last executing test programs: 6m3.107251675s ago: executing program 32 (id=271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000009740)=[{{&(0x7f00000032c0)={0xa, 0x4e22, 0x10000, @local, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000003840)=[@flowinfo={{0x14, 0x29, 0x37, 0xffff}}], 0x18}}], 0x1, 0x24008085) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="001704000000abe763a8b94399b411869db1384ab09348ef2ba7397e24da9101f13f3fd6377f11ea23b8fdb9cacae56ff1fd5009d90a8b2b6bafd1bc3e2ab3b11dc1aa931b69b4500827556c0698f389a022f3dd69258c5b57ba2ee89178434b87690bf523eab70c2861fa895c1752ea8be220f9350140a32f98"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000180)={0x40, 0x14, 0x12, "1ecf4703d5c31359fdc30000000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x13, 0x6}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/36, 0x24) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) 5m42.94189557s ago: executing program 2 (id=685): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000500)="a8428fd187f53a1b1293c851a36abd778bfac7e9b9bb5026f4b1e3ee87eaed11a127afc36199046d8a0fcceeb5a0cd41b0c29a36d4c743b454d4934b33def94c3f197ea3e151a7891707b5a87a2734d711cfd0377886fe3865cdd7d0c985bc9889ffba108e09fdcd295c09386a6c5f6956cdca7d30cd0bd9efebc6f82af37f80d20241fc74b8f2d07032b52764ae0b23b94f39141a21d1d2bd5640c18879499d1d1387c64e08d035f4213d5f91b4cbe23e74ab0e60dc6ecc62b41f090245ef18e25354866537be061f06286dac150beef7c0009e51a8864b7a1eedad6526deba", 0xe0}, {&(0x7f0000000600)="162c9988157a62c1147064ce7a38215af4287e65d5522e196f2b2ec443a157228e082e524535dd36897e35d087c22327366517a58a2a207d36cf4fa292b3f1d994ebf0fa858b", 0x46}, {&(0x7f0000000680)="430ce0c03ff0ef70600045ab1869dc92dd5002838a9f2468f36ddccfec95bf3ba86920125785d9084d3aac1cfbe4f33d2d21de84ef3c62fdedfde4c2b226c64163e40b980fafebada1f82ac93a04d1b3091234ba832acc36015ef1f39a0126fcddba81a30bbd931e12ca6578e0e33825555af60ba9e3df4a9a552a5f172605ff8cbbef407d774ec90a663ce6cac1e483162524e571bbd440193c7483d6420f1c1d25a39ed02d9fb926cd931a89c6c0da2fe139681ac222b24628f19efdf4d79cf7", 0xc1}], 0x3) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/154, 0x9a}], 0x3) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x200200, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom1\x00', 0x1800, 0x0) write(r1, &(0x7f00000001c0)="76f6df593b424317341695cdc245b694701a8f7c60940adb98150ae05bfd14225eaeb84b4b64a0685c5c82a7bab2c234235c", 0x32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0xc3, "01f9bcb34970ccab4750f8834a651f12fe50142750ab67416d597dd98eb02972b3fa8099e3b771c975eeef2247829c34e27be5a6948fb04f0f0eea6e7dab38d53b65decc02373f3565b688dd5584f5d32d4ec7c09c9eaca7abdeccc6ef9a62b649ee61cdbc99158c3840eba85c3641190a46c089a9585b7472cdeb8884a7b64f172a932cb6845ec37ac0f969931b86dc7726ebf3916a21cc6dda75a9d1a7c75a1ad3ff6c832e24e8c1113b36e48f8d238beb91dd1656ac85107206702ef647ff852990"}}) 5m42.922708431s ago: executing program 2 (id=686): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x1, 0x489a}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 5m42.866819545s ago: executing program 2 (id=687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010330030904000001020d00000524000001052400"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = getuid() setreuid(0xee00, r2) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) lchown(&(0x7f00000004c0)='./file1\x00', r2, r3) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c63eac68956266469b89bfa00000000000000000000000000d600"]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r7, @ANYBLOB="040028bd7000fedbdf251300000014000280080001007f00000008000200030000000c00098008001200200d000008000280040004000c0001800800030007000000040003806800058007000100696200000800010065746800080001006574680008000100657468000c000280080002000800000008000100657468001400028008000300ff00000008000200000100000c00028008000400070000000700010069620000080001007564700020000780080002000700000008000100080000000c0004000200000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c014) ioprio_set$uid(0x3, r2, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025c0002010330030904000001020d00000524000001052400"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) getuid() (async) setreuid(0xee00, r2) (async) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) (async) lchown(&(0x7f00000004c0)='./file1\x00', r2, r3) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c63eac68956266469b89bfa00000000000000000000000000d600"]) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r7, @ANYBLOB="040028bd7000fedbdf251300000014000280080001007f00000008000200030000000c00098008001200200d000008000280040004000c0001800800030007000000040003806800058007000100696200000800010065746800080001006574680008000100657468000c000280080002000800000008000100657468001400028008000300ff00000008000200000100000c00028008000400070000000700010069620000080001007564700020000780080002000700000008000100080000000c0004000200000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c014) (async) ioprio_set$uid(0x3, r2, 0x4000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) (async) 5m42.853801676s ago: executing program 2 (id=690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000cc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x6}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 5m42.722888464s ago: executing program 2 (id=692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0xa26) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) 5m42.677375077s ago: executing program 33 (id=692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0xa26) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) 4m53.998980488s ago: executing program 34 (id=1314): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000140)) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x4d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000380)={0x0, 0x2, 0x11114002, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="0f017ffdc4e2d529900900000066baf80cb8e26cd387ef66bafc0cb057eef65000c4e1d25d93f66700009d66baf80cb8b9360183ef66bafc0cec26660f1535000001009a00300000bf000f01ca", 0x4d}], 0x1, 0x11, 0x0, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) socket$inet6(0xa, 0x3, 0x87) fgetxattr(r2, &(0x7f0000000240)=@random={'system.', '];\xf4:(!!'}, 0x0, 0x0) r10 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@code={0xa, 0x5e, {"420f05c4017b11a75d2800000f237a66bad00466b80a0066efc4c1ff7051af00400f01df65450f01dfb9e90a0000b8a1000000ba000000000f30b805000000b9f894e1630f01d92e67670fc72b"}}], 0x5e}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000700)={'macsec0\x00', 0xca12}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x5}, 0x8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000002e0001002abd70000000000008000000", @ANYRES32=r13, @ANYBLOB="0c0000800800090064010101172ee421dddc6ad7e591e95908f8de4c68e2a3da7c3eabb8048c30dd00b3e265e58a51adb710004da9a97827711411e50fa6df80534c02ef8068a8777d33462ca9dfd32176673a07bbba80ea5d7b6aec826b1b4dee3b91f5fa9b7292ad4c9bf2b279b51ac1149219a4828df64bc1ed9f26f1dd91b9fa1bb20ce02be5b91317df063f5edeb610c3801d1fe6e719fcaf1f128193798960b95798cf8278f3aaa200000000413350eb"], 0x24}], 0x1}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 3m17.25333765s ago: executing program 35 (id=3132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) r3 = syz_io_uring_complete(0x0) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0xd, 0x40010, r3, 0x10476000) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013fbbc"], 0x24}}, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) (async) syz_io_uring_complete(0x0) (async) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0xd, 0x40010, r3, 0x10476000) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013fbbc"], 0x24}}, 0x0) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) close(r5) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) 2m18.435426567s ago: executing program 36 (id=4507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 1m59.677813453s ago: executing program 1 (id=4578): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000459bb3405804035000000000000109021b72762ba00000090400000195699b000905065e1de66ca71f345e1b0d54ddf9ba47cf4947a2b0cc2a163cdabf85a268e4445b42c73b7ddca1ea4e5e6750dc90bbc41620cc1368bd95222a4dc9d6a6379ae526c2d90c46677ad099ba2481", @ANYRES32=0x0], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000a00)={0x20, 0x8, 0xa6, {0xa6, 0x23, "a9ec5b61cd5e9c6590b5cf3d1fd5b582a13afadda5bb64966faf3da33af6edd85203128149074c0e3841961f82280c37ef498cad16c585f74985db497f819dfac80584bf7679e357377801fe1dfa63ce0f6db865b7427d59b122f780ac45a07fbb4a489a01c2bc57b2009e7ca88844cc112f01d2f1fdada9f3759046c9c523867d65a2df813955b2099bbaa1cd22b83639fb566b534abec8705258ec65426cfab1ad25d2"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "1bc9193ba64397e302f2ae88e63a805f7c42747af6a038474316a9d7a31a37f0bc0c1ab31722ff300761b2bb34cd076f1d9053e1d7f8fe36c46df6bfec983903f31f367d369ed15ca579decb068260e856a797f6b053851e9e37252ed78380d65c243507229469b234a460a818e96b35176221bc26db20bcc42a83922353ee76f0d770f204056b532d3a90c7"}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b80)={0x20, 0xa, 0xb9, "ef6a901f8b2d2c949e6f718260954649ca363fd2aee25b8d0dc37d0f7c31b21adf8a897fc4cfd9bb686c416249cbe532192eae81bb5a396a335b723ba2575d450d1cee4e1c06282a054e98c40967a8bca4d4d180ce63eab30273a813b018ba74165529bf7453f09ce645d2474c063da781b1b8a4bfd10ac6917460d2137fca9bdf1d9c52f1f9f5d437e159ac94d5a25c47b6227f74ddb80dc0db1a1e6ee6e2795afe4b9b368fcfcc784bb60fc08ffe3a1467a28183c55f84e6"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0xc0, 0x5, 0x3, "41180d"}, &(0x7f0000000c80)={0x40, 0x5, 0x3, "5ad976"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40002) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x0, 0x7, &(0x7f0000000080)=0x4}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xa5bd550bd30393cf, &(0x7f0000000140)={0x0, 0x0, 0x8c, "88481c9520c21285bb3a5bc70c2e79eee71a41e01da642f6e4abac880e3c971bbce16ef832fc930e72c5b076447e6e5693b34d5570d72ae55b1b8834d42385ca079639aae4b3a9cd3f567062a2217f45ee7cd6100cde64a27cbae192809c6eb5ea9af4a3e9210c6dfdc710e2f9f9ca5d92ca4a2ce5a12185ee8feade85903cb6dff73f3ba2ca5b231f5b51d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0xc4, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x3, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x2, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x6, 0x5, [0xa, 0xa, 0x7, 0x1, 0x2], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0xa308, 0x4b, "7052c1c7be41"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x0, "8a9b6c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0x4, 0x94, {0x7, 0x25, 0x1, 0x2, 0x6, 0xf9a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x6, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd1, 0x2, 0x4f, 0xc}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x4, 0xe, 0x5, "17"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xdb, 0x40, 0x2, {0x7, 0x25, 0x1, 0x2, 0x8, 0x8000}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x6, 0x20, 0xff, 0x8}, 0x31, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f3100150b10010c300006c602000503100b071002045504001410040c2d36d62276e628fb32defd35a5f3ce1a03100b"], 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x439}}, {0x51, &(0x7f0000000740)=@string={0x51, 0x3, "b833bdf59219139034de1a1c5d1f597f3790be51fb4343223e3e32f2ff950e38a967b806458d5f843b1bfebd6b2a94282c93ece5e10a9943f6d48be6343b19758176aa46976c3b32b8dd2beeca0abf"}}, {0x62, &(0x7f00000007c0)=@string={0x62, 0x3, "319d346a14049f78a8d1c2801d03ce006a57c3e349539d98e001c1c75d5abb632de897ff044ffaacc2972d2680f35b95e2ff4aadbadeeb269640e745dba140aa225c8406050323b3475258e7a15e21cfcd541ba56fd68c6d7df09fd258dcb999"}}]}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xff, 0xac, 0xc5, 0x8, 0x763, 0x1011, 0xb796, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x3, 0xff, 0x46, 0xf7, 0x0, [], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0x9, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x6, 0x8, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xbe, 0x0, 0xf}}]}}]}}]}}, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000d00)=0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000dc0)) setns(r5, 0x40000000) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000004c0)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000e80)={[0x4]}, 0x8) read$FUSE(r4, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x8) write$FUSE_INIT(r4, &(0x7f0000006500)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r9, 0x4068aea3, &(0x7f0000000240)) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RLINK(r10, &(0x7f0000000d80)={0x7, 0x47, 0x1}, 0x7) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m56.589808544s ago: executing program 1 (id=4596): r0 = epoll_create(0x9) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x1, 0xd6c6, 0x7}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 1m56.576258124s ago: executing program 1 (id=4597): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) madvise(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x15) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/183, 0xb7) 1m56.564394835s ago: executing program 1 (id=4598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 1m56.510830329s ago: executing program 1 (id=4599): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) socket$packet(0x11, 0x3, 0x300) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x33, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3, 0x0, 0x0, 0x20}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) (async) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r8, r7, 0x0, 0xffffffff) 1m56.510535469s ago: executing program 1 (id=4600): r0 = epoll_create1(0x80000) (async, rerun: 64) r1 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)) (async) syz_open_dev$loop(&(0x7f0000000200), 0x1000000000000000, 0x20000) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x8002, 0x80) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffffffffffffff00, 0x7]}}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 1m44.301298373s ago: executing program 4 (id=4782): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x250860, 0x0) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@remote, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0xf94a, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}]}]}, 0x23c}}, 0x40044) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) 1m44.275155755s ago: executing program 4 (id=4783): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) 1m44.262518355s ago: executing program 4 (id=4784): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r3, 0x1, 0x70bd26, 0x20003, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) setitimer(0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x2044) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0) (async) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 1m44.206822348s ago: executing program 4 (id=4785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket(0x11, 0xa, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x4100) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000140)={0x7, 0x9259, 0x81, 0x5}) bind$can_raw(r1, &(0x7f0000000000), 0x10) getsockname$inet(r1, 0x0, &(0x7f00000001c0)) getpeername(r1, &(0x7f0000000040)=@ethernet={0x0, @multicast}, &(0x7f00000000c0)=0x80) readahead(r0, 0x4, 0x4058) 1m44.206380069s ago: executing program 4 (id=4786): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000080005"], 0x30}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1m44.058858588s ago: executing program 4 (id=4789): syz_open_dev$loop(&(0x7f0000000200), 0x1000000000000000, 0x20000) (async) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x8002, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "6752376000100000000000001a0ca55ba139100002c4dae4162e43ac61b7ad33", [0xffffffffffffff00, 0x7]}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1m42.676334358s ago: executing program 8 (id=4823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = dup(r2) getsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x5e21, @empty}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}], 0xffffffffffffffaa, 0x1000000000000, 0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd26, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) dup(r2) (async) getsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x5e21, @empty}, 0x10) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}], 0xffffffffffffffaa, 0x1000000000000, 0x0}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_TTY_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd26, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8010) (async) 1m42.675299398s ago: executing program 8 (id=4824): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x81c5}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x6, 0x3c}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x7, 0xe, 0x2, 0xb43, 0x7ff, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m42.393768957s ago: executing program 8 (id=4826): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m42.246749096s ago: executing program 8 (id=4827): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) 1m42.245980396s ago: executing program 8 (id=4828): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x69acbad6c8761d08, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xfffb, 0xfa, 0x30, 0x7f}, {0x2, 0x8, 0x3, 0x3}, {0x6, 0x1, 0x8, 0x4}, {0xf2de, 0x0, 0x5, 0x6}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0, 0xffff4a9c0080ffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4508) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@util, &(0x7f0000000100)=0x80, 0x800) (async) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@util, &(0x7f0000000100)=0x80, 0x800) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000240)=""/239, 0xef}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/200, 0xc8}], 0x5, &(0x7f00000005c0)=""/214, 0xd6}, 0x9}], 0x1, 0x90da9f31ace39e44, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1m42.166838611s ago: executing program 8 (id=4829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000004c0)={[{}]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) clock_getres(0xfffffffffffffffb, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00'}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f0000000080), 0xb, 0x1, &(0x7f0000000140)={r5, r6+60000000}, &(0x7f0000000180)=0x2, 0x1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) read$FUSE(r4, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, r7, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}], [], 0x6b}}) open(&(0x7f0000000240)='./file0\x00', 0x100, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') 1m42.112822824s ago: executing program 37 (id=4829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000004c0)={[{}]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) clock_getres(0xfffffffffffffffb, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00'}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f0000000080), 0xb, 0x1, &(0x7f0000000140)={r5, r6+60000000}, &(0x7f0000000180)=0x2, 0x1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) read$FUSE(r4, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, r7, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}], [], 0x6b}}) open(&(0x7f0000000240)='./file0\x00', 0x100, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') 1m40.563095985s ago: executing program 38 (id=4600): r0 = epoll_create1(0x80000) (async, rerun: 64) r1 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)) (async) syz_open_dev$loop(&(0x7f0000000200), 0x1000000000000000, 0x20000) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x8002, 0x80) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffffffffffffff00, 0x7]}}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 1m21.617280912s ago: executing program 39 (id=4789): syz_open_dev$loop(&(0x7f0000000200), 0x1000000000000000, 0x20000) (async) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x8002, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "6752376000100000000000001a0ca55ba139100002c4dae4162e43ac61b7ad33", [0xffffffffffffff00, 0x7]}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1m20.678624042s ago: executing program 2 (id=5038): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000680)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1m4.555179827s ago: executing program 40 (id=5038): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000680)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 58.834477674s ago: executing program 9 (id=5366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) r5 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xfdd8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2004000, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@euid_eq={'euid', 0x3d, r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x2a}}]}}) 58.834226995s ago: executing program 9 (id=5368): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000023c0), 0xa0482, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x1, 0x6, 0xe0bc, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8, 0x6, 0x7, 0x2, 0x5, 0x0, 0x6a, 0x400], 0xdddd0000, 0x2013c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000021c0)={0x4c, 0x0, &(0x7f0000001fc0)=[@transaction_sg={0x400c6313, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 58.782927368s ago: executing program 9 (id=5370): getitimer(0x1000000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x2) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) (async) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) (async, rerun: 64) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async, rerun: 64) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6c, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x1c}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3d}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0x1000a, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x11, 0x7, '\x00', 0x6, 0x4080000000000005}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 58.778873308s ago: executing program 0 (id=5372): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) setresuid(0x0, 0xee01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r1, r3, 0xee01) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x141342, 0x0) read(r4, &(0x7f0000000040)=""/141, 0x8d) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2fe}, 0x0, &(0x7f0000000100)={0x80000001, 0x0, 0x0, 0x1cf, 0x2, 0x40}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) getpid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) keyctl$get_security(0x11, r0, &(0x7f0000000280)=""/243, 0xf3) 58.778667758s ago: executing program 9 (id=5373): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa3) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, 0x0) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) madvise(&(0x7f0000110000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 58.726861901s ago: executing program 0 (id=5374): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_gettime(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x100) 58.725814901s ago: executing program 9 (id=5375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000100)=0x1, 0x4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300"], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0xffffffff, 0x6) setuid(0xee00) getpgrp(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) 58.703525012s ago: executing program 0 (id=5377): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0xa200, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xff6e}}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7fec}]}) close_range(r2, 0xffffffffffffffff, 0x600000000000000) 58.632011687s ago: executing program 0 (id=5378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x2002, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f00000005c0)="bac158a8abe2bbfc7f86b46a8878615577d8ecdf9f906bf92ad23c7a9e69397fa6a2c38be1c16b30522a074e82f547ba5d8848d46b9b8b3ac71b5a55905dd8b3c9a722c714dd73b6b5dec79521f10b5711d0bc4dfe40172eb493d81ada3d31796a2ffdef93627994a7f7976c65087719a1c017c03ee97eb5024af937e89849e8e62dd7cc50eea7a6d036d340d46f7b8171c4ea51e617ad3dbe92e41d03ada428f34d60db8743297002ca8a27c08c4469325857b1ee977afaebf96f8698d3a3532451d30ffec1fb2f71d78017b739884533ca8828332f53d9a923327bc94d6a2e6fa5cf7dfee28718252dfb9aaa36e5b75e6b727a", 0xf4, 0x20004000, &(0x7f0000000500)={0xa, 0x4e22, 0x10001, @mcast1, 0x5}, 0x1c) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) fremovexattr(0xffffffffffffffff, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x28012, r6, 0x0) (async) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x10) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x7749bb4c0f8f7353}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="54800000", @ANYRES16=r8, @ANYBLOB="200027bd7000ffdbdf25520000000500890003000000060048005f0000000500890009000000050089000500000006004800330000000800cb000100000005008900070000000500880001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4044821}, 0x40) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000000)={0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1) (async) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) (async) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x144084, &(0x7f0000000580)) 58.630932377s ago: executing program 0 (id=5379): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0f00, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close_range(r2, 0xffffffffffffffff, 0x0) 58.624146238s ago: executing program 9 (id=5380): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) (async) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x401) 58.541700403s ago: executing program 41 (id=5380): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) (async) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x401) 58.539089133s ago: executing program 0 (id=5382): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000000)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x5, 0x5}}}, 0xa) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="9500000065ffff75"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(r3, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x20, 0x14, 0x6, "34da8fbd1584"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, r4, {0x7, 0x21, 0x0, 0x201000, 0x7d, 0x1005, 0x3, 0x3}}, 0x50) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0xf, 0x8e, {0x8e, 0x6, "7527987cab80803c2a97fdb47606b2e564c72d58abce86d9f05850da7af3b940c8241d6a81b308dc25591ba9fb9221f28620c0258f52a0c7b71d945f77b097e7fa89ade5496097748ce0ec381e41a39d70e45946fecc11c903e278df13df56046b8092d86ab0fe3af3aa945e75aa9cce9d55a46c3bcfa13260b70e2177125de56ee6375779cc7b0f00325916"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x40, 0x12, 0xaa, "d06e11e23cfaa6547918d6230bb59245d2beacb8792ad58f8f49645f517eb581b13215aa97bf23b2a6059057e08139dc207076b34081e5237e3aca4fc0e7c6f538406e5a39a80f4c1f3e017286bd2c57a0306621a23780d516ec1ffedfbbba02c0bbc7e5acd5bc604924614904c27e1c30f7c13eb384d7e7f427cddb26063e95f7c95c514011bf38236c390a89db9d30211b3baa600021c59fcf76215f589d12c92686ff865f5483d1c8"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x6, 0x66, 0x7, 0x5, 0x8, 0x2, 0x4, 0x3, 0xf000, 0x0, 0x0, 0x5}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x400}, &(0x7f0000000b80)={0x20, 0x89, 0x2}}) dup(r0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x1000000, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000007c0)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000043c0)="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", 0x1000}, {&(0x7f0000000140)="a5d0ee80aea173fc418351720e95683e52d68781eafde29bfbcc5b6a9917a392c3534a8e94ec5fc2362f9d0a0effdfc3fe1d5e516c8c5c4816becb28d1f329f28eff689f81c59d702b53d0bb8039a1336e2e0d", 0x53}, {&(0x7f0000000540)="889c89f67c3d7350b6ee22998e70bf7a4ab3e236399f38ff40cf55b969dc1940d3fbaeecb624f7f03e0ca44f3696c5a87d57393731983d1d1b5489a714c65680c4de158ab15e049f7bb9a026d7c1bff5c5a947d04f1b04daccafb94842e4cf7567bbac255f96237174cda2e6f16c2f047614c1b5a53de566221d5115258dafe3bb8217b153d85f88b3e74e941c73b6344e3612c953eb78dd9f3032cc77ff31819fe580bde577513e371e61303ae796f552af82e5b6b93222d811a5897237288261af3b83fa8f86e96b78208044d4b9d08ba6add4dadbedc24e392e", 0xdb}, {&(0x7f0000000340)="b4fb16a63ed8f7e7a5383e0809e4a4959b1a7b70a9337c929caa51a181a65349a75d4ce896ce0183faf0c97d80a0462bea4be5b326c86ccc2e3ff41a7a2d369fc49be7b4a444787325dba0ec71bd75be2bdd9698fc6fd6f8ed3ca5d2", 0x5c}, {&(0x7f0000000640)="65b4ae4e06798f84eb97bdde387ed0fac76ebf150e6f2b499a3186f9a1f2df29dda0499e9fe3be791faadc49c8a7e3e35a6c83e5e75305b4d685e65db677ae5d9fa7293747f9818577545fbdf3c894e2279f7dcd3c6e33e98f4de06213be5f9cbb781e3f978f40595300021980d359e57ea33fd9e0e55e962724aa46d388b094d530e3", 0x83}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f00000063c0)="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", 0x1000}], 0x7, &(0x7f0000000780), 0x0, 0x5}}], 0x1, 0x8000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000480)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet6(r8, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x8, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000c80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x247}}], 0x18}}], 0x2, 0x4044800) r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r7, 0x0, 0xffffffff) 46.203130995s ago: executing program 5 (id=5408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) mknod$loop(&(0x7f0000000140)='./file1\x00', 0x20, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x7}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000035d16e9c3f78c1790900"/32]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00150000000008ffffff2e00000097"], 0x18}], 0x1}, 0x8000) socket$key(0xf, 0x3, 0x2) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 44.351592964s ago: executing program 5 (id=5418): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x7, 0x8000004, 0x2094, 0x1}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x4080101}, 0xc) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) personality(0x5400004) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x7fff8000000, 0x4000000) r6 = socket$nl_audit(0x10, 0x3, 0x9) pipe2(0x0, 0xc0000) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 43.028651069s ago: executing program 5 (id=5428): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfb, 0xc, 0x4}]}) 42.051534001s ago: executing program 42 (id=5382): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000000)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x5, 0x5}}}, 0xa) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="9500000065ffff75"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(r3, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x20, 0x14, 0x6, "34da8fbd1584"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, r4, {0x7, 0x21, 0x0, 0x201000, 0x7d, 0x1005, 0x3, 0x3}}, 0x50) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0xf, 0x8e, {0x8e, 0x6, "7527987cab80803c2a97fdb47606b2e564c72d58abce86d9f05850da7af3b940c8241d6a81b308dc25591ba9fb9221f28620c0258f52a0c7b71d945f77b097e7fa89ade5496097748ce0ec381e41a39d70e45946fecc11c903e278df13df56046b8092d86ab0fe3af3aa945e75aa9cce9d55a46c3bcfa13260b70e2177125de56ee6375779cc7b0f00325916"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x40, 0x12, 0xaa, "d06e11e23cfaa6547918d6230bb59245d2beacb8792ad58f8f49645f517eb581b13215aa97bf23b2a6059057e08139dc207076b34081e5237e3aca4fc0e7c6f538406e5a39a80f4c1f3e017286bd2c57a0306621a23780d516ec1ffedfbbba02c0bbc7e5acd5bc604924614904c27e1c30f7c13eb384d7e7f427cddb26063e95f7c95c514011bf38236c390a89db9d30211b3baa600021c59fcf76215f589d12c92686ff865f5483d1c8"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x6, 0x66, 0x7, 0x5, 0x8, 0x2, 0x4, 0x3, 0xf000, 0x0, 0x0, 0x5}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x400}, &(0x7f0000000b80)={0x20, 0x89, 0x2}}) dup(r0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x1000000, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000007c0)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000043c0)="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", 0x1000}, {&(0x7f0000000140)="a5d0ee80aea173fc418351720e95683e52d68781eafde29bfbcc5b6a9917a392c3534a8e94ec5fc2362f9d0a0effdfc3fe1d5e516c8c5c4816becb28d1f329f28eff689f81c59d702b53d0bb8039a1336e2e0d", 0x53}, {&(0x7f0000000540)="889c89f67c3d7350b6ee22998e70bf7a4ab3e236399f38ff40cf55b969dc1940d3fbaeecb624f7f03e0ca44f3696c5a87d57393731983d1d1b5489a714c65680c4de158ab15e049f7bb9a026d7c1bff5c5a947d04f1b04daccafb94842e4cf7567bbac255f96237174cda2e6f16c2f047614c1b5a53de566221d5115258dafe3bb8217b153d85f88b3e74e941c73b6344e3612c953eb78dd9f3032cc77ff31819fe580bde577513e371e61303ae796f552af82e5b6b93222d811a5897237288261af3b83fa8f86e96b78208044d4b9d08ba6add4dadbedc24e392e", 0xdb}, {&(0x7f0000000340)="b4fb16a63ed8f7e7a5383e0809e4a4959b1a7b70a9337c929caa51a181a65349a75d4ce896ce0183faf0c97d80a0462bea4be5b326c86ccc2e3ff41a7a2d369fc49be7b4a444787325dba0ec71bd75be2bdd9698fc6fd6f8ed3ca5d2", 0x5c}, {&(0x7f0000000640)="65b4ae4e06798f84eb97bdde387ed0fac76ebf150e6f2b499a3186f9a1f2df29dda0499e9fe3be791faadc49c8a7e3e35a6c83e5e75305b4d685e65db677ae5d9fa7293747f9818577545fbdf3c894e2279f7dcd3c6e33e98f4de06213be5f9cbb781e3f978f40595300021980d359e57ea33fd9e0e55e962724aa46d388b094d530e3", 0x83}, {&(0x7f00000053c0)="bfc2fe7cf874635eb2eb7f9286a7c6d59fe3d56b8a05262f4fe791765b1537fd1ee615d4397a441905ec3e7ef710d30799fc1504b0743fbce448bc05826e5564d4dcfe5ed6fef6716f2601eb1b598d6ce7400f18632e1b5408213129cce7e17f823306e4d2d1b76dc4bcca8b245d1de3414f8672049f9e0ad00fe24a8726ac56c798a7ec172e34d22c4e052a511f795a4a4b052438f14d668cd0c4a3f75b9f04eb68bdebe8751b3a8150e857eafd80d51d5eb21febac9e8110bffd9a407f93d30a29abc6c4f20105ad4522482581707f2a1ac2956fb3469adc5a38a7645be3c62091ed2fc999023995205bb13dc88768de5b5d2eccb1d2c9153eb4f40afb850545f4ba999977e8ba7a1dc4d9a7f8c8f548fda7659e16c67983409a624d09bf782977435e1f7153ba4cc39ec6c492280051095ef37369ac1191051dbf1edd9190ec114e533bcfd570f6cbdeb15731f03a1a8e0f2137e7a380e4a74f834dca95116676c7f984dc4f9b98dddb02b47394b5595d20c8330bff259a2171c5a1cb9bf6da29f4bfb00ca883ae65abfcc6f7cfdfd35a34523db8b0da2575f5627739b5485ccd46f6edb672edadb7bb0f88aa826871b897fcdf02ef49712115843f9ea2c54d90838ec0d71d5bf7ceeada30d87b03a90217e86c97b5b08912f9d1962cfb000416b18073a8321795a4c9f7bd72cb0e10bac374296a8ce16272c0a44fdcab45e2fe063a779458b5ad6faa38d9f14f8bb91b7aa0f650ef971719c4ee10eef14a7ac051062291de5a5baae018308978f261b8c524c03330b256073bbc065c21685aa509600cf43d06f60fa85d99fec2ef271436f8990e578605cbfbc2b997d4b0fc190a08969b46566b633ad52b14a034f53ce251feaa0b9f832a533718eb70b29b6f32594278250512d89f68d675d335f3ef2da433efc88dcb6a6a2d6a1b5ba4bcd1b80a50342a2001276011bc05a59c886be6a925080a7b0fdfe188f66929049b779d69cd9770b4053bac3ae15d82e314d402882d5fe1ee6ad9197201dc2e429b51ee2f16a069e2fe8e3d4bf01086464b0a3bea71c10ebee75947c0535c77b777cda6ace945a50e314bcaaba2d0b2c8a4941df1e616166875aa0aeab76dc559b465e13f93f8559ddc3a61ea6f816e1c653d55c1ba692cbbb593524473145098844fe88ebdc36cc5d3b1b878848dc500c4b8d3d612dfbd5244aa03b2591f0407e4e1adcf7081c9d2a3c9a5a2ba828c1cada47ea81e5c14c99606c687deeb8cc9ac389b02c35264586221f018ca40ecc1bcfa63a5c3ef89b60a3098bd456705c046414368730860bf58aa1cc15e5b567632ccf3eff2f4b50fc850abaedb51160c1350656a8674a4a358ebe195fb8b1f8362bc3fd175cdbd0ad576014e057d535d0d0893b394d6e2905315d5df69d0bc029dd0a42ce8c77b8f57f4f1b584a558e214910028a0e4aebc76a269d06bd6c5e8700ec985aed88e172f47cf0949449500592723dec804710d3760853bc333706e5bcc4e4ed648a8dfb0d60cf8166b81733316bdc969ed80c15f7f8b10b63f22605348c311f94aa4cf389356085530d2a7fecaf24b6b6a956ac2efe3dda4a8aabe225f82a41f5f19e1ec67b7b691abcc07ddffaba139fdb66f74761ef61157ddee82715c5b35f404bb5f9ddef674eba84666c65b709900f67fc5b38e31bc07572cd47d3adc77cb8e658b546cd659330b538f3dd4898a384a21730226d7c27b850c48f6a16315911327ceac23f9816c3dbbf2941582499ad2cfe375ded8c3d8b3464c3aadc6a35d63aefabe4340fac57479d355daf56012e77cb6b805adba2a42e14efa3b2531ab5fbe9c572b603994da60600d77971d1f8c9452db81b167cc28aad45caf513daaf2dce750d28618f2760cc04afb64ee402aa76ded21fc089db2cd7d6e002e8a78ab671aa740df6c2ef69a2df9f4ad569f58d61b023ef9d808f9763c1cbcd96281d30a14cdda9a4a69025f23049f159c75fcf61c4e51273700c8314432c0660a65b86c03c7bb920a61ef623d6a001a1fa1b9d86d1816638339ec6dfe3a9c6d4f56533b2ac966e751c00e3c0e824cab5e419d312e31f72658e64fb9f70de6f2e59f01e127398a05c24e453245e4f865b67aea7549bec4ed3a6d2df9b55639d972d250dd007b332440c999fa8890a321ce031dbc591780a19b513ba745c745cde91522afcd6266e0ffd1365631b365c19ad64eb8a97eed26eb59183d1ca0deed64da29620b542a862eba2935b3680f4427203a46f2bc2f3b56d5f413dc6476e32b6acf829b5fa2a6a26180c65e7e97a1133935220a8477abb5311766a8f77fa385e5b6871eeb0c883d6e08539e5ffa85ddd38f0a6a9a089ecebbd85d2b7152755e4554accc28466893b873fb4801fb2a538a2718eb8fd772d12dc142aa017cf965c471f26cc4206c9356e1ea37f18608d7e5c1162b0da70a90fb7e319b90276c0a77228a99e6e789d225ed2db8a3af20ef9c0f7658462f9b5c9f3dc7a4a2402e59bb35491327b539d9e2b494c010c6d3da695116918eadf02b97f66e77c36c1bed5d69a911c5edd9d4a7a4cae51a50cf05343695b1f439285c85dd7f4cd3177b53adfe1c64cc786e9228140bd13223278737aa0dd8ea2ced5fe2017670612eb3a28bcf350435fd2a00cb4ec868b759d6f613e7863ba00d5dd1e542cec19aa4c94d73f7d17a35e4b14090927774208f9cc2127a09639f9c73546619ddaf4db0372fd0b0775a3d20209044c798a726d641b689ecc29aee254f054585f169493086a2fff241bf2b6e44a0c7c7ef3b9eaed399bd9a8cf5abbdf8748dcd1d06f4cae88aabefd6e305a7f174925aa2353ba6c4e1076d3ed8eb0d1e899a57325f790ab986a808133d13d839fc4c027a32a4bd5fd01393a3612a8a3973c54fb3cf5c7d162a2ea47be0f776feb03ad404f0c36ecb5c8b8f97da08eb46bf24609cd8cb0d356e07165ece3bf9fb77a1b723634438cdf53d2347db29bab2dbc022c9610b0c95fad815aa880c0e6cb6f9dc8a061382fdb7bf47284c84d7987b3c73948fad8443ec18c2b4e9a1810c2f073b7382275c3e9f9c2ba14f675ccf0a58cdaf18520df476eb75865d8d26cb2e7e9bcc45bf92d8586916a3338a7877f58457a3fd1e0a02ab850b87213d95c8b0850ce46f01eb44bfd821fdc636d62476b82e70e7ba4134b94f45b8770133fb677de06b7d0079a8bc19b55a70eca375ac4cf0851488b0040936b33a671e53a1d7fd969f345ba35d44adc0f3a21586aa66be8eac7caf9e22234105ff6782961e9054af87a4566555fbeb44cf88870206fa2f6b6f95183079437e15287ec192be6bad51193f87ecfdd17e7e6fa5fdd6569bb4695bc5a37392882a87376e916293958f55e2da28dee6ff4ceea63936fc3a04ac67534e732f6f5b206859ed3a5dac401f0658aedf7d897823ad73a922cadd920d8787469aa2b0ec9eb9906ec8d5eef81e639fe13b7a952c21f84d718a7b85ad30f40b2d74723463279f1ad831b57942444dc05a57f40115930c46282f9a66adf254cd7f13ca38b7b7a99c32aae717b50830a290765703473458a95814758861805b90b92e38a9786d901098900d34ba74e598acebc9668df6f84d298c6e58e65cee00e965e1465c36ef7f1f115927722eadca4b2b8237e0becefbaa257a0bac5d72b67b6f3eef01ebc128d53078769954d2a1aa3bdc1280b0bded138cdf1c59c3dfb193494072a5da91bc837e37d3a29d2f9c00820343a61ccee961f9cad659e442243f583f0914a4c7ce9daf35ad74d8b15817bc3e8bfaeab84361d9801cd0a1bcde24bc15ec918e827cafa21e427f4930ebcc7f6897ee0fe594ba287ab1af1ae8c5aaeed1746d41cb815a80f7327e89bbfa1fb07129f4ab4feb9eafc930b5b5d8dc6edf9ae119d747f5e8a93bca6ee965d7f5db516ad4e359f9038e79f16f82b848f59e6bceefbcbbb6377edfa406fd4ca14f4b0690138f10c49b110702b91217e2b6b7ed75ec997e1a8bbe541edef2415d01d4a9a11e7e34b5b6f636cfdfa09e94858c603c86257746fdde21e2898dc9efb6f517fb09b646321479a625c389dae6295b3fe64833eb240b662db619ef63140d37a7851f66ce33d109289e91304aac4b9ea42684ac1b356bf8185a2a096ce77aa4ae3bf459735055a0b62fdcdf484770473681090f123604f498ecca22bbfb6510b9e76a0ffe277a86f9b9f7e9a5f58f3f12f0c2754754261dbc0f4104fdc2ed89d4d0c05be804b856bafbdfe5dc096d4f1fcc4a5d043d26fc5b0a50bc0e87bceb681305c74bf118b387cdd7f570ac71978b3e088d73c7c1d97d7110d3229a836f3397efe80a2c41b2038cd5fb097a15c2806ab7b2a9e9f6508a4a4706d27239abb80308f9e0a6492525021133c0c071cc0c6058c81a665f9d0debd810432f0bdc90a770dfcfcf5a73678362e41d821def9e90689ac7dec221ad619aa82287d1f3c2cddd418114b079bf131308ef4c79ee7e04bc0fe5ed452b309bcc3efb95d7cdd585e453a7c55be604c4b89dbfe856b993af26b6814981ce174f83ae80f3824d59b632c7fd26c2e410f1afaad44e45a6825ec1fbcb81a5b15a9b572685a5789283b80c905fa94df0f316f484293c1b2c92e974882a86b4ed042ed4903ef4c6acda1ab702a06617a7192cab0c9a3244d1d8faa28744fb9336f5071707e13d2bda2e794eed222ef03b8b2c8cf898cc8854e4a1d8bb6a64ac38e4821590f6292a87ec7415079e4899c081400020e34151d48dd2db50efc85085ef93eb770ab59cc336e043b1c11ef5d98f7d6d905838cd76aa80632b96064d39176e80af856cce247fb11f785e62efca246773b18bd83fbf69af665b5c0cd305989e065566f12022909c83f0c49ce37bfb103c6bd38021380a5cab5b99a4a47cc88e51818c76dd6eb49c666de896c228f4dad95e95aa4fc233a2ea1eeb088def9b2ae013bee185ed2ca2c48f2f9d8ace4febcca1d3d0431db8076428c6caa2664b1e1f606ca4e1c9678742e8d980266a1ce10e1dd7ae3bfc2de42ac938a45aaf93e34f66080042fdb84209a0afbe828cf0ecf0bdfd707d3ecbf1ef9542484bad4bcc3189bb85565d25a5fdc0bf22bb6734c468f29963784a5336d11a44c444f5cad1fd0ea89f2cbae8929a2741077cd753c7895c237c4c28013e6eb77982f7734b9f508f2bdca8010d9a686d58d7b951c5ec698a2a9b2f4e8e3764c96254b27a146b6d4524c483f7c271a84702a632f807a9d1c716d7bd2d83e8659e572439f166d3207f9ade5cb2df7a3c7a2bf3170b002b726e03aa657cff1d362d4cabb870898e83fbe5679d119011e36c329b824d03af32d05f37d003f1e8b1aa7d74c8bb691c2ac737ab9e19a29d5b0cee21b1a62a03bbde49c35e74788e3dc4325b4e3db9a0908f105afb95b260ab27f0fb896ba0438d24b54ea7c55b7a3ed521556fdc2847137662760200f6d8814e3e90383fc33f515bc6d6b2e946992d2746740fc0960854a6e75f1053650a3871805c6b5d2175de9841ec7105b48a1ade22d53d71df6bce6a9a4f567ba14f2c90e569be839fd797e95cb3318da2e655d3d2050f9dd4db7d5fb355221bc3a43e0211fb1433bb158b5086769910ca9ec29810522b228bf320dc7cb39bf40ec69a26bc4cfec86ed46478b86854073243a6d280792c2f7981dbf8dbd2cee42e1e9695903c75ddd7fd400ed4252706c1f76c407906a01beb0a0498c1805a60a075d8764661efc3cba588fd4759e3a8754df9f4b1929e79347b84485427", 0x1000}, {&(0x7f00000063c0)="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", 0x1000}], 0x7, &(0x7f0000000780), 0x0, 0x5}}], 0x1, 0x8000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000480)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet6(r8, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x8, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000c80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x247}}], 0x18}}], 0x2, 0x4044800) r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r7, 0x0, 0xffffffff) 41.813378767s ago: executing program 5 (id=5432): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r2, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x10080, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) (async) setresuid(0xee01, 0xee01, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef6f, 0x4}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0x1}, 0x6) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) (async) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000780)={0x3, 0x0, 0x7, 0xe, 0x131, &(0x7f0000000380)}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) 41.45282583s ago: executing program 3 (id=5438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0x100000000, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x9, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x4, 0x49, 0x3ff, 0x5, 0x9020, 0x1, 0x8, 0x7, 0xc1, 0x5, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x4, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x3, 0x8, 0x1ff, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0x200e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0x7, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xab6, 0x97, 0x8, 0x0, 0x3007, 0x9, 0x0, 0x6, 0x28000000, 0x5, 0x8061f, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x9, 0x2293332f, 0x6, 0x105, 0x1e, 0x0, 0x2, 0x5, 0xfffffffffefffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xa693, 0xcc, 0x1, 0x3]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000840)={{r3}, r5, 0xc, @inherit={0x80, &(0x7f0000000000)={0x0, 0x7, 0x89, 0x3, {0x20, 0x81, 0x0, 0x8, 0xb1b}, [0x5, 0x9, 0x1, 0x4, 0x4, 0x8, 0x9]}}, @subvolid=0x2}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 41.180594227s ago: executing program 3 (id=5439): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) keyctl$reject(0x13, 0x0, 0x800000000000002c, 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0107fcfffffffcdbdf250f"], 0x14}}, 0x4c040) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0xe82c, 0x0, 0x209}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005180), 0x0, 0x0) ioctl$RNDGETENTCNT(r3, 0x5207, 0x0) r4 = syz_io_uring_complete(0x0) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000000)) 41.065722565s ago: executing program 3 (id=5440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @remote}}, 0x14) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 41.043557126s ago: executing program 3 (id=5442): syz_clone(0x20000800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESDEC], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$clear(0x7, r5) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x44202, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0xe9, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xaae1) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x85b83000) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = inotify_init() read(r9, &(0x7f0000000040)=""/38, 0x26) inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x400017e) r10 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x22000) ioctl$BLKGETDISKSEQ(r10, 0x80081280, &(0x7f0000000080)) mount$binderfs(0x0, &(0x7f0000000140)='./binderfs\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB='max=000\x00\b\x00\x00\x00\x00\x00\x00000000000000,\x00']) 40.842840979s ago: executing program 7 (id=5443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x2, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r0, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0xffffffffffffffbe, 0x0}, 0x10142) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0}) 39.964234435s ago: executing program 7 (id=5445): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0xfffffffffffffee1, 0xfffffffffffffff5, 0x0, {0x203}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000017c0)={0x0, 0x101, 0x6}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000400)={{r4}, r5, 0x10, @inherit={0x90, &(0x7f0000000140)={0x1, 0x9, 0x8000, 0x0, {0x1f, 0x9, 0x80, 0x9, 0xa}, [0x8, 0x40, 0x2, 0xc89, 0x400, 0x9, 0x2, 0x10, 0xe9d1]}}, @devid=r6}) sendfile(r4, r3, 0x0, 0xffffffff) 39.746837039s ago: executing program 7 (id=5446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x64, 0x0, &(0x7f00000004c0)=[@request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x6, 0x0, &(0x7f0000000380)="65240c31f4f2"}) 39.506031675s ago: executing program 6 (id=5450): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x1464, &(0x7f0000000000)=ANY=[@ANYRESOCT]) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4020, &(0x7f0000000140)={[{@xattr}, {@clone_children}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@noprefix}, {@favordynmods}, {}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@favordynmods}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\\:'}}]}) (async) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4020, &(0x7f0000000140)={[{@xattr}, {@clone_children}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@noprefix}, {@favordynmods}, {}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@favordynmods}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\\:'}}]}) 39.503594735s ago: executing program 6 (id=5451): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000001a40)={[0x1a1e]}, 0x8) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='proc\x00', 0x4189, 0x0) (async) mkdir(0x0, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) symlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') (async) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141e42, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xf4, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_esn_val={0x3c, 0x17, {0x8, 0x70bd29, 0x70bd27, 0x70bd27, 0x70bd2a, 0x239, [0x8, 0x6, 0xa3d, 0xd, 0x4, 0x7ff, 0x1, 0x401]}}]}, 0xf4}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, &(0x7f0000000140)={r4}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000700)={{r3}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000400)={0x1, 0x1, 0x200, 0x5, {0x1, 0x4, 0x3, 0x10001, 0xffffffffffffa29e}, [0x0]}}, @name="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"}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) (async) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000200)="c1001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c26361026d5bdf8bf4dc700f91214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec3, 0x20040051, 0x0, 0x9e5e111c47e3504f) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x41624800ab113288, 0x4}) (async) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendfile(r2, r1, 0x0, 0xffffffff) 39.492328876s ago: executing program 6 (id=5452): getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000080)={0x2, 0x6, 0x3}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/237, &(0x7f0000000200)=0xed) clock_nanosleep(0x1, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') clock_nanosleep(0x7, 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000380)) clock_nanosleep(0x4, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) r0 = syz_clone(0x8240200, &(0x7f0000000440)="01a5121a95a9cdc57115fdcc74dab6e150b2b8de0ab8dbb9f33769d5c9012ac48ce8ee34f0a8fa5460fb93c0ee3427c90bfea657e1ec782e4b4445230d5fbfa677fd1942dc99643ce0e1ef2f5a62ea7bbf5f056d7b46d8aebc03ee32bf4245f417e17a786fefd48ec74e066dc911af8ab4e3b9e55b2e855c8fc5562c9f408e15e96819581c60df782c0952e5bdae3915c2169039e0e729be1f6a8ac1a0", 0x9d, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="9b9829f0af71edd8a14aeaf4a3c50f6b46c11b34bc4e1d0afa206a1b1946f96bcedf510c1515d40c4918dd8a6b6f690cd6cb2b03dff8e3f85c939d257295b5a7ab7dec17878ac50e73bfa802da6a78bbe585667832f9bfa04e63669ff3f535321f83dfeeab41d69e5d58589cf2b0f29f6bbc0ebc8a783a85c912876ba8c734ae2bb42a0048113a28bd249e943429b1d0a7bc660d8549f8da2da0c7acb15f2278057a43413d93cd358ee15a268167a0ceb2fed2830375a3740ec744e419e52f83743e623e67469b613dae57a1") ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000680), 0x1004) rt_sigqueueinfo(r0, 0x25, &(0x7f00000006c0)={0x34, 0xe5, 0x4}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000740), 0x2) r3 = memfd_create(&(0x7f0000000780)='#^6\')*\x00', 0x1) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000007c0)={r3, 0x1, 0x0, 0x1000000}) prctl$PR_PAC_RESET_KEYS(0x36, 0x5) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x6cba094a3075d680, 0x0) fstat(r4, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) r8 = memfd_create(&(0x7f0000000900)='wlan0\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000940)={0x1, 0x7, [{r3, 0x0, 0x0, 0xfffffffff0010000}, {r3, 0x0, 0x0, 0xfffffffff0000000}, {r3, 0x0, 0x5e4ad3a14047cfca, 0x1000000000000}, {r3, 0x0, 0xffffffffffffb000, 0x1000000}, {r3, 0x0, 0x1000000000000, 0xfffffffff0000000}, {r3, 0x0, 0x100000000, 0x2000}, {r8, 0x0, 0x8000}]}) sched_getparam(r0, &(0x7f0000000a00)) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000b00)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x200, 0x70bd2d, 0xfffffffb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x20040000) 39.403303221s ago: executing program 6 (id=5453): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000020002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000020002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) 39.315300207s ago: executing program 7 (id=5454): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) 39.288137049s ago: executing program 6 (id=5455): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00') unshare(0xa000600) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0xffffffff, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000) flock(r2, 0x8) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x2000, 0x1}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) unlink(&(0x7f0000000180)='./file0\x00') 39.26925263s ago: executing program 7 (id=5456): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x85b83000) 39.186881325s ago: executing program 6 (id=5457): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xa646) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 39.155391097s ago: executing program 7 (id=5458): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x4000, 0x800, 0x0, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x4000, 0x800, 0x0, 0x3}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x8000) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x8000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20041005) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRES16=r1]) sendmsg$nl_xfrm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000003500)=ANY=[@ANYBLOB="010000000000000070000040"]) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000b00)={0x1, 0x2, 0x100, 0xea, 0xc, 0x9}) (async) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000b00)={0x1, 0x2, 0x100, 0xea, 0xc, 0x9}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x7}}, 0x26) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x94, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/223, 0xdf, 0x1, 0x10000000010}, @fda={0x66646185, 0xc, 0x0, 0x39}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}}, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x100}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 37.791626194s ago: executing program 3 (id=5459): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000161000/0x4000)=nil, 0x4000, 0xa, 0x28011, r0, 0xffffc000) 37.658743593s ago: executing program 5 (id=5460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r3, 0x1, 0x80, 0x6, @broadcast}, 0x14) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 37.533915091s ago: executing program 3 (id=5461): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@dev}, &(0x7f00000002c0)=0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc1) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x28, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8086) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f0000000540)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0xfffc, 0x6, 0x6, 0x1], 0xd5d5c004, 0x8340}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x7, 0x0, 0x2, 0x0, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0xa, 0x6, 0x84, 0x3, 0x4, '\x00', 0x4, 0x9}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e8ddc20f905ffffebfd0102022400010112c03095e1bf8ab570ffff0009050102080008057f09250500000203090a"], 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ftruncate(r2, 0xfff) (rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f00007d0000)) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000077000/0xc000)=nil, 0xc000}, 0x1}) (async, rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdfb2d40000000c0026c4ace339855f66a0f192f1c1be449900010400005d0000000800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="0c009900050000004200000008000100660000000800db00", @ANYRES32=r1, @ANYBLOB="0c0099003f10ffff3a0000000c009900ae0000000d0000000c00990004000000500000000c00990069f9ffff0b000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 29.395980594s ago: executing program 5 (id=5462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x3, 0x0, [{0x482, 0x0, 0x2}, {0x2c6, 0x0, 0x100000000}, {0x614, 0x0, 0x80}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000000)=[@release, @free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x10, 0x3c}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x400}, @dead_binder_done, @register_looper], 0x51, 0x0, &(0x7f0000000980)="1d597002c52f656f7527abe01eec1920a6a2fae7958f3ab1072aa2bb1593bd90951979f0078e74bf553b055163ef78a314a007aad5762fe8392ee7c3806cc6deeee06171dc997de54169f1b9bbf3ea191f"}) 19.618966671s ago: executing program 43 (id=5458): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x4000, 0x800, 0x0, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x4000, 0x800, 0x0, 0x3}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x8000) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x8000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20041005) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRES16=r1]) sendmsg$nl_xfrm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000003500)=ANY=[@ANYBLOB="010000000000000070000040"]) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000b00)={0x1, 0x2, 0x100, 0xea, 0xc, 0x9}) (async) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000b00)={0x1, 0x2, 0x100, 0xea, 0xc, 0x9}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x7}}, 0x26) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x94, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/223, 0xdf, 0x1, 0x10000000010}, @fda={0x66646185, 0xc, 0x0, 0x39}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}}, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x100}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13.734928478s ago: executing program 44 (id=5457): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xa646) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2.416524775s ago: executing program 45 (id=5461): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@dev}, &(0x7f00000002c0)=0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc1) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x28, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8086) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f0000000540)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0xfffc, 0x6, 0x6, 0x1], 0xd5d5c004, 0x8340}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x7, 0x0, 0x2, 0x0, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0xa, 0x6, 0x84, 0x3, 0x4, '\x00', 0x4, 0x9}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e8ddc20f905ffffebfd0102022400010112c03095e1bf8ab570ffff0009050102080008057f09250500000203090a"], 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ftruncate(r2, 0xfff) (rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f00007d0000)) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000077000/0xc000)=nil, 0xc000}, 0x1}) (async, rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdfb2d40000000c0026c4ace339855f66a0f192f1c1be449900010400005d0000000800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="0c009900050000004200000008000100660000000800db00", @ANYRES32=r1, @ANYBLOB="0c0099003f10ffff3a0000000c009900ae0000000d0000000c00990004000000500000000c00990069f9ffff0b000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 46 (id=5462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x3, 0x0, [{0x482, 0x0, 0x2}, {0x2c6, 0x0, 0x100000000}, {0x614, 0x0, 0x80}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000000)=[@release, @free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x10, 0x3c}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x400}, @dead_binder_done, @register_looper], 0x51, 0x0, &(0x7f0000000980)="1d597002c52f656f7527abe01eec1920a6a2fae7958f3ab1072aa2bb1593bd90951979f0078e74bf553b055163ef78a314a007aad5762fe8392ee7c3806cc6deeee06171dc997de54169f1b9bbf3ea191f"}) kernel console output (not intermixed with test programs): h [ 267.814936][T12914] netlink: 'syz.1.4285': attribute type 20 has an invalid length. [ 267.843389][ T36] audit: type=1400 audit(2000000401.254:2642): avc: denied { setattr } for pid=12912 comm="syz.1.4285" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.935778][ T36] audit: type=1400 audit(2000000401.344:2643): avc: denied { create } for pid=12911 comm="syz.0.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 267.968999][T12920] fuse: Bad value for 'group_id' [ 267.972599][T12921] fuse: Bad value for 'group_id' [ 267.974106][T12920] fuse: Bad value for 'group_id' [ 267.979048][T12921] fuse: Bad value for 'group_id' [ 268.063345][ T10] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 268.193351][ T10] usb 2-1: device descriptor read/64, error -71 [ 268.250778][T12938] 9pnet_fd: Insufficient options for proto=fd [ 268.443307][ T10] usb 2-1: device descriptor read/64, error -71 [ 268.693381][ T10] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 268.797939][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 268.823314][ T10] usb 2-1: device descriptor read/64, error -71 [ 269.063333][ T10] usb 2-1: device descriptor read/64, error -71 [ 269.173435][ T10] usb usb2-port1: attempt power cycle [ 269.513641][ T10] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 269.534414][ T10] usb 2-1: device descriptor read/8, error -71 [ 269.664562][ T10] usb 2-1: device descriptor read/8, error -71 [ 269.831561][T12980] 9pnet_fd: Insufficient options for proto=fd [ 269.837521][T12979] 9pnet_fd: Insufficient options for proto=fd [ 269.894883][T12982] 9pnet_fd: Insufficient options for proto=fd [ 269.903341][ T10] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 269.928756][ T10] usb 2-1: device descriptor read/8, error -71 [ 270.011265][T12997] netlink: 'syz.0.4319': attribute type 4 has an invalid length. [ 270.038590][T13005] overlayfs: failed to clone upperpath [ 270.084286][ T10] usb 2-1: device descriptor read/8, error -71 [ 270.203896][ T10] usb usb2-port1: unable to enumerate USB device [ 270.303546][T13064] tracefs: Unknown parameter '}]#![]*' [ 270.543408][T13086] netlink: 'syz.4.4349': attribute type 4 has an invalid length. [ 270.857800][T13094] rust_binder: Write failure EFAULT in pid:351 [ 270.871751][T13100] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.960278][T13120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.967393][T13120] rust_binder: Error in use_page_slow: ESRCH [ 270.974243][T13120] rust_binder: use_range failure ESRCH [ 270.980394][T13120] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 270.986217][T13120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 270.994596][T13120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:356 [ 271.026680][T13128] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4364'. [ 271.046833][T13126] kvm: kvm [13125]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 271.055704][T13126] kvm: kvm [13125]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 271.069925][T13126] kvm: kvm [13125]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 271.083522][T13126] kvm: kvm [13125]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 271.093030][T13126] kvm: kvm [13125]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 271.239020][T13151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.240025][T13151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 271.261161][T13162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13162 comm=syz.1.4374 [ 271.285760][T13162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=13162 comm=syz.1.4374 [ 271.333669][T13166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.354922][T13166] rust_binder: Error in use_page_slow: ESRCH [ 271.362491][T13166] rust_binder: use_range failure ESRCH [ 271.368749][T13166] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 271.374826][T13166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 271.383425][T13166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:371 [ 271.465367][T13168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.475670][T13168] rust_binder: Error in use_page_slow: ESRCH [ 271.486019][T13168] rust_binder: use_range failure ESRCH [ 271.492052][T13168] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 271.497677][T13168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 271.505881][T13168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:373 [ 271.526407][T13170] fuse: Unknown parameter 'äÑd>¤¤+°Úœä-Ÿ' [ 271.542650][T13170] rust_binder: Error in use_page_slow: ESRCH [ 271.542668][T13170] rust_binder: use_range failure ESRCH [ 271.548821][T13170] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 271.554400][T13170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 271.562466][T13170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:375 [ 271.571911][T13170] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 271.581077][T13170] rust_binder: Read failure Err(EFAULT) in pid:375 [ 271.602607][T13173] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4379'. [ 271.629653][T13175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.631224][T13175] netlink: 'syz.1.4380': attribute type 4 has an invalid length. [ 271.645556][T13175] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4380'. [ 271.657713][T13175] rust_binder: Read failure Err(EAGAIN) in pid:380 [ 271.671061][T13179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.875284][T13206] netlink: 'syz.0.4392': attribute type 27 has an invalid length. [ 271.944512][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 271.944530][ T36] audit: type=1400 audit(2000000405.354:2664): avc: denied { create } for pid=13211 comm="syz.4.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 271.971127][ T36] audit: type=1400 audit(2000000405.354:2665): avc: denied { map } for pid=13211 comm="syz.4.4394" path="socket:[55638]" dev="sockfs" ino=55638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.001814][ T36] audit: type=1400 audit(2000000405.354:2666): avc: denied { accept } for pid=13211 comm="syz.4.4394" path="socket:[55638]" dev="sockfs" ino=55638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.045904][ T36] audit: type=1326 audit(2000000405.454:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.0.4400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f992398efc9 code=0x0 [ 272.810344][T13254] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 272.896173][T13265] fuse: Invalid gid '00000000000037777777777' [ 273.003333][ T36] audit: type=1400 audit(2000000406.394:2668): avc: denied { getopt } for pid=13277 comm="syz.1.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 273.207978][T13298] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.243662][T13298] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.252832][T13298] rust_binder: Error while translating object. [ 273.262309][T13298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 273.271823][T13298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:410 [ 273.290354][T13298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.320306][T13298] rust_binder: Error while translating object. [ 273.320348][T13298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 273.327231][T13298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:410 [ 273.431577][T13314] fuse: Bad value for 'fd' [ 273.479614][T13320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.480050][T13320] rust_binder: Error in use_page_slow: ESRCH [ 273.487003][T13320] rust_binder: use_range failure ESRCH [ 273.493155][T13320] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 273.498795][T13320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 273.506886][T13320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:418 [ 273.534503][ T36] audit: type=1400 audit(2000000406.944:2669): avc: denied { read write } for pid=13321 comm="syz.1.4434" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 273.570474][ T36] audit: type=1400 audit(2000000406.944:2670): avc: denied { open } for pid=13321 comm="syz.1.4434" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 273.611096][T13247] overlayfs: regular lower layers cannot follow data lower layers [ 273.621096][T13327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.725703][T13332] rust_binder: Error in use_page_slow: ESRCH [ 273.732326][T13332] rust_binder: use_range failure ESRCH [ 273.739201][T13332] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 273.744918][T13332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 273.753214][T13332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:425 [ 274.023742][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'. [ 274.492540][T13376] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 274.501032][T13376] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4452'. [ 274.724251][ T36] audit: type=1400 audit(2000000408.134:2671): avc: denied { create } for pid=13395 comm="syz.0.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 274.724936][T13396] 9pnet_fd: Insufficient options for proto=fd [ 274.746431][ T36] audit: type=1400 audit(2000000408.134:2672): avc: denied { write } for pid=13395 comm="syz.0.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 274.796883][T13400] overlayfs: failed to clone upperpath [ 275.336039][T13416] fuse: Bad value for 'fd' [ 275.364999][T13418] netlink: 'syz.4.4469': attribute type 8 has an invalid length. [ 275.419481][T13431] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4475'. [ 275.430527][T13431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.489522][ T36] audit: type=1400 audit(2000000408.894:2673): avc: denied { connect } for pid=13445 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.571020][T13460] veth0_to_batadv: entered allmulticast mode [ 275.656585][T13469] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 276.186537][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4502'. [ 276.196379][T13508] netlink: 31 bytes leftover after parsing attributes in process `syz.7.4502'. [ 276.205782][T13508] netlink: 'syz.7.4502': attribute type 3 has an invalid length. [ 276.215343][T13508] netlink: 'syz.7.4502': attribute type 2 has an invalid length. [ 276.223258][T13508] netlink: 31 bytes leftover after parsing attributes in process `syz.7.4502'. [ 276.233883][T13508] 9pnet_fd: Insufficient options for proto=fd [ 276.345752][ T4540] bridge_slave_1: left allmulticast mode [ 276.351548][ T4540] bridge_slave_1: left promiscuous mode [ 276.357274][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.365114][ T4540] bridge_slave_0: left allmulticast mode [ 276.370890][ T4540] bridge_slave_0: left promiscuous mode [ 276.376851][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.525608][ T4540] tipc: Disabling bearer [ 276.531152][ T4540] tipc: Left network mode [ 276.537474][ T4540] veth1_macvtap: left promiscuous mode [ 276.543126][ T4540] veth0_vlan: left promiscuous mode [ 276.577219][ T4540] veth0_to_batadv (unregistering): left allmulticast mode [ 276.646599][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.653728][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.661939][T13531] bridge_slave_0: entered allmulticast mode [ 276.668797][T13531] bridge_slave_0: entered promiscuous mode [ 276.675781][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.684161][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.692630][T13531] bridge_slave_1: entered allmulticast mode [ 276.700425][T13531] bridge_slave_1: entered promiscuous mode [ 276.775992][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.783356][T13531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.790799][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.798264][T13531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.807198][T13544] batadv_slave_1: entered promiscuous mode [ 276.815196][T13544] batadv_slave_1: left promiscuous mode [ 276.824652][T13544] 9pnet_fd: Insufficient options for proto=fd [ 276.849338][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.857331][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.869390][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.876904][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.887596][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.895148][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.926010][T13531] veth0_vlan: entered promiscuous mode [ 276.937820][T13531] veth1_macvtap: entered promiscuous mode [ 276.957970][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 276.957990][ T36] audit: type=1400 audit(2000000410.364:2682): avc: denied { mounton } for pid=13531 comm="syz-executor" path="/root/syzkaller.ZC8p30/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 276.990084][ T36] audit: type=1400 audit(2000000410.364:2683): avc: denied { mounton } for pid=13531 comm="syz-executor" path="/root/syzkaller.ZC8p30/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 277.018109][ T36] audit: type=1400 audit(2000000410.364:2684): avc: denied { mounton } for pid=13531 comm="syz-executor" path="/root/syzkaller.ZC8p30/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 277.051332][ T36] audit: type=1400 audit(2000000410.394:2685): avc: denied { mounton } for pid=13531 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 277.052781][T13547] binder: Bad value for 'stats' [ 277.103338][ T983] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 277.259440][ T983] usb 2-1: config 8 has an invalid interface number: 60 but max is 3 [ 277.267902][ T983] usb 2-1: config 8 has an invalid interface number: 202 but max is 3 [ 277.276725][ T983] usb 2-1: config 8 has an invalid interface number: 4 but max is 3 [ 277.297435][ T983] usb 2-1: config 8 has an invalid interface number: 54 but max is 3 [ 277.305959][ T983] usb 2-1: config 8 has no interface number 0 [ 277.312136][ T983] usb 2-1: config 8 has no interface number 1 [ 277.321449][ T983] usb 2-1: config 8 has no interface number 2 [ 277.327919][ T983] usb 2-1: config 8 has no interface number 3 [ 277.334576][ T983] usb 2-1: config 8 interface 202 altsetting 127 endpoint 0xB has invalid maxpacket 1024, setting to 8 [ 277.348583][T13559] 9pnet_fd: Insufficient options for proto=fd [ 277.357277][ T983] usb 2-1: config 8 interface 202 altsetting 127 endpoint 0xF has invalid maxpacket 1023, setting to 8 [ 277.369751][ T983] usb 2-1: config 8 interface 202 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 277.381096][ T983] usb 2-1: config 8 interface 202 altsetting 127 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 277.392347][ T983] usb 2-1: config 8 interface 202 altsetting 127 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 277.404474][ T983] usb 2-1: config 8 interface 202 altsetting 127 endpoint 0x87 is Bulk; changing to Interrupt [ 277.415137][ T983] usb 2-1: config 8 interface 202 altsetting 127 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 277.428412][ T983] usb 2-1: config 8 interface 202 altsetting 127 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 277.442940][ T983] usb 2-1: config 8 interface 4 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 277.454250][ T983] usb 2-1: config 8 interface 4 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 8 [ 277.465259][ T983] usb 2-1: config 8 interface 4 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 277.476330][ T983] usb 2-1: config 8 interface 4 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 277.487338][ T983] usb 2-1: config 8 interface 4 altsetting 64 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 277.498644][ T983] usb 2-1: config 8 interface 4 altsetting 64 endpoint 0x3 has invalid maxpacket 16, setting to 8 [ 277.509330][ T983] usb 2-1: config 8 interface 4 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 277.520509][ T983] usb 2-1: config 8 interface 4 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 277.531553][ T983] usb 2-1: config 8 interface 4 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 277.542597][ T983] usb 2-1: config 8 interface 54 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 8 [ 277.553480][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 277.564350][ T983] usb 2-1: config 8 interface 54 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 277.575296][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 277.586766][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 277.598464][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 277.609819][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0x8F, skipping [ 277.621145][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 277.632721][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 277.643524][ T983] usb 2-1: config 8 interface 54 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 277.654451][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 277.665807][ T983] usb 2-1: config 8 interface 54 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 277.677580][ T983] usb 2-1: config 8 interface 54 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 277.688678][ T983] usb 2-1: config 8 interface 54 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 277.699668][ T983] usb 2-1: config 8 interface 60 has no altsetting 0 [ 277.706536][ T983] usb 2-1: config 8 interface 202 has no altsetting 0 [ 277.713472][ T983] usb 2-1: config 8 interface 4 has no altsetting 0 [ 277.720229][ T983] usb 2-1: config 8 interface 54 has no altsetting 0 [ 277.735122][ T983] usb 2-1: New USB device found, idVendor=19d2, idProduct=0254, bcdDevice=3a.d4 [ 277.744559][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.752597][ T983] usb 2-1: Product: ᇠ[ 277.757187][ T983] usb 2-1: Manufacturer: à š [ 277.762180][ T983] usb 2-1: SerialNumber: 鶦谩割⪾胄á•ì™µé’»ã¸¹ì£±ëœä“¯æ¤ê”¥ã¶’櫛蠄ﵞ䰬޳韩롤䢙휗좯ꡋ셂Ỗ折ì¨ëµ„澱ᦷ쑦 [ 277.776025][ T36] audit: type=1400 audit(2000000411.164:2686): avc: denied { create } for pid=13588 comm="syz.4.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.872318][ T36] audit: type=1400 audit(2000000411.274:2687): avc: denied { map } for pid=13611 comm="syz.4.4539" path="socket:[57447]" dev="sockfs" ino=57447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 277.941715][T13616] bridge0: port 3(veth0_to_team) entered blocking state [ 277.948929][T13616] bridge0: port 3(veth0_to_team) entered disabled state [ 277.956162][T13616] veth0_to_team: entered allmulticast mode [ 277.962522][T13616] veth0_to_team: entered promiscuous mode [ 278.063502][ T983] usb 2-1: USB disconnect, device number 108 [ 278.538034][ T36] audit: type=1326 audit(2000000411.944:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13642 comm="syz.8.4551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21bdf8efc9 code=0x0 [ 278.648370][T13648] __vm_enough_memory: pid: 13648, comm: syz.1.4553, bytes: 18014402804453376 not enough memory for the allocation [ 286.157150][ T329] bridge_slave_1: left allmulticast mode [ 286.162829][ T329] bridge_slave_1: left promiscuous mode [ 286.168683][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.176479][ T329] bridge_slave_0: left allmulticast mode [ 286.182179][ T329] bridge_slave_0: left promiscuous mode [ 286.188203][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.307109][ T329] veth1_macvtap: left promiscuous mode [ 286.312655][ T329] veth0_vlan: left promiscuous mode [ 294.441215][ T36] audit: type=1400 audit(2000000427.844:2689): avc: denied { write } for pid=13659 comm="syz.1.4556" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 294.454647][T13660] overlayfs: workdir and upperdir must be separate subtrees [ 294.466588][ T36] audit: type=1400 audit(2000000427.844:2690): avc: denied { open } for pid=13659 comm="syz.1.4556" path="/dev/usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 294.539906][ T36] audit: type=1326 audit(2000000427.944:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab98efc9 code=0x7ffc0000 [ 294.565413][ T36] audit: type=1326 audit(2000000427.944:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab98efc9 code=0x7ffc0000 [ 294.599593][ T36] audit: type=1326 audit(2000000427.944:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f26ab98efc9 code=0x7ffc0000 [ 294.673611][ T36] audit: type=1326 audit(2000000427.944:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab98efc9 code=0x7ffc0000 [ 294.700493][ T36] audit: type=1326 audit(2000000427.944:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab98efc9 code=0x7ffc0000 [ 295.064486][T13708] netlink: 'syz.4.4570': attribute type 4 has an invalid length. [ 295.072435][T13708] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4570'. [ 295.361969][T13745] rust_binder: Fixups oob 178 180 369 186 [ 295.361998][T13745] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 295.363413][T13746] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 295.368230][T13745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 295.387634][T13745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 295.393317][T13746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 295.406356][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 295.414263][T13746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:29 [ 295.564543][ T10] usb 2-1: config index 0 descriptor too short (expected 29211, got 27) [ 295.582011][ T10] usb 2-1: config 43 has too many interfaces: 118, using maximum allowed: 32 [ 295.590841][ T10] usb 2-1: config 43 has 1 interface, different from the descriptor's value: 118 [ 295.600097][ T10] usb 2-1: config 43 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 58909, setting to 1024 [ 295.611334][ T10] usb 2-1: config 43 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 295.621577][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 295.630692][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.639798][T13731] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.781278][T13776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=13776 comm=syz.4.4594 [ 295.794231][T13777] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4594'. [ 295.803360][T13776] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4594'. [ 295.852538][T13731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.861264][T13731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.869900][T13731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.879107][T13731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.996737][T13731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:452 [ 296.813706][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.829972][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.837187][T13781] bridge_slave_0: entered allmulticast mode [ 296.843610][T13781] bridge_slave_0: entered promiscuous mode [ 296.850199][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.857290][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.864416][T13781] bridge_slave_1: entered allmulticast mode [ 296.870770][T13781] bridge_slave_1: entered promiscuous mode [ 296.893517][ T4558] bridge_slave_1: left allmulticast mode [ 296.899318][ T4558] bridge_slave_1: left promiscuous mode [ 296.905036][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.912853][ T4558] bridge_slave_0: left allmulticast mode [ 296.918798][ T4558] bridge_slave_0: left promiscuous mode [ 296.924516][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.932425][ T4558] tipc: Resetting bearer [ 296.953114][ T4558] tipc: Disabling bearer [ 297.074477][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.081591][T13781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.088964][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.096077][T13781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.106689][ T4558] tipc: Left network mode [ 297.115658][ T4558] veth1_macvtap: left promiscuous mode [ 297.121318][ T4558] veth0_vlan: left promiscuous mode [ 297.184540][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.191969][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.202790][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.209927][ T4546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.225604][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.232727][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.267317][T13781] veth0_vlan: entered promiscuous mode [ 297.281009][T13781] veth1_macvtap: entered promiscuous mode [ 297.563342][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 297.713358][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 297.721319][ T45] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 297.730753][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.738858][ T45] usb 5-1: Product: syz [ 297.743076][ T45] usb 5-1: Manufacturer: syz [ 297.747761][ T45] usb 5-1: SerialNumber: syz [ 298.002045][ T45] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 298.012541][ T45] usb 5-1: USB disconnect, device number 29 [ 298.021972][T13793] udevd[13793]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.224159][ T10] usb 2-1: string descriptor 0 read error: -71 [ 298.231378][ T10] aiptek 2-1:43.0: interface has no int in endpoints, but must have minimum 1 [ 298.243639][ T10] usb 2-1: USB disconnect, device number 109 [ 298.250294][ T36] audit: type=1400 audit(2000000431.654:2696): avc: denied { ioctl } for pid=13794 comm="syz.1.4596" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 298.251029][T13795] /dev/rnullb0: Can't open blockdev [ 298.331869][T13806] loop2: detected capacity change from 0 to 7 [ 298.817839][T13845] cgroup: Setting release_agent not allowed [ 299.174790][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4615'. [ 299.292753][T13856] rust_binder: 16: no such ref 3 [ 299.297837][T13856] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 299.316820][T13856] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 299.324641][T13856] rust_binder: Write failure EFAULT in pid:16 [ 300.091450][ T36] audit: type=1400 audit(2000000433.413:2697): avc: denied { create } for pid=13890 comm="syz.4.4629" name="#24" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.095244][T13891] overlay: filesystem on ./bus not supported as upperdir [ 300.098870][ T36] audit: type=1400 audit(2000000433.413:2698): avc: denied { link } for pid=13890 comm="syz.4.4629" name="#24" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.147529][ T36] audit: type=1400 audit(2000000433.413:2699): avc: denied { rename } for pid=13890 comm="syz.4.4629" name="#25" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.149083][T13893] 9pnet_fd: Insufficient options for proto=fd [ 300.239028][T13906] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4636'. [ 300.248687][T13906] gretap0: entered promiscuous mode [ 300.260182][T13906] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4636'. [ 300.269300][T13906] 0ªî{X¹¦: renamed from gretap0 [ 300.275186][T13906] 0ªî{X¹¦: left promiscuous mode [ 300.280354][T13906] 0ªî{X¹¦: entered allmulticast mode [ 300.286634][T13906] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 300.627660][ T652] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 300.787664][ T652] usb 5-1: Using ep0 maxpacket: 32 [ 300.794173][ T652] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 300.802686][ T652] usb 5-1: config 0 has no interface number 0 [ 300.810570][ T652] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 300.820067][ T652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.828177][ T652] usb 5-1: Product: syz [ 300.832687][ T652] usb 5-1: Manufacturer: syz [ 300.837340][ T652] usb 5-1: SerialNumber: syz [ 300.845099][ T652] usb 5-1: config 0 descriptor?? [ 300.852944][ T652] smsc95xx v2.0.0 [ 300.856912][T13929] netlink: 'syz.0.4643': attribute type 16 has an invalid length. [ 300.864941][T13929] netlink: 'syz.0.4643': attribute type 3 has an invalid length. [ 300.872926][T13929] netlink: 64054 bytes leftover after parsing attributes in process `syz.0.4643'. [ 300.919203][T13937] 9pnet_fd: Insufficient options for proto=fd [ 301.279234][ T652] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 301.290106][ T652] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 302.158270][ T652] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 302.169262][ T652] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 302.179049][ T652] usb 5-1: USB disconnect, device number 30 [ 302.292106][ T36] audit: type=1400 audit(2000000435.478:2700): avc: denied { accept } for pid=13956 comm="syz.0.4653" path="socket:[58773]" dev="sockfs" ino=58773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 302.304300][T13957] 9pnet_fd: Insufficient options for proto=fd [ 302.385137][T13969] netlink: 'syz.0.4658': attribute type 13 has an invalid length. [ 302.436175][T13978] netlink: 182 bytes leftover after parsing attributes in process `syz.0.4663'. [ 302.494111][ T36] audit: type=1400 audit(2000000435.665:2701): avc: denied { create } for pid=13993 comm="syz.8.4669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 302.782630][T14011] rust_binder: Error while translating object. [ 302.782694][T14011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 302.788950][T14011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41 [ 302.813461][T14013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.822607][T14013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:43 [ 302.844099][T14017] rust_binder: Write failure EINVAL in pid:47 [ 302.902851][T14017] rust_binder: Error while translating object. [ 302.909008][T14017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 302.915202][T14017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 303.196082][ T356] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 303.366582][ T356] usb 5-1: Using ep0 maxpacket: 16 [ 303.373413][ T356] usb 5-1: config 0 interface 0 has no altsetting 0 [ 303.380432][ T356] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 303.389726][ T356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.398835][ T356] usb 5-1: config 0 descriptor?? [ 304.048171][ T365] usb 5-1: USB disconnect, device number 31 [ 304.106039][T14057] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4690'. [ 304.630862][T14059] rust_binder: Write failure EINVAL in pid:51 [ 304.653601][T14063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.659876][T14064] rust_binder: Error while translating object. [ 304.666504][T14064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 304.672820][T14064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 304.767113][T14071] x_tables: duplicate underflow at hook 1 [ 304.797191][T14073] netlink: 'syz.0.4697': attribute type 5 has an invalid length. [ 304.805930][T14073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4697'. [ 304.832956][T14080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.914635][T14085] tipc: Trying to set illegal importance in message [ 305.082428][ T65] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 305.242327][ T65] usb 5-1: Invalid ep0 maxpacket: 16 [ 305.380844][ T65] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 305.540702][ T65] usb 5-1: Invalid ep0 maxpacket: 16 [ 305.546302][ T65] usb usb5-port1: attempt power cycle [ 305.851105][T14097] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 305.859605][T14097] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 305.913760][ T65] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 305.946017][ T65] usb 5-1: Invalid ep0 maxpacket: 16 [ 305.953754][ T36] audit: type=1400 audit(2000000438.912:2702): avc: denied { getopt } for pid=14102 comm="syz.8.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.072018][ T36] audit: type=1400 audit(2000000439.015:2703): avc: denied { ioctl } for pid=14121 comm="syz.0.4716" path="socket:[59681]" dev="sockfs" ino=59681 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.098723][ T65] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 306.107512][T14122] 9pnet_fd: Insufficient options for proto=fd [ 306.116412][T14122] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 306.133564][ T65] usb 5-1: Invalid ep0 maxpacket: 16 [ 306.147271][ T65] usb usb5-port1: unable to enumerate USB device [ 306.311492][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4721'. [ 306.328022][ T36] audit: type=1326 audit(2000000439.259:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.8.4719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21bdf8efc9 code=0x0 [ 306.364473][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4723'. [ 307.907571][T14184] overlayfs: failed to clone upperpath [ 308.052991][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4741'. [ 308.160881][ T36] audit: type=1400 audit(2000000440.976:2705): avc: denied { read } for pid=14197 comm="syz.4.4742" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 308.458552][T14202] netlink: 488 bytes leftover after parsing attributes in process `syz.4.4743'. [ 308.552122][ T36] audit: type=1400 audit(2000000441.352:2706): avc: denied { setattr } for pid=14209 comm="syz.4.4746" name="RAW" dev="sockfs" ino=59130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.598840][T14216] rust_binder: Error while translating object. [ 308.598894][T14216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 308.607810][T14216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 308.646479][T14224] rust_binder: Error in use_page_slow: ESRCH [ 308.646510][T14224] rust_binder: use_range failure ESRCH [ 308.658385][T14224] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 308.658417][T14224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 308.666594][T14224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:94 [ 308.706822][T14227] netlink: 'syz.4.4752': attribute type 46 has an invalid length. [ 308.714846][T14227] netlink: 'syz.4.4752': attribute type 46 has an invalid length. [ 308.832074][T14237] netlink: 120 bytes leftover after parsing attributes in process `syz.8.4756'. [ 308.841737][T14237] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4756'. [ 309.450009][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4761'. [ 309.486525][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4762'. [ 309.537713][T14259] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4370 sclass=netlink_xfrm_socket pid=14259 comm=syz.8.4766 [ 309.612791][ T36] audit: type=1400 audit(2000000442.346:2707): avc: denied { create } for pid=14272 comm="syz.8.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 309.645489][T14277] netlink: 620 bytes leftover after parsing attributes in process `syz.8.4772'. [ 310.177665][ T36] audit: type=1400 audit(2000000442.881:2708): avc: denied { listen } for pid=14289 comm="syz.0.4776" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 310.519486][T14301] binder: Unknown parameter '01777777777777777777777' [ 310.548995][T14308] binder: Bad value for 'defcontext' [ 310.569653][T14310] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4782'. [ 310.963210][T14338] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 310.974888][T14338] overlayfs: missing 'lowerdir' [ 310.992073][ T36] audit: type=1400 audit(2000000443.641:2709): avc: denied { shutdown } for pid=14339 comm="syz.0.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.351388][T14377] 9pnet_fd: Insufficient options for proto=fd [ 311.359050][T14377] tmpfs: Unknown parameter 'trans' [ 311.401448][T14386] netlink: 'syz.8.4809': attribute type 15 has an invalid length. [ 311.764381][T14392] bridge0: port 3(veth0_to_bridge) entered blocking state [ 311.771620][T14392] bridge0: port 3(veth0_to_bridge) entered disabled state [ 311.779070][T14392] veth0_to_bridge: entered allmulticast mode [ 311.785503][T14392] veth0_to_bridge: entered promiscuous mode [ 311.791827][T14392] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.804200][T14392] bridge0: port 3(veth0_to_bridge) entered blocking state [ 311.811385][T14392] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 311.818932][T14393] 9pnet_fd: Insufficient options for proto=fd [ 312.145711][ T36] audit: type=1400 audit(2000000444.720:2710): avc: denied { getopt } for pid=14421 comm="syz.8.4823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.166424][ T36] audit: type=1400 audit(2000000444.739:2711): avc: denied { nlmsg_read } for pid=14421 comm="syz.8.4823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 312.662780][ T46] veth0_to_team: left allmulticast mode [ 312.669212][ T46] veth0_to_team: left promiscuous mode [ 312.675916][ T46] bridge0: port 3(veth0_to_team) entered disabled state [ 312.684806][ T46] bridge_slave_1: left allmulticast mode [ 312.690673][ T46] bridge_slave_1: left promiscuous mode [ 312.697572][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.706821][ T46] bridge_slave_0: left allmulticast mode [ 312.713477][ T46] bridge_slave_0: left promiscuous mode [ 312.720676][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.855444][ T46] veth1_macvtap: left promiscuous mode [ 312.901211][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.909100][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.916537][T14437] bridge_slave_0: entered allmulticast mode [ 312.924664][T14437] bridge_slave_0: entered promiscuous mode [ 312.931590][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.939165][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.946772][T14437] bridge_slave_1: entered allmulticast mode [ 312.954133][T14437] bridge_slave_1: entered promiscuous mode [ 313.018979][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.026125][T14437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.033550][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.040723][T14437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.075497][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.083920][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.094486][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.101586][ T4546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.112038][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.119150][ T4546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.198169][T14437] veth0_vlan: entered promiscuous mode [ 313.231335][T14437] veth1_macvtap: entered promiscuous mode [ 313.341362][T14459] overlayfs: regular lower layers cannot follow data lower layers [ 313.577777][T14461] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 313.711005][T14466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=14466 comm=syz.9.4835 [ 313.840313][ T36] audit: type=1400 audit(2000000446.306:2712): avc: denied { read } for pid=14473 comm="syz.9.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 313.937564][T14478] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4839'. [ 313.971437][T14485] 0ªî{X¹¦: left allmulticast mode [ 313.977439][T14485] netlink: 'syz.0.4841': attribute type 2 has an invalid length. [ 313.985487][T14485] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4841'. [ 314.218490][T14507] /dev/nullb0: Can't lookup blockdev [ 314.241552][T14510] rust_binder: 27: no such ref 1 [ 314.246556][T14510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 314.262108][T14514] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 314.279037][T14514] SELinux: failed to load policy [ 314.368809][T14519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14519 comm=syz.0.4856 [ 314.492922][T14541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 314.524243][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.541250][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.548619][T14536] bridge_slave_0: entered allmulticast mode [ 314.554972][T14536] bridge_slave_0: entered promiscuous mode [ 314.562002][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.569105][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.576208][T14536] bridge_slave_1: entered allmulticast mode [ 314.582968][T14536] bridge_slave_1: entered promiscuous mode [ 314.638749][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.645855][T14536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.653461][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.660521][T14536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.685194][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.693054][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.703678][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.710807][ T4549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.720507][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.727608][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.755477][T14536] veth0_vlan: entered promiscuous mode [ 314.766898][T14536] veth1_macvtap: entered promiscuous mode [ 314.920301][T14576] binder: Bad value for 'stats' [ 314.925940][ T36] audit: type=1400 audit(2000000447.329:2713): avc: denied { create } for pid=14575 comm="syz.3.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 314.984453][T14576] tipc: Started in network mode [ 314.989378][T14576] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 314.998493][T14576] tipc: Enabling of bearer rejected, failed to enable media [ 315.026303][T14581] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 315.112504][T14585] usb usb7: usbfs: process 14585 (syz.3.4874) did not claim interface 0 before use [ 315.140383][T14590] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 315.168032][T14594] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 315.183752][T14594] SELinux: failed to load policy [ 315.321899][T14596] rust_binder: Write failure EFAULT in pid:40 [ 315.441573][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 315.453781][T14601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.456865][T14601] rust_binder: Write failure EINVAL in pid:45 [ 315.477552][T14603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.491915][ T36] audit: type=1400 audit(2000000447.864:2714): avc: denied { create } for pid=14602 comm="syz.9.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.518618][ T36] audit: type=1400 audit(2000000447.864:2715): avc: denied { create } for pid=14602 comm="syz.9.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.538185][ T36] audit: type=1400 audit(2000000447.864:2716): avc: denied { setopt } for pid=14602 comm="syz.9.4882" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.558796][ T36] audit: type=1400 audit(2000000447.864:2717): avc: denied { lock } for pid=14602 comm="syz.9.4882" path="socket:[61054]" dev="sockfs" ino=61054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 315.582970][ T36] audit: type=1400 audit(2000000447.864:2718): avc: denied { read write } for pid=14602 comm="syz.9.4882" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.607394][ T36] audit: type=1400 audit(2000000447.864:2719): avc: denied { open } for pid=14602 comm="syz.9.4882" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.645607][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.656759][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.666560][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 315.675639][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.688432][ T10] usb 4-1: config 0 descriptor?? [ 315.700334][ T10] hub 4-1:0.0: USB hub found [ 315.761052][ T652] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 315.920912][ T10] hub 4-1:0.0: 7 ports detected [ 315.926134][ T10] hub 4-1:0.0: insufficient power available to use all downstream ports [ 315.935220][ T652] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 315.943732][ T652] usb 10-1: config 1 has no interface number 0 [ 315.950101][ T652] usb 10-1: config 1 interface 105 has no altsetting 0 [ 315.959295][ T652] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 315.968742][ T652] usb 10-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 315.977647][ T652] usb 10-1: Product: syz [ 315.982030][ T652] usb 10-1: Manufacturer: syz [ 315.987095][ T652] usb 10-1: SerialNumber: syz [ 316.125717][T14594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14594 comm=syz.3.4878 [ 316.216867][T14604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.216932][T14610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.365627][ T10] usb 4-1: USB disconnect, device number 22 [ 316.637935][T14612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14612 comm=syz.0.4884 [ 316.652056][T14612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14612 comm=syz.0.4884 [ 316.966239][ T652] aqc111 10-1:1.105: probe with driver aqc111 failed with error -71 [ 316.978830][ T652] usb 10-1: USB disconnect, device number 2 [ 317.099701][T14631] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.107327][T14634] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.188497][T14636] rust_binder: Write failure EFAULT in pid:55 [ 317.223243][T14638] random: crng reseeded on system resumption [ 317.817460][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 317.817481][ T36] audit: type=1400 audit(2000000450.040:2772): avc: denied { name_bind } for pid=14645 comm="syz.3.4896" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 317.867689][ T36] audit: type=1400 audit(2000000450.087:2773): avc: denied { create } for pid=14652 comm="syz.0.4900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.897379][ T36] audit: type=1400 audit(2000000450.097:2774): avc: denied { create } for pid=14654 comm="syz.9.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.925094][ T36] audit: type=1400 audit(2000000450.144:2775): avc: denied { connect } for pid=14662 comm="syz.0.4902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 317.947298][T14667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 317.947771][ T36] audit: type=1400 audit(2000000450.172:2776): avc: denied { map } for pid=14666 comm="syz.9.4903" path="/dev/binderfs/binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 317.964761][T14667] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 317.984195][ T36] audit: type=1400 audit(2000000450.181:2777): avc: denied { call } for pid=14666 comm="syz.9.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 318.019636][ T36] audit: type=1400 audit(2000000450.228:2778): avc: denied { read write } for pid=14673 comm="syz.9.4906" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 318.046067][ T36] audit: type=1400 audit(2000000450.228:2779): avc: denied { open } for pid=14673 comm="syz.9.4906" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 318.074306][ T36] audit: type=1400 audit(2000000450.237:2780): avc: denied { bind } for pid=14673 comm="syz.9.4906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 318.096332][ T36] audit: type=1400 audit(2000000450.256:2781): avc: denied { write } for pid=14673 comm="syz.9.4906" name="ptype" dev="proc" ino=4026532314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 318.184382][T14682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.185905][T14684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 318.415857][T14697] SELinux: Context system_u:object_r:getty_log_t:s0 is not valid (left unmapped). [ 319.109307][T14736] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4929'. [ 319.810129][T14806] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4939'. [ 320.510594][T14846] 9pnet_fd: Insufficient options for proto=fd [ 321.078978][T14864] netlink: 'syz.3.4960': attribute type 4 has an invalid length. [ 321.089469][T14864] netlink: 'syz.3.4960': attribute type 4 has an invalid length. [ 321.570820][T14873] netlink: 188 bytes leftover after parsing attributes in process `syz.9.4963'. [ 321.639809][T14882] overlayfs: failed to clone upperpath [ 321.647729][T14882] 9pnet_fd: Insufficient options for proto=fd [ 322.235539][T14912] rust_binder: Error while translating object. [ 322.235600][T14912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 322.243079][T14912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 322.281407][T14915] rust_binder: validate_parent_fixup: new_min_offset=134217776, sg_entry.length=244 [ 322.291451][T14915] rust_binder: Error while translating object. [ 322.302565][T14915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 322.308867][T14915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 322.462165][T14938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4985'. [ 322.500654][T14942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4986'. [ 322.510869][T14942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=14942 comm=syz.3.4986 [ 322.523546][T14942] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4986'. [ 322.533688][T14942] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 239) [ 322.533719][T14942] rust_binder: Error while translating object. [ 322.544473][T14942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 322.551013][T14942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 322.582635][T14953] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4991'. [ 322.607932][T14957] netlink: 'syz.9.4993': attribute type 28 has an invalid length. [ 322.653362][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4996'. [ 322.662942][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4996'. [ 323.431639][T15002] fuse: Bad value for 'fd' [ 323.437921][T15002] 9pnet_fd: Insufficient options for proto=fd [ 323.644572][T15016] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5015'. [ 323.720946][T15031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=15031 comm=syz.9.5020 [ 323.731037][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 323.731060][ T36] audit: type=1400 audit(2000000455.586:2867): avc: denied { load_policy } for pid=15026 comm="syz.3.5018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 323.763690][T15028] SELinux: failed to load policy [ 323.835374][ T36] audit: type=1400 audit(2000000455.689:2868): avc: denied { append } for pid=15034 comm="syz.3.5022" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 323.860493][T15037] rust_binder: Write failure EINVAL in pid:87 [ 323.861203][T15038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.878902][ T36] audit: type=1400 audit(2000000455.727:2869): avc: denied { mounton } for pid=15041 comm="syz.3.5024" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.918391][ T36] audit: type=1400 audit(2000000455.774:2870): avc: denied { map } for pid=15043 comm="syz.3.5025" path="socket:[62200]" dev="sockfs" ino=62200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 323.981251][T15044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5025'. [ 324.814209][ T36] audit: type=1400 audit(2000000456.609:2871): avc: denied { unmount } for pid=14536 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 324.897206][ T36] audit: type=1400 audit(2000000456.693:2872): avc: denied { create } for pid=15071 comm="syz.3.5033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.917888][ T36] audit: type=1400 audit(2000000456.693:2873): avc: denied { append } for pid=15071 comm="syz.3.5033" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.942853][ T36] audit: type=1400 audit(2000000456.693:2874): avc: denied { bind } for pid=15071 comm="syz.3.5033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.081644][T15075] rust_binder: Write failure EINVAL in pid:104 [ 325.084416][T15075] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 325.091966][T15075] rust_binder: Error in use_page_slow: EFAULT [ 325.103562][T15075] rust_binder: use_range failure EFAULT [ 325.110307][T15075] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 325.116298][T15075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 325.125868][T15075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:104 [ 333.255664][ T36] audit: type=1400 audit(2000000464.528:2875): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 333.256277][T15085] can0: slcan on ptm0. [ 333.291146][ T36] audit: type=1400 audit(2000000464.566:2876): avc: denied { ioctl } for pid=15077 comm="syz.0.5035" path="socket:[62997]" dev="sockfs" ino=62997 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 333.342056][T15084] __nla_validate_parse: 1 callbacks suppressed [ 333.342077][T15084] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5036'. [ 333.355847][ T36] audit: type=1400 audit(2000000464.566:2877): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.383847][T15086] binder: Unknown parameter 'z' [ 333.389057][ T36] audit: type=1400 audit(2000000464.566:2878): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=6024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.414557][ T36] audit: type=1400 audit(2000000464.566:2879): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.484981][ T36] audit: type=1400 audit(2000000464.566:2880): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.509289][ T36] audit: type=1400 audit(2000000464.650:2881): avc: denied { remount } for pid=15082 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 333.531196][ T36] audit: type=1400 audit(2000000464.669:2882): avc: denied { read } for pid=15093 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.558950][ T36] audit: type=1400 audit(2000000464.669:2883): avc: denied { open } for pid=15093 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.591456][T15082] can0 (unregistered): slcan off ptm0. [ 333.601439][T15100] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.608921][T15100] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.616162][T15100] bridge_slave_0: entered allmulticast mode [ 333.626144][T15100] bridge_slave_0: entered promiscuous mode [ 333.640437][T15100] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.650033][ T36] audit: type=1400 audit(2000000464.669:2884): avc: denied { getattr } for pid=15093 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.650046][T15100] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.697477][T15100] bridge_slave_1: entered allmulticast mode [ 333.703946][T15100] bridge_slave_1: entered promiscuous mode [ 333.778819][T15131] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 333.797708][T15131] erofs: Bad value for 'dax' [ 333.862827][T15100] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.869948][T15100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.877286][T15100] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.884386][T15100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.918204][T15155] 9p: Unknown access argument : -22 [ 333.948125][T15157] rust_binder: 116: no such ref 1 [ 333.972671][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.984903][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.005203][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.012325][T14769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.039842][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.046943][ T4549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.130549][T15100] veth0_vlan: entered promiscuous mode [ 334.148041][T15100] veth1_macvtap: entered promiscuous mode [ 335.076384][T15222] rust_binder: 129: no such ref 2 [ 335.928765][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5084'. [ 336.244467][ T983] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 336.404550][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 336.411087][ T983] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 336.420722][ T983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.431592][ T983] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.442211][ T983] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.451462][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.459680][ T983] usb 4-1: Product: syz [ 336.463854][ T983] usb 4-1: Manufacturer: syz [ 336.468508][ T983] usb 4-1: SerialNumber: syz [ 336.588106][T15269] +$<¶: renamed from bridge0 (while UP) [ 336.742074][T15284] overlayfs: failed to clone upperpath [ 336.963091][ T983] usb 4-1: 0:2 : does not exist [ 337.608488][ T983] usb 4-1: USB disconnect, device number 23 [ 337.619841][T15266] udevd[15266]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.168812][T15342] rust_binder: Error while translating object. [ 338.168853][T15342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 338.175103][T15342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:138 [ 338.525107][ T652] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 338.695631][ T652] usb 4-1: Using ep0 maxpacket: 8 [ 338.703305][ T652] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 338.712976][ T652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.721313][ T652] usb 4-1: Product: syz [ 338.725530][ T652] usb 4-1: Manufacturer: syz [ 338.730475][ T652] usb 4-1: SerialNumber: syz [ 338.951816][ T652] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 339.165405][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 339.165426][ T36] audit: type=1400 audit(2000000470.083:2910): avc: denied { read write } for pid=15345 comm="syz.3.5112" name="lp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 339.167432][ T983] usb 4-1: USB disconnect, device number 24 [ 339.172341][ T36] audit: type=1400 audit(2000000470.083:2911): avc: denied { open } for pid=15345 comm="syz.3.5112" path="/dev/usb/lp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 339.197876][ T983] usblp0: removed [ 339.226792][ T36] audit: type=1400 audit(2000000470.130:2912): avc: denied { create } for pid=15345 comm="syz.3.5112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 340.683714][ T36] audit: type=1400 audit(2000000471.500:2913): avc: denied { mounton } for pid=15410 comm="syz.3.5133" path="/50/file0" dev="cgroup2" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 340.933678][ T652] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 341.094624][ T652] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.105657][ T652] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 341.116713][ T652] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 341.125841][ T652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.134768][ T652] usb 4-1: config 0 descriptor?? [ 341.140184][T15411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.424652][ T36] audit: type=1400 audit(2000000472.204:2914): avc: denied { setattr } for pid=15422 comm="syz.0.5137" name="CAN_BCM" dev="sockfs" ino=64599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.464778][T15427] 8021q: VLANs not supported on lo [ 342.019479][T15430] 9pnet: Could not find request transport: fd¦á±è [ 343.208145][ T36] audit: type=1400 audit(2000000473.874:2915): avc: denied { setattr } for pid=15445 comm="syz.0.5146" path="pipe:[64624]" dev="pipefs" ino=64624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 343.885756][ T652] usbhid 4-1:0.0: can't add hid device: -71 [ 343.886117][ T36] audit: type=1400 audit(2000000474.512:2916): avc: denied { unmount } for pid=14536 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.891889][ T652] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 343.926355][ T652] usb 4-1: USB disconnect, device number 25 [ 343.933421][ T36] audit: type=1400 audit(2000000474.549:2918): avc: denied { write } for pid=15464 comm="syz.3.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 343.955457][ T36] audit: type=1400 audit(2000000474.549:2917): avc: denied { shutdown } for pid=15464 comm="syz.3.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 344.016322][ T36] audit: type=1400 audit(2000000474.624:2919): avc: denied { setattr } for pid=15473 comm="syz.3.5157" path="/proc/162/net/pfkey" dev="proc" ino=4026532456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 344.068935][T15483] rust_binder: 169: no such ref 3 [ 344.074109][T15483] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 344.081331][T15483] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 344.088532][T15483] rust_binder: Write failure EFAULT in pid:169 [ 344.101860][T15487] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 344.116057][T15488] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 344.252062][T15503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15503 comm=syz.3.5165 [ 344.265063][T15503] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5165'. [ 344.274598][T15503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15503 comm=syz.3.5165 [ 344.289189][T15503] rust_binder: Error while translating object. [ 344.289212][T15503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 344.295473][T15503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:189 [ 344.599773][ T356] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 344.751712][T15516] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5170'. [ 344.762473][T15516] overlayfs: failed to clone upperpath [ 344.781151][ T356] usb 4-1: Using ep0 maxpacket: 32 [ 344.786604][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 344.786624][ T36] audit: type=1400 audit(2000000475.347:2922): avc: denied { mount } for pid=15517 comm="syz.0.5171" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 344.794154][T15520] overlayfs: failed to clone upperpath [ 344.824338][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.841147][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.852722][ T356] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 344.856074][T15527] incfs: Options parsing error. -22 [ 344.872663][T15527] incfs: mount failed -22 [ 344.883259][ T356] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 344.884398][ T36] audit: type=1400 audit(2000000475.441:2923): avc: denied { read write } for pid=15524 comm="syz.0.5173" name="file1" dev="tmpfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 344.920868][ T36] audit: type=1400 audit(2000000475.441:2924): avc: denied { open } for pid=15524 comm="syz.0.5173" path="/450/file1" dev="tmpfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 344.933075][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.963650][ T356] usb 4-1: config 0 descriptor?? [ 344.970446][ T356] usbhid 4-1:0.0: can't add hid device: -22 [ 344.987927][ T356] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 345.194292][ T65] usb 4-1: USB disconnect, device number 26 [ 345.218717][ T36] audit: type=1400 audit(2000000475.750:2925): avc: denied { ioctl } for pid=15548 comm="syz.9.5180" path="socket:[64804]" dev="sockfs" ino=64804 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.384702][ T36] audit: type=1400 audit(2000000475.910:2926): avc: denied { setattr } for pid=15563 comm="syz.9.5186" name="XDP" dev="sockfs" ino=64821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 345.464715][T15574] batadv_slave_1: entered promiscuous mode [ 345.471970][T15574] batadv_slave_1: left promiscuous mode [ 345.553587][ T36] audit: type=1400 audit(2000000476.069:2927): avc: denied { mount } for pid=15592 comm="syz.9.5194" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 345.590057][ T36] audit: type=1400 audit(2000000476.098:2928): avc: denied { getopt } for pid=15598 comm="syz.9.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.776880][T15604] rust_binder: Error in use_page_slow: ESRCH [ 345.776906][T15604] rust_binder: use_range failure ESRCH [ 345.783457][T15604] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 345.788975][T15604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 345.796974][T15604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:200 [ 345.820447][ T36] audit: type=1400 audit(2000000476.323:2929): avc: denied { execute } for pid=15605 comm="syz.3.5198" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 345.896072][ T36] audit: type=1400 audit(2000000476.388:2930): avc: denied { listen } for pid=15607 comm="syz.3.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.082477][T15611] /dev/loop0: Can't lookup blockdev [ 346.114492][T15615] 9pnet_fd: Insufficient options for proto=fd [ 346.290258][T15643] netlink: 'syz.0.5211': attribute type 27 has an invalid length. [ 346.290995][T15644] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5211'. [ 346.358222][ T36] audit: type=1400 audit(2000000476.820:2931): avc: denied { create } for pid=15656 comm="syz.0.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 346.358437][T15657] 9pnet_fd: Insufficient options for proto=fd [ 346.411512][ T356] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 346.427391][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 346.437164][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 346.572467][ T356] usb 4-1: config 0 has no interfaces? [ 346.578270][ T356] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 346.587367][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.596302][ T356] usb 4-1: config 0 descriptor?? [ 346.929443][ T356] usb 4-1: USB disconnect, device number 27 [ 347.796977][ T356] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 347.872663][T15697] overlayfs: failed to clone lowerpath [ 347.956835][ T356] usb 4-1: Using ep0 maxpacket: 32 [ 347.964127][ T356] usb 4-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 347.975506][ T356] usb 4-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.988881][ T356] usb 4-1: config 1 interface 0 has no altsetting 0 [ 347.997127][ T356] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 348.008115][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.017380][ T356] usb 4-1: Product: 룊걚á›ä‚ºá¥²ç¬µé¿ºæ¨·á€é°¸ê†¨åš«á‚³î¦å‘°çŠ¨í–ઞ葃䪨ﭓ綒㘕ê…઩佩얘ណ뫯锃ä˜éŒší”ä¹æ’µê‹¦ë’³éƒŠäœâ¢ƒè¿­ê•€é­†å„°ä’­äˆœï›µä“©ëŸ²é˜»é¿’㙭驙᭘ဉ㧅ᖆ㮘呲็ᥒ芷﹮譲æ¼â‹¨ãƒ—⇧颤諼➲䇬蟻习鞓䎧瑵⧇碀Ͻ洓ꂎ䫑挲Ṭ뙊鬼軵奷瀺㠸纸諻ㅖ诨䵉æ«â‘‰ [ 348.051303][ T356] usb 4-1: Manufacturer: Ц [ 348.056289][ T356] usb 4-1: SerialNumber: 碥ᅛᵖ錉㲵붙ᠰ䓧驷æ›êŠ€í‘­âˆï‰·èŠ–玗擄疓傋ìŠë‡žá˜­î¤‚î–«á­± [ 348.067646][T15711] fuse: Bad value for 'fd' [ 348.684648][T15722] /dev/rnullb0: Can't lookup blockdev [ 348.894329][T15736] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 349.026370][T15747] netlink: 'syz.9.5250': attribute type 14 has an invalid length. [ 349.104677][T15750] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5251'. [ 349.747506][T15755] /dev/rnullb0: Can't lookup blockdev [ 350.307143][T15768] fuse: Bad value for 'rootmode' [ 350.452024][T15773] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.458250][T15783] /dev/sr0: Can't lookup blockdev [ 350.459337][T15773] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.471502][T15773] bridge_slave_0: entered allmulticast mode [ 350.478348][T15773] bridge_slave_0: entered promiscuous mode [ 350.485009][T15773] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.492072][T15773] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.499235][T15773] bridge_slave_1: entered allmulticast mode [ 350.505730][T15773] bridge_slave_1: entered promiscuous mode [ 350.604017][T15773] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.611170][T15773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.618525][T15773] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.625627][T15773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.710244][ T356] usbhid 4-1:1.0: can't add hid device: -71 [ 350.726439][ T356] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 350.739814][T15802] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5269'. [ 350.750879][ T356] usb 4-1: USB disconnect, device number 28 [ 350.757871][T15773] veth0_vlan: entered promiscuous mode [ 350.787483][T15773] veth1_macvtap: entered promiscuous mode [ 350.841220][T15811] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5260'. [ 350.850541][T15811] rust_binder: Write failure EFAULT in pid:2 [ 351.002042][T15822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45604 sclass=netlink_route_socket pid=15822 comm=syz.9.5275 [ 351.022969][T15822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45604 sclass=netlink_route_socket pid=15822 comm=syz.9.5275 [ 351.094183][ T356] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 351.116202][T15833] netlink: 124 bytes leftover after parsing attributes in process `syz.9.5278'. [ 351.283208][ T356] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.293839][ T356] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.303981][ T356] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.313225][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.321639][ T356] usb 4-1: SerialNumber: syz [ 351.367916][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 351.367936][ T36] audit: type=1400 audit(2000000481.530:2939): avc: denied { watch watch_reads } for pid=15838 comm="syz.0.5280" path="/497" dev="tmpfs" ino=2730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 351.541448][ T36] audit: type=1400 audit(2000000481.690:2940): avc: denied { write } for pid=15801 comm="syz.3.5269" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.563468][ T36] audit: type=1400 audit(2000000481.690:2941): avc: denied { remove_name } for pid=15801 comm="syz.3.5269" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.587958][ T36] audit: type=1400 audit(2000000481.690:2942): avc: denied { unlink } for pid=15801 comm="syz.3.5269" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.588356][ T356] usb 4-1: 0:2 : does not exist [ 351.616556][ T356] usb 4-1: unit 251 not found! [ 351.624794][ T356] usb 4-1: USB disconnect, device number 29 [ 351.632720][T15266] udevd[15266]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 351.812103][T15853] 9pnet_fd: Insufficient options for proto=fd [ 352.529796][T15871] netlink: 'syz.9.5294': attribute type 1 has an invalid length. [ 353.008910][ T36] audit: type=1400 audit(2000000483.060:2943): avc: denied { read } for pid=15895 comm="syz.5.5304" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 353.075426][T15905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.101624][ T36] audit: type=1400 audit(2000000483.154:2944): avc: denied { ioctl } for pid=15903 comm="syz.5.5306" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 353.171715][T15913] /dev/loop0: Can't lookup blockdev [ 353.179160][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5308'. [ 353.199688][ T36] audit: type=1400 audit(2000000483.219:2945): avc: denied { remount } for pid=15912 comm="syz.0.5308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 353.270773][ T36] audit: type=1400 audit(2000000483.276:2946): avc: denied { block_suspend } for pid=15916 comm="syz.0.5310" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.498648][ T983] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 353.659618][ T983] usb 4-1: config 4 has an invalid descriptor of length 207, skipping remainder of the config [ 353.673828][ T983] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 353.692850][ T983] usb 4-1: New USB device found, idVendor=045e, idProduct=0472, bcdDevice=c5.ec [ 353.702095][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.710444][ T983] usb 4-1: Product: syz [ 353.717598][ T983] usb 4-1: Manufacturer: syz [ 353.722784][ T983] usb 4-1: SerialNumber: syz [ 353.947346][ T36] audit: type=1400 audit(2000000483.951:2947): avc: denied { setopt } for pid=15914 comm="syz.3.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.967593][ T36] audit: type=1400 audit(2000000483.951:2948): avc: denied { bind } for pid=15914 comm="syz.3.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.997722][T15925] /dev/rnullb0: Can't open blockdev [ 354.450157][T15952] fuseblk: Bad value for 'source' [ 354.493899][ T4552] +$<¶: port 2(bridge_slave_1) entered disabled state [ 355.171669][T15990] fuse: Bad value for 'fd' [ 355.178093][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5330'. [ 355.279377][T16006] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5337'. [ 355.448944][ T652] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 355.609908][ T652] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 355.621286][ T652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 355.628308][ T652] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 355.637745][ T652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.647002][ T652] usb 6-1: config 0 descriptor?? [ 355.656051][T15996] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 355.871172][T16057] overlayfs: failed to clone upperpath [ 356.100921][T16106] incfs: Options parsing error. -22 [ 356.112342][ T652] usbhid 6-1:0.0: can't add hid device: -71 [ 356.118732][ T652] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 356.131041][T16106] incfs: mount failed -22 [ 356.162401][ T652] usb 6-1: USB disconnect, device number 23 [ 356.208308][T16116] /dev/rnullb0: Can't open blockdev [ 356.222650][T16118] 9p: Unknown access argument : -22 [ 356.236401][ T4541] bridge_slave_1: left allmulticast mode [ 356.242368][ T4541] bridge_slave_1: left promiscuous mode [ 356.248086][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.256759][ T4541] bridge_slave_0: left allmulticast mode [ 356.262590][ T4541] bridge_slave_0: left promiscuous mode [ 356.268368][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.414220][ T4541] veth1_macvtap: left promiscuous mode [ 356.419880][ T4541] veth0_vlan: left promiscuous mode [ 356.458962][ T983] usb 4-1: USB disconnect, device number 30 [ 356.525197][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.532454][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.540157][T16124] bridge_slave_0: entered allmulticast mode [ 356.546878][T16124] bridge_slave_0: entered promiscuous mode [ 356.553552][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.561292][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.569296][T16124] bridge_slave_1: entered allmulticast mode [ 356.577086][T16124] bridge_slave_1: entered promiscuous mode [ 356.634669][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.641880][T16124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.649215][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.656304][T16124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.683102][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.691407][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.711040][T14779] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.718152][T14779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.727513][T14786] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.734617][T14786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.776893][T16124] veth0_vlan: entered promiscuous mode [ 356.780380][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 356.780402][ T36] audit: type=1400 audit(2000000486.597:2956): avc: denied { create } for pid=16144 comm="syz.3.5386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.793746][T16124] veth1_macvtap: entered promiscuous mode [ 356.812402][ T36] audit: type=1400 audit(2000000486.635:2957): avc: denied { bind } for pid=16144 comm="syz.3.5386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.833925][ T36] audit: type=1400 audit(2000000486.635:2958): avc: denied { read } for pid=16144 comm="syz.3.5386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 356.908370][ T36] audit: type=1400 audit(2000000486.719:2959): avc: denied { write } for pid=16149 comm="syz.6.5387" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 356.946297][T16153] rust_binder: Write failure EFAULT in pid:6 [ 356.982459][ T36] audit: type=1400 audit(2000000486.785:2960): avc: denied { execute } for pid=16157 comm="syz.6.5390" name="file0" dev="ramfs" ino=67597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 357.056738][ T36] audit: type=1400 audit(2000000486.860:2961): avc: denied { setattr } for pid=16166 comm="syz.5.5394" path="/dev/binderfs/binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 357.096570][ T36] audit: type=1326 audit(2000000486.898:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.5.5395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273f98efc9 code=0x0 [ 357.154270][T16174] rust_binder: Error while translating object. [ 357.154306][T16174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.160572][T16174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 363.468665][ T110] udevd[110]: worker [13793] /devices/virtual/block/loop2 is taking a long time [ 366.019426][ T36] audit: type=1400 audit(2000000495.268:2963): avc: denied { remount } for pid=16182 comm="syz.6.5398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 366.040627][ T36] audit: type=1400 audit(2000000495.268:2964): avc: denied { execute } for pid=16182 comm="syz.6.5398" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.065620][ T36] audit: type=1400 audit(2000000495.286:2965): avc: denied { unmount } for pid=16124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 366.116631][ T36] audit: type=1400 audit(2000000495.361:2966): avc: denied { bind } for pid=16193 comm="syz.3.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.117452][T16194] rust_binder: Write failure EFAULT in pid:258 [ 366.287497][ T652] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 366.415401][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 366.457971][ T652] usb 6-1: Using ep0 maxpacket: 16 [ 366.464611][ T652] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 366.473158][ T652] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 366.481514][ T652] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.491933][ T652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 366.502885][ T652] usb 6-1: config 0 has no interface number 0 [ 366.509102][ T652] usb 6-1: config 0 interface 104 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.522354][ T652] usb 6-1: config 0 interface 104 has no altsetting 1 [ 366.531033][ T652] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 366.540918][ T652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.549107][ T652] usb 6-1: Product: syz [ 366.553441][ T652] usb 6-1: Manufacturer: syz [ 366.558262][ T652] usb 6-1: SerialNumber: syz [ 366.563520][ T652] usb 6-1: config 0 descriptor?? [ 366.587046][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.597600][ T10] usb 4-1: config 0 has no interfaces? [ 366.603568][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.612817][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.621871][ T10] usb 4-1: config 0 descriptor?? [ 366.783667][ T36] audit: type=1400 audit(2000000495.990:2967): avc: denied { view } for pid=16188 comm="syz.5.5400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 366.791481][ T652] asix 6-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 366.813746][ T652] asix 6-1:0.104: probe with driver asix failed with error -71 [ 366.822771][ T652] usb 6-1: USB disconnect, device number 24 [ 366.843518][ T983] usb 4-1: USB disconnect, device number 31 [ 367.185095][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.197517][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.209952][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.222049][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.234452][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.246566][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.258654][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.270771][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.282872][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.295064][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.666180][T16206] binder: Bad value for 'max' [ 367.918024][ T65] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 368.077934][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 368.085285][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.094298][ T65] usb 4-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 368.105889][ T65] usb 4-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 368.116216][ T65] usb 4-1: config 12 interface 0 has no altsetting 0 [ 368.125210][ T65] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 368.134950][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.143266][ T65] usb 4-1: Product: syz [ 368.147610][ T65] usb 4-1: Manufacturer: syz [ 368.152271][ T65] usb 4-1: SerialNumber: syz [ 368.160455][T16206] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 368.386543][ T65] usb 4-1: selecting invalid altsetting 0 [ 368.397822][ T65] usb 4-1: USB disconnect, device number 32 [ 369.296211][T16215] rust_binder: Write failure EFAULT in pid:26 [ 369.486496][ T36] audit: type=1326 audit(2000000498.533:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.6.5411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f199138efc9 code=0x0 [ 369.594630][ T36] audit: type=1400 audit(2000000498.627:2969): avc: denied { accept } for pid=16216 comm="syz.6.5411" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.865512][T16223] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5413'. [ 370.425115][ T36] audit: type=1400 audit(2000000499.405:2970): avc: denied { unmount } for pid=16124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 370.557673][ T36] audit: type=1400 audit(2000000499.527:2971): avc: denied { ioctl } for pid=16235 comm="syz.3.5416" path="socket:[68041]" dev="sockfs" ino=68041 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 371.584638][T16263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=16263 comm=syz.3.5424 [ 371.619525][T16267] netlink: 'syz.3.5425': attribute type 12 has an invalid length. [ 371.803663][ T36] audit: type=1400 audit(2000000500.700:2972): avc: denied { ioctl } for pid=16274 comm="syz.3.5427" path="socket:[68230]" dev="sockfs" ino=68230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.834051][T16277] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 371.834097][T16277] rust_binder: Error while translating object. [ 371.849303][T16277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 371.856465][T16277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 371.886657][T16279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 372.447955][T16282] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 372.521958][ C0] net_ratelimit: 151320 callbacks suppressed [ 372.521978][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.540992][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.554934][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.567997][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.580872][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.593491][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.607411][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.620095][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.635030][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.647884][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.912473][ T36] audit: type=1326 audit(2000000501.742:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16281 comm="syz.5.5428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f273f98efc9 code=0x0 [ 373.094073][T16292] rust_binder: Error while translating object. [ 373.094120][T16292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 373.100649][T16292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:320 [ 373.142865][ T36] audit: type=1400 audit(2000000501.958:2974): avc: denied { read } for pid=16296 comm="syz.3.5434" name="/" dev="configfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.184979][T16290] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.193323][T16290] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.200477][T16290] bridge_slave_0: entered allmulticast mode [ 373.210764][ T36] audit: type=1400 audit(2000000501.986:2975): avc: denied { open } for pid=16296 comm="syz.3.5434" path="/" dev="configfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.244326][T16290] bridge_slave_0: entered promiscuous mode [ 373.254022][T16290] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.262454][T16302] rust_binder: Write failure EFAULT in pid:327 [ 373.264094][T16290] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.298960][T16304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 373.305998][T16290] bridge_slave_1: entered allmulticast mode [ 373.336274][T16290] bridge_slave_1: entered promiscuous mode [ 373.343622][ T36] audit: type=1400 audit(2000000502.145:2976): avc: denied { bind } for pid=16305 comm="syz.3.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.384618][ T36] audit: type=1400 audit(2000000502.155:2977): avc: denied { name_bind } for pid=16305 comm="syz.3.5437" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 373.411143][ T36] audit: type=1400 audit(2000000502.155:2978): avc: denied { node_bind } for pid=16305 comm="syz.3.5437" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 373.567885][T16290] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.575012][T16290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.582630][T16290] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.589800][T16290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.624386][T14779] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.633494][T14779] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.646896][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.654115][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.684894][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.691991][ T4541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.710434][T16320] __vm_enough_memory: pid: 16320, comm: syz.3.5439, bytes: 18014402804453376 not enough memory for the allocation [ 373.787114][T16290] veth0_vlan: entered promiscuous mode [ 373.853972][T16290] veth1_macvtap: entered promiscuous mode [ 374.067558][T16336] rust_binder: 6: no such ref 3 [ 374.078087][T16336] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 374.094324][T16336] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 374.101568][ T983] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 374.121138][T16336] rust_binder: Write failure EFAULT in pid:6 [ 374.259243][ T983] usb 4-1: device descriptor read/64, error -71 [ 374.546874][ T983] usb 4-1: device descriptor read/64, error -71 [ 374.802786][ T983] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 374.951884][ T983] usb 4-1: device descriptor read/64, error -71 [ 375.202522][ T36] audit: type=1400 audit(2000000503.891:2979): avc: denied { mounton } for pid=16345 comm="syz.6.5447" path="/proc/52/cgroup" dev="proc" ino=69852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 375.225794][ T983] usb 4-1: device descriptor read/64, error -71 [ 375.346317][ T983] usb usb4-port1: attempt power cycle [ 375.461013][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5453'. [ 375.477583][T16368] erspan0: default FDB implementation only supports local addresses [ 375.499379][T16368] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 375.510497][T16370] rust_binder: 14: no such ref 0 [ 375.515552][T16370] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 375.524711][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5453'. [ 375.533865][T16372] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 375.543229][T16370] rust_binder: 14: no such ref 2 [ 375.548547][T16371] erspan0: default FDB implementation only supports local addresses [ 375.556790][T16370] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 375.603903][T16376] __vm_enough_memory: pid: 16376, comm: syz.7.5456, bytes: 18014402804453376 not enough memory for the allocation [ 375.712453][ T983] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 375.773512][ T983] usb 4-1: device descriptor read/8, error -71 [ 375.944010][ T983] usb 4-1: device descriptor read/8, error -71 [ 375.996306][ T365] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 376.189557][ T365] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.212010][ T983] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 376.254845][ T365] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.296962][ T983] usb 4-1: device descriptor read/8, error -71 [ 376.306164][ T365] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.379967][ T365] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.431986][ T365] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.455068][ T983] usb 4-1: device descriptor read/8, error -71 [ 376.483911][ T365] usb 8-1: config 0 descriptor?? [ 376.575391][ T983] usb usb4-port1: unable to enumerate USB device [ 376.743706][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 376.778428][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 376.827556][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 376.859518][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 376.867070][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 376.906758][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 376.949510][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 376.987446][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.019394][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.026903][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.116522][T16381] devpts: called with bogus options [ 377.136637][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.188983][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.226933][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.263693][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.340495][ T365] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 377.391111][ T365] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 377.450972][ T365] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 377.506293][ C0] sched: DL replenish lagged too much [ 377.861283][ C0] net_ratelimit: 136779 callbacks suppressed [ 377.861310][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.879678][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.891929][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.903915][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.916049][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.928202][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.940169][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.952165][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.964239][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.976297][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.200617][ C1] net_ratelimit: 289039 callbacks suppressed [ 383.200642][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 383.200648][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.200697][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.206750][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 383.218713][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.230660][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 383.242522][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.254878][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 383.266968][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.279202][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 388.539940][ C0] net_ratelimit: 292038 callbacks suppressed [ 388.539965][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.539976][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 388.540024][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 388.546598][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.561944][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 388.574712][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.587779][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 388.601228][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.615517][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 388.627551][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.878277][ T10] usb 8-1: USB disconnect, device number 16 [ 393.879263][ C0] net_ratelimit: 291808 callbacks suppressed [ 393.879289][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.879302][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 393.879350][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 393.885508][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.897446][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 393.909791][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.922144][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 393.934068][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.946369][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 393.958289][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.106452][T16400] rust_binder: 90: no such ref 0 [ 395.111487][T16400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 399.218601][ C0] net_ratelimit: 302561 callbacks suppressed [ 399.218628][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.218635][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 399.218684][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 399.227787][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.233819][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 399.245822][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.257836][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 399.269840][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.281745][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 399.293764][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.557937][ C1] net_ratelimit: 299563 callbacks suppressed [ 404.557961][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 404.557991][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.564073][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 404.576031][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.587846][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 404.599732][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.611662][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 404.623542][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.635366][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 404.647280][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.897263][ C0] net_ratelimit: 289753 callbacks suppressed [ 409.897287][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.897306][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 409.903383][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.915750][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 409.927663][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.939568][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 409.951547][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.963365][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 409.975263][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.987326][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 415.236608][ C1] net_ratelimit: 291750 callbacks suppressed [ 415.236634][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 415.236635][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.236686][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.242838][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 415.254875][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.266880][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 415.278689][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.290686][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 415.302584][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.314514][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 420.575940][ C1] net_ratelimit: 309217 callbacks suppressed [ 420.575966][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 420.575977][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.576026][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.582069][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 420.594028][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.605953][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 420.617936][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.629927][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 420.641722][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.653692][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 425.915289][ C0] net_ratelimit: 297230 callbacks suppressed [ 425.915315][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.915315][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 425.915368][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 425.921501][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.933572][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 425.945818][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.957744][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 425.969621][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.981477][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 425.993421][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.254610][ C1] net_ratelimit: 292617 callbacks suppressed [ 431.254635][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 431.254648][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.254700][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.261032][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 431.273057][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.285166][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 431.296996][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.308868][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 431.320678][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.332581][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 436.593944][ C0] net_ratelimit: 300281 callbacks suppressed [ 436.593969][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.593978][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 436.594028][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 436.600247][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.612426][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 436.624479][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.636340][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 436.648167][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.660298][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 436.672512][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.933299][ C0] net_ratelimit: 294599 callbacks suppressed [ 441.933325][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.933326][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 441.933378][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 441.939524][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.951722][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 441.964256][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.976157][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 441.988072][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.999958][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 442.011974][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.259713][ T37] INFO: task udevd:13793 blocked for more than 125 seconds. [ 444.269357][ T37] Not tainted syzkaller #0 [ 444.622513][ T36] audit: type=1400 audit(2000000568.804:2980): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[3050]" dev="pipefs" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.272614][ C0] net_ratelimit: 298305 callbacks suppressed [ 447.272639][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.272655][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 447.272702][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 447.278739][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.290567][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 447.302466][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.314376][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 447.326287][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.338189][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 447.350114][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.258658][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.267555][ T37] task:udevd state:D stack:0 pid:13793 tgid:13793 ppid:110 flags:0x00000000 [ 448.277835][ T37] Call Trace: [ 448.281152][ T37] [ 448.284200][ T37] __schedule+0x1322/0x1df0 [ 448.288776][ T37] ? __sched_text_start+0x10/0x10 [ 448.293917][ T37] ? __kasan_check_write+0x18/0x20 [ 448.299079][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 448.304296][ T37] ? __kasan_check_write+0x18/0x20 [ 448.309451][ T37] ? trace_contention_begin+0xc0/0xc0 [ 448.314841][ T37] schedule+0xc6/0x240 [ 448.318942][ T37] schedule_preempt_disabled+0x14/0x30 [ 448.324428][ T37] __mutex_lock+0x81e/0x1b50 [ 448.329047][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 448.335827][ T37] ? __kasan_check_write+0x18/0x20 [ 448.340983][ T37] ? _raw_spin_lock+0x8c/0x120 [ 448.345764][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 448.351082][ T37] ? __asan_memcpy+0x5a/0x80 [ 448.355688][ T37] __mutex_lock_slowpath+0xe/0x20 [ 448.360736][ T37] mutex_lock+0x102/0x1c0 [ 448.365075][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 448.369945][ T37] ? disk_block_events+0xaf/0x120 [ 448.375027][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 448.380332][ T37] bdev_open+0xd5/0xd60 [ 448.384520][ T37] blkdev_open+0x3d1/0x560 [ 448.388965][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 448.393935][ T37] do_dentry_open+0x97b/0x1510 [ 448.398756][ T37] vfs_open+0x86/0x230 [ 448.402860][ T37] ? __cfi_vfs_open+0x10/0x10 [ 448.407730][ T37] ? may_open+0x352/0x430 [ 448.412086][ T37] path_openat+0x2b6c/0x34b0 [ 448.416721][ T37] ? kasan_save_track+0x3e/0x80 [ 448.421592][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 448.426909][ T37] ? getname+0x1b/0x30 [ 448.430990][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 448.435832][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 448.442006][ T37] ? do_filp_open+0x3e0/0x3e0 [ 448.446745][ T37] do_filp_open+0x1c6/0x3e0 [ 448.451371][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 448.456430][ T37] ? alloc_fd+0x4e7/0x5a0 [ 448.460775][ T37] do_sys_openat2+0x12c/0x1c0 [ 448.465484][ T37] ? do_sys_open+0x100/0x100 [ 448.470131][ T37] __x64_sys_openat+0x13a/0x170 [ 448.475004][ T37] x64_sys_call+0xe69/0x2ee0 [ 448.479637][ T37] do_syscall_64+0x58/0xf0 [ 448.484179][ T37] ? clear_bhb_loop+0x50/0xa0 [ 448.489005][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 448.494920][ T37] RIP: 0033:0x7fb911ea7407 [ 448.499432][ T37] RSP: 002b:00007ffd296c1770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 448.507879][ T37] RAX: ffffffffffffffda RBX: 00007fb9125f6880 RCX: 00007fb911ea7407 [ 448.515972][ T37] RDX: 00000000000a0800 RSI: 0000559e73305c80 RDI: ffffffffffffff9c [ 448.524048][ T37] RBP: 0000559e730c32c0 R08: 0000000000000000 R09: 0000000000000000 [ 448.532062][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559e73311610 [ 448.540050][ T37] R13: 0000559e733040f0 R14: 0000000000000000 R15: 0000559e73311610 [ 448.548057][ T37] [ 448.606867][ T37] INFO: task syz.1.4600:13806 blocked for more than 129 seconds. [ 448.614652][ T37] Not tainted syzkaller #0 [ 452.048920][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.057678][ T37] task:syz.1.4600 state:D stack:0 pid:13806 tgid:13805 ppid:11154 flags:0x00004004 [ 452.067907][ T37] Call Trace: [ 452.071241][ T37] [ 452.074205][ T37] __schedule+0x1322/0x1df0 [ 452.078757][ T37] ? __sched_text_start+0x10/0x10 [ 452.083855][ T37] ? kasan_save_track+0x4f/0x80 [ 452.088758][ T37] ? kasan_save_free_info+0x4a/0x60 [ 452.094037][ T37] ? __kasan_slab_free+0x5f/0x80 [ 452.099015][ T37] ? kfree+0x15c/0x460 [ 452.103143][ T37] ? efi_partition+0x444/0x3150 [ 452.108030][ T37] ? bdev_disk_changed+0x81c/0x1610 [ 452.113290][ T37] ? loop_reread_partitions+0x64/0x110 [ 452.118799][ T37] ? __kasan_check_write+0x18/0x20 [ 452.124000][ T37] schedule+0xc6/0x240 [ 452.128123][ T37] io_schedule+0x89/0xe0 [ 452.132443][ T37] folio_wait_bit_common+0x6ae/0x910 [ 452.137782][ T37] ? folio_wait_bit+0x50/0x50 [ 452.142509][ T37] ? __filemap_get_folio+0x932/0xaa0 [ 452.147877][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 452.153468][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 452.159209][ T37] ? kfree+0x15c/0x460 [ 452.163309][ T37] ? efi_partition+0x444/0x3150 [ 452.168217][ T37] do_read_cache_folio+0x14d/0x4d0 [ 452.173459][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 452.178993][ T37] read_cache_folio+0x54/0x90 [ 452.183815][ T37] read_part_sector+0xcc/0x250 [ 452.188777][ T37] msdos_partition+0x118/0x3000 [ 452.193937][ T37] ? __cfi_efi_partition+0x10/0x10 [ 452.199215][ T37] ? vsnprintf+0x19b8/0x1aa0 [ 452.203938][ T37] ? snprintf+0xdb/0x130 [ 452.208246][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 452.213744][ T37] ? __cfi_snprintf+0x10/0x10 [ 452.218646][ T37] ? bdev_disk_changed+0x4f8/0x1610 [ 452.224089][ T37] bdev_disk_changed+0x81c/0x1610 [ 452.229233][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 452.234747][ T37] ? __kasan_check_write+0x18/0x20 [ 452.239934][ T37] ? mutex_unlock+0x8b/0x240 [ 452.244826][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 452.249942][ T37] loop_reread_partitions+0x64/0x110 [ 452.255714][ T37] loop_configure+0xfd8/0x1310 [ 452.260650][ T37] ? __cfi_loop_configure+0x10/0x10 [ 452.265905][ T37] ? __kasan_check_write+0x18/0x20 [ 452.271115][ T37] lo_ioctl+0x802/0x1d50 [ 452.275408][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 452.283381][ T37] ? update_curr+0x4e4/0xaa0 [ 452.288013][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 452.292759][ T37] ? update_load_avg+0x506/0x19a0 [ 452.297830][ T37] ? detach_entity_load_avg+0x7b0/0x7b0 [ 452.303500][ T37] ? dequeue_entity+0xa9c/0x1750 [ 452.308518][ T37] ? __kmalloc_cache_noprof+0x24c/0x490 [ 452.314241][ T37] ? kernfs_fop_open+0x78c/0xe20 [ 452.319231][ T37] ? tg_unthrottle_up+0x980/0x980 [ 452.324321][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 452.330425][ T37] ? kvm_sched_clock_read+0x15/0x30 [ 452.335717][ T37] ? sched_clock_noinstr+0xd/0x30 [ 452.340837][ T37] ? sched_clock+0x44/0x60 [ 452.345392][ T37] ? sched_clock_cpu+0x75/0x400 [ 452.350319][ T37] ? sched_balance_newidle+0x849/0xda0 [ 452.355841][ T37] ? __cfi_sched_clock_cpu+0x10/0x10 [ 452.361209][ T37] ? __kasan_check_read+0x15/0x20 [ 452.366292][ T37] ? __perf_event_task_sched_in+0x116e/0x1340 [ 452.372436][ T37] ? __kasan_check_write+0x18/0x20 [ 452.377662][ T37] ? __switch_to+0xc7b/0x1310 [ 452.382381][ T37] ? __perf_event_task_sched_out+0x1c1/0xb70 [ 452.388534][ T37] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 452.394938][ T37] ? __cfi___switch_to+0x10/0x10 [ 452.399986][ T37] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 452.406468][ T37] ? __kasan_check_write+0x18/0x20 [ 452.411684][ T37] ? finish_task_switch+0x1de/0x780 [ 452.417070][ T37] ? __switch_to_asm+0x3d/0x70 [ 452.422028][ T37] ? avc_has_extended_perms+0x7c7/0xdd0 [ 452.427811][ T37] ? __asan_memcpy+0x5a/0x80 [ 452.432480][ T37] ? avc_has_extended_perms+0x921/0xdd0 [ 452.438081][ T37] ? do_vfs_ioctl+0xeda/0x1e30 [ 452.442911][ T37] ? __futex_queue+0x19a/0x340 [ 452.447731][ T37] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 452.453447][ T37] ? __cfi___futex_queue+0x10/0x10 [ 452.458592][ T37] ? futex_wait_setup+0x1bc/0x260 [ 452.463697][ T37] ? __futex_wait+0x218/0x2a0 [ 452.468423][ T37] ? blkdev_common_ioctl+0x10e4/0x2810 [ 452.473955][ T37] ? blkdev_bszset+0x220/0x220 [ 452.478771][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 452.483751][ T37] ? futex_wake+0x63a/0x900 [ 452.488333][ T37] ? futex_setup_timer+0xb4/0xd0 [ 452.493317][ T37] ? futex_wait+0x29a/0x7a0 [ 452.497890][ T37] ? __cfi_do_futex+0x10/0x10 [ 452.502710][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 452.507458][ T37] blkdev_ioctl+0x546/0x680 [ 452.512008][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 452.517106][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 452.522177][ T37] ? security_file_ioctl+0x34/0xd0 [ 452.527362][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 452.532616][ T37] __se_sys_ioctl+0x135/0x1b0 [ 452.537359][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 452.541990][ T37] x64_sys_call+0x1878/0x2ee0 [ 452.546722][ T37] do_syscall_64+0x58/0xf0 [ 452.551216][ T37] ? clear_bhb_loop+0x50/0xa0 [ 452.555943][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 452.561891][ T37] RIP: 0033:0x7f96ac98efc9 [ 452.566341][ T37] RSP: 002b:00007f96ad7b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.574822][ T37] RAX: ffffffffffffffda RBX: 00007f96acbe5fa0 RCX: 00007f96ac98efc9 [ 452.582936][ T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000086 [ 452.590999][ T37] RBP: 00007f96aca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.599006][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.607159][ T37] R13: 00007f96acbe6038 R14: 00007f96acbe5fa0 R15: 00007ffe16a56df8 [ 452.615333][ C1] net_ratelimit: 263498 callbacks suppressed [ 452.615345][ T37] [ 452.615358][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 452.621692][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.624702][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 452.636678][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.648597][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 452.661029][ C0] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.673043][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 452.684988][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.696998][ C1] +$<¶: received packet on veth0_to_bridge with own address as source address (addr:0e:16:8a:8e:d1:92, vlan:0) [ 452.708916][ C0] +$<¶: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.734198][ T37] NMI backtrace for cpu 1 [ 452.734222][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 452.734255][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.734273][ T37] Call Trace: [ 452.734282][ T37] [ 452.734294][ T37] __dump_stack+0x21/0x30 [ 452.734335][ T37] dump_stack_lvl+0x10c/0x190 [ 452.734370][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 452.734407][ T37] dump_stack+0x19/0x20 [ 452.734449][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 452.734483][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 452.734515][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 452.734548][ T37] ? sched_show_task+0x379/0x560 [ 452.734581][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 452.734613][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.734645][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.734678][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 452.734713][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 452.734746][ T37] watchdog+0xd8f/0xed0 [ 452.734783][ T37] ? __cfi_watchdog+0x10/0x10 [ 452.734817][ T37] ? __kasan_check_read+0x15/0x20 [ 452.734855][ T37] ? __kthread_parkme+0x138/0x180 [ 452.734880][ T37] ? schedule+0xc6/0x240 [ 452.734916][ T37] kthread+0x2ca/0x370 [ 452.734941][ T37] ? __cfi_watchdog+0x10/0x10 [ 452.734975][ T37] ? __cfi_kthread+0x10/0x10 [ 452.735001][ T37] ret_from_fork+0x67/0xa0 [ 452.735036][ T37] ? __cfi_kthread+0x10/0x10 [ 452.735062][ T37] ret_from_fork_asm+0x1a/0x30 [ 452.735103][ T37] [ 452.735113][ T37] Sending NMI from CPU 1 to CPUs 0: [ 452.950195][ C0] NMI backtrace for cpu 0 [ 452.950212][ C0] CPU: 0 UID: 0 PID: 281 Comm: sshd-session Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 452.950236][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.950249][ C0] RIP: 0010:slab_update_freelist+0x70/0x110 [ 452.950288][ C0] Code: 4c 39 56 20 75 43 48 39 46 28 75 3d 4c 89 46 20 4c 89 4e 28 b2 01 eb 33 4c 89 c3 4c 89 c9 48 89 c2 4c 89 d0 f0 48 0f c7 4e 20 01 75 39 65 48 8b 0c 25 28 00 00 00 48 3b 4d f0 75 3f 48 83 c4 [ 452.950303][ C0] RSP: 0018:ffffc9000113fb60 EFLAGS: 00000242 [ 452.950320][ C0] RAX: ffff88816b24a500 RBX: ffff88816b24a280 RCX: 00000000000c0003 [ 452.950334][ C0] RDX: 00000000000c0004 RSI: ffffea0005ac9280 RDI: ffff888106648140 [ 452.950348][ C0] RBP: ffffc9000113fb78 R08: ffff88816b24a280 R09: 00000000000c0003 [ 452.950361][ C0] R10: ffff88816b24a500 R11: fffff52000227f5c R12: ffff88816b24a500 [ 452.950375][ C0] R13: 0000000000000003 R14: 00000000000c0004 R15: ffffea0005ac9280 [ 452.950387][ C0] FS: 00007f698419d300(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 452.950403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.950415][ C0] CR2: 000055b9b7332b90 CR3: 000000012b284000 CR4: 00000000003526b0 [ 452.950431][ C0] Call Trace: [ 452.950438][ C0] [ 452.950446][ C0] __slab_free+0x6f/0x2b0 [ 452.950467][ C0] ___cache_free+0xc9/0xe0 [ 452.950484][ C0] qlist_free_all+0xb5/0x130 [ 452.950501][ C0] kasan_quarantine_reduce+0x14f/0x180 [ 452.950519][ C0] __kasan_slab_alloc+0x28/0x90 [ 452.950539][ C0] kmem_cache_alloc_noprof+0x1cb/0x430 [ 452.950555][ C0] ? alloc_empty_file+0xbf/0x280 [ 452.950577][ C0] alloc_empty_file+0xbf/0x280 [ 452.950597][ C0] ? _raw_spin_unlock+0x45/0x60 [ 452.950627][ C0] alloc_file_pseudo+0x12a/0x1c0 [ 452.950648][ C0] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 452.950672][ C0] sock_alloc_file+0xbe/0x2b0 [ 452.950691][ C0] __sys_socket+0x14a/0x1c0 [ 452.950712][ C0] __x64_sys_socket+0x7e/0x90 [ 452.950732][ C0] x64_sys_call+0x2608/0x2ee0 [ 452.950758][ C0] do_syscall_64+0x58/0xf0 [ 452.950780][ C0] ? clear_bhb_loop+0x50/0xa0 [ 452.950799][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 452.950824][ C0] RIP: 0033:0x7f6983b22707 [ 452.950837][ C0] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 452.950852][ C0] RSP: 002b:00007ffd57bfb528 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 452.950869][ C0] RAX: ffffffffffffffda RBX: 0000000000000026 RCX: 00007f6983b22707 [ 452.950881][ C0] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 452.950892][ C0] RBP: 00007f6983bae560 R08: 00000000000001f4 R09: 0000000000000001 [ 452.950904][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 452.950952][ C0] R13: 00007ffd57bfb650 R14: 0000000000000033 R15: 00007ffd57bfb650 [ 452.950967][ C0]