/0x480 [ 118.878625][ T5422] ? __x64_sys_mount+0xf0/0xf0 [ 118.883434][ T5422] ? __kasan_check_write+0x18/0x20 [ 118.888648][ T5422] ? fpregs_restore_userregs+0x11d/0x260 [ 118.894317][ T5422] __x64_sys_mount+0xc3/0xf0 [ 118.898960][ T5422] x64_sys_call+0x2021/0x2ee0 [ 118.903686][ T5422] do_syscall_64+0x58/0xf0 [ 118.908184][ T5422] ? clear_bhb_loop+0x50/0xa0 [ 118.912891][ T5422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.918834][ T5422] RIP: 0033:0x7f33a698efc9 [ 118.923288][ T5422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.943575][ T5422] RSP: 002b:00007f33a7874038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.952066][ T5422] RAX: ffffffffffffffda RBX: 00007f33a6be5fa0 RCX: 00007f33a698efc9 [ 118.960282][ T5422] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 118.968413][ T5422] RBP: 00007f33a6a11f91 R08: 0000200000000280 R09: 0000000000000000 [ 118.976450][ T5422] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 118.984446][ T5422] R13: 00007f33a6be6038 R14: 00007f33a6be5fa0 R15: 00007ffeb9856a28 [ 118.992497][ T5422] [ 118.995539][ T5422] ---[ end trace 0000000000000000 ]--- [ 119.001601][ T5422] incfs: Error allocating mount info. -12 [ 119.007643][ T5422] incfs: mount failed -12 [ 120.467009][ T45] usb 5-1: USB disconnect, device number 18