last executing test programs: 30.110102426s ago: executing program 3 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x5, 0x8080000, 0x2000, &(0x7f000000d000/0x2000)=nil}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 29.858034652s ago: executing program 3 (id=83): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) write(r2, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 29.814823042s ago: executing program 3 (id=87): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x800) fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) socket$packet(0x11, 0x3, 0x300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 29.537847978s ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000002700)=0x2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)=ANY=[@ANYBLOB="240000001800290200000000ffdbdf250200000008000000040000000800088004001000a642f5d228679adeda291e945451f7ae253a05977160f4fa6591f273cd6b3123880ed6000000000000000000a80e08463eaaea411580e0ca7405904718370347ea78c032036a8464b070bec7d0af92547eed1fd3c8a7677924dd9d460aebc9143d9158dff80620608c34"], 0x24}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mount$overlay(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140), 0x8084, &(0x7f0000000240)={[{@metacopy_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@uuid_on}, {@nfs_export_off}], [{@subj_user={'subj_user', 0x3d, '--*)\'}\xa28{!)+)\\/'}}, {@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@obj_role={'obj_role', 0x3d, 'mountinfo\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@flag='ro'}, {@obj_user={'obj_user', 0x3d, 'mountinfo\x00'}}, {@obj_type={'obj_type', 0x3d, 'mountinfo\x00'}}, {@smackfshat={'smackfshat', 0x3d, '}'}}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000026c0)) (async) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000002700)=0x2, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)=ANY=[@ANYBLOB="240000001800290200000000ffdbdf250200000008000000040000000800088004001000a642f5d228679adeda291e945451f7ae253a05977160f4fa6591f273cd6b3123880ed6000000000000000000a80e08463eaaea411580e0ca7405904718370347ea78c032036a8464b070bec7d0af92547eed1fd3c8a7677924dd9d460aebc9143d9158dff80620608c34"], 0x24}}, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) (async) utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140), 0x8084, &(0x7f0000000240)={[{@metacopy_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@uuid_on}, {@nfs_export_off}], [{@subj_user={'subj_user', 0x3d, '--*)\'}\xa28{!)+)\\/'}}, {@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@obj_role={'obj_role', 0x3d, 'mountinfo\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@flag='ro'}, {@obj_user={'obj_user', 0x3d, 'mountinfo\x00'}}, {@obj_type={'obj_type', 0x3d, 'mountinfo\x00'}}, {@smackfshat={'smackfshat', 0x3d, '}'}}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) (async) 29.537656827s ago: executing program 3 (id=95): openat$random(0xffffffffffffff9c, &(0x7f0000000c80), 0x181, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) open(0x0, 0x1a1342, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x57, 0x8004, 0x0, 0xffffff98) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0xb7}}, 0x400) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x7, 0x0, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 29.509895408s ago: executing program 3 (id=96): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_pidfd_open(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 29.466990149s ago: executing program 32 (id=96): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_pidfd_open(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15.023287989s ago: executing program 0 (id=320): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl(r0, 0x5, &(0x7f0000000000)="453e230722fab42a2d066c6193cd382442687e82b147bc636a0c") (async, rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) (async) sendmsg$sock(r1, &(0x7f0000000700)={&(0x7f0000000080)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@bcast, @null, @null, @null, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)="cf4d22072e40769e82b776c07c1df8ada51567d9569f058b2a3aa14a05c1cdc6e63b2692b447831540d338cd9fe6097814", 0x31}, {&(0x7f0000000140)="1c6f92d6eb1c2209fe68c17d9a9dd26a8bb7ff2820400187020cc6093144b727136733123505cf1d6860c064b1191949e67ae779fe1808dd3d5e56b46167e9a200fbc3fd4bad0c76c503bb7f3adfb3169bdd976e7e782644ad444e58cf1aa0e3f8b54f2d632b3618efcfb7776dcd66482bee9340f14a2e99c37013cb41c41f817983bb3589d653d7d4da6bf9b0149bdf10b9ff521afee275b33803be61aab3", 0x9f}, {&(0x7f0000000200)="8a064fe9f569a32f077eb9aee607c9825b13e5a55335d0dadd7ed08f25e521907346b56eb514086fb925823ec62ea8904fccb87bf2a39d3d9258d5ca1e9491b1fcd50c9b2e84ed5f3317a6f26a7f7c553d973862862dc2f13676c5d05e0612ba5e9cc07579a29f80de6818db60e050c51d75ee2cca66c8b6f8daf5a1502f131fdc8f9c13e80bee124901bb378035feb734f29a00230d12f3a8", 0x99}, {&(0x7f00000002c0)="d33ca098df07cf55ed6296bca610d9f2d18a5a1162d9aaf8267a836ec082e5f83ec6343f82f1d9311315930eeb6610c380aa114ac021966d8f374001e7e119823912037599250ded03cdb88726de24615ffee6e61f6a940a5a1370b14e98d945c4dd7cbacd8b8b6aff91d2dfe0fdcada5ec1737545428dac1621bb03b6f14fe83e410bf758dfbe219d09fd2efad1f73582adff67cf974dd768693e35752686160bff53ebf9cd4e6ac3af070749a5bd007f3a20f00395fca78f7aef4b40c5486cf9553f59d275e8d4b3f2db33ff79c1f459ad22995af85e56", 0xd8}, {&(0x7f00000003c0)="b5a18760ad083607758eaa0c5b8007c47fe7c82817a97e7089bd5e4613d36428e7bfef", 0x23}, {&(0x7f0000000400)="d6d504425e2d3c4b29cfdfba8f5dbf6b", 0x10}, {&(0x7f0000000440)="ae20db07228c499f35bbc41191edf9ece74ef5cc0125e344eb5a20b863c97d3368a331db", 0x24}, {&(0x7f0000000480)="59181daac7ea9311455cf626668bf897006699fa33cb208ceaee973e15cb402c0f", 0x21}, {&(0x7f00000004c0)="0d0460f9aae36b18a08120172b3088778d5c5fba14294b03b2aeadd62037b0186bbe5776c2a2a96ec3c505f1727a24beb631692f9f384a2aedbb607a10fa3c9516b6fb31ba9d", 0x46}, {&(0x7f0000000540)="af3c44aa2f253a22f51bb8533e13cc31df77e70ac6aa50711f9ed3aaf6527ef21133aaf6cafa742e73c2d79a6db81a3c0a83cdb8b2d009e6d97b3d96df0f66136b3335dcda23c527dbb1c756424726ffff1e4456d8bc9347ac3a2f6c5fcafa7498c1c45bff65e181a28c2b129b7ac1b3690e1a05567f60bbc57e41e1c16e9654aac20d27084d9625f1e2b21762d67bc033cadbdb1fe1fc70e776e85ac205b61ae6", 0xa1}], 0xa, &(0x7f00000006c0)=[@txtime={{0x18, 0x1, 0x3d, 0x30}}], 0x18}, 0x8000) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000740), 0x2, 0x4040) read$usbmon(r2, &(0x7f0000000780)=""/142, 0x8e) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000840)=0x5, 0x2) (async) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x6) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1a6a9fee0708514a}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd18}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1b5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000090}, 0x24040850) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004080) (async, rerun: 32) readv(r5, &(0x7f0000003d00)=[{&(0x7f0000000c00)=""/116, 0x74}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/78, 0x4e}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x5) (rerun: 32) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003d80), 0x240180, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000003dc0)={0x7, 'veth0_virt_wifi\x00', {0x6}, 0xf82}) (async) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000003e00)=0x4) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000003e40)=0xb9f3, &(0x7f0000003e80)=0x4) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) close_range(r3, r10, 0x3cc355bdad1bf7e) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000003ec0)=0x3, 0x2) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x12) ioctl$F2FS_IOC_SET_PIN_FILE(r10, 0x4004f50d, &(0x7f0000003f00)) (async, rerun: 64) open(&(0x7f0000003f40)='./file0\x00', 0x101400, 0x110) (rerun: 64) 14.949307721s ago: executing program 0 (id=321): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x8001, 0x1, {{0x2a, 0x4, 0x1, 0x2b, 0xa8, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x23, 0x43, [@loopback, @multicast1, @empty, @local, @remote, @multicast2, @remote, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @noop, @end, @rr={0x7, 0x7, 0xb8, [@multicast2]}, @timestamp={0x44, 0x24, 0x7d, 0x0, 0xf, [0x7, 0x9, 0x8, 0x7bff, 0x8, 0xce, 0x7f, 0x7]}, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0x5, [{@multicast2, 0xf}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x9}]}, @lsrr={0x83, 0xf, 0x8c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @cipso={0x86, 0xa, 0x2, [{0x0, 0x4, "cb11"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'pim6reg1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_blocks=E']) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x100, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) unshare(0x2040400) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r12 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="18d0a63e000da8ff76d94e9e589fc3de2c0b16edee1d86e317a4546caec403c49b1383b52e8fb78195d0d7dc0cd43eb8d33ef1cda05e0dc21c53ed0068a203fd34b18d716bd4e1cd12dc413c52"]) r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r13, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) unshare(0x22020600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(r14, 0x0, 0x0) 14.087372067s ago: executing program 0 (id=333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0xf, &(0x7f0000000080)={0x94, 0xfffffffffffffffa}, &(0x7f0000000100)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) r5 = getuid() mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@smackfsdef={'smackfsdef', 0x3d, '+'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq={'uid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x64, 0x62, 0x64, 0x63, 0x31, 0x38, 0x65], 0x2d, [0xb, 0x61, 0x7, 0x34], 0x2d, [0x37, 0x64, 0x32, 0x36], 0x2d, [0x30, 0x32, 0x30, 0x4], 0x2d, [0x66, 0x61, 0x0, 0x64, 0x35, 0x36, 0x38, 0x35]}}}, {@euid_lt={'euid<', r5}}]}}) sendfile(r2, r0, 0x0, 0x100000000) 14.054603418s ago: executing program 0 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2240000, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r4, 0x0) read$FUSE(r2, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x28, 0xd1a2, 0x0, 0x1, 0x0, 0x4, 0x5, 0x0, 0x0, 0x20, 0x3}}, 0x50) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 13.204824724s ago: executing program 0 (id=349): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x31}, 0x20000041) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@clear_death], 0x0, 0x0, 0x0}) 13.104549046s ago: executing program 0 (id=350): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000600)={@fda={0x66646185, 0x9, 0x1, 0x7}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x25}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x34}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x103002, 0x30ae4148100b1c49) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.078883747s ago: executing program 33 (id=350): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000600)={@fda={0x66646185, 0x9, 0x1, 0x7}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x25}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x34}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x103002, 0x30ae4148100b1c49) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.992648723s ago: executing program 4 (id=456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="1400038004000400040001000800020000000000080005"], 0x3c}}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', r7, 0x20, 0x7, 0xc, 0xe0, {{0x39, 0x4, 0x1, 0x4, 0xe4, 0x68, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@end, @timestamp={0x44, 0x14, 0xde, 0x0, 0x6, [0x4, 0x2, 0x5, 0x80000001]}, @generic={0x83, 0x2}, @lsrr={0x83, 0x23, 0x38, [@broadcast, @remote, @rand_addr=0x64010101, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @broadcast]}, @timestamp_addr={0x44, 0x34, 0xa2, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x8}, {@multicast2}, {@multicast2, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xa}]}, @cipso={0x86, 0x42, 0x3, [{0x1, 0xf, "a68f077fd1b58e50d3a8732431"}, {0x5, 0x10, "739dfa8b3cdf39fdd78cc5098d32"}, {0x0, 0x8, "5012b5271b8a"}, {0x2, 0x3, 'D'}, {0x2, 0xa, "25bda825ee6a076c"}, {0x1, 0x8, "78cef8decfe8"}]}, @timestamp_prespec={0x44, 0x4, 0x3d, 0x3, 0x3}, @ssrr={0x89, 0x1b, 0x77, [@rand_addr=0x64010102, @private=0xa010101, @loopback, @multicast2, @loopback, @multicast1]}]}}}}}) listen(r2, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r8, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(r10, &(0x7f0000000000)='map_files\x00') fchdir(r11) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000100)="568d5563fc2185d840c7b72d264499f0c56dedade5457bd6ef575e04d520150940b50660cf0c4a42c2ae6bf1af94ba871e40b40477575993eac1ce932ede6a9e2582cbf288131a9e87649383bdaf0cb6d9e6bb8ce29dbdbcd32d7baa", 0x5c) 3.797721636s ago: executing program 4 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="f2dbcf0f20d86635080000000f22d80f20e06635000010000f22e00f01c3f3afbaf80c66b8b4fa778666efbafc0ced0f01df9a02005500ba4000ec66b8010000000f01d9", 0x31}], 0x1, 0x0, 0x0, 0x19) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0xa, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x7, 0x32a, 0x1, 0xfffffffffffffffd, 0x1, 0x40000000009, 0x8000000004005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r5, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x18080, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x3) listen(r0, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x3) setuid(0xee01) execveat(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400) 2.180161118s ago: executing program 5 (id=492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0xfffffffffffffff5}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00000000000000415ec5590823657127f6cb8969d8734b826e059edc7df2ddb166c556b35cabd7b81acd6066e1f5f1235d22f05c5f3db64ee7be4a37334b5139866bec164a8edd85f1936d1a167953de50877114357f5543056733e2962bc52c940bb352e6c6442cafc6dc4de5e534d8d7da6a5fbea5f6165f721fb2ba319c6b35c8d6c4b49d25a69febbb8917e68c02796baadb78b43b1f9e52f7f6760d9952de46343d2c8bc71979a032fe7b5c14f08aa70fcab6e9ba8718e486f7b9360cc767ce1f6940cec8473dd6b88ebfe7f7476889", @ANYRESHEX=r3, @ANYBLOB=',noxattr,\x00']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x206e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000004c0)={@mcast1, 0x9, 0x2, 0xff, 0x4, 0x4, 0xe}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x48, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8400, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x2, 0x28}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x54, 0x0, &(0x7f0000000580)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5"}) 1.225993187s ago: executing program 5 (id=502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 929.202372ms ago: executing program 1 (id=508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x800c1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r4, 0x0, 0x0) (async) fsmount(r4, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r5, 0x1, 0x1) (async) lseek(r5, 0x1, 0x1) getdents(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 910.173762ms ago: executing program 1 (id=509): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000340)="7800000018001f07b9409b0dffff000d0216be0400030605060140034300080012000000bf46d32345652b000000caaf6c26c291a34549935ade4a460c89b6ec0cff3943a59b3cb50b0ae854be4dc0c63359547f5090583a86c902000000004a3200637939cc1cd10400160012000a00800000000000000000", 0x79, 0x20004000, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="c4c1705e1366baf80cb8c4f33480ef66bafc0c66b8000066ef3667dd0b640f01d1debd0a0000003e828a8000c0fe00c4c1d17cdf360f320fc79a2b000000c4c2fd31d5", 0x43}], 0x1, 0x48, &(0x7f0000000200), 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="c4c1705e1366baf80cb8c4f33480ef66bafc0c66b8000066ef3667dd0b640f01d1debd0a0000003e828a8000c0fe00c4c1d17cdf360f320fc79a2b000000c4c2fd31d5", 0x43}], 0x1, 0x48, &(0x7f0000000200), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x42040) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x42040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xce, 0x0, 0xffffffffffffffff}]}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x2, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x5f4}}) sendfile(r5, r5, 0x0, 0x8000) 838.081564ms ago: executing program 1 (id=510): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='decodes me'], 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x4, 0x71, {0x71, 0x11, "70ec87d4a7c27faa9b772a49b1eb1ef4e02c4c88f1e0d780c5a8ff271c16f24bb9ff357b28b17e64951f37a36eaf1456ff8c437272db28e61bbbfa49a756eaa5a2b40c4671301b1aa36cf29407ddd9e342dcda967f53273401287dc02080b2a6ea83836955879b3ac03d5942731bee"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x20, 0x1d, 0x86, "30131fe9132ad620f6d297fe7d339193d5098f2f25764e0839b9cbf42c2734cba5eac4f825e823bec861e4fbe8e27797b635fa9924337d3781ec7e163ee317a50b417a004036e3804f8de394ff30d62fd6d6d42664cc7d42f6c4f37b68e7e97cbc0180fdb66d6bef9157f6b79dbfe6da65dfa5d1d0825ecc4e460cec30992a8fe5207db3961d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 620.287948ms ago: executing program 2 (id=515): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8100) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x0) (async) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) fgetxattr(r5, &(0x7f0000000180)=@known='security.selinux\x00', 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, 0x0, &(0x7f0000001ac0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 614.946218ms ago: executing program 2 (id=516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f00000012c0)=0xe) accept4(r3, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x4080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 575.647379ms ago: executing program 4 (id=517): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002740)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="f4416eb4e8d263afa99fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x104, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x5}, {0x1a7761c0, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x24}}]}, 0x104}}, 0x4000040) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x2000, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002740)={'vlan0\x00'}) (async) sendto$packet(r0, &(0x7f0000000280)="f4416eb4e8d263afa99fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x104, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x5}, {0x1a7761c0, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x24}}]}, 0x104}}, 0x4000040) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x2000, 0x0) (async) 518.03839ms ago: executing program 4 (id=518): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/'], 0x31) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x3) dup3(r3, r2, 0x0) (async) r4 = dup3(r3, r2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs_done={0x40106308, 0x2}], 0x14d, 0x0, &(0x7f0000000480)="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"}) 517.66503ms ago: executing program 4 (id=519): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x9}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x3) (async) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x282}]}) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 507.44827ms ago: executing program 2 (id=520): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x8, &(0x7f0000000040)={0x0, 0x0, 0xc00000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)="5fdb", 0x2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b3c5b29c22970bc858d857d0c3972d", "e9be1eae", "41ba000000000001"}, 0x28) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000480)=""/132}, {&(0x7f0000001a00)=""/156}, {&(0x7f0000000a00)=""/4096}, {&(0x7f00000006c0)=""/180}, {&(0x7f0000000780)=""/144}, {&(0x7f0000000840)=""/228}], 0x1) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 491.95823ms ago: executing program 5 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8001, @none}, 0xe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, 0x0, 0x0) dup2(r7, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x0) 301.972894ms ago: executing program 1 (id=522): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async) r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) ioctl$KVM_RUN(r1, 0xae80, 0x0) 300.934654ms ago: executing program 1 (id=523): prctl$PR_SET_VMA(0x48, 0x0, &(0x7f0000332000/0x4000)=nil, 0x4000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x88, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000640)}) 297.155124ms ago: executing program 5 (id=524): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x7) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x19, &(0x7f0000000c00)=""/217, &(0x7f0000003080)=0xd9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) 276.811725ms ago: executing program 1 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902920003014f00800904000000010100000a24010600090201020b24050507ed614ec47bc7090401000001020000090401010101020000072401050803000c2402010603fc4009dce3200c05010900020808020725010006e6080904020000010200000904020101010200000c2402020dce0200098f0467092402027f0008002a09058209080003014007250101ff060057737c6ac5de"], &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x8, 0x1, 0xa, 0x20, 0xf2}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x1, [{0x46, &(0x7f0000000380)=@string={0x46, 0x3, "bc2dd8bfd0e98929d725de988d7107880976e43e7fa45aa8fbcd53801982da359216472fea6b84c0339d14cd777053d19ecee6094cf9e7f3286a842bc0bc68639961591f"}}]}) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x316, 0x40000001, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x1a1081, 0x18) write$khugepaged_scan(r4, &(0x7f0000000000), 0x8) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) socket(0x10, 0x80000, 0x2) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=ANY=[], 0xd0060) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000007fd) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 193.850946ms ago: executing program 4 (id=526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}], 0xee, 0x0, &(0x7f0000000640)="103d79225168f2b7ce3451df12f7df20d67e4c509c0e5179598d0a7f3547e726f29a83ee492976d1961d45868217501fa3ab6c5c8177c994c3b439201d84d94289f7c5872b9e3c5d0387efaf9a3da4d2d29c798f089d620a967e8a88e9bd799e843384981b65d0c68f951f7bc6b09cb17085e37c06a92a56d76ed9efd48519a01113ad58b3734d152652a2159507d03c0e22d282b12f9094d127865807f376b8eb02db003f132ae9f962b27039b2af6abcd8fa29afe959396e4651faa1721671cb13836f7c4db70d1062619c4b95406bca871bcd5ef4c6de92ba3bbd1be7e0ca554ebb9f06116387ab429a32c4a8"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 143.615907ms ago: executing program 5 (id=527): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'vxcan1\x00'}) (async) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111) (async, rerun: 64) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x28, 0x0, &(0x7f00000001c0)) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r6 = memfd_secret(0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001d80)) r7 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) (async) sendmmsg$inet6(r7, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x1, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3e) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) recvmmsg(r2, &(0x7f0000001c00)=[{{&(0x7f0000000a80)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/55, 0x37}, {&(0x7f0000000bc0)=""/239, 0xef}], 0x3, &(0x7f0000000d00)=""/10, 0xa}, 0x2}, {{&(0x7f0000000d40)=@caif=@dgm, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000dc0)=""/97, 0x61}, {&(0x7f0000000e40)=""/122, 0x7a}, {&(0x7f0000000ec0)=""/19, 0x13}, {&(0x7f0000000f00)=""/65, 0x41}, {&(0x7f0000000f80)=""/147, 0x93}, {&(0x7f0000001040)=""/162, 0xa2}, {&(0x7f0000001a40)=""/140, 0x8c}], 0x7}, 0x3}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/50, 0x32}, {&(0x7f0000001300)=""/114, 0x72}, {&(0x7f0000001380)=""/106, 0x6a}], 0x3}, 0x40}, {{&(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000014c0)=""/68, 0x44}, {&(0x7f0000001540)}, {&(0x7f0000001100)=""/149, 0x95}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/158, 0x9e}], 0x5, &(0x7f0000001840)=""/255, 0xff}, 0x1}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/151, 0x97}, {&(0x7f0000001f40)=""/219, 0xdb}, {&(0x7f0000001540)=""/22, 0xffffffffffffff55}], 0x5, &(0x7f0000001b80)=""/88, 0x58}, 0xaf}], 0x5, 0x12121, &(0x7f0000001d40)) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) (async, rerun: 64) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) r8 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x20, 0xe4, 0xed, 0xf2}, {0x9, 0x5, 0x5, 0x2, 0x400, 0x9, 0x8, 0xc}, {0x9, 0x5, 0xe, 0x3, 0x8, 0xd, 0xaa, 0x80}}}}}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0xd547980fa98275f8, 0x31, 0xf4, {0xf4, 0x9, "f63352836efe065d203d0565ddbd2e117b269d20d0564c4f54a27ca51446ecf618b4e4581b5e2f1c7f76dcc4441db16c28a3f82ca3c45750a7ff72ab6ee94cfae45a37d6dcc108e0a32e8ae9d6feef7de85be4c041491c310e617096aa950e428f551d8c9de17a92a6597a6f0bd2ec0107bf675cc23de2ece544207f063a14e9c04637220b9e08654827c4c972652ad73e0fac9fd2f48bd370d2af3177d9af3ad31aa106dabb6ff77ffe4d0355d624575d846420f186c2f9ad469dd73a219caf0ff891155a2438c9ff4eb3228e8f2398f0208767ca876cbf5ec10d2c0a38f282fbb9c7fafb3fa92b8aa0c9cb6edea35586a6"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000280)={0x0, 0xf, 0xa4, {0x5, 0xf, 0xa4, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "a4376d40a1a32d3c5b69eea005ccf694"}, @generic={0x8b, 0x10, 0xa, "ddfd130a70de9a7e1cb3aaef7e63ad0fd281bf613fa7140e8dccda606fcb79351cf086381fcf7727729f6fec33046f66568eac90e34bbe4b80b112c47f9946774f93911fcaf179c27a2915d205a345ce68df76ac06b63f43fe5849558de476fb210328eba7f2f714207466669b112a8f5363f871922637e41818f7ac03df7a10260148db8b5d5beb"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x2, 0x3, "70e2d210", "9a60478f"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x1, 0x0, 0xe1, 0x2, 0x5}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x10, 0x28, "541d9794772deed219c98976f00a77b534c87b602b6d8d5af53deb8ac0c9312a51aac9c4462ce393"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x80, 0x20, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x1c47}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0xb, 0x2, ',I'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "1455"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x10}}) 116.826458ms ago: executing program 2 (id=528): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x2000, 0x109000, 0x1}) 58.098879ms ago: executing program 2 (id=529): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$tun(r4, &(0x7f0000000280)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "0e3715", 0x157, 0x3a, 0x1, @empty, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x2, '\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, [{0x2, 0x15, "89b48d181d5a2ec18e9ec0182eadfd8622efb3fe3b42600821a5b13e3521287f792ae45421a89f181aa309784ca100c9f28e8d57daf2491190d167626e95d65cf54d85330319531c3a8a597ae5b29b7c3c7fe73121e04fb37c0de3093cc8d6135029319bd79d469095c76ffbf9ee9e092f613a5bc3f8db0bc3a996607ae2e97633a7479ab60ef218a88fb9fcef55b7aabdd7006ac701e2d552bbc04a6c46519e26b884eb576e7653b5"}, {0x22, 0x10, "cab0d7430a07a8f88502e1cca94a86acb0d57701acc79fa611c0207616f21e2841044b8b94d8d8b1678a1aa3f76677e6b6c9632f60750c249a522320ce33381b3705c7d622ae1c99c3189df4c8b1e122e33f59de551203423d6d9eab2c5f6249c39f0dc30a4b78a508540008eea6875fdb88953b3f475a3f2e389301e4dbebbe69186166"}, {0x1, 0x1, "51e4c958da45ceeb9c5906fd"}]}}}}}}}, 0x191) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 56.268389ms ago: executing program 5 (id=530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff0b050c0220000606030905071000020104070824", @ANYRES8=r5], 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000117000/0x4000)=nil, 0x4000}, 0x4}) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r6) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001280), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x4, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xff}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x4, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xff}) open$dir(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x200, 0xd1) (async) r5 = open$dir(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x200, 0xd1) move_mount(r5, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/../file0/file0\x00', 0x12) rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') sendto(r1, &(0x7f0000000400)='P', 0x1, 0x4008044, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 21.992868][ T36] audit: type=1400 audit(1758425442.640:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.994111][ T282] cgroup: Unknown subsys name 'net' [ 22.015499][ T36] audit: type=1400 audit(1758425442.640:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.042788][ T36] audit: type=1400 audit(1758425442.670:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.042963][ T282] cgroup: Unknown subsys name 'devices' [ 22.223278][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.228902][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.383134][ T36] audit: type=1400 audit(1758425443.030:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.406310][ T36] audit: type=1400 audit(1758425443.030:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.431048][ T36] audit: type=1400 audit(1758425443.030:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.441450][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.463074][ T36] audit: type=1400 audit(1758425443.110:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.488459][ T36] audit: type=1400 audit(1758425443.110:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.531785][ T36] audit: type=1400 audit(1758425443.180:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.557465][ T36] audit: type=1400 audit(1758425443.180:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.557549][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.357365][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.364452][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.371555][ T292] bridge_slave_0: entered allmulticast mode [ 23.377727][ T292] bridge_slave_0: entered promiscuous mode [ 23.390674][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.397729][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.404902][ T292] bridge_slave_1: entered allmulticast mode [ 23.411114][ T292] bridge_slave_1: entered promiscuous mode [ 23.444417][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.451469][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.458504][ T290] bridge_slave_0: entered allmulticast mode [ 23.464829][ T290] bridge_slave_0: entered promiscuous mode [ 23.470915][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.477980][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.485062][ T291] bridge_slave_0: entered allmulticast mode [ 23.491265][ T291] bridge_slave_0: entered promiscuous mode [ 23.503189][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.510246][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.517305][ T290] bridge_slave_1: entered allmulticast mode [ 23.523506][ T290] bridge_slave_1: entered promiscuous mode [ 23.529494][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.536643][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.543717][ T291] bridge_slave_1: entered allmulticast mode [ 23.549879][ T291] bridge_slave_1: entered promiscuous mode [ 23.592949][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.599978][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.607084][ T289] bridge_slave_0: entered allmulticast mode [ 23.613346][ T289] bridge_slave_0: entered promiscuous mode [ 23.629368][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.636470][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.643580][ T289] bridge_slave_1: entered allmulticast mode [ 23.649751][ T289] bridge_slave_1: entered promiscuous mode [ 23.770081][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.777141][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.784463][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.791505][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.807462][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.814513][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.821811][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.828840][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.837644][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.844712][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.852010][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.859027][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.880073][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.887372][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.894973][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.902205][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.909344][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.916648][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.937618][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.944684][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.954098][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.961136][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.011685][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.018710][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.026965][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.034034][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.041650][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.048689][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.057895][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.064948][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.076517][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.083564][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.091469][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.098502][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.150720][ T291] veth0_vlan: entered promiscuous mode [ 24.158528][ T292] veth0_vlan: entered promiscuous mode [ 24.169213][ T290] veth0_vlan: entered promiscuous mode [ 24.180672][ T289] veth0_vlan: entered promiscuous mode [ 24.195530][ T291] veth1_macvtap: entered promiscuous mode [ 24.202127][ T292] veth1_macvtap: entered promiscuous mode [ 24.219164][ T289] veth1_macvtap: entered promiscuous mode [ 24.236511][ T290] veth1_macvtap: entered promiscuous mode [ 24.260290][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.341032][ T343] rust_binder: 2: no such ref 3 [ 24.347129][ T342] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 24.357112][ T342] rust_binder: Write failure EINVAL in pid:2 [ 24.383601][ T351] rust_binder: 339 RLIMIT_NICE not set [ 24.390464][ T339] rust_binder: Error while translating object. [ 24.396022][ T339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.402630][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 24.417049][ T66] rust_binder: 337: removing orphan mapping 0:4224 [ 24.432090][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.488405][ T360] process 'syz.0.8' launched '~R' with NULL argv: empty string added [ 24.497154][ T360] rust_binder: Write failure EINVAL in pid:10 [ 24.585067][ T364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.591325][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.628112][ T368] rust_binder: Write failure EFAULT in pid:16 [ 24.744776][ T374] netlink: 'syz.2.13': attribute type 16 has an invalid length. [ 24.759992][ T374] binder: Bad value for 'stats' [ 24.765065][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 24.771638][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.785120][ T31] usb 4-1: config 6 has an invalid interface number: 248 but max is 0 [ 24.795378][ T31] usb 4-1: config 6 has no interface number 0 [ 24.801688][ T31] usb 4-1: config 6 interface 248 has no altsetting 0 [ 24.810002][ T31] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 24.819215][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.827327][ T31] usb 4-1: Product: syz [ 24.831662][ T31] usb 4-1: Manufacturer: syz [ 24.836274][ T31] usb 4-1: SerialNumber: syz [ 25.054299][ T31] ums-karma 4-1:6.248: USB Mass Storage device detected [ 25.123112][ T31] usb 4-1: USB disconnect, device number 2 [ 25.157073][ T392] netlink: 220 bytes leftover after parsing attributes in process `syz.1.18'. [ 25.166446][ T392] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 25.191225][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.342524][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 35, changing to 9 [ 25.353560][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8881, setting to 1024 [ 25.364822][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 25.373933][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.382635][ T45] usb 3-1: config 0 descriptor?? [ 25.451238][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.601238][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 25.607752][ T66] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 25.618618][ T66] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 25.631858][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.640907][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.649147][ T66] usb 2-1: Product: syz [ 25.653687][ T66] usb 2-1: Manufacturer: syz [ 25.658283][ T66] usb 2-1: SerialNumber: syz [ 25.789206][ T409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.789320][ T408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 25.993931][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 26.009372][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 26.020020][ T45] usb 3-1: USB disconnect, device number 2 [ 26.097013][ T422] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 26.118953][ T424] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true [ 26.136612][ T401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.153069][ T401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.162249][ T401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 26.163632][ T66] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 26.181116][ T66] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 26.191096][ T66] usb 2-1: USB disconnect, device number 2 [ 26.200880][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.221764][ T431] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 26.230345][ T431] SELinux: failed to load policy [ 26.471354][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.511261][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.621365][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 26.627458][ T45] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 26.636287][ T45] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 26.646256][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.656396][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 26.666870][ T45] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=13.da [ 26.675989][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.684038][ T45] usb 4-1: Product: syz [ 26.688236][ T45] usb 4-1: Manufacturer: syz [ 26.692898][ T45] usb 4-1: SerialNumber: syz [ 26.698618][ T45] usb 4-1: config 0 descriptor?? [ 26.704611][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 26.714220][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.722353][ T31] usb 1-1: Product: syz [ 26.731220][ T31] usb 1-1: Manufacturer: syz [ 26.736009][ T31] usb 1-1: SerialNumber: syz [ 26.849573][ T445] loop5: detected capacity change from 0 to 16384 [ 26.911133][ T431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.919647][ T431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.941610][ T446] loop5: detected capacity change from 16384 to 0 [ 26.948350][ C0] I/O error, dev loop5, sector 2264 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 27.021751][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 27.021779][ T36] audit: type=1400 audit(1758425447.670:162): avc: denied { create } for pid=448 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.048009][ T454] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 27.070744][ T10] usb 4-1: USB disconnect, device number 3 [ 27.212651][ T460] cgroup: Name too long [ 27.217095][ T460] ./file0: Can't lookup blockdev [ 27.351910][ T36] audit: type=1400 audit(1758425448.000:163): avc: denied { create } for pid=417 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.371729][ T418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.380316][ T418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.389061][ T36] audit: type=1400 audit(1758425448.030:164): avc: denied { create } for pid=417 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.408284][ T36] audit: type=1400 audit(1758425448.030:165): avc: denied { connect } for pid=417 comm="syz.0.24" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.408313][ T31] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5e:bb:97:97:77:13 [ 27.438103][ T36] audit: type=1400 audit(1758425448.030:166): avc: denied { bind } for pid=417 comm="syz.0.24" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.438132][ T36] audit: type=1400 audit(1758425448.030:167): avc: denied { name_bind } for pid=417 comm="syz.0.24" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 27.438157][ T36] audit: type=1400 audit(1758425448.030:168): avc: denied { node_bind } for pid=417 comm="syz.0.24" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 27.472461][ T31] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 27.486795][ T36] audit: type=1400 audit(1758425448.030:169): avc: denied { setopt } for pid=417 comm="syz.0.24" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.509363][ T31] usb 1-1: USB disconnect, device number 2 [ 27.548181][ T36] audit: type=1400 audit(1758425448.030:170): avc: denied { ioctl } for pid=417 comm="syz.0.24" path="socket:[3862]" dev="sockfs" ino=3862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.577315][ T36] audit: type=1400 audit(1758425448.190:171): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.717774][ T471] rust_binder: 31: no such ref 0 [ 27.722805][ T471] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 27.722834][ T471] rust_binder: Read failure Err(EFAULT) in pid:31 [ 28.151762][ T481] Zero length message leads to an empty skb [ 28.312964][ T495] loop4: detected capacity change from 0 to 8388608 [ 28.481250][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.517139][ T511] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 28.526327][ T511] rust_binder: Write failure EINVAL in pid:33 [ 28.642409][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 28.657571][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.666605][ T10] usb 2-1: config 0 descriptor?? [ 28.681231][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.821253][ T31] usb 3-1: device descriptor read/64, error -71 [ 28.925723][ T521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.966943][ T525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 29.039666][ T529] binder: Bad value for 'max' [ 29.071284][ T31] usb 3-1: device descriptor read/64, error -71 [ 29.096718][ T531] rust_binder: Failed copying into alloc: EFAULT [ 29.096733][ T531] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 29.103454][ T531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.111730][ T531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:38 [ 29.200758][ T538] raw_sendmsg: syz.0.66 forgot to set AF_INET. Fix it! [ 29.279851][ T10] usb 2-1: Cannot set autoneg [ 29.284651][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 29.296974][ T10] usb 2-1: USB disconnect, device number 3 [ 29.311259][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.441244][ T31] usb 3-1: device descriptor read/64, error -71 [ 29.681258][ T31] usb 3-1: device descriptor read/64, error -71 [ 29.791412][ T31] usb usb3-port1: attempt power cycle [ 29.792153][ T541] overlayfs: failed to resolve 'redirect_dir=on': -2 [ 30.067220][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 30.076227][ T551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 30.085913][ T549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 30.085949][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:43 [ 30.131251][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.162334][ T31] usb 3-1: device descriptor read/8, error -71 [ 30.231230][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.292297][ T31] usb 3-1: device descriptor read/8, error -71 [ 30.391369][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 30.397610][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.407760][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.418554][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.427625][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.435720][ T10] usb 1-1: Product: syz [ 30.439900][ T10] usb 1-1: Manufacturer: syz [ 30.444528][ T10] usb 1-1: SerialNumber: syz [ 30.531234][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.552270][ T31] usb 3-1: device descriptor read/8, error -71 [ 30.654071][ T10] usb 1-1: 0:2 : does not exist [ 30.662193][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 30.674624][ T10] usb 1-1: USB disconnect, device number 3 [ 30.687508][ T557] rust_binder: Write failure EFAULT in pid:43 [ 30.689824][ T31] usb 3-1: device descriptor read/8, error -71 [ 30.695675][ T419] udevd[419]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.801338][ T31] usb usb3-port1: unable to enumerate USB device [ 30.994364][ T579] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 31.062599][ T582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 31.063684][ T583] syz.3.80 (583): attempted to duplicate a private mapping with mremap. This is not supported. [ 31.179268][ T586] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 31.186836][ T586] rust_binder: Write failure EINVAL in pid:50 [ 31.214666][ T588] rust_binder: Failed copying remainder into alloc: EFAULT [ 31.220787][ T588] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 31.230530][ T588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.238945][ T588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:52 [ 31.261998][ T590] ======================================================= [ 31.261998][ T590] WARNING: The mand mount option has been deprecated and [ 31.261998][ T590] and is ignored by this kernel. Remove the mand [ 31.261998][ T590] option from the mount to silence this warning. [ 31.261998][ T590] ======================================================= [ 31.307485][ T590] netlink: 'syz.3.83': attribute type 3 has an invalid length. [ 31.321414][ T595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.321440][ T595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:67 [ 31.364231][ T603] fuse: Unknown parameter 'g+\ҌW5C' [ 31.502331][ T614] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.503224][ T614] netlink: 316 bytes leftover after parsing attributes in process `syz.2.93'. [ 31.518786][ T614] netlink: 316 bytes leftover after parsing attributes in process `syz.2.93'. [ 31.576489][ T617] overlayfs: failed to resolve './file1': -2 [ 31.633421][ T13] bridge_slave_1: left allmulticast mode [ 31.639129][ T13] bridge_slave_1: left promiscuous mode [ 31.644870][ T615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 31.645241][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.662673][ T13] bridge_slave_0: left allmulticast mode [ 31.668375][ T13] bridge_slave_0: left promiscuous mode [ 31.674300][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.842461][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.849522][ T622] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.856774][ T622] bridge_slave_0: entered allmulticast mode [ 31.863140][ T622] bridge_slave_0: entered promiscuous mode [ 31.869572][ T622] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.876924][ T622] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.884007][ T622] bridge_slave_1: entered allmulticast mode [ 31.890238][ T622] bridge_slave_1: entered promiscuous mode [ 31.896883][ T13] veth1_macvtap: left promiscuous mode [ 31.902418][ T13] veth0_vlan: left promiscuous mode [ 31.986500][ T622] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.993556][ T622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.000895][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.008012][ T622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.030881][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.038135][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.047346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.054423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.063228][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.070272][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.095820][ T622] veth0_vlan: entered promiscuous mode [ 32.106871][ T622] veth1_macvtap: entered promiscuous mode [ 32.298542][ T643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=643 comm=syz.0.100 [ 32.311149][ T643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=643 comm=syz.0.100 [ 32.331012][ T643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=643 comm=syz.0.100 [ 32.348342][ T643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=643 comm=syz.0.100 [ 32.372686][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 32.372701][ T36] audit: type=1400 audit(1758425453.010:215): avc: denied { mounton } for pid=650 comm="syz.1.102" path="/proc/80/ns/cgroup" dev="proc" ino=5612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 32.413841][ T36] audit: type=1400 audit(1758425453.010:216): avc: denied { append } for pid=650 comm="syz.1.102" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.440779][ T643] netlink: 10204 bytes leftover after parsing attributes in process `syz.0.100'. [ 32.589941][ T36] audit: type=1400 audit(1758425453.230:217): avc: denied { getopt } for pid=673 comm="syz.1.109" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.629119][ T680] netlink: 'syz.1.111': attribute type 29 has an invalid length. [ 32.639839][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 32.649501][ T36] audit: type=1400 audit(1758425453.290:218): avc: denied { write } for pid=678 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 32.672419][ T36] audit: type=1400 audit(1758425453.320:219): avc: denied { accept } for pid=678 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.679262][ T680] mmap: syz.1.111 (680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.706038][ T684] rust_binder: 85: no such ref 3 [ 32.711010][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 32.715935][ T684] rust_binder: Write failure EINVAL in pid:85 [ 32.826938][ T691] pim6reg1: entered promiscuous mode [ 32.838476][ T691] pim6reg1: entered allmulticast mode [ 32.885604][ T693] syzkaller0: entered promiscuous mode [ 32.891117][ T693] syzkaller0: entered allmulticast mode [ 32.899209][ T693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 32.957167][ T36] audit: type=1400 audit(1758425453.600:220): avc: denied { getattr } for pid=696 comm="syz.1.117" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.989551][ T697] overlayfs: statfs failed on './file0' [ 33.036663][ T36] audit: type=1400 audit(1758425453.680:221): avc: denied { relabelfrom } for pid=709 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.060900][ T36] audit: type=1400 audit(1758425453.700:222): avc: denied { relabelto } for pid=709 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.165511][ T36] audit: type=1400 audit(1758425453.810:223): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.193525][ T715] tipc: Started in network mode [ 33.198517][ T715] tipc: Node identity f6b0916fbe5a, cluster identity 4711 [ 33.216510][ T715] tipc: Enabled bearer , priority 0 [ 33.236704][ T721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.255675][ T721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.289768][ T716] syzkaller0: entered promiscuous mode [ 33.311476][ T716] syzkaller0: entered allmulticast mode [ 33.317362][ T716] tipc: Resetting bearer [ 33.329125][ T726] overlayfs: failed to clone upperpath [ 33.334795][ T717] tipc: Resetting bearer [ 33.355243][ T717] tipc: Disabling bearer [ 33.471227][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.512415][ T36] audit: type=1400 audit(1758425454.160:224): avc: denied { mount } for pid=739 comm="syz.1.126" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 33.660416][ T751] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.662064][ T9] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 88, changing to 10 [ 33.684380][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 33.689551][ T756] fuse: Bad value for 'fd' [ 33.706180][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.40 [ 33.715352][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.725597][ T9] usb 3-1: Product: syz [ 33.732117][ T9] usb 3-1: Manufacturer: 餘﬎䙈꨿試ѭ墭਍に㘮᳼籖硿蜓信⠰衼༪崸ﳺ돔ꈱ嗀ࡑ嬼賍ⶪ埫ꑜ㩅赫ᕗ퍖技뻞岽꿐Ȍ큀뫓䗇貂摺㯶鮲쾬Ⱚ閶텶ય౧咪ェ [ 33.756908][ T9] usb 3-1: SerialNumber: syz [ 33.801474][ T763] capability: warning: `syz.1.132' uses deprecated v2 capabilities in a way that may be insecure [ 33.814622][ T763] incfs_lookup_dentry err:-13 [ 33.819960][ T763] incfs: Can't find or create .index dir in ./bus [ 33.826667][ T763] incfs: mount failed -13 [ 33.986187][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 33.996130][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 34.017370][ T790] rust_binder: Write failure EINVAL in pid:30 [ 34.017417][ T788] rust_binder: Write failure EINVAL in pid:30 [ 34.017579][ T9] usb 3-1: USB disconnect, device number 7 [ 34.031777][ T792] fuse: Bad value for 'fd' [ 34.234161][ T823] rust_binder: Error while translating object. [ 34.234201][ T823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.240560][ T823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 34.615898][ T834] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 34.700273][ T836] binder: Bad value for 'stats' [ 34.789631][ T841] netlink: 'syz.2.162': attribute type 4 has an invalid length. [ 34.808554][ T841] netlink: 'syz.2.162': attribute type 21 has an invalid length. [ 34.826344][ T841] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.162'. [ 34.951231][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.111223][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 35.117529][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 35.125855][ T10] usb 5-1: config 0 has no interface number 0 [ 35.132039][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 35.140463][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.149692][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.157762][ T10] usb 5-1: Product: syz [ 35.162077][ T10] usb 5-1: Manufacturer: syz [ 35.170582][ T10] usb 5-1: SerialNumber: syz [ 35.178676][ T10] usb 5-1: config 0 descriptor?? [ 35.184945][ T10] smsc75xx v1.0.0 [ 35.191271][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 35.203190][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 35.239015][ T854] tipc: Trying to set illegal importance in message [ 35.252220][ T854] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 35.608945][ T862] netlink: 9 bytes leftover after parsing attributes in process `syz.1.169'. [ 35.626602][ T862] gretap0: entered promiscuous mode [ 35.632319][ T862] netlink: 5 bytes leftover after parsing attributes in process `syz.1.169'. [ 35.646274][ T862] 0{X: renamed from gretap0 [ 35.656882][ T862] 0{X: left promiscuous mode [ 35.662015][ T862] 0{X: entered allmulticast mode [ 35.667714][ T862] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 35.707232][ T873] tipc: Started in network mode [ 35.712163][ T873] tipc: Node identity ac14140f, cluster identity 4711 [ 35.719033][ T873] tipc: New replicast peer: 255.255.255.255 [ 35.725173][ T873] tipc: Enabled bearer , priority 10 [ 35.731788][ T873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 35.740667][ T873] tipc: Disabling bearer [ 35.841584][ T885] rust_binder: Got transaction with invalid offset. [ 35.841613][ T885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.848263][ T885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 35.952136][ T887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.961429][ T887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 35.982969][ T889] rust_binder: Write failure EFAULT in pid:112 [ 36.004975][ T891] rust_binder: inc_ref_done called when no active inc_refs [ 36.096697][ T897] rust_binder: 46: no such ref 3 [ 36.108884][ T897] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 36.115946][ T897] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 36.122988][ T897] rust_binder: Write failure EFAULT in pid:46 [ 36.445375][ T905] 9pnet_fd: Insufficient options for proto=fd [ 37.203090][ T938] syz.1.196 uses obsolete (PF_INET,SOCK_PACKET) [ 37.210184][ T938] netlink: 'syz.1.196': attribute type 4 has an invalid length. [ 37.217974][ T938] netlink: 17 bytes leftover after parsing attributes in process `syz.1.196'. [ 37.303612][ T10] usb 5-1: USB disconnect, device number 2 [ 37.472658][ T950] rust_binder: Write failure EFAULT in pid:56 [ 37.650210][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 37.650228][ T36] audit: type=1400 audit(1758425458.290:265): avc: denied { wake_alarm } for pid=954 comm="syz.4.201" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.708269][ T36] audit: type=1400 audit(1758425458.350:266): avc: denied { ioctl } for pid=960 comm="syz.2.202" path="socket:[7904]" dev="sockfs" ino=7904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.832488][ T36] audit: type=1326 audit(1758425458.480:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=968 comm="syz.2.205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9fdd8ec29 code=0x80000000 [ 38.041230][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.171229][ T31] usb 5-1: device descriptor read/64, error -71 [ 38.250178][ T975] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 38.261858][ T980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.281590][ T984] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 38.307221][ T986] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.358595][ T987] rust_binder: Error in use_page_slow: ESRCH [ 38.365098][ T987] rust_binder: use_range failure ESRCH [ 38.371155][ T987] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 38.376688][ T987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.384703][ T987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153 [ 38.411224][ T31] usb 5-1: device descriptor read/64, error -71 [ 38.661246][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.828828][ T36] audit: type=1400 audit(1758425459.470:268): avc: denied { execute_no_trans } for pid=988 comm="syz.1.211" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.871567][ T31] usb 5-1: device descriptor read/64, error -71 [ 39.111221][ T31] usb 5-1: device descriptor read/64, error -71 [ 39.157198][ T36] audit: type=1400 audit(1758425459.800:269): avc: denied { create } for pid=994 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 39.221406][ T31] usb usb5-port1: attempt power cycle [ 39.311222][ T474] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.388717][ T1008] netlink: 240 bytes leftover after parsing attributes in process `syz.2.217'. [ 39.388717][ T36] audit: type=1400 audit(1758425460.030:270): avc: denied { nlmsg_read } for pid=1007 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.462182][ T474] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.470889][ T474] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.487514][ T474] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.496729][ T474] usb 1-1: config 1 has no interface number 0 [ 39.502850][ T474] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 39.513562][ T474] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 39.527869][ T474] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.537029][ T474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.545038][ T474] usb 1-1: Product: syz [ 39.549207][ T474] usb 1-1: Manufacturer: syz [ 39.553819][ T474] usb 1-1: SerialNumber: syz [ 39.571247][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 39.592220][ T31] usb 5-1: device descriptor read/8, error -71 [ 39.722239][ T31] usb 5-1: device descriptor read/8, error -71 [ 39.960801][ T993] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 39.961279][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.968021][ T993] rust_binder: Write failure EINVAL in pid:122 [ 39.977443][ T10] usb 1-1: USB disconnect, device number 4 [ 39.992303][ T31] usb 5-1: device descriptor read/8, error -71 [ 40.122214][ T31] usb 5-1: device descriptor read/8, error -71 [ 40.187564][ T1010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.189442][ T1010] rust_binder: Error in use_page_slow: ESRCH [ 40.196233][ T1010] rust_binder: use_range failure ESRCH [ 40.202304][ T1010] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 40.207849][ T1010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.215888][ T1010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:171 [ 40.234588][ T31] usb usb5-port1: unable to enumerate USB device [ 40.244728][ T36] audit: type=1400 audit(1758425460.890:271): avc: denied { remount } for pid=1011 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.316967][ T36] audit: type=1400 audit(1758425460.960:272): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.339210][ T1014] 9pnet_fd: Insufficient options for proto=fd [ 40.356877][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.356902][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.363429][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.369851][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.376341][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.382894][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.389505][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.395798][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.402324][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.409727][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.415231][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.422747][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.428126][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.434701][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.441114][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.447790][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.454144][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.460600][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.473732][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.473761][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.473774][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.487669][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.493213][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.493229][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.506281][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.512788][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.536282][ T1024] cgroup2: Unknown parameter 'freezer' [ 40.543890][ T36] audit: type=1400 audit(1758425461.190:273): avc: denied { create } for pid=1023 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.579358][ T1028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.579935][ T1028] rust_binder: Error in use_page_slow: ESRCH [ 40.586547][ T1028] rust_binder: use_range failure ESRCH [ 40.592668][ T1028] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 40.598217][ T1028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.606285][ T1028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:187 [ 40.612208][ T1024] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 134217728 [ 40.637106][ T1024] rust_binder: Write failure EINVAL in pid:124 [ 40.808524][ T1044] binder: Binderfs stats mode cannot be changed during a remount [ 40.822992][ T1044] binder: Binderfs stats mode cannot be changed during a remount [ 40.854204][ T1035] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 40.863901][ T1035] SELinux: failed to load policy [ 40.960790][ T36] audit: type=1400 audit(1758425461.600:274): avc: denied { getopt } for pid=1046 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.199214][ T1059] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 41.206852][ T1059] SELinux: failed to load policy [ 41.213963][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 41.215627][ T1059] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 41.231745][ T1059] rust_binder: Write failure EINVAL in pid:83 [ 41.231938][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 41.268072][ T1066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=1066 comm=syz.4.234 [ 41.289733][ T1066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=1066 comm=syz.4.234 [ 41.398616][ T1073] fuse: Bad value for 'fd' [ 41.597436][ T1081] rust_binder: Write failure EFAULT in pid:95 [ 41.703134][ T1093] overlayfs: failed to resolve './file1': -2 [ 41.765536][ T1100] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.841216][ T474] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.855161][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 42.011234][ T474] usb 1-1: Using ep0 maxpacket: 8 [ 42.011250][ T388] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.017430][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.034708][ T474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.045643][ T474] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.058488][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 42.067544][ T474] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 42.076587][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.084598][ T474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.093249][ T10] usb 5-1: config 0 descriptor?? [ 42.099513][ T474] usb 1-1: config 0 descriptor?? [ 42.151233][ T388] usb 3-1: device descriptor read/64, error -71 [ 42.391250][ T388] usb 3-1: device descriptor read/64, error -71 [ 42.508444][ T474] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 42.516465][ T474] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 42.523570][ T474] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 42.530642][ T474] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 42.537705][ T474] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 42.544803][ T474] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 42.551895][ T474] hid-rmi 0003:06CB:81A7.0001: unbalanced collection at end of report description [ 42.561433][ T474] hid-rmi 0003:06CB:81A7.0001: parse failed [ 42.567414][ T474] hid-rmi 0003:06CB:81A7.0001: probe with driver hid-rmi failed with error -22 [ 42.641265][ T388] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.721249][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 42.727312][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 42.741197][ T1084] rust_binder: Error while translating object. [ 42.741232][ T1084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 42.745020][ T10] usb 5-1: USB disconnect, device number 7 [ 42.753635][ T1084] rust_binder: Failure BR_FAILED_REPLY { source: EBADF } during reply - delivering BR_FAILED_REPLY to sender. [ 42.769909][ T1117] netlink: 168 bytes leftover after parsing attributes in process `syz.1.252'. [ 42.785093][ T1084] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:137 [ 42.792419][ T66] usb 1-1: USB disconnect, device number 5 [ 42.792658][ T388] usb 3-1: device descriptor read/64, error -71 [ 42.841972][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 42.863304][ T1128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1128 comm=syz.4.255 [ 42.939519][ T1144] rust_binder: Failed copying into alloc: EFAULT [ 42.939539][ T1144] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 42.946202][ T1145] rust_binder: Failed copying into alloc: EFAULT [ 42.954714][ T1144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.961215][ T1145] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 42.971248][ T1145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.979535][ T1144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112 [ 42.982389][ T1145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112 [ 43.017860][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 43.017889][ T36] audit: type=1400 audit(1758425463.660:278): avc: denied { write } for pid=1157 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.019823][ T1156] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 43.061397][ T388] usb 3-1: device descriptor read/64, error -71 [ 43.077135][ T36] audit: type=1400 audit(1758425463.720:279): avc: denied { create } for pid=1159 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.096757][ T36] audit: type=1400 audit(1758425463.720:280): avc: denied { bind } for pid=1159 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.132979][ T36] audit: type=1400 audit(1758425463.720:281): avc: denied { connect } for pid=1159 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.160093][ T1166] No source specified [ 43.171299][ T388] usb usb3-port1: attempt power cycle [ 43.186056][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.186078][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.192677][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.199103][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.205700][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.212202][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.218674][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.225119][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.231579][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.238047][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.258564][ T1176] __vm_enough_memory: pid: 1176, comm: syz.4.271, bytes: 18014402804453376 not enough memory for the allocation [ 43.329065][ T66] rust_binder: 1083: removing orphan mapping 0:24 [ 43.402709][ T36] audit: type=1400 audit(1758425464.050:282): avc: denied { block_suspend } for pid=1179 comm="syz.0.273" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.424550][ T1181] rust_binder: Write failure EFAULT in pid:140 [ 43.511237][ T388] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.531443][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 43.542260][ T388] usb 3-1: device descriptor read/8, error -71 [ 43.672204][ T388] usb 3-1: device descriptor read/8, error -71 [ 43.681290][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 43.688100][ T10] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.701029][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 43.709034][ T10] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 43.718114][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.726126][ T10] usb 5-1: Product: syz [ 43.730282][ T10] usb 5-1: Manufacturer: syz [ 43.734889][ T10] usb 5-1: SerialNumber: syz [ 43.911240][ T388] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.932218][ T388] usb 3-1: device descriptor read/8, error -71 [ 44.062579][ T388] usb 3-1: device descriptor read/8, error -71 [ 44.171277][ T388] usb usb3-port1: unable to enumerate USB device [ 44.300644][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 44.306635][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 44.316680][ T10] usb 5-1: USB disconnect, device number 8 [ 44.344933][ T1193] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 44.364116][ T36] audit: type=1400 audit(1758425465.010:283): avc: denied { validate_trans } for pid=1194 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.450831][ T36] audit: type=1400 audit(1758425465.090:284): avc: denied { bind } for pid=1194 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.504917][ T1199] rust_binder: 1199 RLIMIT_NICE not set [ 44.518859][ T1199] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.524478][ T1199] rust_binder: Read failure Err(EFAULT) in pid:153 [ 44.542268][ T10] rust_binder: 0: removing orphan mapping 0:1048 [ 44.689704][ T1203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.801086][ T1209] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 44.981463][ T1228] rust_binder: Failed to allocate buffer. len:18446744073709551352, is_oneway:false [ 44.981488][ T1228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.990983][ T1228] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender. [ 45.000569][ T1228] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:138 [ 45.020759][ T402] rust_binder: 1227: removing orphan mapping 0:24 [ 45.053554][ T36] audit: type=1400 audit(1758425465.700:285): avc: denied { accept } for pid=1241 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 45.098754][ T1247] rust_binder: Write failure EFAULT in pid:143 [ 45.105709][ T36] audit: type=1400 audit(1758425465.750:286): avc: denied { append } for pid=1241 comm="syz.2.294" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.111055][ T1248] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 45.149088][ T36] audit: type=1400 audit(1758425465.790:287): avc: denied { mounton } for pid=1249 comm="syz.4.297" path="/43/file0" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 45.350031][ T1261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.350353][ T1261] fuse: Bad value for 'fd' [ 45.361352][ T1260] fuse: Bad value for 'fd' [ 45.376407][ T1259] rust_binder: Error while translating object. [ 45.376478][ T1259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.387567][ T1259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 45.691209][ T66] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 45.851207][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 45.857391][ T66] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 45.865625][ T66] usb 5-1: config 0 has no interface number 0 [ 45.871744][ T66] usb 5-1: config 0 interface 230 has no altsetting 0 [ 45.879940][ T66] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 45.891236][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.903611][ T66] usb 5-1: Product: syz [ 45.907786][ T66] usb 5-1: Manufacturer: syz [ 45.912412][ T66] usb 5-1: SerialNumber: syz [ 45.921520][ T66] usb 5-1: config 0 descriptor?? [ 45.939402][ T66] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 45.951310][ T66] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 45.970934][ T1288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.970958][ T1288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.994693][ T1297] .N: renamed from veth0_to_bond (while UP) [ 46.069678][ T1318] capability: warning: `syz.2.313' uses 32-bit capabilities (legacy support in use) [ 46.261517][ T1327] 9pnet_fd: Insufficient options for proto=fd [ 46.607791][ T1336] fuse: Bad value for 'fd' [ 46.607882][ T1337] fuse: Bad value for 'fd' [ 46.878563][ T1351] rust_binder: Fixups oob 165 172 361 173 [ 46.878589][ T1351] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 46.884642][ T1351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.893012][ T1351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 47.071832][ T1358] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 47.191263][ T66] usb 5-1: USB disconnect, device number 9 [ 47.223933][ T1367] exFAT-fs (rnullb0): invalid boot record signature [ 47.231262][ T1367] exFAT-fs (rnullb0): failed to read boot sector [ 47.237620][ T1367] exFAT-fs (rnullb0): failed to recognize exfat type [ 47.293425][ T402] rust_binder: 1374: removing orphan mapping 0:1024 [ 47.324030][ T1384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.324133][ T1384] rust_binder: Error in use_page_slow: ESRCH [ 47.330681][ T1384] rust_binder: use_range failure ESRCH [ 47.336841][ T1384] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 47.342623][ T1384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.350534][ T1384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:170 [ 47.541671][ T1395] rust_binder: Got transaction with invalid offset. [ 47.550819][ T1395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.557514][ T1395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175 [ 48.001120][ T12] bridge_slave_1: left allmulticast mode [ 48.016038][ T12] bridge_slave_1: left promiscuous mode [ 48.022017][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.037770][ T12] bridge_slave_0: left allmulticast mode [ 48.045773][ T12] bridge_slave_0: left promiscuous mode [ 48.054713][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.113145][ T1418] rust_binder: Fixups oob 166 172 361 174 [ 48.113170][ T1418] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 48.119058][ T1418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.140115][ T1418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 48.186952][ T12] tipc: Left network mode [ 48.226947][ T12] veth1_macvtap: left promiscuous mode [ 48.234120][ T12] veth0_vlan: left promiscuous mode [ 48.400153][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.407329][ T1426] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.414640][ T1426] bridge_slave_0: entered allmulticast mode [ 48.421157][ T1426] bridge_slave_0: entered promiscuous mode [ 48.432202][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.439700][ T1426] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.459060][ T1426] bridge_slave_1: entered allmulticast mode [ 48.466224][ T1426] bridge_slave_1: entered promiscuous mode [ 48.480087][ T1448] tipc: Started in network mode [ 48.485605][ T1448] tipc: Node identity 82ba424c99e8, cluster identity 4711 [ 48.492955][ T1448] tipc: Enabled bearer , priority 0 [ 48.515355][ T1448] syzkaller0: entered promiscuous mode [ 48.520886][ T1448] syzkaller0: entered allmulticast mode [ 48.527675][ T1448] tipc: Resetting bearer [ 48.555169][ T1448] tipc: Resetting bearer [ 48.568824][ T1448] tipc: Disabling bearer [ 48.667545][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.674652][ T1426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.681968][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.689003][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.732516][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.740959][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.763396][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.770444][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.778333][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.785387][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.835408][ T1426] veth0_vlan: entered promiscuous mode [ 48.855671][ T1426] veth1_macvtap: entered promiscuous mode [ 48.885952][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 48.885965][ T36] audit: type=1400 audit(1758425469.530:297): avc: denied { mounton } for pid=1426 comm="syz-executor" path="/root/syzkaller.BhsCGc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.964878][ T36] audit: type=1400 audit(1758425469.610:298): avc: denied { setattr } for pid=1472 comm="syz.5.351" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.988183][ T1475] rust_binder: Error while translating object. [ 48.988211][ T1475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 48.988227][ T36] audit: type=1400 audit(1758425469.630:299): avc: denied { mounton } for pid=1472 comm="syz.5.351" path="/0/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.011224][ T1475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:212 [ 49.031245][ T1475] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.041108][ T1475] rust_binder: Read failure Err(EFAULT) in pid:212 [ 49.311243][ T433] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 49.401459][ T402] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.493881][ T433] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.503409][ T433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.511767][ T433] usb 5-1: Product: syz [ 49.516074][ T433] usb 5-1: Manufacturer: syz [ 49.520710][ T433] usb 5-1: SerialNumber: syz [ 49.551228][ T402] usb 6-1: Using ep0 maxpacket: 16 [ 49.557688][ T402] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 49.570579][ T402] usb 6-1: config 0 has no interface number 0 [ 49.576831][ T402] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 49.586889][ T402] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 49.596827][ T402] usb 6-1: config 0 interface 41 has no altsetting 0 [ 49.609180][ T402] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 49.618497][ T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.626747][ T402] usb 6-1: Product: syz [ 49.630927][ T402] usb 6-1: Manufacturer: syz [ 49.635535][ T402] usb 6-1: SerialNumber: syz [ 49.640706][ T402] usb 6-1: config 0 descriptor?? [ 49.646350][ T1484] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 49.653598][ T1484] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 49.811228][ T66] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.861898][ T36] audit: type=1400 audit(1758425470.510:300): avc: denied { mounton } for pid=1483 comm="syz.5.368" path="/file0" dev="ramfs" ino=11234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 49.862014][ T1484] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 49.890929][ T1484] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 49.971225][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 49.977403][ T66] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.986604][ T66] usb 3-1: config 1 has no interface number 1 [ 49.992726][ T66] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 50.007045][ T66] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.016109][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.024151][ T66] usb 3-1: Product: syz [ 50.028359][ T66] usb 3-1: Manufacturer: syz [ 50.032972][ T66] usb 3-1: SerialNumber: syz [ 50.101419][ T36] audit: type=1400 audit(1758425470.750:301): avc: denied { compute_member } for pid=1483 comm="syz.5.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.132814][ T1490] mmap: syz.1.371 (1490): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 50.464706][ T66] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 50.478555][ T1495] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 50.485566][ T66] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 50.493313][ T66] usb 3-1: 2:1 : invalid channels 0 [ 50.500849][ T66] usb 3-1: USB disconnect, device number 12 [ 50.508940][ T1484] rust_binder: Error while translating object. [ 50.508975][ T1484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 50.516616][ T1484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:5 [ 50.941352][ T433] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 51.079782][ T36] audit: type=1400 audit(1758425471.720:302): avc: denied { setattr } for pid=1509 comm="syz.5.378" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 51.102991][ T36] audit: type=1400 audit(1758425471.720:303): avc: denied { listen } for pid=1509 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.131193][ T433] usb 3-1: Using ep0 maxpacket: 16 [ 51.136716][ T433] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 51.145157][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.155374][ T433] usb 3-1: config 0 has no interfaces? [ 51.161552][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.171722][ T433] usb 3-1: config 0 has no interfaces? [ 51.177815][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.197256][ T433] usb 3-1: config 0 has no interfaces? [ 51.203576][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.213814][ T433] usb 3-1: config 0 has no interfaces? [ 51.220128][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.233157][ T433] usb 3-1: config 0 has no interfaces? [ 51.240215][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.247055][ T1513] kvm: kvm [1512]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 51.250974][ T433] usb 3-1: config 0 has no interfaces? [ 51.271962][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.277155][ T1513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.283225][ T433] usb 3-1: config 0 has no interfaces? [ 51.286340][ T1513] rust_binder: Got transaction with invalid offset. [ 51.290795][ T433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.300428][ T1513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.302316][ T433] usb 3-1: config 0 has no interfaces? [ 51.313056][ T1513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 51.327960][ T1518] overlayfs: failed to clone upperpath [ 51.342861][ T433] usb 3-1: string descriptor 0 read error: -71 [ 51.349075][ T433] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 51.358327][ T433] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 51.368271][ T1518] overlayfs: failed to clone upperpath [ 51.376217][ T433] usb 3-1: config 0 descriptor?? [ 51.381424][ T433] usb 3-1: can't set config #0, error -71 [ 51.388842][ T433] usb 3-1: USB disconnect, device number 13 [ 51.410795][ T1522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.463239][ T1524] rust_binder: Error while translating object. [ 51.469844][ T1524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 51.476079][ T1524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:14 [ 51.869548][ T1527] dvmrp1: tun_chr_ioctl cmd 1074025688 [ 51.884194][ T1527] dvmrp1: tun_chr_ioctl cmd 2147767511 [ 51.941828][ T36] audit: type=1400 audit(1758425472.571:304): avc: denied { mounton } for pid=1531 comm="syz.2.385" path="/93/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 52.009966][ T36] audit: type=1400 audit(1758425472.629:305): avc: denied { ioctl } for pid=1536 comm="syz.2.387" path="/95/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.010068][ T1537] rust_binder: Error while translating object. [ 52.035952][ T1537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 52.042155][ T1537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:282 [ 52.093117][ T433] usb 5-1: USB disconnect, device number 10 [ 52.111257][ T1544] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 52.121601][ T36] audit: type=1400 audit(1758425472.736:306): avc: denied { getopt } for pid=1543 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.285036][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.393'. [ 52.294407][ T1551] rust_binder: 17: no such ref 1 [ 52.299388][ T1551] rust_binder: Write failure EINVAL in pid:17 [ 52.890078][ T1567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 52.898747][ T1568] binder: Bad value for 'stats' [ 52.911628][ T1567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.398'. [ 52.959889][ T1575] tipc: Enabled bearer , priority 0 [ 52.979605][ T1575] syzkaller0: entered promiscuous mode [ 52.985210][ T1575] syzkaller0: entered allmulticast mode [ 52.990998][ T1575] tipc: Resetting bearer [ 53.007577][ T1575] 9pnet_fd: Insufficient options for proto=fd [ 53.018447][ T1574] tipc: Resetting bearer [ 53.033129][ T1574] tipc: Disabling bearer [ 53.163425][ T1588] __vm_enough_memory: pid: 1588, comm: syz.5.405, bytes: 18014402804453376 not enough memory for the allocation [ 53.260854][ T1590] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.406' sets config #1 [ 53.424024][ T433] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 53.440286][ T1610] loop2: detected capacity change from 0 to 5 [ 53.447074][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.456238][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.471356][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.480589][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.488425][ T344] loop2: unable to read partition table [ 53.494904][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.504069][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.511988][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.521145][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.529021][ T1610] loop2: unable to read partition table [ 53.534774][ T1610] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 53.548831][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.557998][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.566043][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.575204][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.583232][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.588504][ T433] usb 3-1: Using ep0 maxpacket: 16 [ 53.592385][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.592970][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.598574][ T433] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 53.605347][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.614498][ T433] usb 3-1: config 0 has no interface number 0 [ 53.623163][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.645650][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.645647][ T433] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 53.645681][ T433] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 53.675866][ T433] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 53.685006][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.693038][ T433] usb 3-1: Product: syz [ 53.697286][ T433] usb 3-1: Manufacturer: syz [ 53.701906][ T433] usb 3-1: SerialNumber: syz [ 53.707023][ T433] usb 3-1: config 0 descriptor?? [ 53.712378][ T1583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.719538][ T1583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.863133][ T1620] netlink: 68 bytes leftover after parsing attributes in process `syz.1.415'. [ 53.873992][ T1620] netlink: 188 bytes leftover after parsing attributes in process `syz.1.415'. [ 53.900357][ T1622] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.416'. [ 53.933776][ T1583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.941061][ T1583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.238282][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.247465][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 54.257008][ T110] loop2: unable to read partition table [ 54.271679][ T1626] rust_binder: 29: no such ref 0 [ 54.276708][ T1626] rust_binder: 29: no such ref 0 [ 54.281764][ T1626] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 54.288919][ T1626] rust_binder: 29: no such ref 64 [ 54.293974][ T1626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 54.315459][ T1628] 9pnet_fd: Insufficient options for proto=fd [ 54.317210][ T1631] rust_binder: 240: no such ref 0 [ 54.405055][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 54.405073][ T36] audit: type=1400 audit(1758425474.960:319): avc: denied { write } for pid=1642 comm="syz.5.422" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.435572][ T36] audit: type=1400 audit(1758425474.960:320): avc: denied { open } for pid=1642 comm="syz.5.422" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.537194][ T1661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.545835][ T1661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.556198][ T36] audit: type=1400 audit(1758425475.106:321): avc: denied { setattr } for pid=1660 comm="syz.5.427" name="XDP" dev="sockfs" ino=14254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.578598][ T36] audit: type=1400 audit(1758425475.116:322): avc: denied { connect } for pid=1660 comm="syz.5.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.598060][ T432] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 54.606258][ T36] audit: type=1400 audit(1758425475.116:323): avc: denied { getopt } for pid=1660 comm="syz.5.427" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.770417][ T432] usb 5-1: Using ep0 maxpacket: 8 [ 54.776921][ T432] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.785335][ T432] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 54.793508][ T432] usb 5-1: config 0 has no interface number 0 [ 54.799605][ T432] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 54.810822][ T432] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 54.820683][ T432] usb 5-1: config 0 interface 88 has no altsetting 0 [ 54.829514][ T432] usb 5-1: string descriptor 0 read error: -22 [ 54.835760][ T432] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 54.844891][ T432] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 54.853848][ T432] usb 5-1: config 0 descriptor?? [ 54.860747][ T432] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input8 [ 54.873939][ T36] audit: type=1400 audit(1758425475.418:324): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=481 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.900970][ T36] audit: type=1400 audit(1758425475.418:325): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=481 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.931606][ T330] udevd[330]: Error opening device "/dev/input/event3": Input/output error [ 54.940473][ T330] udevd[330]: Unable to EVIOCGABS device "/dev/input/event3" [ 54.947897][ T330] udevd[330]: Unable to EVIOCGABS device "/dev/input/event3" [ 55.067076][ T36] audit: type=1400 audit(1758425475.593:326): avc: denied { connect } for pid=1635 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.067676][ T432] usb 5-1: USB disconnect, device number 11 [ 55.102506][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.109246][ T1663] loop4: detected capacity change from 0 to 8388608 [ 55.172697][ T1666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.172919][ T1666] rust_binder: Error while translating object. [ 55.179604][ T1666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 55.186194][ T1666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 55.223477][ T36] audit: type=1400 audit(1758425475.759:327): avc: denied { ioctl } for pid=1667 comm="syz.5.430" path="/19/file2" dev="tmpfs" ino=120 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.458271][ T402] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffff92 [ 55.470679][ T402] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32 [ 55.748780][ T1678] rust_binder: Error while translating object. [ 55.748826][ T1678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.755022][ T1678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:249 [ 55.841397][ T1682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.859413][ T1682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.867485][ T1682] binder: Binderfs stats mode cannot be changed during a remount [ 56.198265][ T433] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 56.224660][ T433] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 56.240361][ T1691] loop4: detected capacity change from 0 to 8388608 [ 56.245146][ T433] asix 3-1:0.251: probe with driver asix failed with error -5 [ 56.266560][ T433] usb 3-1: USB disconnect, device number 14 [ 56.320889][ T1694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.440'. [ 56.567969][ T36] audit: type=1400 audit(1758425477.066:328): avc: denied { setopt } for pid=1708 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.604487][ T1714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 56.742603][ T1731] pim6reg1: entered promiscuous mode [ 56.768517][ T1731] pim6reg1: entered allmulticast mode [ 56.779898][ T1731] rust_binder: Write failure EFAULT in pid:85 [ 56.780689][ T1732] rust_binder: Write failure EFAULT in pid:85 [ 56.939722][ T1736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.984928][ T1736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.999393][ T1736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.004842][ T1736] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.025196][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 57.044871][ T1736] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 192, size: 238) [ 57.044895][ T1736] rust_binder: Error while translating object. [ 57.065843][ T1736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.078713][ T1736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 57.177404][ T1740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'. [ 57.188912][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 57.195629][ T1740] netlink: 31 bytes leftover after parsing attributes in process `syz.4.456'. [ 57.209698][ T1740] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 57.210608][ T45] usb 3-1: config index 0 descriptor too short (expected 970, got 202) [ 57.217342][ T1740] netlink: 'syz.4.456': attribute type 2 has an invalid length. [ 57.217359][ T1740] netlink: 31 bytes leftover after parsing attributes in process `syz.4.456'. [ 57.238460][ T45] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 57.252402][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 57.262949][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.272089][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.280174][ T45] usb 3-1: Product: syz [ 57.284424][ T45] usb 3-1: Manufacturer: syz [ 57.289053][ T45] usb 3-1: SerialNumber: syz [ 57.294343][ T45] usb 3-1: config 0 descriptor?? [ 57.508063][ T45] usb 3-1: USB disconnect, device number 15 [ 57.784002][ T1784] binder: Unknown parameter 'fscontext?}' [ 58.046371][ T1791] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.053103][ T1791] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.092966][ T1797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.093430][ T1797] rust_binder: Read failure Err(EAGAIN) in pid:111 [ 58.100371][ T1797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 58.374539][ T432] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 58.507785][ T1825] cgroup: fork rejected by pids controller in /syz1 [ 58.539060][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.550088][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.560148][ T432] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.573258][ T432] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.582359][ T432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.597588][ T432] usb 3-1: config 0 descriptor?? [ 58.759115][ T1967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.763298][ T1967] rust_binder: got new transaction with bad transaction stack [ 58.769804][ T1967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 58.852672][ T1972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.489'. [ 58.878696][ T1974] rust_binder: Write failure EFAULT in pid:143 [ 58.982315][ T1978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.989396][ T1978] 9pnet_fd: Insufficient options for proto=fd [ 59.014819][ T432] plantronics 0003:047F:FFFF.0002: bogus close delimiter [ 59.021986][ T432] plantronics 0003:047F:FFFF.0002: item 0 0 2 10 parsing failed [ 59.029863][ T432] plantronics 0003:047F:FFFF.0002: parse failed [ 59.036190][ T432] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 59.059850][ T1979] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 59.059873][ T1979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 59.067940][ T1979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:147 [ 59.229577][ T432] usb 3-1: USB disconnect, device number 16 [ 59.844092][ T2001] fuse: Unknown parameter '' [ 60.023360][ T2007] syzkaller0: entered promiscuous mode [ 60.028872][ T2007] syzkaller0: entered allmulticast mode [ 60.043177][ T2006] tipc: Enabling of bearer rejected, failed to enable media [ 60.196629][ T2016] Invalid logical block size (-23228) [ 60.219473][ T2020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.223420][ T2019] netlink: 17 bytes leftover after parsing attributes in process `syz.2.507'. [ 60.241796][ T2020] netlink: 17 bytes leftover after parsing attributes in process `syz.2.507'. [ 60.250779][ T2024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 60.261990][ T2019] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 60.405784][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 60.406002][ T36] audit: type=1400 audit(1758425480.827:340): avc: denied { connect } for pid=2029 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.517702][ T2040] rust_binder: 378: no such ref 0 [ 60.522829][ T2041] rust_binder: 378: no such ref 0 [ 60.540949][ T36] audit: type=1400 audit(1758425480.954:341): avc: denied { accept } for pid=2042 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.596326][ T36] audit: type=1400 audit(1758425481.003:342): avc: denied { setopt } for pid=2049 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.596870][ T2051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.617376][ T2050] rust_binder: Write failure EINVAL in pid:276 [ 60.671344][ T2059] fuse: Bad value for 'user_id' [ 60.690011][ T2059] fuse: Bad value for 'user_id' [ 60.805602][ T36] audit: type=1400 audit(1758425481.220:343): avc: denied { mount } for pid=2062 comm="syz.1.522" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.975172][ T2074] rust_binder: Error while translating object. [ 60.975218][ T2074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.984467][ T2074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 61.099470][ T2085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.117442][ T2085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.204904][ T2087] ------------[ cut here ]------------ [ 61.210469][ T2087] WARNING: CPU: 1 PID: 2087 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 61.220881][ T2087] Modules linked in: [ 61.224830][ T2087] CPU: 1 UID: 0 PID: 2087 Comm: syz.2.531 Not tainted syzkaller #0 26040f0ed9382bf65720d717d6d6db2d10869199 [ 61.236388][ T2087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.246481][ T2087] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 61.252936][ T2087] Code: 7e 3b e8 a4 11 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 81 11 6a 00 <0f> 0b e9 e4 fc ff ff e8 75 11 6a 00 0f 0b e9 0e fd ff ff e8 69 11 [ 61.272759][ T2087] RSP: 0018:ffffc900010df9c0 EFLAGS: 00010293 [ 61.278829][ T2087] RAX: ffffffff811bd82f RBX: ffff888137fbc300 RCX: ffff88810a73a600 [ 61.286954][ T2087] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 61.294967][ T2087] RBP: ffffc900010dfc70 R08: ffff88810a73a607 R09: 1ffff110214e74c0 [ 61.302996][ T2087] R10: dffffc0000000000 R11: ffffed10214e74c1 R12: ffff888121426000 [ 61.311004][ T2087] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888137fbc378 [ 61.318980][ T2087] FS: 00007fe9fc7f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 61.327926][ T2087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.334612][ T2087] CR2: 00007fe9fc7d5f98 CR3: 00000001314b6000 CR4: 00000000003526b0 [ 61.342650][ T2087] DR0: 0000000000000065 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.350632][ T2087] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 61.358623][ T2087] Call Trace: [ 61.361931][ T2087] [ 61.364884][ T2087] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 61.370878][ T2087] ? __futex_wait+0x218/0x2a0 [ 61.375586][ T2087] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 61.380928][ T2087] ? ioctl_has_perm+0x1aa/0x4d0 [ 61.385822][ T2087] ? __cfi_autoremove_wake_function+0x10/0x10 [ 61.391958][ T2087] ? ioctl_has_perm+0x3e0/0x4d0 [ 61.396822][ T2087] ? has_cap_mac_admin+0xd0/0xd0 [ 61.401805][ T2087] ? synchronize_rcu+0x77/0x2e0 [ 61.406672][ T2087] ? __cfi_synchronize_rcu+0x10/0x10 [ 61.411973][ T2087] ? futex_wait+0x29a/0x7a0 [ 61.416489][ T2087] ? __kasan_check_write+0x18/0x20 [ 61.421627][ T2087] kvm_vcpu_ioctl+0x96f/0xee0 [ 61.426343][ T2087] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 61.431564][ T2087] ? do_futex+0x309/0x500 [ 61.435951][ T2087] ? __cfi_do_futex+0x10/0x10 [ 61.440656][ T2087] ? __fget_files+0x2c5/0x340 [ 61.445356][ T2087] ? bpf_lsm_file_ioctl+0xd/0x20 [ 61.450327][ T2087] ? security_file_ioctl+0x34/0xd0 [ 61.455475][ T2087] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 61.460688][ T2087] __se_sys_ioctl+0x132/0x1b0 [ 61.465390][ T2087] __x64_sys_ioctl+0x7f/0xa0 [ 61.469999][ T2087] x64_sys_call+0x1878/0x2ee0 [ 61.474713][ T2087] do_syscall_64+0x58/0xf0 [ 61.479177][ T2087] ? clear_bhb_loop+0x50/0xa0 [ 61.483874][ T2087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.489801][ T2087] RIP: 0033:0x7fe9fdd8ec29 [ 61.494253][ T2087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.513918][ T2087] RSP: 002b:00007fe9fc7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.522350][ T2087] RAX: ffffffffffffffda RBX: 00007fe9fdfd5fa0 RCX: 00007fe9fdd8ec29 [ 61.530337][ T2087] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 61.538338][ T2087] RBP: 00007fe9fde11e41 R08: 0000000000000000 R09: 0000000000000000 [ 61.546339][ T2087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.554316][ T2087] R13: 00007fe9fdfd6038 R14: 00007fe9fdfd5fa0 R15: 00007ffd15f11048 [ 61.562308][ T2087] [ 61.565378][ T2087] ---[ end trace 0000000000000000 ]---