last executing test programs: 7m23.538963137s ago: executing program 3 (id=2461): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0xd, 0xe4, 0x0, 0x0, @binary="b1fc2d971a289f852a"}]}]}]}, 0x2c}}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20004804) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, 0x0) 7m23.388376182s ago: executing program 3 (id=2465): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000180)=0xe, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x365bc2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) write(r1, &(0x7f0000000400)="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", 0x1f000) 7m23.260250395s ago: executing program 3 (id=2468): timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) unshare(0x6a040000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x700, 0x3}, 0x20) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x4}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000000001c) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0c0300004cd8e6a2a7", @ANYRES16=r10, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 7m22.873446793s ago: executing program 3 (id=2473): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x127a, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m22.720999298s ago: executing program 3 (id=2475): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000480)=0x20000000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x290, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1b400, @private1, 0x90000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @local, 0x9}}}}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa913}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "3680631a30acff8cbbd6efc62ff347cd7fd3b5d21d8ec7f8467511"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf, @remote, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x805}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000001d80)=@ethtool_link_settings={0x2, 0x81, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x1, 0x2]}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) 7m22.717897628s ago: executing program 3 (id=2479): r0 = syz_open_dev$loop(&(0x7f0000000480), 0x926139, 0x101200) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000980)=[@cpuid={0x14, 0x18, {0x3e800000, 0x9}}, @out_dx={0xaa, 0x28, {0xf4c2, 0x7, 0x1}}, @code={0xa, 0x55, {"c481f976ba0400000026260fc79f00000000f3410f22e10f2183660f38802b0f01c866baf80cb84dcdf483ef66bafc0cec0f08b9800000c00f3235010000000f302e0f09"}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x14, 0x18, {0x7c0, 0x7fffffff}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x73, {"b8010000000f01c1c4c25d36cf66ba400066b83df066ef66430f38808c64a300000065f20f07c7442400e5d3dd45c744240200500000c7442406000000000f011c2466baf80cb8d0d64a89ef66bafc0cb800000100ef364683c0d266ba4000ed0f07"}}, @rdmsr={0x32, 0x18, {0x868}}, @wr_drn={0x6e, 0x20, {0x6, 0x4fa}}, @code={0xa, 0x73, {"c482052da1be430000b9800000c00f3235002000000f30c4a1e5e203430fc71a6566450f38800f66450f38804f00c4226d0705640c882ac744240076000000c74424026820219bff2c2466bad104edc7442400fc000000c744240200000000ff2c24"}}, @rdmsr={0x32, 0x18, {0x2af}}, @code={0xa, 0x52, {"c422292d0d1ca7092d66ba6100b000eeb970070000b8115e0000ba000000000f300f01c266650f0f55300c453219f240a7410f2354b9250800000f32470f4069bf"}}, @wr_drn={0x6e, 0x20, {0x3, 0x8000}}, @rdmsr={0x32, 0x18, {0x2be}}, @code={0xa, 0x72, {"c7442400f2ffffffc744240231200000c7442406000000000f0114240f786b00660fc7b70078000066ba6100b0fcee66baa000b034ee66b83f008ee0c4e3317e17df66baf80cb88c486c80ef66bafc0cecc4e3fd0088f5b100006af32e3e447c00"}}, @code={0xa, 0x65, {"c4c1aded4c6cfa470f01ca66ba4300edb9800000c00f3235002000000f30440f20c0350d000000440f22c0450f01cf67460f01b40c060000000f20e035000002000f22e0c4e3b50f1e00c4a3354aa26b0f000015"}}, @rdmsr={0x32, 0x18, {0x412}}, @uexit={0x0, 0x18, 0xc}, @cpuid={0x14, 0x18, {0x4, 0x66a}}, @wrmsr={0x1e, 0x20, {0x940, 0x1}}, @wr_crn={0x46, 0x20, {0x4, 0x7fffffffffffffff}}, @wr_drn={0x6e, 0x20, {0x6, 0xfffffffffffffff8}}, @wr_crn={0x46, 0x20, {0x3, 0xc54}}, @uexit={0x0, 0x18, 0xc}, @wr_drn={0x6e, 0x20, {0x6, 0x162e1567}}, @out_dx={0xaa, 0x28, {0xfe4, 0x5, 0x1000}}, @wr_crn={0x46, 0x20, {0x8, 0x10001}}, @in_dx={0x82, 0x20, {0xe200}}, @rdmsr={0x32, 0x18, {0x27c}}, @wr_crn={0x46, 0x20, {0x2, 0xd}}, @rdmsr={0x32, 0x18, {0xac3}}], 0x52c}) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 7m22.712123479s ago: executing program 32 (id=2479): r0 = syz_open_dev$loop(&(0x7f0000000480), 0x926139, 0x101200) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000980)=[@cpuid={0x14, 0x18, {0x3e800000, 0x9}}, @out_dx={0xaa, 0x28, {0xf4c2, 0x7, 0x1}}, @code={0xa, 0x55, {"c481f976ba0400000026260fc79f00000000f3410f22e10f2183660f38802b0f01c866baf80cb84dcdf483ef66bafc0cec0f08b9800000c00f3235010000000f302e0f09"}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x14, 0x18, {0x7c0, 0x7fffffff}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x73, {"b8010000000f01c1c4c25d36cf66ba400066b83df066ef66430f38808c64a300000065f20f07c7442400e5d3dd45c744240200500000c7442406000000000f011c2466baf80cb8d0d64a89ef66bafc0cb800000100ef364683c0d266ba4000ed0f07"}}, @rdmsr={0x32, 0x18, {0x868}}, @wr_drn={0x6e, 0x20, {0x6, 0x4fa}}, @code={0xa, 0x73, {"c482052da1be430000b9800000c00f3235002000000f30c4a1e5e203430fc71a6566450f38800f66450f38804f00c4226d0705640c882ac744240076000000c74424026820219bff2c2466bad104edc7442400fc000000c744240200000000ff2c24"}}, @rdmsr={0x32, 0x18, {0x2af}}, @code={0xa, 0x52, {"c422292d0d1ca7092d66ba6100b000eeb970070000b8115e0000ba000000000f300f01c266650f0f55300c453219f240a7410f2354b9250800000f32470f4069bf"}}, @wr_drn={0x6e, 0x20, {0x3, 0x8000}}, @rdmsr={0x32, 0x18, {0x2be}}, @code={0xa, 0x72, {"c7442400f2ffffffc744240231200000c7442406000000000f0114240f786b00660fc7b70078000066ba6100b0fcee66baa000b034ee66b83f008ee0c4e3317e17df66baf80cb88c486c80ef66bafc0cecc4e3fd0088f5b100006af32e3e447c00"}}, @code={0xa, 0x65, {"c4c1aded4c6cfa470f01ca66ba4300edb9800000c00f3235002000000f30440f20c0350d000000440f22c0450f01cf67460f01b40c060000000f20e035000002000f22e0c4e3b50f1e00c4a3354aa26b0f000015"}}, @rdmsr={0x32, 0x18, {0x412}}, @uexit={0x0, 0x18, 0xc}, @cpuid={0x14, 0x18, {0x4, 0x66a}}, @wrmsr={0x1e, 0x20, {0x940, 0x1}}, @wr_crn={0x46, 0x20, {0x4, 0x7fffffffffffffff}}, @wr_drn={0x6e, 0x20, {0x6, 0xfffffffffffffff8}}, @wr_crn={0x46, 0x20, {0x3, 0xc54}}, @uexit={0x0, 0x18, 0xc}, @wr_drn={0x6e, 0x20, {0x6, 0x162e1567}}, @out_dx={0xaa, 0x28, {0xfe4, 0x5, 0x1000}}, @wr_crn={0x46, 0x20, {0x8, 0x10001}}, @in_dx={0x82, 0x20, {0xe200}}, @rdmsr={0x32, 0x18, {0x27c}}, @wr_crn={0x46, 0x20, {0x2, 0xd}}, @rdmsr={0x32, 0x18, {0xac3}}], 0x52c}) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 4m8.59605992s ago: executing program 2 (id=4882): modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7, 0x3032, 0xffffffffffffffff, 0x66960000) (async) modify_ldt$read(0x0, &(0x7f0000000100)=""/107, 0xffffffffffffff09) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x20040000010001) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x18, 0x2, @thr={&(0x7f0000000180)="4f1a608f414f46db6001606db92bd8d9a6ba5aa017b5b5f80e725adf6c5de3c66248d43ef1da74e37f5354064423fff17e0dc16ddd5269451f0244b3e44a96a349a6e9bfa24b4a4b9389e6f179e75f61b05fb1e946b1b8d57eeaec949790c0f8fc0789153a533099284a0d297ca4aa9066", &(0x7f0000000200)="f2ae6f0bdebc86309efdd2e7ddd86fe6fef707c4e8019b72a7319c86c6aaf90a0a099a3714d4250c337b60d94bf2be522453d99f5d873915ae8b6ed81b59d67a020c850a5713cc2ed83bf1bed8aafd7dd23ec233bb1f3a9a8594fccc951c467f59dbe4104253"}}, &(0x7f0000000280)) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x12}) (async) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000000000206d0425c20000000000010902244c240000c0b109040000020300040009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00221900000083"], 0x0}, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x11, r0, 0xcf82b000) read(r0, 0x0, 0x0) 4m8.000265569s ago: executing program 2 (id=4887): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') (async) r1 = socket(0x0, 0x0, 0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap(&(0x7f0000019000/0x4000)=nil, 0x4000, 0xd, 0x80010, r0, 0xc0b3000) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0xffff9c0d, 0xccd2, 0xcc, 0x100}]}) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x36, 0x8, 0x70bd27, 0x25dfdbfd, {0x1a}, [@nested={0x18, 0xef, 0x0, 0x1, [@typed={0x8, 0x3fff, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x4}]}, @typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4001) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) (async, rerun: 32) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) 4m7.921099027s ago: executing program 2 (id=4888): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) (async) futex_waitv(&(0x7f000000b140)=[{0xfe45, &(0x7f000000a780)=0x2, 0x82}], 0x1, 0x0, &(0x7f000000b500)={0x77359400}, 0x1) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x400, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x3fffffff, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000) 4m7.920201287s ago: executing program 2 (id=4889): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000540)=0x800018) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x1, 0x18, 0x17, 0x2}, 0x0, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x9, "4d9b"}, @local=@item_012={0x1, 0x2, 0x8, "03"}]}}, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 4m7.161292032s ago: executing program 2 (id=4894): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101200, 0x20) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 4m6.682872049s ago: executing program 1 (id=4899): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) syz_clone3(&(0x7f00000002c0)={0x100000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) inotify_rm_watch(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x7d4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3cff0000035b35b8c101421ccd89763e52463bed8bbf6fc490c2890ed86b092cfdffd22d0ffdeb1a9d521acbd3ebebbfe1ad16ec", @ANYRES16=r3, @ANYBLOB="01012cbd7000ffdbdf250d00000005001800e100000006000a000000000005001a0002000000050017000600000006000800feff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r0, &(0x7f0000000400)="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", 0x1f000) 4m6.57739746s ago: executing program 1 (id=4900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006200)={&(0x7f00000024c0)={0x14, 0x33, 0x1, 0x70bd29, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 4m6.461041331s ago: executing program 1 (id=4901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x29, r2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x100a}, @flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfffffffffffffffe}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sysinfo(&(0x7f0000000180)=""/141) 4m6.427520594s ago: executing program 1 (id=4903): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffffe]}, &(0x7f0000000040), 0x0, 0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x11c, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x2}, @register_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x9, 0x2, 0x20}, @fda={0x66646185, 0x2, 0x1, 0xa}, @fda={0x66646185, 0x1, 0x2, 0x24}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}, 0x40}, @enter_looper, @register_looper, @acquire_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/141, 0x8d, 0x1, 0x21}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/57, 0x39, 0x1, 0x3d}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/172, 0xac, 0x0, 0x22}, @fda={0x66646185, 0x2, 0x0, 0x1c}, @fda={0x66646185, 0x3, 0x1, 0x3f}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}}], 0x9d, 0x0, &(0x7f0000000600)="0748aa6e66e44492e49fd4da91c999e5a47750fd1ed1c9fd2958f4749221f5023639c1f6f1e9a0aea85defc89010aa58d282bbef11eb0896d75a65af892b4e9b285b1ef75738055557a3a2b50eb8923dadd3a7d3d215bf10a7457771299b54669e98eca496289687a611f6514d3d3dec0ae491e0b8fa41287081c95064c8dae123ab4417b95fa725015c0dfbcdc1fa5d61eceb07a87f0d4cc89384e16d"}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) 4m6.122448365s ago: executing program 1 (id=4908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00008882ec6e554b8ccde4ef9ebce730cba802030008060096360000000000000000ffff75acd2d66931744c30604b92da97074be8b9f192ab4aa3560c419dfc06a0bee7f9b72910053d44b83c2549553132560a0afaa7298d2e380717893eb45d763baa2dc8a252cdb01585b00000000000"], 0x64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cc, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)={0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000200)={@my=0x1}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) close_range(r0, 0xffffffffffffffff, 0x0) 4m5.936415493s ago: executing program 1 (id=4913): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20000, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 4m5.734667303s ago: executing program 2 (id=4895): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472796c6f636b20e358d44f305f98"], 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m42.360660671s ago: executing program 33 (id=4913): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20000, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 3m42.360613931s ago: executing program 34 (id=4895): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472796c6f636b20e358d44f305f98"], 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m53.189408298s ago: executing program 4 (id=6901): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$sock(r0, 0x0, 0x0, 0x20000001) (async) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1m53.094963068s ago: executing program 4 (id=6904): syz_usb_connect$uac1(0x3, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902990003014e00010904000000010100000a2401bd08060201020c24020501010570800001010724070505000006240406075e0c24020106020206010006020924030600030605a60c240805070004036a03603e09040100000102000001010101020000090501090002070206072501803f060009040200000102000009040201010102000009058209200001800607250102010500"], 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setgid(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r1, r1, &(0x7f0000000280)=0x3ff, 0x7) prlimit64(r0, 0xc, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) syz_usb_connect$cdc_ecm(0x6, 0x111, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x9ad3c4f00749f1ed, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x1, 0x1, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, "03"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xa, 0x8, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x38}, @ncm={0x6, 0x24, 0x1a, 0x800, 0x28}, @mdlm_detail={0xaa, 0x24, 0x13, 0x0, "998966cf18adb70e4c9b4d73a1f096cd75f905da37102b78105d9a1c60d60a348fbd603d67355ca04673eb12a62defed79f78e306f588d342b713dac9ef18e58a9b6ff2d37a09eac62134202d9fdfd5c4180f3aae347f7a9649714f4920b22f987f8b1ca628e522efa52a0cce350ec5fe6c95a20eebaaa07fdf93a991c65ebf1b451475140bd15f972b42b4ea24860160fa01c75f4ca0fec7e3ce03b639e345f7f86f0680b3f"}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x10}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xff, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x9, 0x4, 0x5, 0x20, 0xc}, 0xf6, &(0x7f0000000440)={0x5, 0xf, 0xf6, 0x5, [@generic={0xb3, 0x10, 0x4, "a7327b20699f04a42c12b2474f225d73664b56a8fc8d672d4d7d75a1267fe5f3acddb09e3a0c6a9f54856f4579e4b2c14109e7e605a9d24d224e710a54132ebe9f825d62121b75fee3bb6998f0503aa808649d59e4048693f4875492b8d12b3e38e7b7f4028da76b7ffa60357e4f09aec38f5b7a0c3f6f299d6b4aa1c89be13d22f8ced0eba4cbc3bf03f5718f6761f5d846921b0c86c8ce3e100b1e3e5b5035b70147364b63683d9970ce55ebbda3ef"}, @ssp_cap={0x1c, 0x10, 0xa, 0xc0, 0x4, 0x8, 0xee00, 0x1, [0xff3f00, 0xc0, 0x0, 0xffc000]}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x2bb000, 0xf00, 0x0, [0xffc000, 0xffff3f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x9, 0x6}, @ptm_cap={0x3}]}, 0x1, [{0x6, &(0x7f0000000540)=@string={0x6, 0x3, "b99f15a2"}}]}) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="73fbffffff0000000000"]) ioctl$ASHMEM_GET_NAME(r2, 0x40047703, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x920}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, 0x15, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xc4, 0x8, "6f5df584c9391e60220fe630c86e990bd1180e097b7fdc44e09b493edfaffb7c312b7bf14e72b555b90583bb6405cb6dcc2255d5c4987922caa2409cf7251785b528d9e7ddc9ff8682c3b76a0845d124202a0e6c05befe4dbf6b91e6f42a5626309cd6ca2aa29b6838aae7b96532e0e99744f173a3397d6e25b8554a16a1babd5b3c23b2b005b540200d9bd71b1757cacf4961572d19d5c596acde41c14d511c3585c4117d765353021aa356b895f227b6e360e59b652c588ddfb92d211f3025"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2002c005}, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.time\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) 1m52.624931455s ago: executing program 4 (id=6909): pipe2$watch_queue(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000001100)={0x8, 0x9, 0x5, 0x4, 0x7, "751ad2fb0e419dce4a9d5beb3fd2a9a33a2e2f", 0x80, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000009e000040"]) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000001040)={0x2, 0x0, [{0x40000000, 0x9, 0x0, 0x7, 0x752f, 0x2, 0x3}, {0x2, 0xec0f, 0x4, 0x9, 0x400, 0x9, 0x2000000}]}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x500000, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) preadv2(r4, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) pipe2$watch_queue(&(0x7f00000010c0), 0x80) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000001100)={0x8, 0x9, 0x5, 0x4, 0x7, "751ad2fb0e419dce4a9d5beb3fd2a9a33a2e2f", 0x80, 0x4}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000009e000040"]) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000001040)={0x2, 0x0, [{0x40000000, 0x9, 0x0, 0x7, 0x752f, 0x2, 0x3}, {0x2, 0xec0f, 0x4, 0x9, 0x400, 0x9, 0x2000000}]}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x500000, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) preadv2(r4, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) (async) 1m52.589416278s ago: executing program 4 (id=6910): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000001, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2a0001, 0x0) (async) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', '\x00'}, &(0x7f0000000200)='pipefs\x00', 0x7, 0x0) (async, rerun: 64) memfd_create(&(0x7f0000000240)='i(\x00', 0x4) (rerun: 64) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x262000, 0x0) r0 = geteuid() getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)=0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}, {@metacopy_on}, {@verity_off}, {@xino_on}, {@userxattr}], [{@fsmagic={'fsmagic', 0x3d, 0x7560}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@flag='silent'}, {@smackfstransmute}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_lt={'fowner<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000640)=0x29d, 0x4) (async) mount$9p_virtio(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x40000, &(0x7f0000000740)={'trans=virtio,', {[{@access_any}], [{@dont_measure}, {@context={'context', 0x3d, 'user_u'}}]}}) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x40, 0x8, 0x36}, 0x18) linkat(r6, &(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x400) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000900)=""/149, 0x95}], 0x2, &(0x7f0000000a00)=""/4, 0x4}, 0x40000143) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async) r8 = geteuid() mount$fuse(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x20000, &(0x7f0000000b40)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}], [{@obj_role={'obj_role', 0x3d, '$*\x8b'}}]}}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) symlinkat(&(0x7f0000000c80)='./file0\x00', r6, &(0x7f0000000cc0)='./file0\x00') getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0x61b63b74, 0x9fcb, 0x1ff, 0x9, 0x9, 0x9]}, &(0x7f0000000d80)=0x78) (async) r10 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async, rerun: 64) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r10, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20041400}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x1b8, r11, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "48f0031c115d2807faac21ded4f2af32e89320e208b51b82be596e6d0548e7dfb75bbbc2755b2b11089a90b3bebe871e954b43f645b24cdd5a406a9791a2b89b8c2570fd9ec0555efe942b2a0bad730b6ace88b6dcb6dd437ad9330436e029741d6edbdf80ab957e4f8ce3bbeac6b8d3411697813c89e094bed3b7dc51a98fd169f47cf0b1988d3e39b994fbb87ad9e79dc90c3641d531718f509d4196d638686ab911820094d4f9b348486c2d2e90a065848fa5407314c52b4e35670790941e8401bfef0538f0360d4ae86b6781477c87a83f25fcccf3365f220bb8c585f76a37efbba0afd6dd04c5776d135e78"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x86, 0x4, "05f6773caff5eacbba60d571c8af267f622fe1d470cf568afbdadfab7b01c8409acfe3340c546a25f1b630ee60481d0d5186dc40d7c4cae6aedeba07ad4b8fec902c787760c5bfac9306995fe7fd4c64cb3dfa68359c96164662c4af0b4acc51ad8fa9194a3d02a5e275a60ff1cc890e38a5e79f9887ce89e07f3653ee64d62233c5"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4010}, 0x20000) (async, rerun: 32) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x88a00, 0x55, 0xc}, 0x18) (rerun: 32) move_mount(r12, &(0x7f0000001100)='./file1\x00', r10, &(0x7f0000001140)='./file0\x00', 0x302) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000001180)='./file1\x00', &(0x7f00000011c0), 0xa0, &(0x7f0000001200)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other}], [{@obj_user}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trans=virtio,'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_user={'subj_user', 0x3d, 'i(\x00'}}, {@obj_role}]}}) (async, rerun: 64) readlink(&(0x7f0000001340)='./file0/file0\x00', &(0x7f0000001380)=""/25, 0x19) (async) read$FUSE(r7, &(0x7f00000013c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r7, &(0x7f0000003540)={0x78, 0x0, r13, {0x2, 0x3, 0x0, {0x0, 0xc0, 0x4, 0x4c7, 0x6, 0x5, 0x336d, 0x8, 0x4, 0x4000, 0x80000001, r2, 0x0, 0x10001, 0x3}}}, 0x78) 1m52.509013896s ago: executing program 4 (id=6911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000004c0), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000005c0)="0a827ac1f5cadbb8ed485c8f228dd4698bc5b25509cbe893841fe1aa4d40e21fa2ffba333028470940fc2f04a1f6ed8a0efac2d0c9f2a449ef2d6743ecbf1a39f00000334989ee68df5f3d43141f28ecdaa524ac6ac33dc56b7286f45dc02943eeb68b7031d9595c696df74500"/119, 0x77, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}, {@directio}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x319, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffc) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x150, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x0, 0x9}) fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r7, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x7}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r8, &(0x7f0000000700)="e5df2408a797916fc2dc7ee2fd918527ffff885bffa6cb5f457de07087a6024612d4a5b8c000f4da0ea4bef38c77cb98caf6c5cb3a06ebcabb3ccaff0300000000000022209ea888298c68e1eab33c348ec6b5e3dad3123b10e98da4574710f3a15043a6f53e8579d8159c04e70c86489581a33fb41c064c71db7b48d71ead321d1990d23c48e657a46b998045c8b780221b68c7666789961c51c608fd", 0x9d, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x5610, @mcast1, 0x1}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01009300"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m52.489023298s ago: executing program 4 (id=6912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) sync() sync() getresgid(&(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)) sync() r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r4], 0x20}}, 0x40816) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000300)=0xc) r6 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sync() sync() sync() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) 1m38.349685763s ago: executing program 35 (id=6912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) sync() sync() getresgid(&(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)) sync() r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x44) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r4], 0x20}}, 0x40816) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000300)=0xc) r6 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sync() sync() sync() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) 50.841628236s ago: executing program 7 (id=7698): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000880)=""/182, &(0x7f00000005c0)=0xb6) setresuid(0xee01, 0x0, 0x0) setfsuid(0x0) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) stat(0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047453, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000000), 0x4) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x0) (async, rerun: 64) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (rerun: 64) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x2}, {0x4eb, 0x109003ff}, 0x9, 0x6}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x84) (async) r5 = socket(0x10, 0x803, 0x0) recvmsg(r5, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x40010102) (async, rerun: 32) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f0000000f80)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x1000}, {{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000300)=""/129, 0x81}], 0x4}}, {{&(0x7f0000000440)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/249, 0xf9}], 0x1}, 0x4}, {{&(0x7f0000000940)=@isdn, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/243, 0xf3}, {&(0x7f00000009c0)=""/79, 0x4f}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000c00)=""/99, 0x63}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000b80)=""/110, 0x6e}], 0x6, &(0x7f0000000500)=""/15, 0xf}, 0xae}], 0x4, 0x2000, &(0x7f0000003700)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r4, 0xc0046209, 0x0) 50.636674537s ago: executing program 7 (id=7702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000cc0)=0x0) getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000ac0)=0xe8) stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, &(0x7f0000001300)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000019c0)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000340)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x6, 0x10012150, 0x0, 0x5, 0x5, 0x7, 0x0, 0x0, 0x10, 0x7}}, &(0x7f0000000200)={0x18, 0x0, 0x80000001, {0x100}}, &(0x7f00000002c0)={0x18, 0x0, 0x3917, {0x53a9}}, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0xffffffff}}, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x5}}, &(0x7f00000005c0)={0x28, 0xffffffffffffffda, 0x3, {{0x9, 0x7, 0x2}}}, &(0x7f0000000600)={0x60, 0x0, 0x9, {{0x1f, 0x40001e27, 0x7fffffffffffffff, 0x8000000000000000, 0x80, 0x400, 0x1, 0x6}}}, &(0x7f0000000680)={0x18, 0x0, 0x0, {0x7}}, &(0x7f00000006c0)={0x11, 0x0, 0xb, {'\x00'}}, &(0x7f0000000700)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0xd6cdaddfbad98e20}}, &(0x7f0000000800)={0x78, 0x0, 0x5, {0xfffffffffffffffe, 0x7, 0x0, {0x2, 0xd6, 0x2, 0x8, 0x6, 0x0, 0x3ff, 0x7, 0x5, 0x2000, 0x1, 0x0, 0x0, 0x4000000, 0xa}}}, &(0x7f00000009c0)={0x90, 0xfffffffffffffff5, 0x9, {0x5, 0x3, 0x4, 0xf13, 0x5, 0x3, {0x4, 0x13, 0x401, 0x1ff, 0x10, 0x0, 0x6, 0x4, 0x3ff, 0x6000, 0x162, 0x0, 0x0, 0x9e, 0x8}}}, &(0x7f0000000880)=ANY=[@ANYBLOB="e00000000000000005000000000000000100000000000000030000000000000d0f000000010000006261746164765f736c6176655f3100000300000000000000a40000000000000013000000040000002e2f62696e64657266732f62696e646572310000000000000100000000000000c4130000000000000000000000000000060085bf194e000000000000000000000000000013000000060000002e2f62696e64657266732f62696e6465722ef3cd9d3100000040000003000000000000000000000001000000130000000c0000002e2f62696e64657266732f62696e646572310000"], &(0x7f0000000dc0)={0x1f8, 0x0, 0x2, [{{0x2, 0x3, 0x4, 0x5, 0x3ff, 0x8cd, {0x4, 0x7, 0x2, 0x1, 0xffffffff, 0x1, 0x80000, 0x8001, 0x1, 0xa000, 0x7, 0x0, 0x0, 0x1594, 0x5ca3}}, {0x0, 0x20e, 0x13, 0x8, './binderfs/binder1\x00'}}, {{0x0, 0x2, 0x1000, 0x7, 0x2, 0xffff2d70, {0x3, 0x4, 0x4, 0x7, 0xff, 0x6, 0xb2e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}}, {0x6, 0x2ef, 0x0, 0x8}}, {{0x0, 0x1, 0x1ff, 0x7, 0x8, 0x897, {0x4, 0x7, 0x2, 0xb, 0x2, 0x1, 0x7, 0x401, 0x80000000, 0x8000, 0x4, r1, r2, 0x8, 0x8}}, {0x4, 0x6, 0x2, 0x5, '*['}}]}, &(0x7f00000011c0)={0xa0, 0xfffffffffffffffe, 0x56c5f0cf, {{0x1, 0x2, 0x3, 0x1f, 0x5, 0x6, {0x3, 0x5, 0x3ff, 0x0, 0x80, 0x6, 0xcc2, 0x9, 0x100, 0x4000, 0x7f, r3, r4, 0x1, 0x7}}, {0x0, 0x1c}}}, &(0x7f0000001280)={0x20, 0xfffffffffffffffe, 0x0, {0x2, 0x4, 0x6, 0xd623}}, &(0x7f0000001340)={0x130, 0x0, 0x2, {0x4, 0x0, 0x0, '\x00', {0x1, 0xe6d, 0x2, 0xfffffffa, r6, r7, 0x4000, '\x00', 0x1ff, 0x5bc5, 0x0, 0x4, {0xa2, 0x5}, {0x271a, 0x200}, {0x8, 0x9}, {0x2, 0x3}, 0x4, 0x249, 0xfffff7ef, 0xfe}}}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902780003010000000904000000010100000a24010000000201020a2407000000008e781f0904ae00000000000000040101010102000009050109000000000007250100000000090402000001020000090402010101020000082402010003f300072401000000000905820908000000000725"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x6) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r12 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@flushsa={0x20, 0x1c, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@mark={0xc, 0x15, {0x350759, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0xb7d77619ed9124c4}, 0x4040080) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) mount$9p_unix(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000980)={'trans=unix,', {[{@access_user}, {@debug={'debug', 0x3d, 0x3}}], [{@smackfshat={'smackfshat', 0x3d, '+@'}}]}}) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r12, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) bind$xdp(r9, &(0x7f0000000240)={0x2c, 0x1, r11, 0x0, r12}, 0x60) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 49.104866149s ago: executing program 7 (id=7731): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000b, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x7, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x7, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x800, 0x0, 0x5, 0x4, 0x3, 0xa7fffffc, 0x84, 0x0, 0x5, 0x80000001, 0x8, 0x4, 0x0, 0x45], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0x4, 0x8, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x2, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0xffffffff, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0xd, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x2], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x203, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x800, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x8000009, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0xa, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x8, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x200005, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0x4000001) r4 = socket$xdp(0x2c, 0x3, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x4, 0xdddd0000, 0x1000, &(0x7f0000295000/0x1000)=nil}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0xc07526e9738ca20, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x1, 0x0, &(0x7f0000000080), 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0xa}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r5, 0x4, 0x0, 0xe8, 0x7f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x780, 0x7800, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r5, 0x4, 0x0, 0xe8, 0x7f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x780, 0x7800, 0x9}}) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x70, 0x99, {0x7, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x70, 0x99, {0x7, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 48.916382568s ago: executing program 7 (id=7735): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000002440)=0x5) (async, rerun: 64) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) (rerun: 64) tee(r1, r3, 0xfffffffffffffc01, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000040)={0x0, 0x7fffffff, 0x6}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f00000000c0)={0x7, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0x20004050) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[]) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4}, 0x1) (async, rerun: 32) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) io_setup(0x78865af6, &(0x7f0000000e80)) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 48.819334007s ago: executing program 7 (id=7738): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8182, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) sync() openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100006dbd"]) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100006dbd"]) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x448}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120101020000418000082505a8a440030102030109021b00010108607c3a8a664f901500e4921e9e94ae0beab0b106"], 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) (async) flock(r7, 0x2) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) (async) r9 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r9, 0x1) flock(r9, 0x1) close(0x3) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3ffffffffeffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r11, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r10, {0x7, 0x26, 0x8, 0xfffffffff323da46, 0x0, 0xfffc, 0x6, 0x7, 0x0, 0x0, 0x10, 0x10002}}, 0x50) read$FUSE(r6, &(0x7f0000002100)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000002100)={0x2020}, 0x2020) 34.815924129s ago: executing program 36 (id=7738): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8182, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) sync() openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100006dbd"]) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100006dbd"]) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x448}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120101020000418000082505a8a440030102030109021b00010108607c3a8a664f901500e4921e9e94ae0beab0b106"], 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) (async) flock(r7, 0x2) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) (async) r9 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r9, 0x1) flock(r9, 0x1) close(0x3) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3ffffffffeffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r11, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r10, {0x7, 0x26, 0x8, 0xfffffffff323da46, 0x0, 0xfffc, 0x6, 0x7, 0x0, 0x0, 0x10, 0x10002}}, 0x50) read$FUSE(r6, &(0x7f0000002100)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000002100)={0x2020}, 0x2020) 1.340867817s ago: executing program 5 (id=8613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.337390777s ago: executing program 5 (id=8615): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "ab98b298"}, @global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 992.937531ms ago: executing program 8 (id=8621): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x4, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='.\x00', 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000800)=0x400a, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)="040e8f45fffdf50e4c7910c171b127c3cab890c81f614f27ade83b96cd6c4447059d829c0b000069ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c5a36900c2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c38bce4cfaeb276b0da6be9d57fe307968e93f2e87844e31ca8986b84e5b5d8855f", 0xa9}, {&(0x7f0000000840)="57c4451b3c7c75655c57ffb8dccde119b54a69a485415fd700812b78ca50a3e54c8889a100a7f82a7f53238a20b00bd47bc39e1db1b3e2694f378c94e9184aa53cc6032a2783db559dba2208439229a2bae2e355ebfe4f7563f0579056d94e75e1c33b5b68fe4cf4a85b48558a56b4e4076d56e10087c6ec2b3c50ea02951bbb8d8b36197ed4e2fcb1cf8686dffe5f3f9a3e9f565daa2ea6c783c11ef3f63dc91a0e66add12776e48fab54a2494e4fadc2ef061f489139cd012a", 0xba}, {&(0x7f0000000a80)="7827d3e65741740426d89147d59fd333d253aded53fa8a969a0f05177236c017d4a616e2c81a0e06caf88f55f46992a594ecd5ba2c71a70b5e9002e3dcdb3bf067e087ad62c4b02c7c8345cc901abc0d990e0dfe9a5efccffccd163c7e4c10683fe57ad5eff3fc73d8e5878410b52606538f56778aef3e7fae1a0c4f64506cc6815e23929bea0316b3e35cc28e017fa57e5fe08ee8feb3718f6859119a51aa97bbeea8ec9c9afa7c9c8fe96023e7649b5e412642c78972184b9e7cb5a81b05c6f85bd24c01fa3c417c", 0xc9}, {&(0x7f0000000900)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685", 0x19}, {&(0x7f00000002c0)="ab07cb5269eaac6a6d8297a151f6ff8a153e45bf2a870dfe905021cdda98e2d6477ec965f23931447052dc921b69a55a12335828601119c981897e5f9d23246304c348b44d28b95fe7fb2e3464e8cbca139ef88350e5009432e741b1e76efaf855d18b7583abc382ae1007611eb41150ce1a7244f400691426252a7da7033ed275dbfa75153d247ab17aed244023c89edc8dae89d2748d2a59a87e7062d3d17c", 0xa0}], 0x5}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x3, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc9d13126d", 0x6) 804.93374ms ago: executing program 0 (id=8624): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) (async) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000002700)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) getpeername(r1, &(0x7f0000000200)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1105, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/139, 0x8b, 0x0, 0x4}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1105, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/139, 0x8b, 0x0, 0x4}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 804.26848ms ago: executing program 5 (id=8625): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x4df}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0xfb, 0x81}}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x2, 0x1ff}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)="01", 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000b0000/0x2000)=nil, 0x2000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @mcast1, 0x6}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x100a}, @flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfffffffffffffffe}}, &(0x7f0000000000)={0x0, 0x18, 0x2a}}}], 0x0, 0x0, 0x0}) 803.72115ms ago: executing program 0 (id=8626): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 772.692773ms ago: executing program 6 (id=8627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r7}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001280)="5c3c46e83210fad3988503c8ffae7394e5a2f88c75bd6fe64e00a2dbdcca89dbbc4c1cd7767cf1b089558dce4413376c5ef288fdbc029fa1f44338cbfc4980b7cdcf204452347512b9f085d4060e28af75cbb451cae8cddbfd9689222f2621e6c7308db5e1596960fc9a19a40c5846b6ac5f76fe374602b91bde5957594c197a9da6d69a3d30d61d9a55f845bf26ea95b2e9d1ff604329ef799bc4426d7666f6c766c3ed4e144f84389382b353f78518b9a9421bd10711abf2c07d7938e59eeae32ba76fc95b382bb4311711", 0xcc}], 0x1}}], 0x1, 0x40000c0) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r10, &(0x7f0000005dc0)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) fchdir(r11) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r12, 0x2, 0x3) sendfile(r0, r0, 0x0, 0x1000007fd) 762.118344ms ago: executing program 0 (id=8628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 635.650577ms ago: executing program 0 (id=8629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) r3 = open(0x0, 0x48141, 0x8) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x400, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x84}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c0408d0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r5, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/50], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 635.281847ms ago: executing program 6 (id=8630): r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) r2 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1]) 629.689928ms ago: executing program 6 (id=8631): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@rdmsr={0x32, 0x18, {0x825}}, @wr_crn={0x46, 0x20, {0x8, 0x3}}, @wrmsr={0x1e, 0x20, {0x229, 0x7}}, @wr_crn={0x46, 0x20, {0x0, 0x1}}], 0x78}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x5, 0x0, [{0xb4d, 0x0, 0x3}, {0x1e0, 0x0, 0xffffffffffffffff}, {0x251, 0x0, 0xffffffffffffffff}, {0x95c, 0x0, 0x5}, {0x82f, 0x0, 0x400}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r2, 0x101, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) 599.24428ms ago: executing program 6 (id=8632): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x4, 0x3, 0x2}, 0x3}}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x8, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000100)={0x0, 0x28, ""/40}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace$poke(0x420f, r2, 0x0, 0xfffffffffffffffd) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xa2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_open_dev$hiddev(0x0, 0x7, 0x14000) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x46, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9}]}}, 0x0}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) 193.104211ms ago: executing program 8 (id=8633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x15, 0x0, &(0x7f0000000000)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/104, 0x68, 0x4, 0x800000000a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}, 0x1000}, @request_death={0x400c630e, 0x3}, @exit_looper], 0x0, 0x0, 0x0}) 192.841861ms ago: executing program 8 (id=8634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000b0000000014001462726f613d7b0c5855ea358e678702f5"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0xfffffdc2}, {0x0, 0x2000}, {&(0x7f0000000000)=""/42, 0x45}], 0x2) 190.443671ms ago: executing program 5 (id=8635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000180)='./file0\x00', 0x0, 0x30e2041, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 170.271743ms ago: executing program 8 (id=8636): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@private2}, 0x14) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r2, 0x98b2f000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$userns(r3, &(0x7f00000000c0)) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) 149.052805ms ago: executing program 0 (id=8637): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x14600, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x14600, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) 87.127252ms ago: executing program 5 (id=8638): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0xfffffffe, 0x28000003, 0xfffffffd, 0x0, 0xfffffffe, 0x2}) fchmod(r2, 0x20049549e2a2d659) write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000000)={0x1ffff, 0x100, 0x300, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 86.825672ms ago: executing program 8 (id=8639): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x80010, r0, 0xffffa000) 74.082223ms ago: executing program 5 (id=8640): lremovexattr(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="62747266732e5e5b407d2b00d8623969608e7bc1cf79916fd3709c81651f7cf2e15e7378519ed4b056e654c770fa82e4fcee41bd5fe10fd555d1ef79524921b629a3135d2da89431a704b58d96ada53c1a087a6e030f9a9990fd42b1c109a754cc1ba8a3c4c38f1f3c0328a1abcacc098ff1a34311354ff3cea1"]) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000011c0)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001280)="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", 0x4f9}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000540)="c8e6e63eeedf16e2d678e7be9b115dc27902aff175bfe3d9550157f7865a30cab549c5cb1bf0549d6b63340e149d585be971ae7c42412c18335933bd3b09dd9d3109e7531ee50d9d2dd7c2f335aa8aaeaadccab33982b24e0dc4535e4c15eb9bcfe3c5fb7930ad24f9edc421f0b01e926a5f40845da56a6c1b35e85d3baad77991dabe934cfea8da023105efc83855dbd44a6bebd71222437af0c1c6fa70a8501f87a5d6ca2fb0eabe6b010b529c50bd7622a92e3ffd99", 0xb7}, {&(0x7f0000000600)="a74286b717f81905d22309", 0xb}, {&(0x7f0000000640)="1fc50bcd", 0x4}, {&(0x7f0000000840)="ff9c0d6ce9ff2a94d3edf50c32386888552ee1b210013a8c71ca8cba1565742bf0c1db117d3b2c6407a9dc39824369e4a525a1759dcfaf0d6c3c9efbbc643f099bc56b5ecab721d929be00ee4f39bbafc176d1977c7a2bf7e91a026a0eb95d457c366dda26acea4ee528724e2676395919914e95622347ef32574700c794", 0x7e}], 0x4}}], 0x4, 0xc050) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0x39}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f0000000740)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1885bcf62da4c4dd02fd6b79d5524238de59e56e2faa653b57b9ed9ece942cc537cb515bb2d7156645ae9693a531e247bcaf2ec4821647cf244ad64059e8036da3e6b7b5f3e3424f96889fe843a1ef9c58236cde3cd2c5822fc147106bd3eec740a48ca2f31bc0ca03b65e1207f0af3876beaa0ee82d795cdf33bffcc904a0eb996515a7561eb31bed59d619d78656fc4c9ddef57635308c50bd6605da557eafec53f4c4d2128a99302a9a74b4eda4d89", 0xf7}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5", 0xb2}], 0x5}, 0x20000004) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) close(r2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7) keyctl$update(0x2, r1, &(0x7f0000001600)='a`h', 0x3) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r4, &(0x7f0000000040)=""/141, 0x8d) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000b80)={0x11, 0x86dd, r7, 0x1, 0x62}, 0x14) pselect6(0x40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xf, 0x4, 0x0, 0x2, 0x1}, 0x0, &(0x7f0000000100)={0x80000000, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x2}, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000a40)={0x1d, r7}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 73.263743ms ago: executing program 6 (id=8641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 21.143528ms ago: executing program 8 (id=8642): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x28, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) recvfrom$inet(r2, 0x0, 0x0, 0x20, 0x0, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14e50000000000000000000000000000000000001730ba62389085000000000000e401ea03730de7610b07000000f362ebeb323a495b", 0x3e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f00000021c0)=ANY=[@ANYRES32=r0], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000880)={'#! ', './file0', [{0x20, '.'}]}, 0xd) close_range(r1, 0xffffffffffffffff, 0x0) 18.736818ms ago: executing program 0 (id=8643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x19c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xe9ec}, {0x5}, {0x6, 0x11, 0x7034}, {0x8, 0xb, 0xffff2f79}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6e06}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x11}, {0x8, 0xb, 0x68b3}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8600}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r4 = syz_io_uring_complete(0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000480), 0x8, 0x0) r5 = dup2(r0, r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000600)=0x3) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x94008}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x16c, r7, 0x800, 0x70bd28, 0x6, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x550e}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcd6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xead}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10100000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000940)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000980)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1804d003}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x78, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c041}, 0x20040080) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, r10, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3eb5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r5) fcntl$getflags(r5, 0x401) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0xa4, 0x0, &(0x7f0000000ec0)=[@register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000cc0)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000d40)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000e00)={@ptr={0x70742a85, 0x0, &(0x7f0000000d80)=""/105, 0x69, 0x2, 0x3a}, @fda={0x66646185, 0xa, 0x1, 0x5}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000e80)={0x0, 0x28, 0x48}}}], 0xb1, 0x0, &(0x7f0000000f80)="4811138aa3c20b1a0434a55e6e13c25ee6a622ec92ce315d9c78b6e3dd08d0def1521274ee7b5c4a6b2148ec1cd2f24ab5949fc5d3bf1621e3ba0eda97997d0d660a68a118d063083c0595c4f3558b859090b7de9ff96ff4483e69861b44f9493b667bfb6c07050104906cba581a162d88f8d5b72c7fe29c65b489ae065c526eed7fd0d6906bf3d6e69e3682eff36c84a135a5794840f851741a305d7f11bab8b1e209e281e0ab6b5ebbe6de69d4440394"}) socket$netlink(0x10, 0x3, 0xb) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r11, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x88, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5}]}}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa7}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x6001}, 0x4008800) 0s ago: executing program 6 (id=8644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000c, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000700)) ioctl$NS_GET_OWNER_UID(r4, 0x8008b705, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x2d98, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) r7 = socket$unix(0x1, 0x2, 0x0) stat(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)) recvmsg$unix(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000200)=""/94, 0x5e}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/95, 0x5f}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f0000002980)=""/216, 0xd8}], 0xa, &(0x7f00000008c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): p internal KVM state. [ 542.891163][T19815] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 542.960397][T19823] rust_binder: Failed copying remainder into alloc: EFAULT [ 542.960417][T19823] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 542.967929][T19823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 542.976975][T19823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:120 [ 543.086068][T19835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 543.095454][T19835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 543.159729][T19840] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6517'. [ 543.209376][T19838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 543.307465][T19845] rust_binder: Error while translating object. [ 543.321959][T19845] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 543.329162][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6520'. [ 543.330835][T19845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:132 [ 543.504517][T19860] cgroup: Unknown subsys name 'measure' [ 543.653236][T19862] rust_binder: Error while translating object. [ 543.653270][T19862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 543.659682][T19862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 544.808682][ T492] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 544.852176][ T6706] tipc: Subscription rejected, illegal request [ 544.970612][ T492] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 544.981875][ T492] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1576, setting to 1024 [ 544.994913][ T492] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 545.010822][ T492] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.020964][ T492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.030932][ T492] usb 1-1: Product: syz [ 545.036028][ T492] usb 1-1: Manufacturer: syz [ 545.040786][ T492] usb 1-1: SerialNumber: syz [ 545.049067][ T36] kauditd_printk_skb: 1136 callbacks suppressed [ 545.049085][ T36] audit: type=1400 audit(2016782793.108:74560): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.084926][ T36] audit: type=1400 audit(2016782793.119:74561): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.112486][ T36] audit: type=1400 audit(2016782793.119:74562): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.139535][ T36] audit: type=1400 audit(2016782793.119:74563): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.265955][ T36] audit: type=1400 audit(2016782793.344:74564): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.292700][T19894] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 545.302242][ T36] audit: type=1400 audit(2016782793.366:74565): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.328791][ T36] audit: type=1400 audit(2016782793.366:74566): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.354266][ T36] audit: type=1400 audit(2016782793.366:74567): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.380951][ T36] audit: type=1400 audit(2016782793.376:74568): avc: denied { ioctl } for pid=19893 comm="syz.0.6536" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.469432][ T36] audit: type=1400 audit(2016782793.559:74569): avc: denied { create } for pid=19918 comm="syz.5.6545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 545.608558][T19930] SELinux: Context @- is not valid (left unmapped). [ 545.787536][T19945] overlayfs: failed to clone upperpath [ 545.880963][T19894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6536'. [ 545.907754][ T492] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 545.917620][ T492] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 545.937294][T19952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65284 sclass=netlink_route_socket pid=19952 comm=syz.4.6558 [ 545.942325][ T492] cdc_ncm 1-1:1.0: bind() failure [ 545.964647][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6558'. [ 545.975394][ T492] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 545.981909][T19952] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6558'. [ 545.982221][ T492] cdc_ncm 1-1:1.1: bind() failure [ 546.000443][ T492] usb 1-1: USB disconnect, device number 69 [ 546.403943][T19971] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6564'. [ 546.414216][T19971] binder: Unknown parameter 'contextÌðÔð[7’' [ 546.491206][T19972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1538 sclass=netlink_tcpdiag_socket pid=19972 comm=syz.0.6564 [ 546.506224][T19977] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6567'. [ 547.249245][T20025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6579'. [ 547.267785][T20025] binder: Bad value for 'defcontext' [ 547.520024][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.549214][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.569430][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.579505][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.597842][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.616464][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.632684][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.649704][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.663134][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.671678][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.681135][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.694609][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.713094][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.721530][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.729334][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.737038][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.756711][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.765477][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.772554][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.788483][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.796340][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.811010][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.818138][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.839973][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.858462][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.865385][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.895022][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.902132][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.911752][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.919274][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.926365][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.933973][T20055] 9pnet_fd: Insufficient options for proto=fd [ 547.941555][T20055] 9pnet_fd: Insufficient options for proto=fd [ 548.075353][T20090] 9pnet_fd: Insufficient options for proto=fd [ 548.164475][T20103] cgroup: none used incorrectly [ 548.171004][T20104] cgroup: none used incorrectly [ 548.298472][T20114] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 548.802083][T20141] netlink: 'syz.6.6619': attribute type 12 has an invalid length. [ 548.814513][T20141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20141 comm=syz.6.6619 [ 549.506630][ T45] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 549.655439][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 549.721606][ T36] kauditd_printk_skb: 661 callbacks suppressed [ 549.721626][ T36] audit: type=1400 audit(2016782798.122:75231): avc: denied { ioctl } for pid=20171 comm="syz.0.6631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.776841][ T45] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 549.785987][ T36] audit: type=1400 audit(2016782798.186:75232): avc: denied { create } for pid=20195 comm="syz.4.6640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.813262][ T36] audit: type=1400 audit(2016782798.219:75233): avc: denied { ioctl } for pid=20171 comm="syz.0.6631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.842942][ T36] audit: type=1400 audit(2016782798.251:75234): avc: denied { ioctl } for pid=20171 comm="syz.0.6631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.878201][ T36] audit: type=1400 audit(2016782798.251:75235): avc: denied { ioctl } for pid=20171 comm="syz.0.6631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.904259][ T36] audit: type=1400 audit(2016782798.251:75236): avc: denied { setopt } for pid=20195 comm="syz.4.6640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.926191][ T36] audit: type=1400 audit(2016782798.326:75237): avc: denied { ioctl } for pid=20171 comm="syz.0.6631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.972565][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 549.978129][ T45] usb usb1-port1: attempt power cycle [ 549.983741][ T36] audit: type=1400 audit(2016782798.390:75238): avc: denied { ioctl } for pid=20171 comm="syz.0.6631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.009677][ T36] audit: type=1400 audit(2016782798.412:75239): avc: denied { create } for pid=20203 comm="syz.4.6642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.031806][ T36] audit: type=1400 audit(2016782798.412:75240): avc: denied { create } for pid=20203 comm="syz.4.6642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.326469][ T45] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 550.347139][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 550.475621][ T45] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 550.504429][ T45] usb 1-1: Invalid ep0 maxpacket: 64 [ 550.516929][ T45] usb usb1-port1: unable to enumerate USB device [ 550.561969][T20218] overlayfs: failed to clone upperpath [ 551.362147][T20252] 9pnet_fd: Insufficient options for proto=fd [ 551.527903][T20261] netlink: 'syz.5.6663': attribute type 4 has an invalid length. [ 551.538825][T20261] netlink: 'syz.5.6663': attribute type 4 has an invalid length. [ 551.633589][T20265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6665'. [ 552.229357][T20296] /dev/nullb0: Can't lookup blockdev [ 552.317533][T20301] rust_binder: Error while translating object. [ 552.317582][T20301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 552.324965][T20301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 552.391170][T20307] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 552.799568][T20331] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 553.132343][T20354] overlayfs: failed to clone upperpath [ 553.463367][T20386] overlayfs: failed to clone upperpath [ 553.492981][T20388] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6710'. [ 553.863691][T20403] netlink: 'syz.5.6714': attribute type 4 has an invalid length. [ 553.873121][T20403] netlink: 3581 bytes leftover after parsing attributes in process `syz.5.6714'. [ 554.106071][T20421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 554.106939][T20421] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 554.158387][T20426] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 554.393114][ T36] kauditd_printk_skb: 955 callbacks suppressed [ 554.393136][ T36] audit: type=1400 audit(2016782803.132:76196): avc: denied { read write } for pid=20445 comm="syz.0.6730" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 554.432257][ T36] audit: type=1400 audit(2016782803.132:76197): avc: denied { read write open } for pid=20445 comm="syz.0.6730" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 554.457949][ T36] audit: type=1400 audit(2016782803.154:76198): avc: denied { create } for pid=20447 comm="syz.6.6731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 554.481810][ T36] audit: type=1400 audit(2016782803.154:76199): avc: denied { write } for pid=20447 comm="syz.6.6731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 554.504478][ T36] audit: type=1400 audit(2016782803.154:76200): avc: denied { write } for pid=20447 comm="syz.6.6731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 554.524744][ T36] audit: type=1400 audit(2016782803.186:76201): avc: denied { block_suspend } for pid=20445 comm="syz.0.6730" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 554.549138][ T36] audit: type=1400 audit(2016782803.186:76202): avc: denied { map } for pid=20445 comm="syz.0.6730" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 554.559047][T20454] /dev/rnullb0: Can't open blockdev [ 554.573597][ T36] audit: type=1400 audit(2016782803.186:76203): avc: denied { read } for pid=20445 comm="syz.0.6730" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 554.605421][ T36] audit: type=1400 audit(2016782803.250:76204): avc: denied { read write } for pid=18799 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 554.632437][ T36] audit: type=1400 audit(2016782803.250:76205): avc: denied { read write open } for pid=18799 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 554.690985][T20460] rust_binder: Write failure EFAULT in pid:241 [ 554.932714][T20475] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 554.985622][T20478] rust_binder: Write failure EFAULT in pid:256 [ 555.269958][T20499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277 [ 555.307816][T20501] input: syz0 as /devices/virtual/input/input43 [ 555.648415][T20514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 555.889004][T20534] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6761'. [ 556.042218][T20537] SELinux: policydb table sizes (104,0) do not match mine (6,7) [ 556.050173][T20537] SELinux: failed to load policy [ 556.060643][T20536] veth0_to_team: entered promiscuous mode [ 556.066779][T20536] veth0_to_team: entered allmulticast mode [ 556.118225][T20541] rust_binder: Write failure EFAULT in pid:301 [ 556.667712][T20583] overlayfs: failed to clone upperpath [ 556.684448][T20583] overlayfs: failed to clone upperpath [ 557.047765][T20601] random: crng reseeded on system resumption [ 557.112872][T20608] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6785'. [ 557.179149][T20614] netlink: 'syz.0.6786': attribute type 3 has an invalid length. [ 557.187140][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6786'. [ 557.198439][T20614] netlink: 'syz.0.6786': attribute type 4 has an invalid length. [ 557.206695][T20614] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6786'. [ 557.222681][T20614] rust_binder: 317: no such ref 3 [ 557.228379][T20614] rust_binder: Write failure EINVAL in pid:317 [ 557.799571][T20695] SELinux: security_context_str_to_sid () failed with errno=-22 [ 558.060528][T20712] cgroup: Name too long [ 558.461339][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6831'. [ 558.481485][T20752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6831'. [ 558.910829][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6842'. [ 559.122928][ T36] kauditd_printk_skb: 823 callbacks suppressed [ 559.122947][ T36] audit: type=1400 audit(2016782808.207:77029): avc: denied { read write } for pid=18799 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.185361][ T36] audit: type=1400 audit(2016782808.207:77030): avc: denied { read write open } for pid=18799 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.219954][ T36] audit: type=1400 audit(2016782808.207:77031): avc: denied { ioctl } for pid=18799 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.249589][ T36] audit: type=1400 audit(2016782808.315:77032): avc: denied { execmem } for pid=20797 comm="syz.0.6850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 559.276248][ T36] audit: type=1400 audit(2016782808.347:77033): avc: denied { create } for pid=20800 comm="syz.5.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.309257][ T36] audit: type=1400 audit(2016782808.347:77034): avc: denied { write } for pid=20800 comm="syz.5.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.331881][ T36] audit: type=1400 audit(2016782808.347:77035): avc: denied { read } for pid=20800 comm="syz.5.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.354938][ T36] audit: type=1400 audit(2016782808.347:77036): avc: denied { read } for pid=20800 comm="syz.5.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.384286][ T36] audit: type=1400 audit(2016782808.347:77037): avc: denied { create } for pid=20800 comm="syz.5.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.406311][ T36] audit: type=1400 audit(2016782808.347:77038): avc: denied { write } for pid=20800 comm="syz.5.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.434466][T20813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6853'. [ 559.492878][T20818] overlayfs: missing 'workdir' [ 559.913305][T20846] netlink: 'syz.6.6863': attribute type 4 has an invalid length. [ 559.935867][T20846] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6863'. [ 560.365183][T20884] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 560.514727][T20889] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6879'. [ 560.678187][T20895] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 560.870985][T20908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:409 [ 560.871353][T20909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:409 [ 561.048926][T20918] fuse: Unknown parameter '€ootvod' [ 561.143860][T20926] netlink: 328 bytes leftover after parsing attributes in process `syz.5.6893'. [ 561.256745][T20939] fuse: Bad value for 'fd' [ 561.306003][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 561.455123][ T9] usb 1-1: device descriptor read/64, error -71 [ 561.678915][ T9] usb 1-1: device descriptor read/64, error -71 [ 561.903040][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 562.033086][ T9] usb 1-1: device descriptor read/64, error -71 [ 562.147944][T20991] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6914'. [ 562.158175][T20992] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6914'. [ 562.168337][T20993] netlink: 'syz.4.6912': attribute type 63 has an invalid length. [ 562.176508][T20993] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6912'. [ 562.185493][T20993] gretap0: entered allmulticast mode [ 562.191534][T20993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 562.256905][ T9] usb 1-1: device descriptor read/64, error -71 [ 562.310836][T21003] overlayfs: failed to clone upperpath [ 562.359603][ T9] usb usb1-port1: attempt power cycle [ 562.676112][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 562.697202][ T9] usb 1-1: device descriptor read/8, error -71 [ 562.827549][ T9] usb 1-1: device descriptor read/8, error -71 [ 563.048934][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 563.070351][ T9] usb 1-1: device descriptor read/8, error -71 [ 563.200786][ T9] usb 1-1: device descriptor read/8, error -71 [ 563.300706][ T9] usb usb1-port1: unable to enumerate USB device [ 563.870443][ T36] kauditd_printk_skb: 494 callbacks suppressed [ 563.870463][ T36] audit: type=1400 audit(2016782813.304:77533): avc: denied { read write } for pid=18799 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 563.901914][T21051] rust_binder: Write failure EFAULT in pid:417 [ 563.908816][T21052] rust_binder: Write failure EFAULT in pid:417 [ 563.920031][ T36] audit: type=1400 audit(2016782813.304:77534): avc: denied { read write open } for pid=18799 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 563.955667][ T36] audit: type=1400 audit(2016782813.304:77535): avc: denied { ioctl } for pid=18799 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 563.983757][ T36] audit: type=1400 audit(2016782813.314:77536): avc: denied { read write } for pid=21050 comm="syz.0.6933" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 564.015028][ T36] audit: type=1400 audit(2016782813.314:77537): avc: denied { read write open } for pid=21050 comm="syz.0.6933" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 564.041166][ T36] audit: type=1400 audit(2016782813.314:77538): avc: denied { ioctl } for pid=21050 comm="syz.0.6933" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 564.073215][ T36] audit: type=1400 audit(2016782813.346:77539): avc: denied { ioctl } for pid=21050 comm="syz.0.6933" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 564.100205][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 564.103492][T21058] /dev/rnullb0: Can't open blockdev [ 564.111730][ T36] audit: type=1400 audit(2016782813.379:77540): avc: denied { read write } for pid=18799 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 564.139999][ T36] audit: type=1400 audit(2016782813.379:77541): avc: denied { read write open } for pid=18799 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 564.168327][ T36] audit: type=1400 audit(2016782813.379:77542): avc: denied { ioctl } for pid=18799 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 564.549886][ T438] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 564.597320][T21088] overlayfs: failed to clone upperpath [ 564.703695][T21097] overlayfs: failed to clone upperpath [ 564.708040][ T438] usb 1-1: Using ep0 maxpacket: 32 [ 564.718429][ T438] usb 1-1: unable to get BOS descriptor or descriptor too short [ 564.729075][ T438] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 564.741018][ T438] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 564.742183][T21097] overlayfs: failed to clone upperpath [ 564.753730][ T438] usb 1-1: can't read configurations, error -61 [ 564.801131][T21107] overlayfs: failed to clone upperpath [ 564.876552][ T438] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 564.936965][T21124] cannot load conntrack support for proto=3 [ 565.025464][ T438] usb 1-1: Using ep0 maxpacket: 32 [ 565.037803][ T438] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.054891][ T438] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 565.074315][ T438] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 565.083990][ T438] usb 1-1: can't read configurations, error -61 [ 565.091932][ T438] usb usb1-port1: attempt power cycle [ 565.139663][T21143] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6965'. [ 565.407216][ T438] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 565.437011][ T438] usb 1-1: Using ep0 maxpacket: 32 [ 565.446266][ T438] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.453991][ T438] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 565.466627][ T438] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 565.474683][ T438] usb 1-1: can't read configurations, error -61 [ 565.532121][T21173] netlink: 'syz.6.6972': attribute type 4 has an invalid length. [ 565.542201][T21173] netlink: 'syz.6.6972': attribute type 4 has an invalid length. [ 565.612131][ T438] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 565.631755][ T438] usb 1-1: Using ep0 maxpacket: 32 [ 565.639791][ T438] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.647778][ T438] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 565.658172][ T438] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 565.665996][ T438] usb 1-1: can't read configurations, error -61 [ 565.672670][ T438] usb usb1-port1: unable to enumerate USB device [ 566.532869][T21203] overlayfs: missing 'workdir' [ 567.033568][T21211] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6984'. [ 567.423203][T21227] rust_binder: Read failure Err(EFAULT) in pid:438 [ 567.471449][T21247] rust_binder: Error while translating object. [ 567.479903][T21247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 567.486445][T21247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:442 [ 567.537036][T21251] rust_binder: Error while translating object. [ 567.546690][T21251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 567.553473][T21251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 567.968050][T21281] netlink: 182 bytes leftover after parsing attributes in process `syz.5.7007'. [ 568.102557][T21293] netlink: 'syz.5.7012': attribute type 64 has an invalid length. [ 568.134258][T21293] netlink: 'syz.5.7012': attribute type 4 has an invalid length. [ 568.199734][T21302] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 568.576867][ T36] kauditd_printk_skb: 689 callbacks suppressed [ 568.576886][ T36] audit: type=1400 audit(2016782818.357:78232): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.641800][ T36] audit: type=1400 audit(2016782818.421:78233): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.697255][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 568.706029][ T36] audit: type=1400 audit(2016782818.486:78234): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.736065][ T36] audit: type=1400 audit(2016782818.496:78235): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.764162][ T36] audit: type=1400 audit(2016782818.496:78236): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.791636][ T36] audit: type=1400 audit(2016782818.561:78237): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.820795][ T36] audit: type=1400 audit(2016782818.582:78238): avc: denied { create } for pid=21310 comm="syz.5.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.841690][ T36] audit: type=1400 audit(2016782818.582:78239): avc: denied { setopt } for pid=21310 comm="syz.5.7020" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.851231][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 568.866768][ T36] audit: type=1400 audit(2016782818.647:78240): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.895600][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 568.906235][ T36] audit: type=1400 audit(2016782818.647:78241): avc: denied { ioctl } for pid=21306 comm="syz.0.7018" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 568.941704][ T6693] bridge_slave_1: left allmulticast mode [ 568.947599][ T6693] bridge_slave_1: left promiscuous mode [ 568.964719][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.976323][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.990718][ T9] usb 1-1: config 0 descriptor?? [ 568.996020][T21317] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7022'. [ 569.005377][ T6693] bridge_slave_0: left allmulticast mode [ 569.014905][T21319] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7022'. [ 569.020665][ T6693] bridge_slave_0: left promiscuous mode [ 569.030200][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.142423][ T6693] veth1_macvtap: left promiscuous mode [ 569.154278][ T6693] veth0_vlan: left promiscuous mode [ 569.382048][ T9] wacom 0003:056A:0059.001F: unknown main item tag 0x0 [ 569.396811][ T9] wacom 0003:056A:0059.001F: unknown main item tag 0x0 [ 569.411624][ T9] wacom 0003:056A:0059.001F: unknown main item tag 0x0 [ 569.425619][ T9] wacom 0003:056A:0059.001F: unknown main item tag 0x0 [ 569.432858][ T9] wacom 0003:056A:0059.001F: unknown main item tag 0x0 [ 569.442315][ T9] wacom 0003:056A:0059.001F: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.0-1/input0 [ 569.584315][ T9] usb 1-1: USB disconnect, device number 82 [ 570.110208][ T475] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 570.118491][ T475] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 570.129349][ T475] hid-generic 0000:0004:0000.0020: unknown main item tag 0x0 [ 570.144879][ T475] hid-generic 0000:0004:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 570.433005][T21383] netlink: 'syz.0.7045': attribute type 27 has an invalid length. [ 570.448279][T21383] /dev/rnullb0: Can't open blockdev [ 570.490600][T21387] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7046'. [ 570.509572][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7046'. [ 570.617709][T21402] netlink: 'syz.0.7050': attribute type 27 has an invalid length. [ 570.637442][T21407] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7052'. [ 570.651004][T21402] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.658514][T21402] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.678684][T21402] veth0_to_team: left promiscuous mode [ 570.694075][T21402] veth0_to_team: left allmulticast mode [ 570.873972][T21415] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 570.894730][T21415] rust_binder: Write failure EINVAL in pid:471 [ 570.960649][ T6693] bridge_slave_1: left allmulticast mode [ 570.974241][ T6693] bridge_slave_1: left promiscuous mode [ 570.980018][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.048826][T21413] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.056573][T21413] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.064219][T21413] bridge_slave_0: entered allmulticast mode [ 571.070981][T21413] bridge_slave_0: entered promiscuous mode [ 571.081856][T21413] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.090561][T21413] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.098159][T21413] bridge_slave_1: entered allmulticast mode [ 571.105024][T21413] bridge_slave_1: entered promiscuous mode [ 571.111088][ T6693] tipc: Disabling bearer [ 571.116574][ T6693] tipc: Left network mode [ 571.129084][ T6693] veth1_macvtap: left promiscuous mode [ 571.134711][ T6693] veth0_vlan: left promiscuous mode [ 571.327824][T21413] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.335160][T21413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.342617][T21413] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.349699][T21413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.418611][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.427965][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.445359][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.452560][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.465665][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.472971][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.582632][T21413] veth0_vlan: entered promiscuous mode [ 571.637217][T21413] veth1_macvtap: entered promiscuous mode [ 571.787977][T21456] rust_binder: Got transaction with invalid offset. [ 571.788023][T21456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 571.797575][T21456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 572.061436][T21466] kvm: kvm [21465]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 572.079632][T21466] kvm: kvm [21465]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 572.295544][T21479] netlink: 196 bytes leftover after parsing attributes in process `syz.6.7068'. [ 573.072922][T21498] 9pnet_fd: Insufficient options for proto=fd [ 573.302217][ T36] kauditd_printk_skb: 435 callbacks suppressed [ 573.302238][ T36] audit: type=1400 audit(2016782823.421:78677): avc: denied { read write } for pid=21503 comm="syz.6.7076" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 573.367447][ T36] audit: type=1400 audit(2016782823.421:78678): avc: denied { read open } for pid=21503 comm="syz.6.7076" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 573.413930][ T36] audit: type=1400 audit(2016782823.421:78679): avc: denied { ioctl } for pid=21503 comm="syz.6.7076" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 573.455230][ T36] audit: type=1400 audit(2016782823.453:78680): avc: denied { mounton } for pid=21503 comm="syz.6.7076" path="/9/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 573.575685][ T36] audit: type=1400 audit(2016782823.711:78681): avc: denied { mounton } for pid=21514 comm="syz.0.7079" path="/174/file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 573.624010][ T36] audit: type=1400 audit(2016782823.743:78682): avc: denied { create } for pid=21514 comm="syz.0.7079" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 573.647183][ T36] audit: type=1400 audit(2016782823.743:78683): avc: denied { map } for pid=21514 comm="syz.0.7079" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 573.678567][ T36] audit: type=1400 audit(2016782823.743:78684): avc: denied { read write } for pid=21514 comm="syz.0.7079" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 573.705164][ T36] audit: type=1400 audit(2016782823.743:78685): avc: denied { associate } for pid=21514 comm="syz.0.7079" name="kvm" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 573.728552][ T36] audit: type=1400 audit(2016782823.829:78686): avc: denied { create } for pid=21516 comm="syz.5.7080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 573.814038][T21526] 9pnet: Could not find request transport: xen [ 574.257607][T21548] rust_binder: Error while translating object. [ 574.257677][T21548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 574.275664][T21548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40 [ 574.402698][T21562] fuse: Bad value for 'fd' [ 574.522879][T21571] can: request_module (can-proto-0) failed. [ 575.224860][T21633] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 575.238216][T21633] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 575.317550][T21636] rust_binder: Write failure EFAULT in pid:45 [ 575.377371][T21645] fuse: Bad value for 'user_id' [ 575.389680][T21645] fuse: Bad value for 'user_id' [ 575.401976][T21645] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 216, size: 233) [ 575.402003][T21645] rust_binder: Error while translating object. [ 575.413445][T21645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 575.420729][T21645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 575.482925][T21649] rust_binder: Failed copying into alloc: EFAULT [ 575.492455][T21649] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 575.499056][T21649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 575.510356][T21649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:51 [ 575.753301][T21663] overlayfs: failed to clone upperpath [ 575.825569][T21667] fuse: Bad value for 'group_id' [ 575.830717][T21667] fuse: Bad value for 'group_id' [ 576.312938][T21678] overlayfs: failed to clone upperpath [ 576.344419][T21674] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.351679][T21674] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.359019][T21674] bridge_slave_0: entered allmulticast mode [ 576.366189][T21683] tmpfs: Invalid uid '0x00000000ffffffff' [ 576.367635][T21674] bridge_slave_0: entered promiscuous mode [ 576.380765][T21674] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.388767][T21674] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.396013][T21674] bridge_slave_1: entered allmulticast mode [ 576.403921][T21674] bridge_slave_1: entered promiscuous mode [ 576.516263][T21674] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.523378][T21674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.530929][T21674] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.538052][T21674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.594262][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.602844][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.626762][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.634013][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.655718][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.662887][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.794466][T21674] veth0_vlan: entered promiscuous mode [ 576.856231][T21674] veth1_macvtap: entered promiscuous mode [ 577.535584][T21760] input: syz0 as /devices/virtual/input/input47 [ 577.766194][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 577.910617][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.921134][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 577.935228][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 577.941901][ T9] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 577.953189][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.964316][ T9] usb 8-1: config 0 descriptor?? [ 577.971671][ T36] kauditd_printk_skb: 544 callbacks suppressed [ 577.971689][ T36] audit: type=1400 audit(2016782828.421:79231): avc: denied { ioctl } for pid=21759 comm="syz.7.7161" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.003446][ T36] audit: type=1400 audit(2016782828.421:79232): avc: denied { ioctl } for pid=21759 comm="syz.7.7161" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.048332][ T36] audit: type=1400 audit(2016782828.421:79233): avc: denied { ioctl } for pid=21759 comm="syz.7.7161" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.083906][ T36] audit: type=1400 audit(2016782828.464:79234): avc: denied { create } for pid=21769 comm="syz.0.7165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 578.110298][ T36] audit: type=1400 audit(2016782828.464:79235): avc: denied { setopt } for pid=21769 comm="syz.0.7165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 578.131801][ T36] audit: type=1400 audit(2016782828.507:79236): avc: denied { mounton } for pid=21769 comm="syz.0.7165" path="/219/file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 578.156125][ T36] audit: type=1400 audit(2016782828.507:79237): avc: denied { mounton } for pid=21769 comm="syz.0.7165" path="/219/file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 578.182636][ T36] audit: type=1400 audit(2016782828.507:79238): avc: denied { mounton } for pid=21769 comm="syz.0.7165" path="/219/file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 578.200192][T21760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 578.211857][ T36] audit: type=1400 audit(2016782828.517:79239): avc: denied { mounton } for pid=21769 comm="syz.0.7165" path="/219/file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 578.220487][ T9] usb 8-1: string descriptor 0 read error: -71 [ 578.227632][ T36] audit: type=1400 audit(2016782828.560:79240): avc: denied { create } for pid=21774 comm="syz.5.7166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 578.272810][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 578.291491][ T9] usb 8-1: USB disconnect, device number 2 [ 578.663190][T21799] rust_binder: Got transaction with invalid offset. [ 578.663254][T21799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 578.670153][T21799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 578.992983][T21810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 579.018093][T21810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:67 [ 579.508788][T21821] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 580.267822][T21851] netlink: 'syz.6.7188': attribute type 9 has an invalid length. [ 580.294632][T21851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7188'. [ 580.955098][T21881] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 580.981842][T21881] overlayfs: missing 'lowerdir' [ 581.563294][T21910] netlink: 'syz.5.7211': attribute type 3 has an invalid length. [ 581.585219][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7211'. [ 581.656649][T21916] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 581.706969][T21921] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 581.754447][T21923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 581.795668][T21928] rust_binder: Write failure EFAULT in pid:24 [ 581.873970][T21932] overlay: filesystem on ./file0 not supported as upperdir [ 581.888936][T21932] overlay: filesystem on ./file0 not supported as upperdir [ 581.901978][T21932] overlay: filesystem on ./file0 not supported as upperdir [ 581.911372][T21932] overlay: filesystem on ./file0 not supported as upperdir [ 581.914405][T21938] binder: Bad value for 'stats' [ 581.924775][T21932] overlay: filesystem on ./file0 not supported as upperdir [ 582.629687][T22000] overlayfs: failed to clone upperpath [ 582.633450][T21989] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.644664][ T36] kauditd_printk_skb: 15621 callbacks suppressed [ 582.644683][ T36] audit: type=1400 audit(2016782833.442:94793): avc: denied { mounton } for pid=21999 comm="syz.6.7242" path="/35/bus" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 582.650548][T21989] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.664929][T22000] overlayfs: failed to clone upperpath [ 582.675356][T21989] bridge_slave_0: entered allmulticast mode [ 582.693429][T21989] bridge_slave_0: entered promiscuous mode [ 582.702185][T21989] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.710224][T21989] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.718533][T21989] bridge_slave_1: entered allmulticast mode [ 582.724969][T21989] bridge_slave_1: entered promiscuous mode [ 582.735905][ T36] audit: type=1400 audit(2016782833.549:94794): avc: denied { create } for pid=21999 comm="syz.6.7242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.765732][ T36] audit: type=1400 audit(2016782833.571:94795): avc: denied { getopt } for pid=21999 comm="syz.6.7242" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.797866][ T36] audit: type=1400 audit(2016782833.603:94796): avc: denied { sys_module } for pid=21989 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 582.829729][T22005] /dev/loop0: Can't lookup blockdev [ 582.837010][ T36] audit: type=1400 audit(2016782833.603:94797): avc: denied { sys_module } for pid=21989 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 582.866006][ T36] audit: type=1400 audit(2016782833.603:94798): avc: denied { create } for pid=22004 comm="syz.0.7244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.903816][ T6693] bridge_slave_1: left allmulticast mode [ 582.909699][ T6693] bridge_slave_1: left promiscuous mode [ 582.921180][ T36] audit: type=1400 audit(2016782833.603:94799): avc: denied { setopt } for pid=22004 comm="syz.0.7244" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.948922][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.967500][ T36] audit: type=1400 audit(2016782833.624:94800): avc: denied { read write } for pid=21674 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 582.992982][ T6693] bridge_slave_0: left allmulticast mode [ 582.998792][ T6693] bridge_slave_0: left promiscuous mode [ 583.007091][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.014602][ T36] audit: type=1400 audit(2016782833.624:94801): avc: denied { read write open } for pid=21674 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 583.054705][ T36] audit: type=1400 audit(2016782833.624:94802): avc: denied { ioctl } for pid=21674 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 583.103457][T22018] __vm_enough_memory: pid: 22018, comm: syz.7.7247, bytes: 18014402804453376 not enough memory for the allocation [ 583.138274][ T46] tipc: Subscription rejected, illegal request [ 583.301445][T22025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 583.302704][T22025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 583.308787][T22026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 583.330651][T21989] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.347292][T21989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.354634][T21989] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.361885][T21989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.474676][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.484382][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.511522][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.518756][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.535094][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.542291][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.670528][T22049] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7258'. [ 583.743258][T21989] veth0_vlan: entered promiscuous mode [ 583.830748][T21989] veth1_macvtap: entered promiscuous mode [ 584.175913][T22074] rust_binder: Error in use_page_slow: ESRCH [ 584.175944][T22074] rust_binder: use_range failure ESRCH [ 584.184834][T22074] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 584.193862][T22074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 584.217649][T22074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 584.261281][T22086] rust_binder: Error while translating object. [ 584.274311][T22084] 9pnet_fd: Insufficient options for proto=fd [ 584.287501][T22086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 584.287544][T22086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 584.412469][T22095] fuse: blksize only supported for fuseblk [ 584.461493][T22095] rust_binder: Write failure EFAULT in pid:6 [ 584.756625][T22119] overlay: filesystem on ./file0 not supported as upperdir [ 584.796872][T22119] netlink: 'syz.7.7282': attribute type 28 has an invalid length. [ 585.204141][ T331] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 585.383319][ T331] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 585.402730][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.415011][ T331] usb 6-1: Product: syz [ 585.420017][ T331] usb 6-1: Manufacturer: syz [ 585.425109][ T331] usb 6-1: SerialNumber: syz [ 585.456653][T22168] netlink: 'syz.7.7299': attribute type 2 has an invalid length. [ 585.469422][T22168] rust_binder: 90: no such ref 2 [ 585.474441][T22168] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 585.482166][T22168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90 [ 585.688116][T22178] netlink: 'syz.6.7304': attribute type 4 has an invalid length. [ 585.705190][T22178] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7304'. [ 585.800703][ T331] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 585.892236][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7310'. [ 585.972242][ T331] usb 8-1: unable to get BOS descriptor or descriptor too short [ 585.980978][ T331] usb 8-1: not running at top speed; connect to a high speed hub [ 585.992212][ T331] usb 8-1: config 13 has an invalid interface number: 90 but max is 0 [ 586.001806][ T331] usb 8-1: config 13 has no interface number 0 [ 586.009496][ T331] usb 8-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 586.027701][ T331] usb 8-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 586.037384][ T331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.045551][ T331] usb 8-1: Product: Я [ 586.049994][ T331] usb 8-1: Manufacturer: à š [ 586.054821][ T331] usb 8-1: SerialNumber: ç¼ç§¥äš’ͩ먺傸ᘹ횽 [ 586.061790][T22212] fuse: Unknown parameter 'fd)%Œwd|`b}d[_ADð`v[p?&¸KŽ|­”2…\æ8Ëë ¢_‘÷™Õ4 [ 586.061790][T22212] ~Q¿±SûYBñ`àNËÎγn¶§éè«ZÞ—¼eçéÎ(gáÖ–ÑFÊC(¼÷t¡¨Â;1>š9zLDs<]×bäû _‡T›ß?÷Ÿ-Ü쯱®ÞÁDT¸9:2' [ 586.283603][ T331] usb 8-1: USB disconnect, device number 3 [ 586.370928][T16141] udevd[16141]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:13.90/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 586.459205][T22231] macsec0: entered allmulticast mode [ 586.665506][T22241] netlink: 'syz.0.7324': attribute type 5 has an invalid length. [ 587.119664][T22279] fuseblk: Bad value for 'source' [ 587.219004][T22283] netlink: 316 bytes leftover after parsing attributes in process `syz.0.7337'. [ 587.237071][T22283] netlink: 316 bytes leftover after parsing attributes in process `syz.0.7337'. [ 587.312157][ T36] kauditd_printk_skb: 733 callbacks suppressed [ 587.312183][ T36] audit: type=1400 audit(2000000004.055:95536): avc: denied { read } for pid=22284 comm="syz.7.7338" dev="nsfs" ino=4026532528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 587.375036][ T36] audit: type=1400 audit(2000000004.087:95537): avc: denied { read open } for pid=22284 comm="syz.7.7338" path="net:[4026532528]" dev="nsfs" ino=4026532528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 587.401310][ T36] audit: type=1400 audit(2000000004.098:95538): avc: denied { create } for pid=22284 comm="syz.7.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 587.429557][ T36] audit: type=1400 audit(2000000004.098:95539): avc: denied { bind } for pid=22284 comm="syz.7.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 587.453121][ T36] audit: type=1400 audit(2000000004.098:95540): avc: denied { listen } for pid=22284 comm="syz.7.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 587.490405][ T36] audit: type=1400 audit(2000000004.109:95541): avc: denied { execmem } for pid=22286 comm="syz.0.7339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 587.526069][ T36] audit: type=1400 audit(2000000004.173:95542): avc: denied { create } for pid=22284 comm="syz.7.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 587.570465][ T36] audit: type=1400 audit(2000000004.173:95543): avc: denied { write } for pid=22284 comm="syz.7.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 587.606996][ T36] audit: type=1400 audit(2000000004.173:95544): avc: denied { nlmsg_write } for pid=22284 comm="syz.7.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 587.640214][ T36] audit: type=1400 audit(2000000004.398:95545): avc: denied { create } for pid=22286 comm="syz.0.7339" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 587.748578][ T492] usb 6-1: USB disconnect, device number 16 [ 588.006124][T22303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=22303 comm=syz.0.7345 [ 588.046695][T22305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=22305 comm=syz.0.7345 [ 588.101538][T22309] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 588.162983][T22302] __vm_enough_memory: pid: 22302, comm: syz.7.7343, bytes: 18014402804453376 not enough memory for the allocation [ 588.789815][T22321] can0: slcan on ttyS3. [ 588.951128][T22320] can0 (unregistered): slcan off ttyS3. [ 588.976140][T22332] __vm_enough_memory: pid: 22332, comm: syz.5.7353, bytes: 18014402804453376 not enough memory for the allocation [ 589.957258][T22404] 9pnet_fd: Insufficient options for proto=fd [ 590.518247][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7379'. [ 590.527548][T22443] erspan0: entered promiscuous mode [ 590.768932][ T331] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 590.941782][ T331] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 590.956911][ T331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.974086][ T331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.994531][ T331] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 591.020912][ T331] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 591.031384][ T331] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 591.041985][ T331] usb 8-1: Manufacturer: syz [ 591.048855][ T331] usb 8-1: config 0 descriptor?? [ 591.096825][T22510] tipc: Enabling of bearer rejected, failed to enable media [ 591.435725][ T331] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 591.444946][ T331] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 591.476943][ T331] appleir 0003:05AC:8243.0021: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 591.714140][ T492] usb 8-1: USB disconnect, device number 4 [ 591.842715][T22570] overlayfs: failed to clone upperpath [ 591.872107][T22571] netlink: 140 bytes leftover after parsing attributes in process `syz.6.7420'. [ 591.983457][ T36] kauditd_printk_skb: 857 callbacks suppressed [ 591.983477][ T36] audit: type=1400 audit(2000000009.066:96403): avc: denied { create } for pid=22582 comm="syz.5.7423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.013309][ T36] audit: type=1400 audit(2000000009.098:96404): avc: denied { write } for pid=22582 comm="syz.5.7423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.036141][ T36] audit: type=1400 audit(2000000009.098:96405): avc: denied { read } for pid=22582 comm="syz.5.7423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.058339][ T36] audit: type=1400 audit(2000000009.098:96406): avc: denied { read } for pid=22582 comm="syz.5.7423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.121033][ T36] audit: type=1400 audit(2000000009.216:96407): avc: denied { create } for pid=22588 comm="syz.5.7425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 592.150124][T22589] tmpfs: Bad value for 'nr_inodes' [ 592.152383][ T36] audit: type=1400 audit(2000000009.237:96408): avc: denied { write } for pid=22588 comm="syz.5.7425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 592.182974][ T36] audit: type=1400 audit(2000000009.248:96409): avc: denied { mounton } for pid=22588 comm="syz.5.7425" path="/23/file0" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 592.206760][ T36] audit: type=1400 audit(2000000009.248:96410): avc: denied { name_bind } for pid=22588 comm="syz.5.7425" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 592.229335][ T36] audit: type=1400 audit(2000000009.248:96411): avc: denied { node_bind } for pid=22588 comm="syz.5.7425" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 592.255220][ T36] audit: type=1400 audit(2000000009.248:96412): avc: denied { create } for pid=22588 comm="syz.5.7425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.311113][T22593] overlayfs: failed to clone lowerpath [ 592.636079][T22628] netlink: 57 bytes leftover after parsing attributes in process `syz.0.7437'. [ 592.652780][T22628] overlayfs: missing 'lowerdir' [ 592.693870][T22631] /dev/loop0: Can't lookup blockdev [ 593.194180][T22659] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 593.587133][T22684] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7456'. [ 593.729068][T22689] netlink: 'syz.5.7457': attribute type 4 has an invalid length. [ 593.834948][ T331] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 594.002877][ T331] usb 8-1: Using ep0 maxpacket: 32 [ 594.010843][ T331] usb 8-1: config 0 has an invalid interface number: 114 but max is 0 [ 594.029866][ T331] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 594.039138][ T331] usb 8-1: config 0 has no interface number 1 [ 594.048773][ T331] usb 8-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.077295][ T331] usb 8-1: too many endpoints for config 0 interface 0 altsetting 15: 49, using maximum allowed: 30 [ 594.091949][ T331] usb 8-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 594.105676][ T331] usb 8-1: config 0 interface 114 has no altsetting 0 [ 594.113482][ T331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 594.125361][ T331] usb 8-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 594.135442][ T331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.143828][ T331] usb 8-1: Product: syz [ 594.148142][ T331] usb 8-1: Manufacturer: syz [ 594.152922][ T331] usb 8-1: SerialNumber: syz [ 594.168616][ T331] usb 8-1: config 0 descriptor?? [ 594.368223][ T331] usb 8-1: bad CDC descriptors [ 594.385847][ T331] usb 8-1: USB disconnect, device number 5 [ 594.944774][T22719] overlayfs: failed to clone upperpath [ 595.478957][T22765] overlayfs: missing 'lowerdir' [ 596.226493][T22794] 9pnet_fd: p9_fd_create_tcp (22794): problem connecting socket to 127.0.0.1 [ 596.250430][T22800] /dev/rnullb0: Can't lookup blockdev [ 596.652241][ T36] kauditd_printk_skb: 636 callbacks suppressed [ 596.652262][ T36] audit: type=1400 audit(2000000028.078:97049): avc: denied { read write } for pid=22831 comm="syz.7.7507" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 596.713139][ T36] audit: type=1400 audit(2000000028.078:97050): avc: denied { read write open } for pid=22831 comm="syz.7.7507" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 596.749885][ T36] audit: type=1400 audit(2000000028.089:97051): avc: denied { ioctl } for pid=22831 comm="syz.7.7507" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 596.790723][ T36] audit: type=1400 audit(2000000028.153:97052): avc: denied { create } for pid=22831 comm="syz.7.7507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 596.836872][ T36] audit: type=1400 audit(2000000028.153:97053): avc: denied { write } for pid=22831 comm="syz.7.7507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 596.881260][T22835] 9pnet_fd: Insufficient options for proto=fd [ 596.900103][ T36] audit: type=1400 audit(2000000028.153:97054): avc: denied { nlmsg_write } for pid=22831 comm="syz.7.7507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 596.954156][ T36] audit: type=1400 audit(2000000028.228:97055): avc: denied { read write } for pid=21674 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.980927][ T36] audit: type=1400 audit(2000000028.228:97056): avc: denied { read write open } for pid=21674 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.007960][ T36] audit: type=1400 audit(2000000028.228:97057): avc: denied { ioctl } for pid=21674 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.039622][ T36] audit: type=1400 audit(2000000028.303:97058): avc: denied { create } for pid=22833 comm="syz.0.7508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 597.698532][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7525'. [ 597.829210][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7530'. [ 597.888578][T22900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7531'. [ 598.168399][T22918] binder: Bad value for 'max' [ 598.290513][T22925] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=22925 comm=syz.7.7541 [ 598.604828][T22935] futex_wake_op: syz.6.7544 tries to shift op by 32; fix this program [ 598.616165][ T331] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 598.756058][ T331] usb 8-1: Using ep0 maxpacket: 16 [ 598.769391][ T331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 598.788165][ T331] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 598.807612][ T331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.817904][ T331] usb 8-1: Product: syz [ 598.822262][ T331] usb 8-1: Manufacturer: syz [ 598.822294][T22950] veth1: entered allmulticast mode [ 598.832498][ T331] usb 8-1: SerialNumber: syz [ 598.840377][ T331] usb 8-1: config 0 descriptor?? [ 598.842113][T22950] netlink: 'syz.0.7551': attribute type 11 has an invalid length. [ 598.851285][ T331] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 598.865057][ T331] usb 8-1: Detected FT232R [ 598.880945][T22949] veth1: left allmulticast mode [ 599.034905][T22963] netlink: 'syz.0.7557': attribute type 4 has an invalid length. [ 599.041097][ T331] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 599.052312][T22963] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7557'. [ 599.088693][T22974] tmpfs: Unsupported parameter 'mpol' [ 599.249458][T22995] fuse: Bad value for 'fd' [ 599.290281][ T331] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 599.579608][T23015] overlayfs: failed to clone upperpath [ 600.359524][T23043] netlink: 'syz.5.7585': attribute type 27 has an invalid length. [ 600.391387][T23043] cgroup: subsys name conflicts with all [ 600.399169][T23043] incfs: Error accessing: ./file0. [ 600.404348][T23043] incfs: mount failed -20 [ 601.067264][T23073] 9pnet_fd: Insufficient options for proto=fd [ 601.070931][T23072] netlink: 'syz.0.7596': attribute type 27 has an invalid length. [ 601.077663][T23074] 9pnet_fd: Insufficient options for proto=fd [ 601.111342][T23072] veth0_vlan: left promiscuous mode [ 601.117474][T23072] veth0_vlan: entered promiscuous mode [ 601.125597][T23072] veth1_macvtap: left promiscuous mode [ 601.132515][T23072] veth1_macvtap: entered promiscuous mode [ 601.138585][T23072] veth1_macvtap: entered allmulticast mode [ 601.144865][T23072] macsec0: left allmulticast mode [ 601.150232][T23072] veth1_macvtap: left allmulticast mode [ 601.157892][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.165777][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.174740][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.182039][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.193776][T23079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7597'. [ 601.203366][ T6693] ip6_tunnel:  xmit: Local address not yet configured! [ 601.209660][T16330] usb 8-1: USB disconnect, device number 7 [ 601.221562][T16330] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 601.223661][ T6693] ip6_tunnel:  xmit: Local address not yet configured! [ 601.239174][ T45] ip6_tunnel:  xmit: Local address not yet configured! [ 601.245461][T16330] ftdi_sio 8-1:0.0: device disconnected [ 601.273157][ T45] ip6_tunnel:  xmit: Local address not yet configured! [ 601.326779][ T36] kauditd_printk_skb: 414 callbacks suppressed [ 601.326798][ T36] audit: type=1400 audit(2000000033.089:97473): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.380561][ T36] audit: type=1400 audit(2000000033.121:97474): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.401514][ T492] ip6_tunnel:  xmit: Local address not yet configured! [ 601.443496][ T36] audit: type=1400 audit(2000000033.121:97475): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.500072][ T36] audit: type=1400 audit(2000000033.121:97476): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.543675][ T36] audit: type=1400 audit(2000000033.121:97477): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.586274][ T36] audit: type=1400 audit(2000000033.121:97478): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.628362][ T36] audit: type=1400 audit(2000000033.121:97479): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.674797][ T36] audit: type=1400 audit(2000000033.121:97480): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.706818][ T36] audit: type=1400 audit(2000000033.121:97481): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.738788][ T36] audit: type=1400 audit(2000000033.121:97482): avc: denied { create } for pid=23084 comm="syz.7.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 602.252917][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 604.713198][ T111] udevd[111]: worker [14376] /devices/virtual/block/loop2 is taking a long time [ 604.862036][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 610.338262][ T111] udevd[111]: worker [14376] /devices/virtual/block/loop2 timeout; kill it [ 610.348226][ T111] udevd[111]: seq 13192 '/devices/virtual/block/loop2' killed [ 612.397112][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 619.527216][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 619.527238][ T36] audit: type=1400 audit(2000000052.615:97547): avc: denied { create } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.569395][ T36] audit: type=1400 audit(2000000052.615:97548): avc: denied { write } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.594767][T23110] netlink: 57 bytes leftover after parsing attributes in process `syz.7.7607'. [ 619.623349][ T36] audit: type=1400 audit(2000000052.615:97549): avc: denied { read } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.653907][ T36] audit: type=1400 audit(2000000052.615:97550): avc: denied { create } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 619.729304][ T36] audit: type=1400 audit(2000000052.615:97551): avc: denied { connect } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 619.779773][ T36] audit: type=1400 audit(2000000052.615:97552): avc: denied { ioctl } for pid=23106 comm="syz.5.7605" path="socket:[91330]" dev="sockfs" ino=91330 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 619.843330][ T36] audit: type=1400 audit(2000000052.615:97553): avc: denied { create } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.872275][ T36] audit: type=1400 audit(2000000052.615:97554): avc: denied { write } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.896413][ T36] audit: type=1400 audit(2000000052.615:97555): avc: denied { read } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.919914][ T36] audit: type=1400 audit(2000000052.626:97556): avc: denied { read } for pid=23106 comm="syz.5.7605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.949149][T23133] /dev/rnullb0: Can't lookup blockdev [ 620.002004][T23136] 9pnet_fd: Insufficient options for proto=fd [ 620.018497][T23136] overlay: ./file0 is not a directory [ 620.973927][T23193] tipc: Started in network mode [ 620.991077][T23193] tipc: Node identity ac1414aa, cluster identity 4711 [ 621.032194][T23193] tipc: Enabling of bearer rejected, failed to enable media [ 621.072438][T23198] veth1: entered allmulticast mode [ 621.101132][T23197] veth1: left allmulticast mode [ 621.617652][T23228] €Â: renamed from lo (while UP) [ 621.692190][T23224] netlink: 'syz.6.7646': attribute type 4 has an invalid length. [ 621.894302][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7651'. [ 622.374338][ T438] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 622.419219][T23272] cgroup: Name too long [ 622.526999][ T438] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 622.537346][T23290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=23290 comm=syz.6.7668 [ 622.542702][ T438] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 622.554540][T23290] 9pnet_fd: Insufficient options for proto=fd [ 622.565646][ T438] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 622.577059][ T438] usb 8-1: config 220 has no interface number 2 [ 622.584528][ T438] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 622.599433][ T438] usb 8-1: config 220 interface 0 has no altsetting 0 [ 622.606339][ T438] usb 8-1: config 220 interface 76 has no altsetting 0 [ 622.614646][ T438] usb 8-1: config 220 interface 1 has no altsetting 0 [ 622.626133][ T438] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 622.635757][ T438] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.644541][ T438] usb 8-1: Product: syz [ 622.650413][ T438] usb 8-1: Manufacturer: syz [ 622.666417][ T438] usb 8-1: SerialNumber: syz [ 622.799787][T23311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7676'. [ 622.892624][ T438] usb 8-1: selecting invalid altsetting 0 [ 622.898721][ T438] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 622.905105][ T438] usb 8-1: No valid video chain found. [ 622.934071][ T438] usb 8-1: USB disconnect, device number 8 [ 623.103081][T23336] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7684'. [ 623.396678][T23355] overlay: ./bus is not a directory [ 623.412506][T23356] /dev/nbd7: Can't lookup blockdev [ 623.871615][T23388] overlayfs: missing 'lowerdir' [ 623.996843][T23400] overlayfs: missing 'workdir' [ 624.061620][ T438] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 624.220019][ T438] usb 8-1: Using ep0 maxpacket: 8 [ 624.227761][ T36] kauditd_printk_skb: 490 callbacks suppressed [ 624.227780][ T36] audit: type=1400 audit(2000000057.658:98047): avc: denied { create } for pid=23409 comm="syz.6.7710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 624.268805][ T438] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 624.285234][ T438] usb 8-1: config 1 has no interface number 1 [ 624.291439][ T36] audit: type=1400 audit(2000000057.690:98048): avc: denied { write } for pid=23409 comm="syz.6.7710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 624.312748][ T438] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 624.324260][ T36] audit: type=1400 audit(2000000057.690:98049): avc: denied { ioctl } for pid=23386 comm="syz.7.7702" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 624.350333][ T36] audit: type=1400 audit(2000000057.690:98050): avc: denied { ioctl } for pid=23386 comm="syz.7.7702" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 624.376158][ T36] audit: type=1400 audit(2000000057.690:98051): avc: denied { ioctl } for pid=23386 comm="syz.7.7702" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 624.406223][ T36] audit: type=1400 audit(2000000057.690:98052): avc: denied { ioctl } for pid=23386 comm="syz.7.7702" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 624.432718][ T36] audit: type=1400 audit(2000000057.701:98053): avc: denied { ioctl } for pid=23386 comm="syz.7.7702" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 624.458807][ T438] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.469040][ T438] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.477770][ T438] usb 8-1: Product: syz [ 624.482107][ T438] usb 8-1: Manufacturer: syz [ 624.487013][ T438] usb 8-1: SerialNumber: syz [ 624.491702][ T36] audit: type=1400 audit(2000000057.701:98054): avc: denied { create } for pid=23418 comm="syz.0.7713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 624.513394][ T36] audit: type=1400 audit(2000000057.701:98055): avc: denied { create } for pid=23409 comm="syz.6.7710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 624.522635][T23430] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7715'. [ 624.535514][ T36] audit: type=1400 audit(2000000057.701:98056): avc: denied { write } for pid=23418 comm="syz.0.7713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 624.816519][ T438] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 624.828437][ T438] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 624.839962][ T438] usb 8-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 624.853739][ T438] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 624.861752][ T438] usb 8-1: 2:1 : invalid channels 0 [ 624.877860][ T438] usb 8-1: USB disconnect, device number 9 [ 624.977416][T13987] udevd[13987]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 625.442395][T23475] netlink: 'syz.6.7729': attribute type 29 has an invalid length. [ 625.470369][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7729'. [ 625.743457][T23504] netlink: 'syz.0.7739': attribute type 1 has an invalid length. [ 625.752846][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7739'. [ 625.770801][T23504] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.778818][T23505] netlink: 'syz.0.7739': attribute type 1 has an invalid length. [ 625.786641][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7739'. [ 625.801069][T23505] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.031105][T23517] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7742'. [ 626.070618][T23517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=23517 comm=syz.0.7742 [ 626.736335][T23554] 9pnet_fd: Insufficient options for proto=fd [ 626.800592][T23558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23558 comm=syz.0.7756 [ 626.813854][T23558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=23558 comm=syz.0.7756 [ 627.305157][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 627.567324][T23599] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7768'. [ 628.001884][T23614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7772'. [ 628.278987][T23627] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7776'. [ 629.771934][ T36] kauditd_printk_skb: 332 callbacks suppressed [ 629.771954][ T36] audit: type=1400 audit(2000000063.602:98389): avc: denied { create } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 629.814136][ T36] audit: type=1400 audit(2000000063.634:98390): avc: denied { write } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 629.837623][ T36] audit: type=1400 audit(2000000063.634:98391): avc: denied { read } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 629.883393][ T36] audit: type=1400 audit(2000000063.634:98392): avc: denied { read } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 629.904319][ T36] audit: type=1400 audit(2000000063.655:98393): avc: denied { create } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.925098][ T36] audit: type=1400 audit(2000000063.655:98394): avc: denied { setopt } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.946515][ T36] audit: type=1400 audit(2000000063.655:98395): avc: denied { setopt } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.967657][ T36] audit: type=1400 audit(2000000063.655:98396): avc: denied { setopt } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.987894][ T36] audit: type=1400 audit(2000000063.655:98397): avc: denied { create } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 630.008195][ T36] audit: type=1400 audit(2000000063.655:98398): avc: denied { write } for pid=23631 comm="syz.5.7778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 630.377364][T23649] netlink: 124 bytes leftover after parsing attributes in process `syz.6.7784'. [ 630.434041][T23655] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 630.623566][T23665] tipc: Started in network mode [ 630.628619][T23665] tipc: Node identity ac1414aa, cluster identity 4711 [ 630.635899][T23665] tipc: Enabling of bearer rejected, failed to enable media [ 630.916248][T23672] netlink: 'syz.6.7792': attribute type 58 has an invalid length. [ 631.114339][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7797'. [ 631.654556][T23703] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 631.666832][T23703] overlayfs: missing 'lowerdir' [ 632.138418][T23766] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.7823'. [ 632.704464][T23811] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7841'. [ 633.411422][T23844] fuse: Unknown parameter 'û¿' [ 633.709379][T23881] 9pnet_fd: Insufficient options for proto=fd [ 634.222425][T23893] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 634.319129][T23900] netlink: 'syz.5.7872': attribute type 11 has an invalid length. [ 634.517389][ T36] kauditd_printk_skb: 497 callbacks suppressed [ 634.517406][ T36] audit: type=1326 audit(2000000068.698:98896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23884 comm="syz.6.7866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a18eec9 code=0x7fc00000 [ 634.558105][ T36] audit: type=1400 audit(2000000068.741:98897): avc: denied { name_bind } for pid=23908 comm="syz.6.7875" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 634.580542][ T36] audit: type=1400 audit(2000000068.741:98898): avc: denied { node_bind } for pid=23908 comm="syz.6.7875" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 634.602152][ T36] audit: type=1400 audit(2000000068.741:98899): avc: denied { name_bind } for pid=23908 comm="syz.6.7875" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 634.624435][ T36] audit: type=1400 audit(2000000068.741:98900): avc: denied { node_bind } for pid=23908 comm="syz.6.7875" saddr=::a8aa:aaff:feaa:aa1e src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 634.648200][ T36] audit: type=1400 audit(2000000068.741:98901): avc: denied { create } for pid=23908 comm="syz.6.7875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 634.669564][ T36] audit: type=1400 audit(2000000068.741:98902): avc: denied { write } for pid=23908 comm="syz.6.7875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 634.691019][ T36] audit: type=1400 audit(2000000068.752:98903): avc: denied { create } for pid=23908 comm="syz.6.7875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 634.711656][ T36] audit: type=1400 audit(2000000068.752:98904): avc: denied { setopt } for pid=23908 comm="syz.6.7875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 635.212303][ T36] audit: type=1400 audit(2000000069.438:98905): avc: denied { create } for pid=23913 comm="syz.5.7876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 635.252076][T23916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=23916 comm=syz.5.7877 [ 635.267139][T23916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=23916 comm=syz.5.7877 [ 635.762585][T23935] 9pnet_fd: Insufficient options for proto=fd [ 637.661397][T24002] overlayfs: failed to clone upperpath [ 637.675892][T24002] overlayfs: failed to resolve './control': -2 [ 637.687284][T24002] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7905'. [ 637.696422][T24002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7905'. [ 637.705534][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7905'. [ 638.398957][T24023] overlayfs: failed to clone upperpath [ 638.401957][T24026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7917'. [ 638.756322][T24032] netlink: 328 bytes leftover after parsing attributes in process `syz.5.7919'. [ 639.013263][T24049] overlay: ./file0 is not a directory [ 639.230174][ T36] kauditd_printk_skb: 145 callbacks suppressed [ 639.230196][ T36] audit: type=1400 audit(2000000073.751:99051): avc: denied { unlink } for pid=18799 comm="syz-executor" name="file0" dev="tmpfs" ino=2511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 639.278525][ T36] audit: type=1400 audit(2000000073.751:99052): avc: denied { create } for pid=24066 comm="syz.6.7930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 639.300067][ T36] audit: type=1400 audit(2000000073.762:99053): avc: denied { write } for pid=24066 comm="syz.6.7930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 639.324510][ T36] audit: type=1400 audit(2000000073.762:99054): avc: denied { nlmsg_write } for pid=24066 comm="syz.6.7930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 639.347526][ T36] audit: type=1400 audit(2000000073.848:99055): avc: denied { mount } for pid=24069 comm="syz.0.7931" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 639.372251][ T36] audit: type=1400 audit(2000000073.880:99056): avc: denied { create } for pid=24069 comm="syz.0.7931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.427557][ T36] audit: type=1400 audit(2000000073.880:99057): avc: denied { write } for pid=24069 comm="syz.0.7931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.452652][ T36] audit: type=1400 audit(2000000073.880:99058): avc: denied { create } for pid=24069 comm="syz.0.7931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.475204][ T36] audit: type=1400 audit(2000000073.880:99059): avc: denied { write } for pid=24069 comm="syz.0.7931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.528150][ T36] audit: type=1400 audit(2000000073.945:99060): avc: denied { create } for pid=24074 comm="syz.6.7934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 639.775316][T24106] tipc: Started in network mode [ 639.780517][T24106] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 639.807698][T24106] tipc: Enabling of bearer rejected, failed to enable media [ 639.950067][T24118] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7947'. [ 640.001747][T24111] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.008933][T24111] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.027859][T24111] bridge_slave_0: entered allmulticast mode [ 640.034430][T24111] bridge_slave_0: entered promiscuous mode [ 640.049139][T24111] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.057319][T24111] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.065170][T24111] bridge_slave_1: entered allmulticast mode [ 640.074425][T24111] bridge_slave_1: entered promiscuous mode [ 640.311013][T24111] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.318531][T24111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.325981][T24111] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.333057][T24111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.447520][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.458969][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.487663][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.494887][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.510303][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.517925][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.624463][T24111] veth0_vlan: entered promiscuous mode [ 640.662580][T24111] veth1_macvtap: entered promiscuous mode [ 640.798287][T24175] overlayfs: missing 'lowerdir' [ 640.817843][T24176] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7942'. [ 641.409905][T24225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7981'. [ 641.419112][T24225] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7981'. [ 641.421223][T24227] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.428665][T24225] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7981'. [ 641.478544][T24231] netlink: 'syz.0.7984': attribute type 16 has an invalid length. [ 641.523801][T24234] 9pnet_fd: Insufficient options for proto=fd [ 641.963883][T24260] input: syz1 as /devices/virtual/input/input48 [ 642.030574][T24262] fuse: Bad value for 'fd' [ 642.261971][T24269] rust_binder: 24: no such ref 2 [ 642.548084][T24287] fuse: Bad value for 'fd' [ 642.701457][T24301] 9pnet_fd: Insufficient options for proto=fd [ 643.965310][ T36] kauditd_printk_skb: 503 callbacks suppressed [ 643.965329][ T36] audit: type=1400 audit(2000000078.837:99564): avc: denied { mounton } for pid=24345 comm="syz.5.8021" path="/149/file1/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 643.996922][T24346] overlayfs: failed to clone upperpath [ 644.026335][ T36] audit: type=1400 audit(2000000078.869:99565): avc: denied { mounton } for pid=24345 comm="syz.5.8021" path="/149/bus" dev="tmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 644.112078][ T36] audit: type=1400 audit(2000000078.998:99566): avc: denied { create } for pid=24351 comm="syz.5.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 644.155459][ T36] audit: type=1400 audit(2000000079.019:99567): avc: denied { write } for pid=24351 comm="syz.5.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 644.184391][ T36] audit: type=1400 audit(2000000079.019:99568): avc: denied { create } for pid=24351 comm="syz.5.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 644.209864][ T36] audit: type=1400 audit(2000000079.019:99569): avc: denied { write } for pid=24351 comm="syz.5.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 644.237662][ T36] audit: type=1400 audit(2000000079.019:99570): avc: denied { write } for pid=24351 comm="syz.5.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 644.264890][ T36] audit: type=1400 audit(2000000079.148:99571): avc: denied { create } for pid=24355 comm="syz.8.8027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.306737][ T36] audit: type=1400 audit(2000000079.148:99572): avc: denied { create } for pid=24355 comm="syz.8.8027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.329269][ T36] audit: type=1400 audit(2000000079.148:99573): avc: denied { mounton } for pid=24356 comm="syz.6.8025" path="/309/file0" dev="tmpfs" ino=1691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 644.344745][T24361] batadv_slave_0: entered promiscuous mode [ 644.372173][T24360] batadv_slave_0: left promiscuous mode [ 644.843277][T24409] __nla_validate_parse: 1 callbacks suppressed [ 644.843295][T24409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8048'. [ 644.858557][T24409] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8048'. [ 644.868381][T24409] tipc: Invalid UDP bearer configuration [ 644.868407][T24409] tipc: Enabling of bearer rejected, failed to enable media [ 645.809578][T24489] tmpfs: Unknown parameter 'noswaKøOª)9qø¾p' [ 645.924576][T24491] 9pnet_fd: Insufficient options for proto=fd [ 646.360779][T24518] overlay: ./file0 is not a directory [ 646.464152][T24525] overlayfs: failed to clone upperpath [ 646.581543][T24532] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 646.781837][T24561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8098'. [ 647.411279][T24620] 9pnet_fd: Insufficient options for proto=fd [ 647.433552][T24620] 9pnet_fd: Insufficient options for proto=fd [ 647.827437][T24666] overlayfs: failed to clone upperpath [ 648.180087][T24698] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8144'. [ 648.349718][T24723] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 648.362420][T24723] overlayfs: failed to clone upperpath [ 648.445824][T24731] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 648.459326][T24731] overlayfs: failed to clone upperpath [ 648.694632][ T36] kauditd_printk_skb: 684 callbacks suppressed [ 648.694652][ T36] audit: type=1400 audit(2000000083.901:100258): avc: denied { execmem } for pid=24747 comm="syz.6.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 648.748955][ T36] audit: type=1400 audit(2000000083.912:100259): avc: denied { create } for pid=24747 comm="syz.6.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 648.771589][ T36] audit: type=1400 audit(2000000083.912:100260): avc: denied { write } for pid=24747 comm="syz.6.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 648.793808][ T36] audit: type=1400 audit(2000000083.912:100261): avc: denied { create } for pid=24747 comm="syz.6.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 648.815870][ T36] audit: type=1400 audit(2000000083.912:100262): avc: denied { getopt } for pid=24747 comm="syz.6.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 648.837347][ T36] audit: type=1400 audit(2000000083.912:100263): avc: denied { sys_module } for pid=24747 comm="syz.6.8162" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 648.860397][ T36] audit: type=1400 audit(2000000083.912:100264): avc: denied { create } for pid=24747 comm="syz.6.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 648.891193][ T36] audit: type=1400 audit(2000000083.923:100265): avc: denied { execmem } for pid=24747 comm="syz.6.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 648.909570][T24756] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8165'. [ 648.925457][ T36] audit: type=1400 audit(2000000083.998:100266): avc: denied { sys_module } for pid=24750 comm="syz.0.8163" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 648.947979][ T36] audit: type=1400 audit(2000000084.083:100267): avc: denied { create } for pid=24753 comm="syz.0.8164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 649.860445][T24816] netlink: 'syz.6.8186': attribute type 30 has an invalid length. [ 649.872961][T24821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24821 comm=syz.6.8186 [ 650.015898][T24819] cgroup: fork rejected by pids controller in /syz8 [ 650.041628][ T6706] tipc: Left network mode [ 650.047899][ T6706] veth1_macvtap: left promiscuous mode [ 650.060460][ T6706] veth0_vlan: left promiscuous mode [ 651.456669][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8207'. [ 653.256652][T24989] netlink: 256 bytes leftover after parsing attributes in process `syz.8.8223'. [ 653.384034][ T36] kauditd_printk_skb: 257 callbacks suppressed [ 653.384054][ T36] audit: type=1400 audit(2000000088.933:100525): avc: denied { create } for pid=24994 comm="syz.8.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 653.419516][ T36] audit: type=1400 audit(2000000088.954:100526): avc: denied { ioctl } for pid=24994 comm="syz.8.8224" path="socket:[95014]" dev="sockfs" ino=95014 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 653.445636][ T36] audit: type=1400 audit(2000000088.954:100527): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.474469][ T36] audit: type=1400 audit(2000000088.954:100528): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.498204][ T36] audit: type=1400 audit(2000000088.954:100529): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.521285][ T36] audit: type=1400 audit(2000000088.954:100530): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.571316][ T36] audit: type=1400 audit(2000000088.954:100531): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.595950][ T36] audit: type=1400 audit(2000000088.954:100532): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.621067][ T36] audit: type=1400 audit(2000000088.965:100533): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.644216][ T36] audit: type=1400 audit(2000000088.965:100534): avc: denied { mounton } for pid=24994 comm="syz.8.8224" path="/83" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.702677][T25012] 9pnet_fd: Insufficient options for proto=fd [ 654.881179][T25103] veth1: entered allmulticast mode [ 654.896370][T25102] veth1: left allmulticast mode [ 655.054900][T25117] netlink: 'syz.6.8267': attribute type 4 has an invalid length. [ 655.066388][T25117] netlink: 'syz.6.8267': attribute type 4 has an invalid length. [ 655.202351][T25135] 9pnet_fd: Insufficient options for proto=fd [ 655.221794][T25135] netlink: 272 bytes leftover after parsing attributes in process `syz.0.8272'. [ 655.809223][T25159] overlay: ./bus is not a directory [ 656.374529][T25179] fuse: Bad value for 'fd' [ 656.440409][T25191] 9pnet_fd: Insufficient options for proto=fd [ 656.818237][T25222] 9pnet_fd: Insufficient options for proto=fd [ 656.952904][T25233] overlayfs: failed to clone upperpath [ 657.009868][T25241] netlink: 'syz.0.8307': attribute type 7 has an invalid length. [ 657.023311][T25241] netlink: 'syz.0.8307': attribute type 5 has an invalid length. [ 657.033591][T25241] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8307'. [ 657.130997][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 658.057470][ T36] kauditd_printk_skb: 374 callbacks suppressed [ 658.057490][ T36] audit: type=1400 audit(2000000093.954:100909): avc: denied { create } for pid=25280 comm="syz.8.8319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 658.085470][ T36] audit: type=1400 audit(2000000093.986:100910): avc: denied { connect } for pid=25280 comm="syz.8.8319" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 658.093351][T25281] netlink: 492 bytes leftover after parsing attributes in process `syz.8.8319'. [ 658.130436][ T36] audit: type=1400 audit(2000000094.018:100911): avc: denied { create } for pid=25280 comm="syz.8.8319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 658.152595][ T36] audit: type=1400 audit(2000000094.029:100912): avc: denied { setopt } for pid=25280 comm="syz.8.8319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 658.258740][ T36] audit: type=1400 audit(2000000094.169:100913): avc: denied { create } for pid=25286 comm="syz.8.8321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.280007][ T36] audit: type=1400 audit(2000000094.169:100914): avc: denied { write } for pid=25286 comm="syz.8.8321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.300999][ T36] audit: type=1400 audit(2000000094.169:100915): avc: denied { read } for pid=25286 comm="syz.8.8321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.322408][ T36] audit: type=1400 audit(2000000094.169:100916): avc: denied { read } for pid=25286 comm="syz.8.8321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.383466][ T36] audit: type=1400 audit(2000000094.308:100917): avc: denied { create } for pid=25290 comm="syz.8.8322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 658.403900][ T36] audit: type=1400 audit(2000000094.308:100918): avc: denied { name_bind } for pid=25290 comm="syz.8.8322" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 658.508133][T25299] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.8325'. [ 658.972889][T25305] netlink: 'syz.5.8328': attribute type 23 has an invalid length. [ 659.872724][T25314] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8332'. [ 659.882146][T25315] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8332'. [ 659.917689][T25318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8333'. [ 659.926755][T25318] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8333'. [ 659.936008][T25318] netlink: 'syz.0.8333': attribute type 3 has an invalid length. [ 659.944004][T25318] netlink: 'syz.0.8333': attribute type 2 has an invalid length. [ 659.952020][T25318] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8333'. [ 660.377497][T25355] netlink: 328 bytes leftover after parsing attributes in process `syz.0.8345'. [ 660.387043][T25355] netlink: 328 bytes leftover after parsing attributes in process `syz.0.8345'. [ 660.585313][T25365] 9pnet_fd: Insufficient options for proto=fd [ 661.326008][T25396] 9pnet_fd: Insufficient options for proto=fd [ 661.420718][T25404] overlayfs: failed to clone upperpath [ 661.718259][T25414] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.725352][T25414] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.732668][T25414] bridge_slave_0: entered allmulticast mode [ 661.739083][T25414] bridge_slave_0: entered promiscuous mode [ 661.746666][T25414] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.753926][T25414] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.761141][T25414] bridge_slave_1: entered allmulticast mode [ 661.767728][T25414] bridge_slave_1: entered promiscuous mode [ 661.810921][T25419] /dev/loop0: Can't lookup blockdev [ 661.917541][T25414] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.924671][T25414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.932022][T25414] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.939453][T25414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.982339][T25433] __nla_validate_parse: 33 callbacks suppressed [ 661.982361][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8375'. [ 662.074294][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.095297][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.156302][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.163691][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.189653][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.196883][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.264458][T25443] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8379'. [ 662.296735][T25443] tipc: Enabling of bearer rejected, failed to enable media [ 662.391947][T25414] veth0_vlan: entered promiscuous mode [ 662.472328][T25414] veth1_macvtap: entered promiscuous mode [ 662.874325][ T36] kauditd_printk_skb: 587 callbacks suppressed [ 662.874346][ T36] audit: type=1400 audit(2000000366.123:101506): avc: denied { create } for pid=25474 comm="syz.5.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 662.965643][ T36] audit: type=1400 audit(2000000366.123:101507): avc: denied { write } for pid=25474 comm="syz.5.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.017078][ T36] audit: type=1400 audit(2000000366.123:101508): avc: denied { create } for pid=25475 comm="syz.8.8389" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.018838][T25481] batadv_slave_1: entered promiscuous mode [ 663.048000][ T36] audit: type=1400 audit(2000000366.123:101509): avc: denied { create } for pid=25474 comm="syz.5.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 663.075548][ T36] audit: type=1400 audit(2000000366.123:101510): avc: denied { ioctl } for pid=25475 comm="syz.8.8389" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97804 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.115588][T25481] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 663.115619][T25481] rust_binder: Error while translating object. [ 663.136468][ T36] audit: type=1400 audit(2000000366.123:101511): avc: denied { ioctl } for pid=25475 comm="syz.8.8389" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97804 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.171836][ T36] audit: type=1400 audit(2000000366.134:101512): avc: denied { ioctl } for pid=25475 comm="syz.8.8389" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97804 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.182129][T25481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 663.199976][ T36] audit: type=1400 audit(2000000366.144:101513): avc: denied { create } for pid=25474 comm="syz.5.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 663.226484][T25481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 663.232165][ T36] audit: type=1400 audit(2000000366.144:101514): avc: denied { create } for pid=25474 comm="syz.5.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.259591][T25479] batadv_slave_1: left promiscuous mode [ 663.270604][ T36] audit: type=1400 audit(2000000366.144:101515): avc: denied { write } for pid=25474 comm="syz.5.8388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.416103][T25506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8398'. [ 664.952389][T25593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8425'. [ 665.559493][T25606] overlayfs: failed to clone upperpath [ 665.572484][T25606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=25606 comm=syz.0.8430 [ 665.661167][T25608] fuse: Bad value for 'fd' [ 665.742971][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8434'. [ 665.868051][T25632] netlink: 'syz.8.8441': attribute type 16 has an invalid length. [ 665.877970][T25632] netlink: 'syz.8.8441': attribute type 25 has an invalid length. [ 665.889434][T25632] netlink: 64094 bytes leftover after parsing attributes in process `syz.8.8441'. [ 666.194010][T25645] tmpfs: Unknown parameter 'grpquota' [ 666.709743][T25692] /dev/loop0: Can't lookup blockdev [ 667.167715][T25712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8468'. [ 667.584232][ T36] kauditd_printk_skb: 435 callbacks suppressed [ 667.584251][ T36] audit: type=1400 audit(2000000371.176:101951): avc: denied { create } for pid=25732 comm="syz.0.8475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.611212][ T36] audit: type=1400 audit(2000000371.187:101952): avc: denied { create } for pid=25732 comm="syz.0.8475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.631697][ T36] audit: type=1400 audit(2000000371.187:101953): avc: denied { setopt } for pid=25732 comm="syz.0.8475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.653550][ T36] audit: type=1400 audit(2000000371.187:101954): avc: denied { ioctl } for pid=25732 comm="syz.0.8475" path="socket:[98109]" dev="sockfs" ino=98109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.679478][ T36] audit: type=1400 audit(2000000371.187:101955): avc: denied { getopt } for pid=25732 comm="syz.0.8475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.701859][ T36] audit: type=1400 audit(2000000371.251:101956): avc: denied { remount } for pid=25734 comm="syz.0.8476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 667.732992][ T36] audit: type=1400 audit(2000000371.337:101957): avc: denied { create } for pid=25737 comm="syz.0.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.754282][ T36] audit: type=1400 audit(2000000371.337:101958): avc: denied { create } for pid=25737 comm="syz.0.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.776997][ T36] audit: type=1400 audit(2000000371.337:101959): avc: denied { write } for pid=25737 comm="syz.0.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.800608][ T36] audit: type=1400 audit(2000000371.337:101960): avc: denied { read } for pid=25737 comm="syz.0.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.893783][T25750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=25750 comm=syz.8.8482 [ 668.051504][T25775] netlink: 'syz.8.8490': attribute type 27 has an invalid length. [ 668.093856][T25775] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.101196][T25775] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.198178][T25790] 9pnet_fd: Insufficient options for proto=fd [ 668.669006][T25851] overlayfs: failed to clone upperpath [ 670.145097][T25940] /dev/rnullb0: Can't lookup blockdev [ 670.243927][T25946] futex_wake_op: syz.8.8533 tries to shift op by 144; fix this program [ 670.265162][T25949] futex_wake_op: syz.8.8533 tries to shift op by 144; fix this program [ 670.454241][T25965] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 670.583946][T25976] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8544'. [ 671.505350][T26035] /dev/rnullb0: Can't lookup blockdev [ 671.570221][T26043] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 672.292472][ T36] kauditd_printk_skb: 292 callbacks suppressed [ 672.292491][ T36] audit: type=1400 audit(2000000376.219:102253): avc: denied { mounton } for pid=26066 comm="syz.0.8582" path="/45/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 672.347507][ T36] audit: type=1400 audit(2000000376.283:102254): avc: denied { create } for pid=26084 comm="syz.5.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.380002][ T36] audit: type=1400 audit(2000000376.283:102255): avc: denied { setopt } for pid=26084 comm="syz.5.8588" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.407002][ T36] audit: type=1400 audit(2000000376.283:102256): avc: denied { setopt } for pid=26084 comm="syz.5.8588" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.431533][ T36] audit: type=1400 audit(2000000376.283:102257): avc: denied { accept } for pid=26084 comm="syz.5.8588" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.452524][ T36] audit: type=1400 audit(2000000376.283:102258): avc: denied { write } for pid=26084 comm="syz.5.8588" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.474542][ T36] audit: type=1400 audit(2000000376.283:102259): avc: denied { read } for pid=26084 comm="syz.5.8588" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.498762][ T36] audit: type=1400 audit(2000000376.444:102260): avc: denied { create } for pid=26093 comm="syz.5.8591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 672.519331][ T36] audit: type=1400 audit(2000000376.455:102261): avc: denied { mount } for pid=26093 comm="syz.5.8591" name="/" dev="configfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 672.543983][ T36] audit: type=1400 audit(2000000376.455:102262): avc: denied { search } for pid=26093 comm="syz.5.8591" name="/" dev="configfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 672.759214][T26115] /dev/rnullb0: Can't lookup blockdev [ 672.791161][T26117] netlink: 37 bytes leftover after parsing attributes in process `syz.5.8599'. [ 673.752732][T26195] netlink: 'syz.0.8628': attribute type 4 has an invalid length. [ 673.760909][T26195] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.8628'. [ 673.823088][T26200] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8629'. [ 674.356588][T26218] 9pnet_fd: Insufficient options for proto=fd [ 674.374614][T26222] 9pnet_fd: Insufficient options for proto=fd [ 674.439366][ T37] INFO: task udevd:14376 blocked for more than 245 seconds. [ 674.446909][ T37] Not tainted syzkaller #0 [ 674.468941][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.482312][ T37] task:udevd state:D stack:0 pid:14376 tgid:14376 ppid:111 flags:0x00000004 [ 674.497211][ T37] Call Trace: [ 674.501726][ T37] [ 674.504921][ T37] __schedule+0x1322/0x1df0 [ 674.510652][ T37] ? __sched_text_start+0x10/0x10 [ 674.522116][ T37] ? __kasan_check_write+0x18/0x20 [ 674.531762][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 674.537608][ T37] ? __kasan_check_write+0x18/0x20 [ 674.548917][ T37] ? trace_contention_begin+0xc0/0xc0 [ 674.559431][ T37] schedule+0xc6/0x240 [ 674.566718][ T37] schedule_preempt_disabled+0x14/0x30 [ 674.576712][ T37] __mutex_lock+0x81e/0x1b50 [ 674.582272][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 674.589969][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 674.595974][ T37] ? __kasan_check_write+0x18/0x20 [ 674.603458][ T37] ? _raw_spin_lock+0x8c/0x120 [ 674.608691][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 674.614114][ T37] ? __asan_memcpy+0x5a/0x80 [ 674.619279][ T37] __mutex_lock_slowpath+0xe/0x20 [ 674.624522][ T37] mutex_lock+0x102/0x1c0 [ 674.628969][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 674.633955][ T37] ? disk_block_events+0xaf/0x120 [ 674.639098][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 674.644489][ T37] bdev_open+0xd5/0xd60 [ 674.648689][ T37] blkdev_open+0x3d1/0x560 [ 674.655376][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 674.660393][ T37] do_dentry_open+0x97b/0x1510 [ 674.666255][ T37] vfs_open+0x86/0x230 [ 674.670485][ T37] ? __cfi_vfs_open+0x10/0x10 [ 674.676196][ T37] ? may_open+0x352/0x430 [ 674.680585][ T37] path_openat+0x2b6c/0x34b0 [ 674.686358][ T37] ? kasan_save_track+0x3e/0x80 [ 674.691573][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 674.696982][ T37] ? getname+0x1b/0x30 [ 674.701235][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 674.706050][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 674.712191][ T37] ? do_filp_open+0x3e0/0x3e0 [ 674.716998][ T37] do_filp_open+0x1c6/0x3e0 [ 674.721789][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 674.727137][ T37] ? alloc_fd+0x4e7/0x5a0 [ 674.731659][ T37] do_sys_openat2+0x12c/0x1c0 [ 674.736391][ T37] ? do_sys_open+0x100/0x100 [ 674.741565][ T37] __x64_sys_openat+0x13a/0x170 [ 674.746744][ T37] x64_sys_call+0xe69/0x2ee0 [ 674.751579][ T37] do_syscall_64+0x58/0xf0 [ 674.756163][ T37] ? clear_bhb_loop+0x50/0xa0 [ 674.760889][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 674.766942][ T37] RIP: 0033:0x7f4733aa7407 [ 674.771401][ T37] RSP: 002b:00007ffe1a7bf580 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 674.780083][ T37] RAX: ffffffffffffffda RBX: 00007f4734212880 RCX: 00007f4733aa7407 [ 674.788652][ T37] RDX: 00000000000a0800 RSI: 000055c261a657a0 RDI: ffffffffffffff9c [ 674.796815][ T37] RBP: 000055c261a622c0 R08: 0000000000000000 R09: 0000000000000000 [ 674.805056][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c261ca8540 [ 674.813353][ T37] R13: 000055c261ca30f0 R14: 0000000000000000 R15: 000055c261ca8540 [ 674.821404][ T37] [ 674.824491][ T37] INFO: task syz-executor:14930 blocked for more than 246 seconds. [ 674.832569][ T37] Not tainted syzkaller #0 [ 674.837528][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.846255][ T37] task:syz-executor state:D stack:0 pid:14930 tgid:14930 ppid:1 flags:0x00000004 [ 674.856632][ T37] Call Trace: [ 674.860078][ T37] [ 674.863049][ T37] __schedule+0x1322/0x1df0 [ 674.867938][ T37] ? __sched_text_start+0x10/0x10 [ 674.873276][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 674.878623][ T37] ? __kasan_check_write+0x18/0x20 [ 674.883792][ T37] ? trace_contention_begin+0xc0/0xc0 [ 674.889343][ T37] schedule+0xc6/0x240 [ 674.893554][ T37] schedule_preempt_disabled+0x14/0x30 [ 674.899465][ T37] __mutex_lock+0x81e/0x1b50 [ 674.904206][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 674.911425][ T37] ? slow_avc_audit+0x18d/0x1f0 [ 674.916370][ T37] ? __kasan_check_write+0x18/0x20 [ 674.921585][ T37] ? _raw_spin_lock+0x8c/0x120 [ 674.926691][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 674.932106][ T37] __mutex_lock_slowpath+0xe/0x20 [ 674.937198][ T37] mutex_lock+0x102/0x1c0 [ 674.941741][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 674.946693][ T37] ? disk_block_events+0xaf/0x120 [ 674.952011][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 674.957451][ T37] bdev_open+0xd5/0xd60 [ 674.961998][ T37] blkdev_open+0x3d1/0x560 [ 674.966473][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 674.971616][ T37] do_dentry_open+0x97b/0x1510 [ 674.976512][ T37] vfs_open+0x86/0x230 [ 674.980849][ T37] ? __cfi_vfs_open+0x10/0x10 [ 674.985659][ T37] ? may_open+0x352/0x430 [ 674.990165][ T37] path_openat+0x2b6c/0x34b0 [ 674.994812][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 675.001103][ T37] ? kasan_save_track+0x3e/0x80 [ 675.006048][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 675.011490][ T37] ? getname+0x1b/0x30 [ 675.015711][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 675.020580][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 675.027311][ T37] ? do_filp_open+0x3e0/0x3e0 [ 675.032595][ T37] do_filp_open+0x1c6/0x3e0 [ 675.037248][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 675.042535][ T37] ? alloc_fd+0x4e7/0x5a0 [ 675.047032][ T37] do_sys_openat2+0x12c/0x1c0 [ 675.052122][ T37] ? putname+0x113/0x150 [ 675.056672][ T37] ? do_sys_open+0x100/0x100 [ 675.061349][ T37] ? putname+0x113/0x150 [ 675.065746][ T37] ? do_mkdirat+0x3f2/0x420 [ 675.070414][ T37] __x64_sys_openat+0x13a/0x170 [ 675.075368][ T37] x64_sys_call+0xe69/0x2ee0 [ 675.080005][ T37] do_syscall_64+0x58/0xf0 [ 675.084572][ T37] ? clear_bhb_loop+0x50/0xa0 [ 675.089303][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 675.095288][ T37] RIP: 0033:0x7f7d1d18d691 [ 675.099743][ T37] RSP: 002b:00007fff6c1051f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 675.108629][ T37] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7d1d18d691 [ 675.116708][ T37] RDX: 0000000000000002 RSI: 00007fff6c105300 RDI: 00000000ffffff9c [ 675.125005][ T37] RBP: 00007fff6c105300 R08: 000000000000000a R09: 00007fff6c104fb7 [ 675.133090][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 675.141309][ T37] R13: 00007f7d1d3b1280 R14: 0000000000000003 R15: 00007fff6c105300 [ 675.149466][ T37] [ 675.152554][ T37] INFO: task syz.1.4913:14992 blocked for more than 246 seconds. [ 675.160958][ T37] Not tainted syzkaller #0 [ 675.166079][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.175111][ T37] task:syz.1.4913 state:D stack:0 pid:14992 tgid:14988 ppid:12399 flags:0x00004004 [ 675.185904][ T37] Call Trace: [ 675.189227][ T37] [ 675.192174][ T37] __schedule+0x1322/0x1df0 [ 675.197101][ T37] ? __sched_text_start+0x10/0x10 [ 675.202459][ T37] ? kasan_save_track+0x4f/0x80 [ 675.207540][ T37] ? kasan_save_free_info+0x4a/0x60 [ 675.212831][ T37] ? __kasan_slab_free+0x5f/0x80 [ 675.217891][ T37] ? kfree+0x15c/0x460 [ 675.222014][ T37] ? efi_partition+0x444/0x3150 [ 675.227083][ T37] ? bdev_disk_changed+0x81c/0x1610 [ 675.232491][ T37] ? loop_reread_partitions+0x64/0x110 [ 675.238087][ T37] ? __kasan_check_write+0x18/0x20 [ 675.243324][ T37] schedule+0xc6/0x240 [ 675.247572][ T37] io_schedule+0x89/0xe0 [ 675.251857][ T37] folio_wait_bit_common+0x6ae/0x910 [ 675.257168][ T37] ? folio_wait_bit+0x50/0x50 [ 675.261912][ T37] ? __filemap_get_folio+0x932/0xaa0 [ 675.267215][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 675.273106][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 675.278780][ T37] ? kfree+0x15c/0x460 [ 675.282871][ T37] ? efi_partition+0x444/0x3150 [ 675.287855][ T37] do_read_cache_folio+0x14d/0x4d0 [ 675.293078][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 675.298600][ T37] read_cache_folio+0x54/0x90 [ 675.303342][ T37] read_part_sector+0xcc/0x250 [ 675.308139][ T37] msdos_partition+0x118/0x3000 [ 675.313372][ T37] ? __cfi_efi_partition+0x10/0x10 [ 675.318597][ T37] ? vsnprintf+0x19b8/0x1aa0 [ 675.323286][ T37] ? snprintf+0xdb/0x130 [ 675.327598][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 675.333159][ T37] ? __cfi_snprintf+0x10/0x10 [ 675.337965][ T37] ? bdev_disk_changed+0x4f8/0x1610 [ 675.343309][ T37] bdev_disk_changed+0x81c/0x1610 [ 675.348463][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 675.354018][ T37] ? __kasan_check_write+0x18/0x20 [ 675.359153][ T37] ? mutex_unlock+0x8b/0x240 [ 675.364085][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 675.369326][ T37] loop_reread_partitions+0x64/0x110 [ 675.374919][ T37] loop_configure+0xfd8/0x1310 [ 675.379877][ T37] ? __cfi_loop_configure+0x10/0x10 [ 675.385187][ T37] ? unwind_get_return_address+0x51/0x90 [ 675.390871][ T37] ? __kasan_check_write+0x18/0x20 [ 675.396102][ T37] lo_ioctl+0x802/0x1d50 [ 675.400468][ T37] ? audit_log_end+0x1f1/0x240 [ 675.405348][ T37] ? common_lsm_audit+0x148c/0x1860 [ 675.410677][ T37] ? avc_has_extended_perms+0x895/0xdd0 [ 675.416421][ T37] ? ioctl_has_perm+0x384/0x4d0 [ 675.421834][ T37] ? selinux_file_ioctl+0x6e0/0x1360 [ 675.427175][ T37] ? security_file_ioctl+0x58/0xd0 [ 675.432319][ T37] ? __se_sys_ioctl+0x53/0x1b0 [ 675.437193][ T37] ? __x64_sys_ioctl+0x7f/0xa0 [ 675.442053][ T37] ? x64_sys_call+0x1878/0x2ee0 [ 675.446948][ T37] ? do_syscall_64+0x58/0xf0 [ 675.451766][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 675.457976][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 675.463037][ T37] ? __kasan_slab_free+0x6a/0x80 [ 675.468218][ T37] ? kmem_cache_free+0x1c1/0x510 [ 675.473274][ T37] ? __wake_up+0x169/0x190 [ 675.477924][ T37] ? audit_log_end+0x1f1/0x240 [ 675.482902][ T37] ? audit_log_end+0x1f1/0x240 [ 675.487950][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 675.494630][ T37] ? common_lsm_audit+0x148c/0x1860 [ 675.499883][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 675.505941][ T37] ? __cfi_common_lsm_audit+0x10/0x10 [ 675.511559][ T37] ? __kasan_slab_free+0x6a/0x80 [ 675.516602][ T37] ? kmem_cache_free+0x1c1/0x510 [ 675.521740][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 675.527366][ T37] ? avc_node_kill+0x29e/0x2f0 [ 675.532265][ T37] ? slow_avc_audit+0x18d/0x1f0 [ 675.537247][ T37] ? __cfi_slow_avc_audit+0x10/0x10 [ 675.542671][ T37] ? avc_denied+0x112/0x180 [ 675.547286][ T37] ? avc_has_extended_perms+0x895/0xdd0 [ 675.553092][ T37] ? avc_has_extended_perms+0x91a/0xdd0 [ 675.558872][ T37] ? do_vfs_ioctl+0xeda/0x1e30 [ 675.563662][ T37] ? preempt_schedule_common+0x2d/0x60 [ 675.569208][ T37] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 675.574983][ T37] ? __cfi_preempt_schedule+0x10/0x10 [ 675.580390][ T37] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 675.586601][ T37] ? try_to_wake_up+0xe40/0x1b00 [ 675.591576][ T37] ? blkdev_common_ioctl+0x10e4/0x2810 [ 675.597175][ T37] ? blkdev_bszset+0x220/0x220 [ 675.602252][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 675.607341][ T37] ? futex_wake+0x63a/0x900 [ 675.611999][ T37] ? __cfi_do_futex+0x10/0x10 [ 675.616901][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 675.621595][ T37] blkdev_ioctl+0x546/0x680 [ 675.626820][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 675.631992][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 675.636964][ T37] ? security_file_ioctl+0x34/0xd0 [ 675.642219][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 675.647264][ T37] __se_sys_ioctl+0x135/0x1b0 [ 675.651972][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 675.656576][ T37] x64_sys_call+0x1878/0x2ee0 [ 675.661282][ T37] do_syscall_64+0x58/0xf0 [ 675.665744][ T37] ? clear_bhb_loop+0x50/0xa0 [ 675.670472][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 675.676404][ T37] RIP: 0033:0x7fb30db8eec9 [ 675.680933][ T37] RSP: 002b:00007fb30ea41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.689386][ T37] RAX: ffffffffffffffda RBX: 00007fb30dde5fa0 RCX: 00007fb30db8eec9 [ 675.697633][ T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 675.705796][ T37] RBP: 00007fb30dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 675.714281][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.722284][ T37] R13: 00007fb30dde6038 R14: 00007fb30dde5fa0 R15: 00007ffca9d025b8 [ 675.730440][ T37] [ 675.734084][ T37] INFO: task syz.1.4913:14995 blocked for more than 247 seconds. [ 675.745198][ T37] Not tainted syzkaller #0 [ 675.750645][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.772239][ T37] task:syz.1.4913 state:D stack:0 pid:14995 tgid:14988 ppid:12399 flags:0x00004004 [ 675.785746][ T37] Call Trace: [ 675.792046][ T37] [ 675.795321][ T37] __schedule+0x1322/0x1df0 [ 675.800355][ T37] ? __sched_text_start+0x10/0x10 [ 675.806189][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 675.812058][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 675.818172][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 675.824260][ T37] schedule+0xc6/0x240 [ 675.828575][ T37] blk_mq_freeze_queue_wait+0xe6/0x170 [ 675.834937][ T37] ? __cfi_blk_mq_freeze_queue_wait+0x10/0x10 [ 675.841854][ T37] ? blk_mq_run_hw_queues+0x372/0x430 [ 675.847296][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 675.853609][ T37] ? __cfi_blk_mq_run_hw_queues+0x10/0x10 [ 675.859779][ T37] ? mutex_unlock+0x8b/0x240 [ 675.865351][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 675.870709][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 675.876862][ T37] blk_freeze_queue+0xc7/0x100 [ 675.881953][ T37] blk_mq_freeze_queue+0x19/0x30 [ 675.886950][ T37] lo_ioctl+0x1827/0x1d50 [ 675.891523][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 675.896418][ T37] ? __kasan_slab_free+0x6a/0x80 [ 675.901454][ T37] ? kmem_cache_free+0x1c1/0x510 [ 675.906520][ T37] ? __wake_up+0x169/0x190 [ 675.911088][ T37] ? audit_log_end+0x1f1/0x240 [ 675.916101][ T37] ? audit_log_end+0x1f1/0x240 [ 675.920928][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 675.926938][ T37] ? common_lsm_audit+0x148c/0x1860 [ 675.932185][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 675.938211][ T37] ? __cfi_common_lsm_audit+0x10/0x10 [ 675.943731][ T37] ? __kasan_slab_free+0x6a/0x80 [ 675.948701][ T37] ? kmem_cache_free+0x1c1/0x510 [ 675.953773][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 675.959284][ T37] ? avc_node_kill+0x29e/0x2f0 [ 675.964356][ T37] ? slow_avc_audit+0x18d/0x1f0 [ 675.969265][ T37] ? __cfi_slow_avc_audit+0x10/0x10 [ 675.974613][ T37] ? avc_denied+0x112/0x180 [ 675.979387][ T37] ? avc_has_extended_perms+0x895/0xdd0 [ 675.985139][ T37] ? avc_has_extended_perms+0x91a/0xdd0 [ 675.990749][ T37] ? __kasan_check_read+0x15/0x20 [ 675.996062][ T37] ? do_vfs_ioctl+0xeda/0x1e30 [ 676.001036][ T37] ? folio_add_new_anon_rmap+0x475/0x910 [ 676.006822][ T37] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 676.012835][ T37] ? do_pte_missing+0x3c75/0x4240 [ 676.018095][ T37] ? blkdev_common_ioctl+0x10e4/0x2810 [ 676.023893][ T37] ? blkdev_bszset+0x220/0x220 [ 676.028688][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 676.033695][ T37] ? pte_offset_map_rw_nolock+0xba/0x110 [ 676.039397][ T37] ? handle_mm_fault+0x169b/0x1b90 [ 676.044859][ T37] ? selinux_file_ioctl+0x6e0/0x1360 [ 676.050197][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 676.055797][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 676.061244][ T37] ? lock_vma_under_rcu+0x49d/0x540 [ 676.066564][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 676.071549][ T37] blkdev_ioctl+0x546/0x680 [ 676.076156][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 676.081244][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 676.086401][ T37] ? security_file_ioctl+0x34/0xd0 [ 676.091785][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 676.096950][ T37] __se_sys_ioctl+0x135/0x1b0 [ 676.101680][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 676.106430][ T37] x64_sys_call+0x1878/0x2ee0 [ 676.111479][ T37] do_syscall_64+0x58/0xf0 [ 676.116344][ T37] ? clear_bhb_loop+0x50/0xa0 [ 676.121274][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 676.127458][ T37] RIP: 0033:0x7fb30db8eec9 [ 676.131978][ T37] RSP: 002b:00007fb30ea20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.140708][ T37] RAX: ffffffffffffffda RBX: 00007fb30dde6090 RCX: 00007fb30db8eec9 [ 676.149040][ T37] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 676.157695][ T37] RBP: 00007fb30dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 676.165893][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.174059][ T37] R13: 00007fb30dde6128 R14: 00007fb30dde6090 R15: 00007ffca9d025b8 [ 676.182436][ T37] [ 676.185624][ T37] NMI backtrace for cpu 1 [ 676.185649][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 a1e7228139d9ee8ddccd82caf3411206af300c09 [ 676.185677][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.185691][ T37] Call Trace: [ 676.185698][ T37] [ 676.185708][ T37] __dump_stack+0x21/0x30 [ 676.185742][ T37] dump_stack_lvl+0x10c/0x190 [ 676.185770][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 676.185803][ T37] dump_stack+0x19/0x20 [ 676.185830][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 676.185857][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 676.185886][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 676.185909][ T37] ? sched_show_task+0x379/0x560 [ 676.185938][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 676.185963][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 676.185992][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 676.186020][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 676.186047][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 676.186075][ T37] watchdog+0xd8f/0xed0 [ 676.186112][ T37] ? __cfi_watchdog+0x10/0x10 [ 676.186146][ T37] ? __kasan_check_read+0x15/0x20 [ 676.186178][ T37] ? __kthread_parkme+0x138/0x180 [ 676.186199][ T37] ? schedule+0xc6/0x240 [ 676.186225][ T37] kthread+0x2ca/0x370 [ 676.186247][ T37] ? __cfi_watchdog+0x10/0x10 [ 676.186275][ T37] ? __cfi_kthread+0x10/0x10 [ 676.186298][ T37] ret_from_fork+0x67/0xa0 [ 676.186327][ T37] ? __cfi_kthread+0x10/0x10 [ 676.186349][ T37] ret_from_fork_asm+0x1a/0x30 [ 676.186381][ T37] [ 676.186390][ T37] Sending NMI from CPU 1 to CPUs 0: [ 676.351797][ C0] NMI backtrace for cpu 0 [ 676.351816][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 a1e7228139d9ee8ddccd82caf3411206af300c09 [ 676.351838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.351849][ C0] RIP: 0010:__kasan_check_read+0x5/0x20 [ 676.351883][ C0] Code: 0a 48 c7 c7 e0 0f f4 86 48 89 de e8 85 28 28 ff 45 31 ff eb c9 b8 09 7d df 1d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 89 f6 48 8b 4d 08 31 d2 e8 ab e4 ff ff 5d c3 cc cc cc cc [ 676.351898][ C0] RSP: 0018:ffffc90000007f58 EFLAGS: 00000046 [ 676.351914][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff87215540 [ 676.351927][ C0] RDX: 0000000000010000 RSI: 0000000000000008 RDI: ffffffff87cb1ce8 [ 676.351938][ C0] RBP: ffffc90000007fb8 R08: ffff8881f6e50ec7 R09: 1ffff1103edca1d8 [ 676.351951][ C0] R10: dffffc0000000000 R11: ffffed103edca1d9 R12: 0000000000000000 [ 676.351964][ C0] R13: 0000000000000000 R14: ffff8881f6e4f9a0 R15: dffffc0000000000 [ 676.351976][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 676.351991][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.352002][ C0] CR2: 00007facd57b3ad8 CR3: 00000001200a2000 CR4: 00000000003526b0 [ 676.352018][ C0] Call Trace: [ 676.352025][ C0] [ 676.352033][ C0] ? __flush_smp_call_function_queue+0xa5/0xc70 [ 676.352060][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 676.352084][ C0] generic_smp_call_function_single_interrupt+0x17/0x20 [ 676.352109][ C0] __sysvec_call_function_single+0x28/0x230 [ 676.352130][ C0] sysvec_call_function_single+0x7a/0x90 [ 676.352161][ C0] [ 676.352167][ C0] [ 676.352173][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 676.352190][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 676.352206][ C0] Code: cc cc cc b8 9c 56 1e 73 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 02 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 13 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 676.352220][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c2 [ 676.352234][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858d50be [ 676.352247][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000003fb2f4 [ 676.352258][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 676.352271][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 676.352283][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cb1ce8 [ 676.352296][ C0] ? ct_kernel_exit+0x7e/0xb0 [ 676.352313][ C0] default_idle+0x17/0x30 [ 676.352329][ C0] arch_cpu_idle+0xd/0x20 [ 676.352345][ C0] default_idle_call+0x3f/0x80 [ 676.352362][ C0] do_idle+0x1a0/0x470 [ 676.352378][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 676.352397][ C0] ? do_idle+0x10/0x470 [ 676.352414][ C0] cpu_startup_entry+0x48/0x70 [ 676.352431][ C0] rest_init+0x10b/0x130 [ 676.352449][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 676.352467][ C0] start_kernel+0x46a/0x4bb [ 676.352491][ C0] x86_64_start_reservations+0x2e/0x30 [ 676.352506][ C0] x86_64_start_kernel+0x6a/0x7b [ 676.352520][ C0] common_startup_64+0x13b/0x157 [ 676.352547][ C0]