last executing test programs: 3.65902805s ago: executing program 0 (id=520): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x20, 0xc, 0xea, {0xea, 0x3678de1cb7bd8a46, "ca4b98adc9be8de86f7fbbe32972c81fb16d2f3122d47ff2b410128034bc9c5a49843b2678be2920c5e7a256c1bd654f8dad42af753bbc57d1abfbb7ea0a8769d7117d0636bc42c8b94de1e07a4f6972aabee8b796b1bb00421d8c577aa932f73fa35b27fc82273a4c9b3fd02cc3d9b761c2b3d35e6254eebff8eb793608a0d7396d4d919f3490c4c04f7d847fdd013903c4ed8c6f96f1c4fbbf71db95efa3f90aeacf650f98ef27cc67a3d71a373eec0f248cea52f9e265a4df1c5eb1321e859f32bf50f697e588b7c2d55792824106a58130f75f0c121364239fac517313d4c736a89689689249"}}, &(0x7f0000000000)={0x0, 0x3, 0xa, @string={0xa, 0x3, "45b9ef901be67730"}}, &(0x7f0000000040)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x68, 0xe, "3bed2026", "34266504"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x3, 0x4, 0x3, 0xf8, 0x4, 0x80}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x40, 0x30, 0x5a, "300db4e7b191e0fb70575dcc4d7839b451f1761c5f757a0d7f9fc62e757f9360a0d178245f0eeb7374f0252bf8d58a75a62cde22dcfbe10922fd707a17738d945619c360ebd5fef57117d919727142606be94352c49cfed7fa62"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x162, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000000480)={0x40, 0xb, 0x2, "abbf"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xb26}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "b423"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xda}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.597384511s ago: executing program 3 (id=521): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x7, 0x5000, 0x1000, &(0x7f0000fec000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x5, 0x400000, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x200000000005, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x99e, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES8=r0], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="85e8fb00", @ANYRESHEX=r6, @ANYBLOB=',directio,\x00']) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d1}, 0x4021) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000280)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r11, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r10, &(0x7f0000000600)='m', 0x1, 0x1, 0x0, 0x2}]) 3.11327833s ago: executing program 0 (id=522): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) syz_clone(0x9000500, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)="d3e0606f1e0437d6d6936ce7696b787e391a2fa69cf876f3a5f1ec30ac692d611e5d1625426157a15bd7ec43b00344c735936e74574924b6d3d0906c510b3605efcbfa54ef95fa03b88805") openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) madvise(&(0x7f0000abf000/0x2000)=nil, 0x2000, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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"], 0x38}}, 0x400c040) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) lsm_set_self_attr(0x64, &(0x7f0000000000)={0x67, 0x3, 0x20}, 0x20, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000001100)="26650f01d1f20faef2ba200066edf367f3d9faf0838000000066b80c0000000f23c00f21f86635030006000f23f866b9d10200000f32f20f79cd64f16764360f38cc5606", 0x44}], 0x1, 0x5c, 0x0, 0x0) 3.077349991s ago: executing program 0 (id=523): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000000200)={[0x1a1e]}, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x460100, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000180)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x8000000}, 0x8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f0000000400)={[0x8]}) sendmmsg$sock(r2, &(0x7f00000072c0)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x6, r3, 0x34}, 0x80, 0x0, 0x0, &(0x7f0000002800)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x511, 0x8840) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x84}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000025a000/0x4000)=nil) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) mmap(&(0x7f00000ea000/0x1000)=nil, 0x1000, 0x0, 0xc030, r6, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6fd523b, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2c1fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x9]}}) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) 2.678594668s ago: executing program 3 (id=526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f0000000200)={0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r5) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = getuid() lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x80000001, 0x280, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000006380)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b76150800ab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b3dd1bc0e82ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x8, 0x9, 0x0, {0x0, 0x1, 0x0, 0x1, 0x8, 0x0, 0xffffffff, 0x0, 0x6, 0x8000, 0x0, r12, r13, 0x0, 0x2000004}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r15}}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001680)="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", 0x2000, &(0x7f0000000b40)={&(0x7f0000000000)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x8, 0x1, 0x1, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x10, 0x1}}, &(0x7f00000000c0)={0x18, 0x0, 0xfffffffffffff001, {0x6fe410f4}}, &(0x7f0000000100)={0x18, 0x0, 0x80000000, {0xffffffffffffff01}}, &(0x7f0000000140)={0x18, 0x0, 0xfffffffffffffffc, {0x2}}, &(0x7f0000000180)={0x18, 0x2f, 0x6f, {0x8}}, &(0x7f00000001c0)={0x28, 0x0, 0x400, {{0x3, 0x6, 0x2}}}, &(0x7f0000000240)={0x60, 0xffffffffffffffda, 0x85, {{0xc6a, 0x1, 0x40, 0x7, 0xfffffffffffffff8, 0x3, 0x1, 0x9}}}, &(0x7f00000002c0)={0x18, 0x0, 0x2, {0x6}}, &(0x7f0000000300)={0x1d, 0x0, 0x4, {'/dev/rnullb0\x00'}}, &(0x7f0000000340)={0x20, 0xffffffffffffffda, 0x6, {0x0, 0x18}}, &(0x7f0000000440)={0x78, 0x0, 0x2, {0x1, 0x2, 0x0, {0x4, 0x0, 0xffffffffffffffff, 0xa, 0x9, 0x4000000000, 0x9, 0xfff, 0x401, 0x1000, 0xb94, r2, r3, 0x2, 0x40}}}, &(0x7f0000000580)={0x90, 0x0, 0x0, {0x4, 0x1, 0x7fffffffffffffff, 0x8000, 0x5, 0x3, {0x0, 0x10000, 0x2, 0x4, 0x0, 0x10, 0x101, 0x9, 0xffffffff, 0x4000, 0x7fffffff, r5, r6, 0x1, 0xff}}}, &(0x7f0000000640)={0x88, 0xffffffffffffffda, 0x4, [{0x6, 0x8, 0xb, 0x5f, '/dev/loop#\x00'}, {0x3, 0x85d, 0xd, 0x5, '/dev/rnullb0\x00'}, {0x6, 0x600000000, 0xb, 0x9e31, '/dev/loop#\x00'}]}, &(0x7f00000007c0)={0xb8, 0x0, 0x5, [{{0x1, 0x0, 0x100000000, 0xa, 0x43, 0x3ff, {0x6, 0x0, 0x7, 0x7, 0x1, 0xffffffffb3d18cf5, 0xe2, 0xfffffff7, 0x1, 0x2000, 0x2, r7, r8, 0x6, 0xe05f7e6f}}, {0x3, 0xfffffffffffffffb, 0xd, 0x2b0, '/dev/rnullb0\x00'}}]}, &(0x7f0000000900)={0xa0, 0x0, 0xfffffffffffffff4, {{0x4, 0x3, 0x7, 0x9dae, 0x7, 0x0, {0x0, 0x0, 0x2d, 0x64, 0x8, 0xfffffffffffffff7, 0x8, 0x1a, 0x4, 0x8000, 0x9, r9, r13, 0x0, 0x5}}, {0x0, 0x10}}}, &(0x7f00000009c0)={0x20, 0x0, 0x80000001, {0x4, 0x0, 0x7f, 0x4}}, &(0x7f0000000a00)={0x130, 0xffffffffffffffb4, 0x5, {0x346, 0x0, 0x0, '\x00', {0x2000, 0x0, 0x7, 0x7, 0x0, r15, 0x1000, '\x00', 0xffffffffbbb95337, 0x15, 0x3, 0xc, {0x4, 0x1}, {0x9, 0x9}, {0x44276af6, 0x3}, {0x603a, 0x81}, 0x4, 0x3, 0x8}}}}) 2.261500027s ago: executing program 3 (id=533): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0xffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x2}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r5, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7fd00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r8, 0x6}) cachestat(r0, &(0x7f0000000000)={0x2a58, 0x4}, &(0x7f0000000040), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="f4d909495006390d255f53167ddb6555c4739652fe4932ba1f230d0cfd3e9be82a496b342f1a4f326781929939348198158d2121e93577b4b48ea61d9d3fdd0fdbd26a9e9be6459c214aba0e222032c7f3f0bb98523afc28bc6289df24080f81615bba6b036ea89488f375ffcb3a", 0x6e}, {&(0x7f00000003c0)="a047633e7b273e735e98bb23237b20f9d5ab7c11f43dec5ad87946e90e6ae4303179e704c826f1b79d9036491a86622e9cb98c443af01b16f5385aac0c284ef8ec9671b6d53bbeeb25fa5a1b", 0x4c}, {&(0x7f0000000440)="65659868a51194d945f1aa0dac049e977636c7323e8f795a6688a2c908a5a040a57495c587ac9d36ddd15f62204b894aa92b628410bca53294802a3c68eb4fe2a21b15bc1d44de3a374b9a959d43d049c8107e9c967b0c0844bf4b957dbca49f337b77210a6a3af79a57fc6aaf9ecc2831d95ee12e1b6bada3c756a43439a9497bd75a5d8e77648179e1e12924187e7b3f55d5743367e660a1a0c80568", 0x9d}], 0x3) 2.0974317s ago: executing program 1 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x80000001) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.925894013s ago: executing program 3 (id=536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.log\x00', 0x0, 0x130) read$FUSE(r3, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r6, r5, 0x547, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETLINK(r1, 0x400454ce, 0x321) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x200080) tee(r7, r4, 0x5, 0x8) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.822986825s ago: executing program 3 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x883}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) io_setup(0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x2, r4}) close(0x4) listen(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.773121826s ago: executing program 3 (id=540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) fcntl$getflags(r1, 0x408) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[]) (async) bind$bt_hci(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.495700702s ago: executing program 1 (id=542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x542, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@reply={0x40406301, {0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/58, 0x3a, 0x2, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.470667632s ago: executing program 1 (id=543): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x190) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a1", 0xf, 0x11, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'veth0_to_team\x00', @remote}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec0abe00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0x7a) socket$inet6(0xa, 0x3, 0x39) (async) r10 = socket$inet6(0xa, 0x3, 0x39) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0xc30, @local, 0x6}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0xc30, @local, 0x6}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r10, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 1.253546216s ago: executing program 1 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x3000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="672e670fc7baf5ceb9230200000f320fc5b0040000000f9a000000008b000f01cfc4e21d4501c74424ba00e40000660f38823d0e3000005224020f01c50000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66b8004066ef", 0x63}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x2000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfde, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.179818418s ago: executing program 1 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) utimes(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000100)="b805000000b9e5d800000f01d90f01c3660f38821ef36d0f20e035002000000f22e066b8cd008ec80f01dfb8010000000f01c10f14c00f01c9"}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) (async, rerun: 32) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.153409578s ago: executing program 1 (id=546): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x31c}, 0x8) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x0) (async) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000042c0)=[{{&(0x7f00000017c0)={0xa, 0x4e24, 0x6, @remote, 0x3}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000001800)="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", 0x595}], 0x1}}], 0x1, 0x4040041) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0xe0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0xe0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000440)=0x60, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) (async) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000001050500000000000000000a000000300002802c0001800000019fc1b4215beaceaafd5795be00"], 0x44}, 0x1, 0x0, 0x0, 0x40085}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_opts(r5, 0x0, 0x6, &(0x7f0000000280)=""/146, &(0x7f0000000380)=0x92) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x100200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100200, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000040)=0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@remote, @multicast1}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r9, @ANYBLOB="00012dbd7000fddbdf250b000000040006809000000100657468003400028008000400ff010000080002000300000808000200080000000800040001040000080004000000000008000400ff7f00003c000280080004000600000008000100030000000800020009000000080004000104000008000400090000000800020003000000080002008d0a0000140002800800040009000000080001001e000000000000", @ANYRESDEC=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r9, @ANYBLOB="00012dbd7000fddbdf250b000000040006809000000100657468003400028008000400ff010000080002000300000808000200080000000800040001040000080004000000000008000400ff7f00003c000280080004000600000008000100030000000800020009000000080004000104000008000400090000000800020003000000080002008d0a0000140002800800040009000000080001001e000000000000", @ANYRESDEC=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 789.029865ms ago: executing program 2 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x15) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x22c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4cfe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8354}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7e2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcf}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4010}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{@none}, {@fixed}, {@none}, {}, {}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 773.536785ms ago: executing program 2 (id=548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000640)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) finit_module(r4, &(0x7f0000000000)='&*^^&-:!(\x03!-[\xd3\x00', 0x1) 674.672857ms ago: executing program 2 (id=549): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x2007, &(0x7f0000000980)=0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008804) (async) r9 = eventfd2(0x6, 0x800) (async) io_getevents(r7, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r13, 0x0, 0x39000, 0x2) splice(r12, 0x0, r10, 0x0, 0x408c8, 0xe) (async, rerun: 32) write$binfmt_elf64(r11, &(0x7f0000000100)=ANY=[], 0xfffffe3e) (async, rerun: 32) io_submit(r7, 0x1, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x4, r5, 0x0, 0x0, 0x3, 0x0, 0x1, r9}]) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r14}, 0x10) connect$packet(r0, &(0x7f0000000140)={0x11, 0x10, r2, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 593.403249ms ago: executing program 2 (id=550): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x94f76000) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) ioctl$BLKRRPART(r0, 0x125f, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) setsockopt$inet6_int(r4, 0x29, 0x22, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 502.846851ms ago: executing program 2 (id=551): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$lock(r1, 0x24, &(0x7f0000000640)={0x1, 0x4, 0xa5, 0x2}) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) (async) mmap(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x1000002, 0x80010, r0, 0x2dc97000) 480.353171ms ago: executing program 2 (id=552): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e25, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 9.4438ms ago: executing program 0 (id=553): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000100)={0x7, 0x5, 0x6, 0x6, 0x3, 0x0, [{0xfd8e, 0x5, 0x80000001, '\x00', 0x2401}, {0x7fff, 0xfffffffffffffffc, 0x4}, {0x3ff, 0xfffffffffffffff7, 0xb53c, '\x00', 0x2981}]}) 9.11874ms ago: executing program 0 (id=554): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x1000, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mlockall(0x7) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) prctl$PR_SET_MM(0x23, 0x1, &(0x7f000024a000/0x3000)=nil) (async) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000200)=""/37, 0x25}], 0x1) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) setpgid(r5, 0x0) (async) rt_tgsigqueueinfo(r5, 0x0, 0x1d, &(0x7f0000000000)={0x1e, 0x9, 0x2}) 0s ago: executing program 0 (id=555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001880), 0xbaaec86cd8bcbb78, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB="726c6f675f70616765733d3138343436370000000000000080363832ca33322c00"]) close_range(r2, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f00000007c0)=0x1) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x4}, {0xe06, 0x8001}, 0x8000, 0x1}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r9, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000880)="877c98ab"}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 24.176896][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 24.176915][ T36] audit: type=1400 audit(1757291034.260:59): avc: denied { transition } for pid=273 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.181896][ T36] audit: type=1400 audit(1757291034.260:60): avc: denied { noatsecure } for pid=273 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.185131][ T36] audit: type=1400 audit(1757291034.260:61): avc: denied { write } for pid=273 comm="sh" path="pipe:[2441]" dev="pipefs" ino=2441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 24.188933][ T36] audit: type=1400 audit(1757291034.260:62): avc: denied { rlimitinh } for pid=273 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.192127][ T36] audit: type=1400 audit(1757291034.260:63): avc: denied { siginh } for pid=273 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 32.280341][ T36] audit: type=1400 audit(1757291042.360:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.281940][ T281] cgroup: Unknown subsys name 'net' [ 32.303286][ T36] audit: type=1400 audit(1757291042.360:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.330678][ T36] audit: type=1400 audit(1757291042.390:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.330985][ T281] cgroup: Unknown subsys name 'devices' [ 32.536731][ T281] cgroup: Unknown subsys name 'hugetlb' [ 32.542753][ T281] cgroup: Unknown subsys name 'rlimit' [ 32.640014][ T36] audit: type=1400 audit(1757291042.720:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.663275][ T36] audit: type=1400 audit(1757291042.720:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.688394][ T36] audit: type=1400 audit(1757291042.720:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.699911][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 32.720528][ T36] audit: type=1400 audit(1757291042.800:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.745999][ T36] audit: type=1400 audit(1757291042.800:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.779469][ T36] audit: type=1400 audit(1757291042.860:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.805205][ T36] audit: type=1400 audit(1757291042.860:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.805249][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.610265][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.624168][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.631531][ T288] bridge_slave_0: entered allmulticast mode [ 33.638215][ T288] bridge_slave_0: entered promiscuous mode [ 33.645254][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.652438][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.659611][ T288] bridge_slave_1: entered allmulticast mode [ 33.666355][ T288] bridge_slave_1: entered promiscuous mode [ 33.848431][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.855540][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.863152][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.870230][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.921248][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.928459][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.936370][ T292] bridge_slave_0: entered allmulticast mode [ 33.943683][ T292] bridge_slave_0: entered promiscuous mode [ 33.952294][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.959584][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.966826][ T292] bridge_slave_1: entered allmulticast mode [ 33.973094][ T292] bridge_slave_1: entered promiscuous mode [ 34.040452][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.047878][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.056831][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.063920][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.070998][ T293] bridge_slave_0: entered allmulticast mode [ 34.077904][ T293] bridge_slave_0: entered promiscuous mode [ 34.085984][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.093139][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.100272][ T293] bridge_slave_1: entered allmulticast mode [ 34.106866][ T293] bridge_slave_1: entered promiscuous mode [ 34.154354][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.161586][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.168736][ T294] bridge_slave_0: entered allmulticast mode [ 34.175188][ T294] bridge_slave_0: entered promiscuous mode [ 34.188870][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.196152][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.203242][ T294] bridge_slave_1: entered allmulticast mode [ 34.209771][ T294] bridge_slave_1: entered promiscuous mode [ 34.217166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.224266][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.248743][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.255839][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.403797][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.410948][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.427366][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.434608][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.444674][ T288] veth0_vlan: entered promiscuous mode [ 34.455397][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.462486][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.475760][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.482940][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.526057][ T288] veth1_macvtap: entered promiscuous mode [ 34.554264][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.561369][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.573642][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.580760][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.592518][ T293] veth0_vlan: entered promiscuous mode [ 34.599752][ T292] veth0_vlan: entered promiscuous mode [ 34.625425][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.628926][ T293] veth1_macvtap: entered promiscuous mode [ 34.654029][ T292] veth1_macvtap: entered promiscuous mode [ 34.692355][ T331] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 34.714891][ T294] veth0_vlan: entered promiscuous mode [ 34.724267][ T331] rust_binder: Error while translating object. [ 34.728440][ T331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.736974][ T331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 34.759666][ T294] veth1_macvtap: entered promiscuous mode [ 34.810296][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 34.852832][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.921955][ T355] rust_binder: 12: no such ref 3 [ 34.928654][ T355] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 34.941667][ T355] rust_binder: Write failure EINVAL in pid:12 [ 34.990148][ T359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.010307][ T359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.022709][ T359] rust_binder: 14: no such ref 65537 [ 35.082837][ T364] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 35.093953][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.121283][ T366] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 35.126489][ T369] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 35.135883][ T369] rust_binder: Write failure EINVAL in pid:17 [ 35.244301][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 35.256794][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.268862][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.278968][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.292165][ T46] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.302153][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.311706][ T46] usb 1-1: config 0 descriptor?? [ 35.635176][ T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.664021][ T389] syzkaller0: entered promiscuous mode [ 35.669578][ T389] syzkaller0: entered allmulticast mode [ 35.724094][ T46] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 35.731756][ T46] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 35.739052][ T46] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 35.746364][ T46] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 35.753598][ T46] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 35.761445][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.767405][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.773266][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.779255][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.785302][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.791246][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.797585][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.803445][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.809716][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 35.814891][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.820887][ T46] HID 045e:07da: Invalid code 65791 type 1 [ 35.827548][ T64] usb 4-1: config 247 has too many interfaces: 121, using maximum allowed: 32 [ 35.839154][ T46] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 35.846757][ T64] usb 4-1: config 247 has 1 interface, different from the descriptor's value: 121 [ 35.857191][ T46] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 35.868746][ T46] microsoft 0003:045E:07DA.0001: no inputs found [ 35.875684][ T46] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 35.885301][ T64] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 35.894675][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.902783][ T64] usb 4-1: Product: syz [ 35.908322][ T64] usb 4-1: Manufacturer: syz [ 35.913065][ T64] usb 4-1: SerialNumber: syz [ 35.929151][ T336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.937892][ T336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.948432][ T64] usb 1-1: USB disconnect, device number 2 [ 35.964088][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.114000][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 36.120365][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 36.128578][ T10] usb 3-1: config 0 has no interface number 0 [ 36.135022][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 36.145383][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.155775][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 36.164156][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 36.173509][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.182385][ T10] usb 3-1: Product: syz [ 36.186845][ T10] usb 3-1: Manufacturer: syz [ 36.191473][ T10] usb 3-1: SerialNumber: syz [ 36.197255][ T10] usb 3-1: config 0 descriptor?? [ 36.202618][ T389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.212340][ T389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.295652][ T9] usb 4-1: USB disconnect, device number 2 [ 36.420287][ T389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.427758][ T389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.483393][ T396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.788568][ T409] rust_binder: Error while translating object. [ 36.788626][ T409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.794980][ T409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 36.836445][ T10] Error reading MAC address [ 36.851039][ T389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.858984][ T389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.869282][ T413] ======================================================= [ 36.869282][ T413] WARNING: The mand mount option has been deprecated and [ 36.869282][ T413] and is ignored by this kernel. Remove the mand [ 36.869282][ T413] option from the mount to silence this warning. [ 36.869282][ T413] ======================================================= [ 37.203906][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.355068][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.365380][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.375407][ T64] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.384573][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.392615][ T64] usb 4-1: SerialNumber: syz [ 37.500175][ T10] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 56:77:4b:ac:f6:f9 [ 37.516237][ T10] usb 3-1: USB disconnect, device number 2 [ 37.522701][ T10] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 37.578070][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 37.578108][ T36] audit: type=1400 audit(1757291047.660:170): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 37.608859][ T64] usb 4-1: 0:2 : does not exist [ 37.613992][ T64] usb 4-1: unit 5: unexpected type 0x09 [ 37.622184][ T64] usb 4-1: USB disconnect, device number 3 [ 37.636707][ T417] udevd[417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.903953][ T393] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 38.034237][ T393] usb 1-1: device descriptor read/64, error -71 [ 38.141366][ T36] audit: type=1400 audit(1757291048.220:171): avc: denied { setopt } for pid=439 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.293947][ T393] usb 1-1: device descriptor read/64, error -71 [ 38.348297][ T46] rust_binder: 445: removing orphan mapping 0:4120 [ 38.363894][ T64] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 38.371472][ T36] audit: type=1400 audit(1757291048.450:172): avc: denied { append } for pid=448 comm="syz.3.38" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.404298][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.481021][ T36] audit: type=1400 audit(1757291048.560:173): avc: denied { ioctl } for pid=453 comm="syz.3.39" path="socket:[4494]" dev="sockfs" ino=4494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.505949][ T36] audit: type=1400 audit(1757291048.560:174): avc: denied { write } for pid=453 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.526770][ T64] usb 3-1: device descriptor read/64, error -71 [ 38.543959][ T393] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 38.565278][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 38.573413][ T10] usb 2-1: config 1 has no interface number 0 [ 38.579653][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 38.590362][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 38.600845][ T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 38.614463][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 38.627782][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.635906][ T10] usb 2-1: Product: syz [ 38.640105][ T10] usb 2-1: Manufacturer: syz [ 38.644839][ T10] usb 2-1: SerialNumber: syz [ 38.650702][ T442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 38.658264][ T442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 38.674668][ T393] usb 1-1: device descriptor read/64, error -71 [ 38.700380][ T36] audit: type=1400 audit(1757291048.780:175): avc: denied { execute } for pid=457 comm="syz.3.41" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.727282][ T36] audit: type=1400 audit(1757291048.810:176): avc: denied { create } for pid=457 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.746637][ T36] audit: type=1400 audit(1757291048.810:177): avc: denied { setopt } for pid=457 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.773488][ T36] audit: type=1400 audit(1757291048.850:178): avc: denied { read } for pid=459 comm="syz.3.42" dev="nsfs" ino=4026532502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.773920][ T64] usb 3-1: device descriptor read/64, error -71 [ 38.796744][ T36] audit: type=1400 audit(1757291048.850:179): avc: denied { open } for pid=459 comm="syz.3.42" path="net:[4026532502]" dev="nsfs" ino=4026532502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.802859][ T460] binder: Bad value for 'max' [ 38.848544][ T462] Zero length message leads to an empty skb [ 38.874366][ T464] /dev/nbd3: Can't lookup blockdev [ 38.963943][ T393] usb 1-1: device descriptor read/64, error -71 [ 39.000307][ T328] tipc: Subscription rejected, illegal request [ 39.058992][ T473] capability: warning: `syz.3.47' uses deprecated v2 capabilities in a way that may be insecure [ 39.069676][ T64] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 39.070798][ T473] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 39.087209][ T393] usb usb1-port1: attempt power cycle [ 39.203980][ T64] usb 3-1: device descriptor read/64, error -71 [ 39.219709][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.228327][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.238731][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.247328][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.423900][ T393] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 39.445248][ T393] usb 1-1: device descriptor read/8, error -71 [ 39.454083][ T64] usb 3-1: device descriptor read/64, error -71 [ 39.563996][ T64] usb usb3-port1: attempt power cycle [ 39.585055][ T393] usb 1-1: device descriptor read/8, error -71 [ 39.823970][ T393] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 39.845045][ T393] usb 1-1: device descriptor read/8, error -71 [ 39.903925][ T64] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 39.925084][ T64] usb 3-1: device descriptor read/8, error -71 [ 39.975026][ T393] usb 1-1: device descriptor read/8, error -71 [ 40.055178][ T64] usb 3-1: device descriptor read/8, error -71 [ 40.084000][ T393] usb usb1-port1: unable to enumerate USB device [ 40.293940][ T64] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 40.314954][ T64] usb 3-1: device descriptor read/8, error -71 [ 40.444986][ T64] usb 3-1: device descriptor read/8, error -71 [ 40.554130][ T64] usb usb3-port1: unable to enumerate USB device [ 40.711255][ T393] rust_binder: 482: removing orphan mapping 0:24 [ 40.852658][ T497] binder: Binderfs stats mode cannot be changed during a remount [ 40.997452][ T516] rust_binder: 95: no such ref 0 [ 41.002950][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 41.155022][ T524] 9pnet_fd: Insufficient options for proto=fd [ 41.178080][ T10] usb 2-1: USB disconnect, device number 2 [ 41.241761][ T537] tmpfs: Unknown parameter ' [ 41.241761][ T537] ' [ 41.279332][ T545] rust_binder: 27: no such ref 0 [ 41.284575][ T545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 41.286712][ T546] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 41.303090][ T546] rust_binder: 27: no such ref 0 [ 41.322869][ T548] rust_binder: 30: no such ref 2 [ 41.327979][ T548] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 41.377062][ T554] 9pnet_fd: Insufficient options for proto=fd [ 41.450720][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.457214][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.505625][ T565] 9p: Unknown access argument Ór÷ÿv½áé:%H^‘®l0` 5² ¯métNÄׂ§‡L1ÇZhLuû¢“Óp}#ó¤^(Vûü|RQ¡£Z¾«, priority 0 [ 46.408263][ T751] rust_binder: 68: no such ref 2 [ 46.413301][ T751] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 46.421047][ T751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 46.421748][ T751] rust_binder: 751 RLIMIT_NICE not set [ 46.430667][ T747] syzkaller0: entered promiscuous mode [ 46.442242][ T747] syzkaller0: entered allmulticast mode [ 46.448326][ T747] tipc: Resetting bearer [ 46.449589][ T64] rust_binder: 750: removing orphan mapping 0:1168 [ 46.462690][ T747] tipc: Resetting bearer [ 46.477633][ T747] tipc: Disabling bearer [ 46.541886][ T758] rust_binder: 72: no such ref 2 [ 46.547067][ T758] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 46.563223][ T760] rust_binder: Write failure EFAULT in pid:75 [ 46.582221][ T764] usb usb8: usbfs: process 764 (syz.0.140) did not claim interface 0 before use [ 46.634531][ T767] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 46.634558][ T767] rust_binder: Error while translating object. [ 46.643324][ T767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.649894][ T767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 46.730237][ T777] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.083987][ T391] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 47.123985][ T329] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.145340][ T329] usb 1-1: config index 0 descriptor too short (expected 57768, got 45) [ 47.154101][ T329] usb 1-1: config 196 has too many interfaces: 83, using maximum allowed: 32 [ 47.162966][ T329] usb 1-1: config 196 has an invalid descriptor of length 209, skipping remainder of the config [ 47.173598][ T329] usb 1-1: config 196 has 0 interfaces, different from the descriptor's value: 83 [ 47.182951][ T329] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 47.192078][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.235345][ T391] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 47.243914][ T391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 47.254971][ T391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 47.266310][ T391] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 47.266578][ T10] usb 4-1: Cannot set autoneg [ 47.275804][ T391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.280395][ T10] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 47.288504][ T391] usb 2-1: Product: syz [ 47.304307][ T10] usb 4-1: USB disconnect, device number 6 [ 47.313895][ T561] Bluetooth: hci0: command 0x1003 tx timeout [ 47.322349][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.331112][ T391] usb 2-1: Manufacturer: syz [ 47.335821][ T391] usb 2-1: SerialNumber: syz [ 47.348918][ T391] usb 2-1: config 0 descriptor?? [ 47.360363][ T795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 47.375996][ T795] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 47.406703][ T798] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 47.414164][ T798] rust_binder: Write failure EINVAL in pid:95 [ 47.419616][ T329] usb 1-1: string descriptor 0 read error: -71 [ 47.456531][ T329] usb 1-1: USB disconnect, device number 12 [ 47.502579][ T810] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 47.584420][ T391] usb 2-1: USB disconnect, device number 4 [ 47.703906][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.763945][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.863888][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 47.870495][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.878848][ T9] usb 3-1: config 0 has no interface number 0 [ 47.886843][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.896092][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.904203][ T9] usb 3-1: Product: syz [ 47.908400][ T9] usb 3-1: Manufacturer: syz [ 47.913024][ T9] usb 3-1: SerialNumber: syz [ 47.918673][ T9] usb 3-1: config 0 descriptor?? [ 47.923916][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 47.929563][ T9] smsc95xx v2.0.0 [ 47.934420][ T10] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.947292][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 47.956196][ T814] rust_binder: Write failure EFAULT in pid:190 [ 47.957376][ T10] usb 4-1: string descriptor 0 read error: -71 [ 47.969934][ T10] usb 4-1: New USB device found, idVendor=0fb8, idProduct=1109, bcdDevice= 0.40 [ 47.979110][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.991176][ T10] usb 4-1: can't set config #1, error -71 [ 47.997881][ T10] usb 4-1: USB disconnect, device number 7 [ 48.335697][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 48.347945][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 48.357542][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 48.370320][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 48.381086][ T9] usb 3-1: USB disconnect, device number 7 [ 48.386999][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 48.393221][ T36] audit: type=1400 audit(1757291058.469:263): avc: denied { load_policy } for pid=846 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.421096][ T847] SELinux: failed to load policy [ 48.550848][ T36] audit: type=1400 audit(1757291058.629:264): avc: denied { map } for pid=856 comm="syz.3.169" path="socket:[8025]" dev="sockfs" ino=8025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.593697][ T36] audit: type=1400 audit(1757291058.669:265): avc: denied { create } for pid=849 comm="syz.2.167" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.614518][ T36] audit: type=1400 audit(1757291058.669:266): avc: denied { write } for pid=849 comm="syz.2.167" name="file2" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.637220][ T36] audit: type=1400 audit(1757291058.669:267): avc: denied { open } for pid=849 comm="syz.2.167" path="/32/file2" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.660068][ T36] audit: type=1400 audit(1757291058.669:268): avc: denied { ioctl } for pid=849 comm="syz.2.167" path="/32/file2" dev="tmpfs" ino=201 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.669450][ T864] SELinux: security_context_str_to_sid () failed with errno=-22 [ 48.692763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 48.705288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.717825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.730361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 48.742452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.754591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.767210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 48.779307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.791554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 48.803732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 48.823913][ T46] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 48.963595][ T36] audit: type=1400 audit(1757291059.039:269): avc: denied { create } for pid=865 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.998796][ T36] audit: type=1400 audit(1757291059.079:270): avc: denied { setopt } for pid=865 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.019547][ T46] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 49.028092][ T46] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 49.037402][ T46] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 49.049331][ T46] usb 3-1: config 220 has no interface number 2 [ 49.055967][ T46] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 49.069489][ T46] usb 3-1: config 220 interface 0 has no altsetting 0 [ 49.076549][ T46] usb 3-1: config 220 interface 76 has no altsetting 0 [ 49.083631][ T46] usb 3-1: config 220 interface 1 has no altsetting 0 [ 49.100452][ T46] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 49.113037][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.128052][ T46] usb 3-1: Product: syz [ 49.136177][ T46] usb 3-1: Manufacturer: syz [ 49.145296][ T46] usb 3-1: SerialNumber: syz [ 49.221080][ T871] rust_binder: Write failure EFAULT in pid:105 [ 49.375796][ T36] audit: type=1400 audit(1757291059.459:271): avc: denied { write } for pid=875 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.485427][ T36] audit: type=1400 audit(1757291059.569:272): avc: denied { bind } for pid=877 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.620355][ T46] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 49.628822][ T46] usb 3-1: No valid video chain found. [ 49.640459][ T46] usb 3-1: selecting invalid altsetting 0 [ 49.674418][ T46] usb 3-1: USB disconnect, device number 8 [ 49.938372][ T902] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:true [ 49.938402][ T902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 49.948405][ T902] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender. [ 49.959640][ T902] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:119 [ 49.981615][ T387] rust_binder: 901: removing orphan mapping 0:24 [ 50.023910][ T391] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 50.036325][ T907] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 50.036366][ T907] rust_binder: Error in use_page_slow: EBUSY [ 50.047192][ T907] rust_binder: use_range failure EBUSY [ 50.053228][ T907] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 50.059704][ T907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 50.068019][ T907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:122 [ 50.174978][ T391] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 50.215211][ T917] bpf: Bad value for 'mode' [ 50.231297][ T391] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 50.243404][ T391] usb 1-1: config 0 has no interface number 0 [ 50.249652][ T391] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 50.260421][ T391] usb 1-1: config 0 interface 200 has no altsetting 0 [ 50.262485][ T391] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 50.262517][ T391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.262539][ T391] usb 1-1: Product: syz [ 50.262553][ T391] usb 1-1: Manufacturer: syz [ 50.262568][ T391] usb 1-1: SerialNumber: syz [ 50.302411][ T919] rust_binder: 213: no such ref 2 [ 50.308438][ T919] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 50.327229][ T391] usb 1-1: config 0 descriptor?? [ 50.659285][ T391] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input8 [ 50.696073][ T391] usb 1-1: USB disconnect, device number 13 [ 50.762542][ T933] netlink: 'syz.1.192': attribute type 4 has an invalid length. [ 50.770632][ T933] netlink: 'syz.1.192': attribute type 21 has an invalid length. [ 50.786352][ T933] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.192'. [ 50.822819][ T935] rust_binder: validate_parent_fixup: new_min_offset=562949953421330, sg_entry.length=238 [ 50.822848][ T935] rust_binder: Error while translating object. [ 50.833547][ T935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.840768][ T935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 51.252886][ T951] rust_binder: Error while translating object. [ 51.262679][ T951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 51.270081][ T951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:143 [ 51.281908][ T951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.719986][ T974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.737009][ T974] netlink: 'syz.2.206': attribute type 33 has an invalid length. [ 51.745214][ T974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 51.763362][ T974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 51.763438][ T974] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.773377][ T974] rust_binder: Read failure Err(EFAULT) in pid:129 [ 52.003294][ T391] rust_binder: 976: removing orphan mapping 0:4120 [ 52.118958][ T990] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 52.118999][ T990] rust_binder: Error in use_page_slow: EBUSY [ 52.146306][ T990] rust_binder: use_range failure EBUSY [ 52.158180][ T990] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 52.163811][ T990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 52.192295][ T990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:225 [ 52.354481][ T992] netlink: 1323 bytes leftover after parsing attributes in process `syz.0.212'. [ 52.644266][ T387] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.823892][ T387] usb 1-1: Using ep0 maxpacket: 16 [ 52.840438][ T387] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.862141][ T387] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.922080][ T387] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.955092][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.993928][ T387] usb 1-1: Product: syz [ 52.998542][ T1006] binder: Unknown parameter 'fscontext?}' [ 53.006420][ T387] usb 1-1: Manufacturer: syz [ 53.019902][ T387] usb 1-1: SerialNumber: syz [ 53.031641][ T1006] batadv_slave_1: entered promiscuous mode [ 53.053533][ T1005] batadv_slave_1: left promiscuous mode [ 53.254359][ T387] usb 1-1: 0:2 : does not exist [ 53.278336][ T387] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 53.312075][ T387] usb 1-1: USB disconnect, device number 14 [ 53.340176][ T417] udevd[417]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.693912][ C0] net_ratelimit: 42759 callbacks suppressed [ 53.693940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.712529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 53.719922][ T1014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.724664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 53.734127][ T1014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 53.746658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.768129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.780586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 53.792758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 53.805181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.817330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.829725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 53.910530][ T1020] __vm_enough_memory: pid: 1020, comm: syz.3.222, bytes: 18014402804453376 not enough memory for the allocation [ 54.129408][ T1026] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 54.801708][ T1034] rust_binder: Write failure EFAULT in pid:138 [ 55.073910][ T391] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 55.266942][ T391] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 55.283939][ T391] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 55.303879][ T391] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 55.326247][ T391] usb 1-1: string descriptor 0 read error: -22 [ 55.332529][ T391] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.353870][ T391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.373683][ T1034] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 55.596706][ T1034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.614350][ T1034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.633704][ T1034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138 [ 55.635805][ T391] cdc_ncm 1-1:1.0: bind() failure [ 55.668864][ T391] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 55.684103][ T391] cdc_ncm 1-1:1.1: bind() failure [ 55.699581][ T391] usb 1-1: USB disconnect, device number 15 [ 55.992689][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 55.992709][ T36] audit: type=1400 audit(1757291066.069:296): avc: denied { read } for pid=1038 comm="syz.2.227" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.110840][ T36] audit: type=1400 audit(1757291066.069:297): avc: denied { open } for pid=1038 comm="syz.2.227" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.381824][ T1055] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 56.395228][ T1051] rust_binder: Error while translating object. [ 56.395272][ T1051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.423915][ T1051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 56.445719][ T1057] rust_binder: Write failure EFAULT in pid:143 [ 56.561706][ T36] audit: type=1400 audit(1757291066.639:298): avc: denied { connect } for pid=1060 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.623213][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.629682][ T1064] syzkaller0: entered promiscuous mode [ 56.645211][ T1065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 56.652189][ T1064] syzkaller0: entered allmulticast mode [ 56.666302][ T36] audit: type=1400 audit(1757291066.669:299): avc: denied { write } for pid=1060 comm="syz.3.234" laddr=172.20.20.170 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.691059][ T1062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.691096][ T1062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 56.789512][ T1081] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 56.810428][ T1081] rust_binder: Write failure EINVAL in pid:173 [ 56.834379][ T1087] rust_binder: Write failure EINVAL in pid:254 [ 56.851208][ T1091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.952313][ T36] audit: type=1400 audit(1757291066.769:300): avc: denied { read write } for pid=1060 comm="syz.3.234" path="socket:[9362]" dev="sockfs" ino=9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.023708][ T1103] EXT4-fs: Conflicting test_dummy_encryption options [ 57.111646][ T36] audit: type=1400 audit(1757291067.189:301): avc: denied { execute_no_trans } for pid=1110 comm="syz.1.248" path="/61/file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.138571][ T1111] rust_binder: 190: no such ref 3 [ 57.156141][ T1111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 57.203493][ T1119] mmap: syz.1.251 (1119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.224907][ T36] audit: type=1400 audit(1757291067.239:302): avc: denied { connect } for pid=1113 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.305630][ T1125] netlink: 'syz.1.252': attribute type 4 has an invalid length. [ 57.354635][ T1128] rust_binder: Error while translating object. [ 57.354719][ T1128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.361143][ T1128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 57.503910][ T391] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 57.663900][ T391] usb 3-1: Using ep0 maxpacket: 32 [ 57.670946][ T391] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 57.678923][ T391] usb 3-1: can't read configurations, error -61 [ 57.813886][ T391] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.934638][ T1133] capability: warning: `syz.1.255' uses 32-bit capabilities (legacy support in use) [ 57.963892][ T391] usb 3-1: Using ep0 maxpacket: 32 [ 58.005939][ T391] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 58.029996][ T391] usb 3-1: can't read configurations, error -61 [ 58.037050][ T391] usb usb3-port1: attempt power cycle [ 58.065826][ T1139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 58.091595][ T1143] >: renamed from veth0_vlan (while UP) [ 58.117235][ T36] audit: type=1400 audit(1757291068.199:303): avc: denied { name_bind } for pid=1138 comm="syz.1.257" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 58.139154][ T1139] rust_binder: Write failure EFAULT in pid:200 [ 58.212318][ T1148] netlink: 96 bytes leftover after parsing attributes in process `syz.0.259'. [ 58.229305][ T1149] 2N: renamed from vcan0 (while UP) [ 58.281132][ T36] audit: type=1400 audit(1757291068.359:304): avc: denied { remount } for pid=1146 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.303189][ T1152] option changes via remount are deprecated (pid=1146 comm=syz.0.259) [ 58.320396][ T387] rust_binder: 1146: removing orphan mapping 0:4232 [ 58.328099][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 58.361768][ T36] audit: type=1400 audit(1757291068.439:305): avc: denied { write } for pid=1153 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.386181][ T391] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.432318][ T391] usb 3-1: Using ep0 maxpacket: 32 [ 58.439230][ T391] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 58.448342][ T391] usb 3-1: can't read configurations, error -61 [ 58.467971][ T1162] rust_binder: 165: no such ref 3 [ 58.483890][ T46] usb 4-1: device descriptor read/64, error -71 [ 58.583938][ T391] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.614223][ T391] usb 3-1: Using ep0 maxpacket: 32 [ 58.626540][ T391] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 58.635537][ T1174] binder: Binderfs stats mode cannot be changed during a remount [ 58.643755][ T391] usb 3-1: can't read configurations, error -61 [ 58.650755][ T391] usb usb3-port1: unable to enumerate USB device [ 58.703955][ C0] net_ratelimit: 38340 callbacks suppressed [ 58.703978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 58.722571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.734961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.743892][ T46] usb 4-1: device descriptor read/64, error -71 [ 58.747308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.765444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 58.777775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.789927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.802437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.814890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 58.827188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.966976][ T1178] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 58.984573][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 59.133932][ T46] usb 4-1: device descriptor read/64, error -71 [ 59.253644][ T64] rust_binder: 0: removing orphan mapping 0:96 [ 59.393901][ T46] usb 4-1: device descriptor read/64, error -71 [ 59.507517][ T46] usb usb4-port1: attempt power cycle [ 59.525599][ T1192] raw_sendmsg: syz.1.274 forgot to set AF_INET. Fix it! [ 59.753904][ T64] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 59.853883][ T46] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 59.877108][ T46] usb 4-1: device descriptor read/8, error -71 [ 59.916803][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 59.927980][ T64] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 59.937388][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.950058][ T64] usb 1-1: config 0 descriptor?? [ 59.956883][ T1190] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.016988][ T46] usb 4-1: device descriptor read/8, error -71 [ 60.263974][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 60.318751][ T46] usb 4-1: device descriptor read/8, error -71 [ 60.422569][ T1198] tipc: Started in network mode [ 60.427763][ T1198] tipc: Node identity 0e12bd42496b, cluster identity 4711 [ 60.435811][ T1198] tipc: Enabled bearer , priority 0 [ 60.456119][ T46] usb 4-1: device descriptor read/8, error -71 [ 60.496543][ T1198] syzkaller0: entered promiscuous mode [ 60.503382][ T1195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.513519][ T1198] syzkaller0: entered allmulticast mode [ 60.517695][ T1195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.521433][ T1198] tipc: Resetting bearer [ 60.538395][ T1199] tipc: Resetting bearer [ 60.588397][ T46] usb usb4-port1: unable to enumerate USB device [ 60.602324][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 60.610869][ T1199] tipc: Disabling bearer [ 60.617375][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.631801][ T64] usb 1-1: USB disconnect, device number 16 [ 61.285391][ T1233] overlay: Bad value for 'redirect_dir' [ 61.449684][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 61.449704][ T36] audit: type=1400 audit(1757291071.529:311): avc: denied { getopt } for pid=1241 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.503547][ T1245] rust_binder: Write failure EFAULT in pid:177 [ 61.546757][ T1247] binder: Bad value for 'max' [ 61.763918][ T1264] netlink: 80 bytes leftover after parsing attributes in process `syz.0.296'. [ 62.033953][ T36] audit: type=1400 audit(1757291072.109:312): avc: denied { ioctl } for pid=1276 comm="syz.2.300" path="socket:[10675]" dev="sockfs" ino=10675 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.067379][ T46] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 62.223871][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 62.235677][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.256986][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.274141][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.297293][ T46] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 62.311364][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.324562][ T46] usb 1-1: config 0 descriptor?? [ 62.421994][ T1286] rust_binder: Error while translating object. [ 62.422045][ T1286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 62.428456][ T387] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 62.445775][ T1286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:266 [ 62.583875][ T387] usb 3-1: device descriptor read/64, error -71 [ 62.644930][ T1296] rust_binder: Error while translating object. [ 62.645003][ T1296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 62.651592][ T1296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:276 [ 62.809690][ T1302] overlayfs: empty lowerdir [ 62.827498][ T36] audit: type=1400 audit(1757291072.909:313): avc: denied { sqpoll } for pid=1301 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.866966][ T387] usb 3-1: device descriptor read/64, error -71 [ 62.938394][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 62.947731][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 62.959210][ T46] usb 1-1: USB disconnect, device number 17 [ 63.113898][ T387] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 63.244033][ T387] usb 3-1: device descriptor read/64, error -71 [ 63.323897][ T64] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 63.487135][ T387] usb 3-1: device descriptor read/64, error -71 [ 63.493881][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 63.500378][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.510828][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.523544][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.533480][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.541727][ T64] usb 2-1: Product: syz [ 63.550189][ T64] usb 2-1: Manufacturer: syz [ 63.556699][ T64] usb 2-1: SerialNumber: syz [ 63.593999][ T387] usb usb3-port1: attempt power cycle [ 63.713890][ C0] net_ratelimit: 45100 callbacks suppressed [ 63.713907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.732676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.745160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 63.758043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.769176][ T36] audit: type=1400 audit(1757291073.839:314): avc: denied { bind } for pid=1308 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.770519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.802535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.814652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 63.820741][ T1321] FAT-fs (rnullb0): bogus number of reserved sectors [ 63.827063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.833617][ T1321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 63.845535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.855881][ T1321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.864729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.873490][ T1321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.910598][ T64] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 63.928617][ T64] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.959063][ T387] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 63.971118][ T417] udevd[417]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.987089][ T64] usb 2-1: USB disconnect, device number 6 [ 63.995653][ T387] usb 3-1: device descriptor read/8, error -71 [ 64.124978][ T387] usb 3-1: device descriptor read/8, error -71 [ 64.253759][ T36] audit: type=1400 audit(1757291074.329:315): avc: denied { accept } for pid=1330 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.363883][ T387] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 64.404904][ T387] usb 3-1: device descriptor read/8, error -71 [ 64.426966][ T36] audit: type=1400 audit(1757291074.509:316): avc: denied { mount } for pid=1335 comm="syz.3.320" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.449580][ T1339] devpts: called with bogus options [ 64.478067][ T36] audit: type=1400 audit(1757291074.529:317): avc: denied { remount } for pid=1335 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.536990][ T387] usb 3-1: device descriptor read/8, error -71 [ 64.643980][ T387] usb usb3-port1: unable to enumerate USB device [ 64.812439][ T36] audit: type=1400 audit(1757291074.889:318): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.885811][ T36] audit: type=1400 audit(1757291074.969:319): avc: denied { nlmsg_read } for pid=1341 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.964263][ T1342] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 65.088615][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.110495][ T64] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.204405][ T1349] fido_id[1349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.324361][ T36] audit: type=1326 audit(1757291075.409:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa45058ebe9 code=0x0 [ 65.391772][ T1362] rust_binder: 307: no such ref 0 [ 65.408138][ T1362] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 65.425671][ T1362] rust_binder: 307: no such ref 0 [ 65.687069][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 65.962122][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 65.984353][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.016343][ T9] usb 4-1: config 0 descriptor?? [ 66.314076][ T64] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 66.496282][ T64] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 66.523898][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.543964][ T64] usb 2-1: Product: syz [ 66.548189][ T64] usb 2-1: Manufacturer: syz [ 66.583116][ T64] usb 2-1: SerialNumber: syz [ 66.608282][ T64] usb 2-1: config 0 descriptor?? [ 66.730791][ T9] usb 4-1: Cannot set MAC address [ 66.739833][ T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 66.781741][ T9] usb 4-1: USB disconnect, device number 12 [ 66.887899][ T64] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 66.924201][ T64] asix 2-1:0.0: probe with driver asix failed with error -71 [ 66.957581][ T1383] binder: Unknown parameter 'fscontext?}' [ 66.963430][ T36] audit: type=1400 audit(1757291077.039:321): avc: denied { write } for pid=1382 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.993367][ T64] usb 2-1: USB disconnect, device number 7 [ 67.464757][ T36] audit: type=1400 audit(1757291077.549:322): avc: denied { setattr } for pid=1396 comm="syz.0.339" path="socket:[11416]" dev="sockfs" ino=11416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.495918][ T64] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 67.673869][ T64] usb 2-1: device descriptor read/64, error -71 [ 67.843894][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 67.933910][ T64] usb 2-1: device descriptor read/64, error -71 [ 67.994933][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.013891][ T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.037484][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.073945][ T46] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 68.094753][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.102803][ T46] usb 4-1: Product: syz [ 68.123856][ T46] usb 4-1: Manufacturer: syz [ 68.133854][ T46] usb 4-1: SerialNumber: syz [ 68.153979][ T46] usb 4-1: config 0 descriptor?? [ 68.203886][ T64] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 68.363867][ T64] usb 2-1: device descriptor read/64, error -71 [ 68.378854][ T36] audit: type=1400 audit(1757291078.459:323): avc: denied { wake_alarm } for pid=1395 comm="syz.3.338" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.437142][ T1402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 68.464564][ T1398] pim6reg1: entered promiscuous mode [ 68.474091][ T1398] pim6reg1: entered allmulticast mode [ 68.613882][ T64] usb 2-1: device descriptor read/64, error -71 [ 68.723865][ C0] net_ratelimit: 38386 callbacks suppressed [ 68.723893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.734770][ T64] usb usb2-port1: attempt power cycle [ 68.743095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 68.760124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.772289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.784479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.796647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.809565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.821991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 68.834479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.847119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 68.992930][ T36] audit: type=1400 audit(1757291079.069:324): avc: denied { create } for pid=1406 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.113914][ T64] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 69.165092][ T64] usb 2-1: device descriptor read/8, error -71 [ 69.305200][ T64] usb 2-1: device descriptor read/8, error -71 [ 69.545644][ T1426] can0: slcan on ttyS3. [ 69.549987][ T64] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 69.566481][ T36] audit: type=1400 audit(1757291079.649:325): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.631626][ T64] usb 2-1: device descriptor read/8, error -71 [ 69.663185][ T36] audit: type=1400 audit(1757291079.649:326): avc: denied { read } for pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=2244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.735423][ T1426] can0 (unregistered): slcan off ttyS3. [ 69.755185][ T36] audit: type=1400 audit(1757291079.649:327): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.811146][ T64] usb 2-1: device descriptor read/8, error -71 [ 69.843710][ T36] audit: type=1400 audit(1757291079.649:328): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.893254][ T36] audit: type=1400 audit(1757291079.789:329): avc: denied { read } for pid=1437 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.932508][ T64] usb usb2-port1: unable to enumerate USB device [ 69.996954][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.013937][ T36] audit: type=1400 audit(1757291079.789:330): avc: denied { open } for pid=1437 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.039942][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.220390][ T1468] netlink: 'syz.3.353': attribute type 11 has an invalid length. [ 70.391537][ T1480] process 'syz.1.357' launched './file0' with NULL argv: empty string added [ 70.705852][ T1496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.715613][ T1496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.893887][ T387] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 71.053864][ T387] usb 3-1: Using ep0 maxpacket: 16 [ 71.060748][ T387] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 71.071666][ T387] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 71.081704][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.090127][ T387] usb 3-1: Product: syz [ 71.094705][ T387] usb 3-1: Manufacturer: syz [ 71.099430][ T387] usb 3-1: SerialNumber: syz [ 71.110736][ T387] usb 3-1: config 0 descriptor?? [ 71.119060][ T387] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 71.128655][ T387] usb 3-1: Detected FT232B [ 71.320771][ T387] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 71.330640][ T387] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 71.344204][ T387] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 71.367434][ T387] usb 3-1: USB disconnect, device number 18 [ 71.395743][ T387] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.407109][ T1504] 9pnet_virtio: no channels available for device [ 71.433308][ T387] ftdi_sio 3-1:0.0: device disconnected [ 71.577468][ T1506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 71.975330][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 71.975376][ T36] audit: type=1400 audit(1757291082.059:343): avc: denied { read } for pid=1514 comm="syz.2.369" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.009422][ T36] audit: type=1400 audit(1757291082.089:344): avc: denied { open } for pid=1514 comm="syz.2.369" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.034380][ T36] audit: type=1400 audit(1757291082.089:345): avc: denied { ioctl } for pid=1514 comm="syz.2.369" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.064520][ T1516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 72.066845][ T1516] rust_binder: Read failure Err(EAGAIN) in pid:218 [ 72.156453][ T1522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 72.285161][ T36] audit: type=1400 audit(1757291082.363:346): avc: denied { mount } for pid=1529 comm="syz.2.375" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.320821][ T1532] netlink: 'syz.3.376': attribute type 4 has an invalid length. [ 72.641716][ T1549] bridge0: port 4(veth1_macvtap) entered blocking state [ 72.648977][ T1549] bridge0: port 4(veth1_macvtap) entered disabled state [ 72.657930][ T1549] veth1_macvtap: entered allmulticast mode [ 72.671696][ T1549] veth1_macvtap: left allmulticast mode [ 72.679830][ T36] audit: type=1400 audit(1757291082.753:347): avc: denied { write } for pid=387 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13277 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.739032][ T1549] tc_dump_action: action bad kind [ 72.745728][ T1549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 72.860868][ T36] audit: type=1400 audit(1757291082.933:348): avc: denied { accept } for pid=1556 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.905833][ T36] audit: type=1400 audit(1757291082.983:349): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.983869][ T1567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:250 [ 73.036014][ T1569] syzkaller0: entered promiscuous mode [ 73.064569][ T1569] syzkaller0: entered allmulticast mode [ 73.140330][ T1579] FAT-fs (rnullb0): bogus number of reserved sectors [ 73.150126][ T1579] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 73.180529][ T36] audit: type=1400 audit(1757291083.253:350): avc: denied { setopt } for pid=1580 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.283115][ T1587] tipc: Started in network mode [ 73.288333][ T1587] tipc: Node identity 9e719e950363, cluster identity 4711 [ 73.296104][ T1587] tipc: Enabled bearer , priority 0 [ 73.422055][ T1591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 73.635506][ T1603] rust_binder: Error while translating object. [ 73.635558][ T1603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.646329][ T1603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 73.676353][ T1603] netlink: 'syz.1.398': attribute type 11 has an invalid length. [ 73.703895][ T36] audit: type=1400 audit(1757291083.753:351): avc: denied { create } for pid=1599 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.733840][ C0] net_ratelimit: 42371 callbacks suppressed [ 73.733865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.752142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.764355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.776495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 73.789091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.801569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 73.813772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.826040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.838231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.850363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.141396][ T1626] 9p: Unknown access argument 00000000000000000000: -22 [ 74.293881][ T387] tipc: Node number set to 2635243157 [ 74.311112][ T1634] No source specified [ 74.316626][ T1633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.408'. [ 74.456554][ T1641] tipc: New replicast peer: 0.0.0.0 [ 74.464014][ T1641] tipc: Enabled bearer , priority 10 [ 74.576240][ T1643] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 74.662295][ T1646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.679998][ T1646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.730720][ T1650] rust_binder: Write failure EFAULT in pid:408 [ 74.825068][ T1660] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 75.316064][ T36] audit: type=1400 audit(1757291085.393:352): avc: denied { ioctl } for pid=1672 comm="syz.3.420" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 75.463977][ T387] tipc: Node number set to 1199160642 [ 75.506022][ T1684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.515898][ T1684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.616887][ T1685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.625624][ T64] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 75.635001][ T1685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.785107][ T64] usb 2-1: config 252 has an invalid interface number: 4 but max is 1 [ 75.794307][ T64] usb 2-1: config 252 has an invalid interface number: 154 but max is 1 [ 75.824092][ T64] usb 2-1: config 252 has no interface number 0 [ 75.834026][ T64] usb 2-1: config 252 has no interface number 1 [ 75.842729][ T64] usb 2-1: config 252 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 75.854360][ T64] usb 2-1: config 252 interface 4 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 75.866583][ T64] usb 2-1: config 252 interface 4 has no altsetting 0 [ 75.873573][ T64] usb 2-1: config 252 interface 154 has no altsetting 0 [ 75.883801][ T64] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=81.2d [ 75.896011][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.904519][ T64] usb 2-1: Product: syz [ 75.908978][ T64] usb 2-1: Manufacturer: syz [ 75.920462][ T64] usb 2-1: SerialNumber: syz [ 75.978553][ T1693] fuse: Bad value for 'fd' [ 76.137929][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.147266][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.156894][ T1677] rust_binder: Error while translating object. [ 76.156936][ T1677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.163175][ T1677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 76.177309][ T64] usb 2-1: unknown interface protocol 0xe1, assuming v1 [ 76.194729][ T64] usb 2-1: cannot find UAC_HEADER [ 76.200411][ T64] snd-usb-audio 2-1:252.4: probe with driver snd-usb-audio failed with error -22 [ 76.212257][ T64] usb 2-1: unknown interface protocol 0xc4, assuming v1 [ 76.219462][ T64] usb 2-1: cannot find UAC_HEADER [ 76.227167][ T64] snd-usb-audio 2-1:252.154: probe with driver snd-usb-audio failed with error -22 [ 76.244696][ T64] usb 2-1: USB disconnect, device number 12 [ 76.252428][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:252.154/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.294175][ T1587] tipc: Disabling bearer [ 76.505216][ T1699] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 77.364257][ T1716] netlink: 'syz.3.434': attribute type 11 has an invalid length. [ 77.398464][ T1716] rust_binder: Error while translating object. [ 77.398507][ T1716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.405060][ T1716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 77.608287][ T1728] fuse: Unknown parameter 'euid' [ 77.719515][ T1736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.729879][ T1736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.343900][ T46] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 78.392114][ T1749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.392156][ T1749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 78.473928][ T46] usb 2-1: device descriptor read/64, error -71 [ 78.535380][ T1752] tipc: Started in network mode [ 78.540580][ T1752] tipc: Node identity ac14142e, cluster identity 4711 [ 78.547900][ T1752] tipc: Enabling of bearer rejected, failed to enable media [ 78.743930][ C0] net_ratelimit: 47170 callbacks suppressed [ 78.743955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.747603][ T46] usb 2-1: device descriptor read/64, error -71 [ 78.750576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 78.781018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.793177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.805385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.817489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.829757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.841878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 78.854407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.866848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 79.023896][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 79.193866][ T46] usb 2-1: device descriptor read/64, error -71 [ 79.325545][ T36] audit: type=1400 audit(1757291089.403:353): avc: denied { setattr } for pid=1760 comm="syz.0.449" name="secretmem" dev="secretmem" ino=14852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.403123][ T1763] overlayfs: failed to clone upperpath [ 79.443863][ T46] usb 2-1: device descriptor read/64, error -71 [ 79.554215][ T46] usb usb2-port1: attempt power cycle [ 79.615248][ T1765] tipc: Enabled bearer , priority 0 [ 79.663641][ T1765] syzkaller0: entered promiscuous mode [ 79.679480][ T1765] syzkaller0: entered allmulticast mode [ 79.694417][ T1765] tipc: Resetting bearer [ 79.903888][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 79.944904][ T46] usb 2-1: device descriptor read/8, error -71 [ 80.094900][ T46] usb 2-1: device descriptor read/8, error -71 [ 80.343884][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 80.398426][ T46] usb 2-1: device descriptor read/8, error -71 [ 80.478115][ T1796] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 80.534898][ T46] usb 2-1: device descriptor read/8, error -71 [ 80.583226][ T36] audit: type=1400 audit(1757291090.653:354): avc: denied { write } for pid=1800 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.654337][ T36] audit: type=1400 audit(1757291090.723:355): avc: denied { create } for pid=1803 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.674688][ T46] usb usb2-port1: unable to enumerate USB device [ 81.004075][ T1810] overlayfs: failed to clone upperpath [ 81.186282][ T1816] rust_binder: 1815 RLIMIT_NICE not set [ 81.203297][ T387] rust_binder: 1814: removing orphan mapping 0:4224 [ 81.441498][ T1827] netlink: 160 bytes leftover after parsing attributes in process `syz.0.474'. [ 81.513890][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 81.582321][ T1830] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 81.683866][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 81.691841][ T46] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.710361][ T46] usb 2-1: config 0 has no interface number 0 [ 81.734022][ T46] usb 2-1: config 0 interface 184 has no altsetting 0 [ 81.756645][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.776164][ T1834] rust_binder: Write failure EFAULT in pid:467 [ 81.777578][ T1836] overlayfs: failed to clone upperpath [ 81.789805][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.798200][ T46] usb 2-1: Product: syz [ 81.810576][ T46] usb 2-1: Manufacturer: syz [ 81.838225][ T46] usb 2-1: SerialNumber: syz [ 81.848057][ T46] usb 2-1: config 0 descriptor?? [ 81.864366][ T46] smsc75xx v1.0.0 [ 81.890307][ T1844] 9pnet: Could not find request transport: tc00000000004e23 [ 81.892561][ T36] audit: type=1400 audit(1757291091.963:356): avc: denied { mounton } for pid=1843 comm="syz.2.480" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.902482][ T1844] 9pnet: Could not find request transport: tc00000000004e23 [ 81.954391][ T1844] 9pnet: Could not find request transport: tc00000000004e23 [ 81.962163][ T1844] 9pnet: Could not find request transport: tc00000000004e23 [ 81.988178][ T1844] 9pnet: Could not find request transport: tc00000000004e23 [ 82.008305][ T36] audit: type=1400 audit(1757291092.073:357): avc: denied { getopt } for pid=1847 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.080840][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 82.112286][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 82.170630][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 82.214207][ T46] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 82.250751][ T46] usb 2-1: USB disconnect, device number 17 [ 82.293692][ T36] audit: type=1400 audit(1757291092.363:358): avc: denied { setopt } for pid=1860 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.683886][ T36] audit: type=1326 audit(1757291092.751:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1893 comm="syz.0.496" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f688d58ebe9 code=0x0 [ 82.775551][ T1904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.864606][ T1909] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 82.876215][ T1909] rust_binder: Write failure EFAULT in pid:296 [ 82.876888][ T1909] overlayfs: failed to clone upperpath [ 83.133884][ T391] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 83.295097][ T391] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 83.318304][ T391] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.340010][ T391] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.353905][ T391] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 83.374231][ T391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.390896][ T391] usb 2-1: config 0 descriptor?? [ 83.665531][ T1916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 83.673844][ T36] audit: type=1400 audit(1757291093.741:360): avc: denied { bind } for pid=1917 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.743871][ T36] audit: type=1400 audit(1757291093.741:361): avc: denied { name_bind } for pid=1917 comm="syz.0.504" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 83.753947][ C0] net_ratelimit: 37923 callbacks suppressed [ 83.753977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.775026][ T1918] netlink: 5 bytes leftover after parsing attributes in process `syz.0.504'. [ 83.782783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.803670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 83.811921][ T36] audit: type=1400 audit(1757291093.771:362): avc: denied { node_bind } for pid=1917 comm="syz.0.504" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 83.816194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.840587][ T1918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.851217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 83.878445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.885857][ T391] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x2 [ 83.890697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.908694][ T391] kovaplus 0003:1E7D:2D50.0003: item fetching failed at offset 3/5 [ 83.910259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.931150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.943441][ T391] kovaplus 0003:1E7D:2D50.0003: parse failed [ 83.956753][ T391] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -22 [ 84.664666][ T391] usb 2-1: USB disconnect, device number 18 [ 84.773346][ T36] audit: type=1400 audit(1757291094.841:363): avc: denied { shutdown } for pid=1954 comm="syz.0.514" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.795198][ T1955] tipc: Enabling of bearer rejected, failed to enable media [ 85.122486][ T1973] 9pnet_fd: Insufficient options for proto=fd [ 85.993264][ T1992] 9pnet_fd: Insufficient options for proto=fd [ 86.072500][ T36] audit: type=1400 audit(1757291096.141:364): avc: denied { sqpoll } for pid=1995 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.174521][ T2001] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 86.242927][ T2006] rust_binder: 445: no such ref 0 [ 86.260617][ T36] audit: type=1400 audit(1757291096.331:365): avc: denied { getopt } for pid=1993 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.433251][ T2017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.445032][ T2016] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 86.472267][ T36] audit: type=1400 audit(1757291096.541:366): avc: denied { validate_trans } for pid=2018 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.545563][ T2016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 86.874802][ T2035] vcan0: entered allmulticast mode [ 86.958750][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.967535][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.062144][ T36] audit: type=1400 audit(1757291097.131:367): avc: denied { connect } for pid=2044 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.085935][ T36] audit: type=1400 audit(1757291097.161:368): avc: denied { shutdown } for pid=2044 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.214886][ T2048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457 [ 87.282757][ T2051] veth0_to_team: entered allmulticast mode [ 87.300531][ T2051] af_packet: tpacket_rcv: packet too big, clamped from 1480 to 4294967272. macoff=96 [ 87.430627][ T2055] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 87.430656][ T2055] rust_binder: Error while translating object. [ 87.440007][ T2055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.448211][ T2055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 87.558611][ T2064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=2064 comm=syz.1.546 [ 87.823894][ T387] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 87.875490][ T2069] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 87.973874][ T387] usb 2-1: device descriptor read/64, error -71 [ 88.072515][ T36] audit: type=1400 audit(1757291098.141:369): avc: denied { shutdown } for pid=2077 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.114246][ T36] audit: type=1400 audit(1757291098.161:370): avc: denied { map } for pid=2077 comm="syz.2.550" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.228363][ T2083] 8021q: VLANs not supported on ip_vti0 [ 88.273903][ T387] usb 2-1: device descriptor read/64, error -71 [ 88.513886][ T387] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 88.653860][ T387] usb 2-1: device descriptor read/64, error -71 [ 88.701550][ T2092] ------------[ cut here ]------------ [ 88.707452][ T2092] WARNING: CPU: 1 PID: 2092 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 88.717132][ T2092] Modules linked in: [ 88.721089][ T2092] CPU: 1 UID: 0 PID: 2092 Comm: syz.0.555 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 88.732713][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.743048][ T2092] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 88.749070][ T2092] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d9 48 ee 05 00 0f 85 be 00 00 00 c6 05 cc 48 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 88.763886][ C0] net_ratelimit: 45670 callbacks suppressed [ 88.763913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.768903][ T2092] RSP: 0018:ffffc9000e01f880 EFLAGS: 00010246 [ 88.774931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.787072][ T2092] [ 88.793333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.805236][ T2092] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 0000000000000000 [ 88.807704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 88.819689][ T2092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e01f938 [ 88.819712][ T2092] RBP: ffffc9000e01f9a8 R08: ffffc9000e01f937 R09: 0000000000000000 [ 88.828079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.839911][ T2092] R10: ffffc9000e01f920 R11: fffff52001c03f27 R12: ffffc9000e01f8c0 [ 88.848286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 88.855899][ T2092] R13: dffffc0000000000 R14: 1ffff92001c03f14 R15: 0000000000000000 [ 88.868836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.877263][ T2092] FS: 00007f688e3836c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 88.890263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.897310][ T2092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.909412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.918320][ T2092] CR2: 000000110c28f583 CR3: 0000000120d9c000 CR4: 00000000003526b0 [ 88.930530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.936944][ T2092] Call Trace: [ 88.936956][ T2092] [ 88.975558][ T2092] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.981688][ T2092] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 88.987490][ T2092] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 88.993164][ T2092] ___kmalloc_large_node+0xb5/0x250 [ 88.998510][ T2092] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 89.004211][ T2092] __kmalloc_large_node_noprof+0x1e/0xe0 [ 89.009896][ T2092] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 89.015652][ T2092] __kmalloc_noprof+0x26d/0x450 [ 89.016803][ T561] Bluetooth: hci0: command 0x1003 tx timeout [ 89.020643][ T2092] incfs_realloc_mount_info+0xa7/0x4d0 [ 89.020671][ T2092] ? incfs_add_sysfs_node+0x118/0x240 [ 89.020703][ T2092] incfs_alloc_mount_info+0x479/0x600 [ 89.020725][ T2092] incfs_mount_fs+0x3ca/0x960 [ 89.020756][ T2092] ? __cfi_incfs_mount_fs+0x10/0x10 [ 89.020789][ T2092] ? vfs_parse_fs_string+0x102/0x170 [ 89.020817][ T2092] ? selinux_capable+0x38/0x50 [ 89.020859][ T2092] legacy_get_tree+0x103/0x1b0 [ 89.020885][ T2092] ? __cfi_incfs_mount_fs+0x10/0x10 [ 89.020918][ T2092] vfs_get_tree+0x9e/0x290 [ 89.020951][ T2092] do_new_mount+0x251/0xb40 [ 89.020972][ T2092] ? security_capable+0xcf/0xf0 [ 89.021003][ T2092] path_mount+0x688/0x1050 [ 89.021036][ T2092] ? putname+0x113/0x150 [ 89.021059][ T2092] __se_sys_mount+0x2bd/0x480 [ 89.021081][ T2092] ? __x64_sys_mount+0xf0/0xf0 [ 89.021103][ T2092] ? __kasan_check_write+0x18/0x20 [ 89.021135][ T2092] ? fpregs_restore_userregs+0x11d/0x260 [ 89.021163][ T2092] __x64_sys_mount+0xc3/0xf0 [ 89.021184][ T2092] x64_sys_call+0x2021/0x2ee0 [ 89.021218][ T2092] do_syscall_64+0x58/0xf0 [ 89.021252][ T2092] ? clear_bhb_loop+0x50/0xa0 [ 89.021281][ T2092] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.021309][ T2092] RIP: 0033:0x7f688d58ebe9 [ 89.021343][ T2092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.021365][ T2092] RSP: 002b:00007f688e383038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.021390][ T2092] RAX: ffffffffffffffda RBX: 00007f688d7c5fa0 RCX: 00007f688d58ebe9 [ 89.021408][ T2092] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 89.021425][ T2092] RBP: 00007f688d611e19 R08: 0000200000000280 R09: 0000000000000000 [ 89.021441][ T2092] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 89.021456][ T2092] R13: 00007f688d7c6038 R14: 00007f688d7c5fa0 R15: 00007fff544af8b8 [ 89.021477][ T2092] [ 89.021485][ T2092] ---[ end trace 0000000000000000 ]--- [ 89.022819][ T2092] incfs: Error allocating mount info. -12 [ 89.022933][ T2092] incfs: mount failed -12 [ 89.032341][ T2092] netlink: 92 bytes leftover after parsing attributes in process `syz.0.555'. [ 89.032371][ T2092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.555'. [ 89.044780][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.323862][ T387] usb 2-1: device descriptor read/64, error -71 [ 89.436102][ T387] usb usb2-port1: attempt power cycle [ 89.783875][ T387] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 89.814981][ T387] usb 2-1: device descriptor read/8, error -71 [ 89.947139][ T387] usb 2-1: device descriptor read/8, error -71 [ 90.194354][ T387] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 90.226407][ T387] usb 2-1: device descriptor read/8, error -71 [ 90.357212][ T387] usb 2-1: device descriptor read/8, error -71 [ 90.468542][ T387] usb usb2-port1: unable to enumerate USB device [ 93.773901][ C0] net_ratelimit: 56818 callbacks suppressed [ 93.773919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.792171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 93.804337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.816453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.828761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.840884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.853170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.865373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0) [ 93.877816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.890128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:ce:b7:65:6d:00, vlan:0)