last executing test programs: 2m9.382728717s ago: executing program 0 (id=706): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000500)={0x0, 0x10008e, 0x40000}, 0x20) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'r\x00'}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x1, 0x32}, 0xa, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000000c0)) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2m9.382054227s ago: executing program 0 (id=707): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f00000044c0)=""/4102, 0x1006) 2m9.342210508s ago: executing program 0 (id=711): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) listxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)=""/85, 0x55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) 2m9.24596133s ago: executing program 0 (id=713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x40000000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x28}], 0x1}, 0x4000881) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x68) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000580)="2e65650f797d0d650f225fc7442400ad000000c744240204000000ff1c24450fd433f3f366a08600c0fe00000000f341ab410f08b9800000c00f3235004000000f3048b869f152d1d254613b0f23c00f21f835000002000f23f866baf80cb894245281ef66bafc0cec"}], 0x124, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2m9.185325781s ago: executing program 0 (id=715): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140), 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x10001, 0x4, 0x1, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r6}, 0xc) (async, rerun: 32) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r6}, 0xc) (rerun: 32) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000400)={{0x7, 0x6}, {0x7, 0xffffffff}, 0xbdb, 0x1}) (async) r7 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000008400)=ANY=[@ANYBLOB="902800003b0001"], 0x2890}], 0x1}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r8) (async, rerun: 64) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) (rerun: 64) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) (async) ptrace(0x10, r1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf2501000000100002800c000180080001001700000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async, rerun: 64) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000200)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e724828ef31b353e71805205c3dceb44cc4c7b3664e29fb00000000000000") (async, rerun: 64) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 2m8.874038507s ago: executing program 0 (id=716): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @fda={0x66646185, 0x9, 0x1, 0x3e}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @clear_death={0x400c630f, 0x5}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 2m8.790408009s ago: executing program 32 (id=716): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @fda={0x66646185, 0x9, 0x1, 0x3e}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @clear_death={0x400c630f, 0x5}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 1m38.101949017s ago: executing program 4 (id=1130): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x24, 0x3) setreuid(0xee01, 0xee01) lgetxattr(&(0x7f00000041c0)='./cgroup\x00', &(0x7f0000004200)=@known='security.selinux\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m38.042366219s ago: executing program 4 (id=1133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') socket(0xa, 0x3, 0x3a) ioprio_set$uid(0x3, 0x0, 0xf6ff3fd78fa5d57f) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.016354299s ago: executing program 4 (id=1134): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) (async) setreuid(0x0, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) 1m37.95739308s ago: executing program 4 (id=1135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000001c0)) io_setup(0x44b, &(0x7f0000000040)=0x0) r5 = eventfd(0x7) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xe2a, r2, &(0x7f0000000080)="08871a52d5ca962cd48472d622639a7df5d38456389e50a1fb18bfc4517233c144a7e7f5a24e110515c018", 0x2b, 0x1b, 0x0, 0x2, r5}]) 1m37.846168662s ago: executing program 4 (id=1138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x103) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="0f20e035100000000f22e0c4c17b1261cfdf9dd5db43ebc4c1fd6f84cb1d00000010f5b9800000c00f3235000100000f309a8d004623d5000f320f00504bb8002000000f23d00f21f8353000000b0f23f8", 0x51}], 0x1, 0x5c, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x5}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') socket$key(0xf, 0x3, 0x2) pread64(r3, &(0x7f00000003c0)=""/46, 0x2e, 0x8001) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder0\x00', 0x802, 0x0) r6 = fsmount(r4, 0x0, 0x80) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x8) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r9 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r10, &(0x7f0000000000)="b6a5", 0x2, 0x20048004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x406f413, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="070095dc40217a9c3b254fb9ed81c4f4dc3fd52b2d94aa29c9fe89c6321edc38926e4f1bf5d454cd7949e73069a59c9fde2d69dd61acb16d81a2000000"]) fcntl$setlease(r7, 0x400, 0x1) waitid$P_PIDFD(0x3, r7, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) fcntl$getflags(r7, 0x11) setsockopt(r7, 0x7f, 0x6, &(0x7f00000002c0)="6cf3d008c69ca9ca5eed6c939dabf74f2c3dcad3605dbdfe09e68f98e7a00b2af6f9ff0cb7b82dccc78e35ada4ffec0594fca670ec50a749f6e0cbd8d22031", 0x3f) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000280)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/167, 0xa7, 0x1, 0x20}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m37.477416129s ago: executing program 4 (id=1145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) read$FUSE(r3, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) 1m22.203708787s ago: executing program 33 (id=1145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) read$FUSE(r3, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) 1m20.198377326s ago: executing program 5 (id=1263): lsm_get_self_attr(0x64, &(0x7f0000000080)={0x0, 0x0, 0xa0, 0x80, ""/128}, &(0x7f0000000180)=0xa0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_complete(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe10", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="65582f9359", 0x5}], 0x1}}], 0x3, 0xc044) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0xa}, @sack_perm, @window={0x3, 0x7, 0xfff9}, @sack_perm], 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) futex_waitv(&(0x7f0000003b80)=[{0x200004, &(0x7f0000000380)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x15, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000018000902000000000000000002000000080000000000000008000500", @ANYRES32=0x0, @ANYBLOB="e7a6bc5b0ec0ea26d41b0c08b49c33676042ee2b9f6b2ccf418e6a5a0ea2132eef674e3bd8a2f59da80f1de711120200628df3901ffdc5d8"], 0x24}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000000280)=0x9) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x10002, 0x5, 0xeeee8000, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) sendto$inet6(r8, 0x0, 0xfe42, 0x8080, 0x0, 0xfd74) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800150028bd7000fffbfffe0a0000000202000000000000100006800b00000046524f5a454e0000c2f49d"], 0x2c}], 0x1, 0x0, 0x0, 0x40800}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 1m20.119197778s ago: executing program 5 (id=1292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x221) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x5) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x1000}, 0x20) listen(r6, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x0) listen(r4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m19.881883663s ago: executing program 5 (id=1299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0xb, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 1m19.763904255s ago: executing program 5 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc082) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) 1m19.606974038s ago: executing program 34 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc082) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) 1m4.11084159s ago: executing program 2 (id=1504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 1m3.385377374s ago: executing program 6 (id=1525): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 64) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x3a, 0x3a, 0x11, 0x19, 0x4, 0x6, 0x5, 0x162, 0x1}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m3.321704886s ago: executing program 6 (id=1527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000080)="54dd0d", 0x3, 0x20040880, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1m3.297380286s ago: executing program 2 (id=1530): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000001c0)=0x800759d, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) 1m3.238328547s ago: executing program 3 (id=1532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r2, 0x0, &(0x7f0000000300)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40010}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x870a}, {r4, 0xa21c}], 0x2, 0x0, 0x0, 0x45) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m3.238184237s ago: executing program 3 (id=1533): keyctl$set_timeout(0xf, 0x0, 0x8) r0 = socket$inet6(0xa, 0x80002, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='qH', 0x2}], 0x1) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x5, @empty, 0x3}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x0, 0x0) listen(r0, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) pipe(&(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x16, 0x0, &(0x7f0000000000)=[@free_buffer, @clear_death={0x400c630f, 0x3}, @register_looper], 0x0, 0x1000000, 0x0}) 1m3.221278388s ago: executing program 3 (id=1534): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250a0000004c000180140002006d616376746170300000000000000000080003000200000008000300d7457d1b080001"], 0x60}}, 0x240448c0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xef, 0xbd, 0xcb, 0x40, 0x1a0a, 0x108, 0x617, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0xe5, 0xa6, 0x9d}}]}}]}}, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x9) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14, 0x3eb}}, 0x3c}, 0x1, 0x0, 0x0, 0x240208d1}, 0x40000) (async) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x85b83000) 55.738009003s ago: executing program 2 (id=1535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x180080, &(0x7f0000000500)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x34, 0x6b, 0x30, 0x6b]}}, {@size={'size', 0x3d, [0x35, 0x6b, 0x37, 0x34, 0x38, 0x33, 0x33]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x70, 0x6d, 0x25, 0x2d, 0x39, 0x39]}}, {@usrquota}, {@gid={'gid', 0x3d, r2}}, {@noswap}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r3}}]}) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f23165", 0x99}], 0x1}}], 0x1, 0x80d0) (async) recvmmsg(r1, &(0x7f0000009500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x6}, {{&(0x7f0000001580)=@l2, 0x80, &(0x7f0000002a80)=[{0x0}, {0x0}, {&(0x7f0000002980)=""/225, 0xe1}, {&(0x7f0000002780)=""/131, 0x83}], 0x4, &(0x7f0000002b00)=""/76, 0x4c}, 0x85a}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, &(0x7f0000006100)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000003000)=[{0x0}, {0x0}], 0x2, &(0x7f0000009200)=""/111, 0x6f}, 0x3}], 0x4, 0x10000, &(0x7f0000009640)={0x0, 0x3938700}) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 55.737807624s ago: executing program 2 (id=1536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000004e40)) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000002140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read(r3, &(0x7f0000000080)=""/122, 0x7a) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000ee6000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000f00000/0x2000)=nil, 0x2000, 0x17) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000021c0)=ANY=[@ANYBLOB="3801000010000100000055b750cb12b055bdad0000fea0dbdf25ff010000000000000000000000000001ac1514bb00000000000000002003000000c10fe0eb0f0cdf16e2b7491983c0b341cbf512bae3b082017a56cfdcf4ff7079275aa181719173aaec19aa6bab8c7a80f041b12f3a879caf388ba11474efdc1b86e294ad5b2345", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000190000006c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000020000100000000000002fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000042000000000000000027bd7000000000000a0000fe0000000000000000480003006c7a7300"/240], 0x138}, 0x1, 0x0, 0x0, 0x44}, 0x4810) close_range(r5, r3, 0x2) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) readv(r5, &(0x7f0000002600)=[{&(0x7f0000002340)=""/11, 0xb}, {&(0x7f0000002380)=""/3, 0x3}, {&(0x7f00000023c0)=""/214, 0xd6}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/252, 0xfc}], 0x5) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, &(0x7f0000000000)=[{0x400, 0x6, 0xfffffffffffffffc}, {}], 0x4b, 0x0, 0x0, 0x2, 0x3}) read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) close_range(r3, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.737536944s ago: executing program 6 (id=1537): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x1, 0xffffffff, 0x5, 0x4, 0x7, 0x8082, 0x388, 0x5, 0x1, 0x8, 0x7, 0x3ff, 0x1, 0x4}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 55.736232623s ago: executing program 1 (id=1538): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4048881) pipe(0x0) fstat(0xffffffffffffffff, 0x0) (async) setreuid(0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r0, r1, 0x0) 55.735493544s ago: executing program 3 (id=1539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f00000000c0)={'veth1_to_bond\x00', @local}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) epoll_pwait2(r4, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x7fffffff]}, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x3a, &(0x7f0000000000)={0x3e, 0xfffffffd, 0x3}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r10 = gettid() r11 = getpid() rt_tgsigqueueinfo(r11, r10, 0x5, &(0x7f0000000140)={0x2, 0xffffffff}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) 55.733125814s ago: executing program 6 (id=1540): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904", @ANYRES64=0x0], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 55.732705824s ago: executing program 1 (id=1541): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x8000}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r2, 0x4000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r6 = socket(0x2, 0x2, 0x0) r7 = epoll_create1(0x80000) shutdown(r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x80000002}) ppoll(&(0x7f0000000080)=[{r7, 0x2}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0xdb1, 0x3, 0x801, 0x7, 0xfffffffeffffffff, 0x6, 0x8000000030000, 0x0, 0x0, 0x80000000, 0x10000000000008, 0x100000000, 0x5, 0xcf, 0x401, 0xc], 0x4000, 0x80100}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETLINK(r9, 0x400454ce, 0x321) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) 55.670292165s ago: executing program 6 (id=1542): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, &(0x7f0000000480)="534287ac770767f7429748b7bad1a664a6cc00", 0x13) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="280000002e000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="0a000080976b64086860000004000980"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r3 = socket(0xa, 0x1, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) setpgid(0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x5a7) (async) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0xffffffffffffffa0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async, rerun: 64) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x1000000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c3e8000000100051000000000001090224000100060000090400dd0103000200092100000001220b00090581030000000800c2237c139d285dc44942e8def57cb459044fcf6e6839266eb93f4c31bc1a5d792aa6aa4ee09f6c947c39f9e6f34b3a5db11fcfcee1c2f7c8753f52717562ba00b11add94bc3da53f1bd015cb174f828b46a2c49599a1b5f71e181f2c287069fe8571ed6a932f658df46f1290295cdf"], 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x15) (async) prctl$PR_GET_SECCOMP(0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000010be80)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000010c080)={{0x0, 0x4, 0x1, 0x6, 0x5, 0x7fff, 0x4, 0x592, 0x60000, 0x0, 0xffffffff, 0x10001, 0x0, 0x7, 0x10000}, 0x8, [0x0]}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000010c100)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000010c300)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000010d300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010d500)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x2, "72c5d25e101d67"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010e500)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "f39d41f91aa0dc"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000010f500)={0x0, 0x0, "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", "ae9d41ec541253acf011e8524000c7ea6a139668310fffd8d48868efcbf850f821810af095e3bf64ab31545679cb7d30f294b9dd5f4a3810e57cfcc21a55399220a424ecb144a6d043cba89e63d5558a3a769cb67c0837134c88afa9922ed3da92a083dca5a3ef3562bab726403a7dd39d418b4a80424194cad3ffeb285aca4958fcee8b561e13a2dc4de7c547204150672c8ec574b17165a3c09cfb2c0675cfa1d2fa935e34850c951a5ff6c50426c70e0c0cf07e15e2bd29140a5c38e862eda3c6989e3513d228119eb2e9d8c58ed77b384bcc5f5e0ea47b748a1fd7ff4f8b049fc34aee17e0b5ea0f5d503695fbe4e5f605f27febc8894edd17d6d6d7a3eded77303b07004df29905b92cbd3191c77aa0cd085036df4c57e866dec9c59a93379c2e3142c7f7f2751582828fa8c550291a9e699700451f4b0ac308304029ef9d6e19a6f2202a7d0da46af060e6a14a30f15c243d59de8fe33bfa84fd359f219d182e271d609c7a7cbd9d61cad5023a1d63a3faaa222a742361c8441b6f7f79693cf74d8d8abb243e84b5e79a232c88659b9203990decce93fc3ec0e7ceac1c6ed4331be6b3f6d7b9f72677db81873ba087b6ac5e475710673769c1c93cbecaf5c0269679d037b16e1844fc001f3e47791db6c8a4997a8e1dc1adf1a3bae3d97fcb23856aa069112684242a3c63e97236bb77602daf69c33ecde987f3ed5c87b32749bb264907972a3f4445bf1e49511e85e11301009ec8b61ff96ec8f5e41b54aa0626927f1ecde6bc2e995c37330c89c0fb2e3e702ab651a827da0a1915af6b8eec703a70b9d2130aa2565eb55d24e2c8e94f4372f3baeb99e12923f38f4fe871ddb1379005cfa0cc8d3b85c5200934348160371c387003e4ac69591ace23bc285438dd6986d6a677b74110989f710d22195698c69ba0a13b46cf3cd3b64d2c8a87444840dd30993b9ba2963d58e7920b8bb0241dc6435f69a0b9a5af5b19db23645b504e7db9cb1f5ea9fb460f5c0c810ba6d9bb6501856e036d56ca69964367a80ce6b83b57db0486f512e50a4a060e909836db060cd1c27f5031b1338a44304fd695b3bbffde9ec4ae8c19b56a94bf18c7d0090631ac359c7c2d210bec17b6241726d329b0666808d23457cc60549f766584a123994170dc0698acc238ac4c0be9461f2615c6aef95e6f06fdfba571816b5c02f907af2be0792e01a34a9b1303f05091658dbfa4c69e5bb4ba0aefb57a2ee717dd5db807aa56001f5857a66365c4272e0fae8685673c121e6bf73e5a91ec382388d2e06a7fe88239883cdf26c80c77c244a9450b2ca7b6de1ee63f89afc49d27cfc06b94c099d8355ef600c033a910c0984200fdca6a8fa7ea787d7e1d0e7d7bc3a01a936479197bbf789803cf993194dfa3853a559e918353cf31d66b4119d386ce541ac56ec3bf01791f3929774b2db2c004f8395bd2b8ecd312fbddad1decc42237485f8deb4be4ab2bbb56929808ba7549f1329c9c6b688509cd7ec8b0a1624771145aac8c17314c2b7825e106edb2491d659b186a821ff8f324ad3898b0e264e2af35ec4ccb8eb023ee2da7b4639a2347f4709f977752c1d07d2705f1ee591bacb9138e9340d00eb4f5dc0cad05e4c31ae6a0078e332ce117a191a43551e56157ae5f715528ced6852acbcc5cf1f59cdc83c1dd9edf5e6a05c9750c7e6b7c2f4226354f9b462d06581d3ae655a3f6708df9cf465ef83f932a82206bc649319b27ad6723855dcba6a0d2b7fb7804516917d2d47412b8eccc9bb25a675fcc3581dfcc0a927247d17f5ab91ab382f703200af0bc5cab1ba79384abea4e951171122aa4b1df0a2dd2c8f776562dfb9ba58f4295f15bd3faa7f02c37612f4dfd0a40e34d5f89670502acecb1da6581ebf93d4bf8096c929662375abc105cbd0dfa840c9db6ccc99d0c632943fa42ec53afc103a65ec206013623703bb6feb0ba954759e3719dc1a3646a78f4944ed91b9fc084b58b47e660a124ae2b5b60aed09f2634f6ed39b4506bd82e238ad8c35b66ab0f500dcf7753237348069627cf56f9a5c7bcfcefdf412afa7e09b9c69de4f83cd308c4900456501dbcd24b22fe3200ae773750d066b74fe5f690464799d6f8b8208eea7942f0540a0032beef1f00d632d397ba57ad9af5ccf263bed12aa3757a8c0b74c070912e1009097eb8db51b86eb4cb8995920a12a754b854fa0f2d547110f40f4087f5a650471485d4a8be3bc022a60f0bd6927340f4fcd092c32da08f7a39ecf00cbad5348258f3f33807ba4d581167cc2c930f817184335b8970cdfe7c45f88984b6711f5f06f0182fb076e6096233490deaad62dec6ce4e066b30de388b800d082a286d38f7bd45ef3c6210d5df62185f17accc9cd30c614d601abc8ccf0e57bbd3495ffcdc5c2388a6bf495b443d599b0503466275ae4a8b697a409a375c93663203fa77a50fabb5f700a5f6e69758d1d465051398dff827e2f51b95173fde049298678788357b997e374f667f0040a110c7da34ccfe1be1159cb3b5947558360c05fb9568703d3da7d2b8a0c25b0f069e97862d43f0d35bd1c145678412e88dd19e3d2975231b4340c87b1f7818959d529c4622fe10fdd8fa285392f71a21c4c25f0ef24f632f5ff8ae7f5c84cb5f37de3a2fed9d0c75eb3b28c53e146d13e8d327942c5bd2c96dfa82f7a32e2503b6577e6895b533ecb3d440b87cfbbd0644b5dbda993ff51b4b10ab132c9814e7130bd6151f125c3e30e879ae09de4cf4aec14f0689ac2fca6f48e42659429cd8f4c83773a2f71e48763768c3efba07435bd129738218735f0520b1d3240bd41d37cb9c7cef0cf3e9c654b8845a822e7eb972f813306ef88dc9c7082a118251f32f706bc68a1160f9d6ff2a46a0734e7793c58410e1caf4cd71daba6470b184559a600683054f2f0e2235e3a6c165535f6657bc54587865ee055c80387db855789fdcb795cd70bdbdf13cf9e80a09f25a86f25c9d79e1ed2ffdaf2cfceb4c4ec8bcb98f5272b1218ed2d5733b8bd0453cf065ee43386c55e7c7a3aadd90c8a9ff1efa7b7c4d8156e2f6c16c93ecb36facf95ca7c57d1a8adcabee94625f8b069399b8f5d0d669d2b949eba0264c198821a2e83f596d13069546eb36d1bf71ab7888be43c08bbd07b93a3d46616c52cb208e65e79679930f4ef9ed1e71252303142d0834073950677aca35ffea5ea519dd475f39d473ad51e22528658d64bc9a8e95653f95e73dd046eee48394f91fd90dc679d067a2e634e89f9649858bddcce97d970be6858f157f37eb1b549bcc45eb879e5b7e2815fae40622dbda8d59be2434cb5ccfec37718dd0fb771550bc96590b38443e1d03eb563b298b5f680a49946b4ecc916977fcce449a62e19160a585d4c1b525bae3ef5e35a58d13fee6e04cda88eb1c862940b1b989e81262a3b037d1bc37a5f1709c9a23bf3d8b0c04480dfe95a3c9c38d1763d7d441265a7aacca56f8c7e81f3a9832b2f86bfcaa1879bfffdc182df67a89f1d16eb074e62c84944caf536f1c5d8674b4bd35ea8f925682780dcd7c4bad80c22239a69b6de32a48ca09e2cd462f6cb28a76492c82728d2ce81e7558e7d0ec82cb9fd66e6cb0b1484fe56cc84117083f8ed30bddd796f8ced5fdec735ec12fab2008593840922128bba60a8efff9ef1aa0e9bf406070ea7cb6241a4b8b1bfec138bea7355cbbd777972cde8d3ee5c53a54d9258998a2b0c6c976ffcf507efcc25666702cd3b782dd59ef5ead5c5d456ea9ffffd29315b53fe6db45ba75e9f11194194b4f79514646a396dc4495ec17450e39c266cab71b501488510515ae2d8ed61ca74895fe5fcfff5b321caab1bd151204d02c73a9426884e64a3a9a40c86b072533f7cdf0546925ee2050994c6150957b4c413c902ca28fc72ca0f072407c362051219dfe3e4fdf1fd24a97d6892bb1b79c05267476c300c0d9b93719e8b59e2a9c96460a932f152777e26ced65326d027195e01729390792a6f78549d0427cd5347830a3b78634bc9465066e1028983f7a7f5c43a74f30f0ad44de6773ba50a0d31de5794d31dceff98ef9dcfe24e99d4b0bf2f6496ddcd6c1c6cb0e2cb31ed86e1fa871af773f9adda2b585679c599fecfb0aa0a1007465d6e33d71dd7d5ac4549a9fd8003dde42596dd070cef8346ff3d8a937757a110066c97b067ae841864f12236010268958c76f08010569b8627b1052df93ca1dcbec9b94a78001b075e5618d192e172a3a0c051d8a9efe11953931deae3c2ff2110aa779d9fd1bd97e8daee4edc7fd5fc66c1d108d0c633b74ac5d26e60c3ce482e896d8ae3961fff3def77fd23fcdbcc8a8f8f3d04b9aad0a2747aebfca920c2d546e5df5df37a11e7757c264ac75e85a02c2550bbe84ffb1bfc40a86262f930239e012863032623edae762868c725813bdf4744a19fd309acc568f72a535505148e05ee55fcac4c00cb7bca33e9952499f03ddd34eba8629b646b5a04084752b0d3c64e53187a4b2d82c8e2bc85da77ff3d6dd2c8c7d661904b40a8954b661f88de489cf3106b6dba54f9480ae0ca7f08ea4ae4140cec2670fe7b5d326da9c882818ed05c35ccf288e4ec7d5bcecb97c7948f8d9152901af487976435814f26ff581ef0f9c32175ce4b28224f4dfc6ce559f93911f0c549ce45865ff3edb86b0cc82cc3e1ce37fe3bc415c85b50b98169e934895c44c65d02052a0c23bc4b307024338bc3b52c0e101f4370329f0802d7deebabf4674b2ee5fb4e8ee073b3d15faf3359688f4a550d35dc348d6054e664cd0b69cb2e2e9ff44015bd94a8d3231ccf40d5dffb728cd31126023a2bb5dc734b4cec418cdcd3556eccfe5dc452cf841244cad15ca90bba1e6e96c277441099113aa740ecac71e323470367af84d54c4d23d50e7dd1e3a36e92d58bb30a65a8686c188f31aa401e79746deee8be368b759b2daf45fa73086b859644a66747a2ade9d54a11cfbbb2498ef68d530529060b7bad65770ed554ae751778036564bddc5f1bd07d0a20b358eeaf89e06e02c97d1a60d796092a3ae07b87626c7344e1fd583d2a8d445faf40e21ef50d3d784b2333ac89774c14b31ad6bced965febf0c20ced7ba4ce7fa12dfa273331b018bd4f7c8b8da20f2409c43a1afec6602aa330b8142f9c46852aef943cf85ba8737fd257feffeb2d5c8f6c4d39ba70655db2ac0c458f8adc14f14e0d22bb6afe8b23591aaadfbbaeb448d18517b5bc59f2fbb97300a32157c507fab6d0f9bbb767ae9a49adba67008a20694bafca8d20c0a49381c564e1878eb90c65cd38d0b82ee3be56b2053b8dab1b8a33b857840d5826c942d01957b895e763c5999e8c09181b78fc3cedc46cfd3e8b2c4b7c57caf45663d"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000110500)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000110700)={0xa53, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0x7, "cfe478f16bcb4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000111700)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r8, r10}, {r11, r13}, {r14, r15}, {r18, r19}, {0x0, r20}], 0x0, "b5407e2c190e5f"}) (async) close_range(r2, r2, 0x2) 55.541119677s ago: executing program 1 (id=1543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @remote, 0x5}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r3, 0x0, 0x700) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x4, 0x81, 0x3, 0x3}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816"], 0x65) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000006c0)="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", 0xfc) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x1e1, 0x0, 0x1, @mcast1, @mcast2, {[@hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x134, 0xa, 0x4, 0x5, 0x33, 0x18, 0x3, [@loopback, @loopback, @private0, @loopback, @loopback]}, @hopopts={0xb3, 0x13, '\x00', [@pad1, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private1}, @generic={0xae, 0x7b, "9c94549e878f1216c17c4cf9039930af56727033a7c5698c611298542feaf1e266fbdfdb02fe22e8d858ab57c7c1e116759951be26ce63e180b91692bfdec7ab42dc08f9cc911e9d4aafca328b08b5f33f0549e40c8ad49638292f3c0eec311e671a90b8d300523ecfdda90d223cffba55349710e80f3076a36e7c"}]}], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446031e6847afe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c0439a96a7b7bb0faa0e55c71667c2db559cc4e3d9cf1faff99395ed6b589c8817d02dfc418f30a86847e7e66a207c98f445d1a31aee58cbb28d817dacd51e28a309a058f53135ee0bb9353b527460fca970e1ba5e0bbec8c4ac80fe5bbcfb8a3d84c993b85ed02e629"}}}, 0x217) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x12500, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r8, 0xc030128a, &(0x7f00000001c0)={&(0x7f0000000180)=""/31, 0x1f}) close_range(r0, 0xffffffffffffffff, 0x0) 53.530764716s ago: executing program 2 (id=1544): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) (async) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) lchown(&(0x7f0000000140)='./file0\x00', r1, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="b2227000ffdb00"], 0x1c}}, 0x8000) 52.989235817s ago: executing program 3 (id=1545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x21202100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x2, 0x5003) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x53, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86"}) (async) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r3, 0x0, 0x2000, 0x400, &(0x7f0000000600)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="df6b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\Q', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="076978997a7fd8", 0x7}], 0x1}}], 0x3, 0x4000051) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0xfffffffe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = accept4$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xffb0, 0x80c00) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x7}) (async) splice(r2, 0x0, r4, 0x0, 0x9, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x39) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x609380, 0x0) (async) write$hidraw(r4, &(0x7f0000000500)="be88a2c3bcc97cba666d9507f2308850be9d17de8cf075f84b8af51dd485268eb88289a45c56050c4a206048aafdaf39cfd4076f03d7f8f402fbf2d3fdc57b86aac1df2d57452cb0f7adc1252ec9cd14086ff9d72315b39e6e722964f48dcd83c300db8cda29e2e6a7b2ebb29fc06e67617b8aefd16f01f1351119580e1493f78f746f12c8eedd70c932ca60569617cdcf0e3a54ff5edbb687bd43af20aa29f69aeacf923af05c1cc0f07f8846f068b172fbea8d0106ac8b010037934049de880dcb070b3a14a68a08aa27daf9bceab5a0", 0xd1) 50.343050878s ago: executing program 6 (id=1546): pause() r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)={0x40000, 0x4, 0xb}, 0x18) mkdirat(r0, &(0x7f0000001040)='./file0\x00', 0x0) pause() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000010c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = creat(&(0x7f0000003100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x33) r4 = accept$inet6(r3, 0x0, &(0x7f0000004100)) recvfrom(r4, &(0x7f0000004140)=""/178, 0xb2, 0x10000, &(0x7f0000004200)=@phonet={0x23, 0x2, 0x7, 0xb}, 0x80) clock_gettime(0x0, &(0x7f0000004280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000042c0)={{r5, r6+10000000}, {0x0, 0x989680}}, &(0x7f0000004300)) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380)={0x8800, 0x88}, 0x18) mkdirat(r7, &(0x7f00000043c0)='./file0\x00', 0x2) lsm_get_self_attr(0x64, &(0x7f0000004400)={0x0, 0x0, 0x4a, 0x2a, ""/42}, &(0x7f0000004480)=0x4a, 0x1) r8 = socket(0x23, 0x5, 0x2621) timer_create(0x0, &(0x7f0000005500)={0x0, 0x19, 0x2, @thr={&(0x7f00000044c0)="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", &(0x7f00000054c0)="8971163b1c00715fbcd7fbf344373c5be00d81e451185a8b7d6444d03cfd4a880ad71f1066fb8266c45b9b"}}, &(0x7f0000005540)=0x0) timer_delete(r9) close(r8) timerfd_settime(r3, 0x3, &(0x7f0000005580)={{}, {0x0, 0x3938700}}, &(0x7f00000055c0)) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000005600)={0x0, 0x31, ""/49}) timer_gettime(r9, &(0x7f0000005640)) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005680), 0x2, 0x0) write$FUSE_POLL(r10, &(0x7f00000056c0)={0x18, 0x0, r2, {0x1}}, 0x18) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000005700), &(0x7f0000005740)=0x4) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000005780)={0x5, 0x0, [{0x40000001, 0xc4, 0x1, 0x4, 0xffff, 0x4}, {0x18000000f, 0x2, 0x5, 0x69, 0x1, 0x2, 0x1c000}, {0xa, 0x5, 0x1, 0x8, 0x0, 0xc}, {0x6, 0x9, 0x7, 0x2, 0x53d, 0xfffffffe, 0x97}, {0x80000019, 0x0, 0x3, 0x5, 0x6, 0x68cd, 0x9}]}) write$P9_RREAD(r3, &(0x7f0000005880)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f00000068c0)) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000006900)={0x8000, 0x8}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000006b80)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006b40)={&(0x7f0000006ac0)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 46.280381688s ago: executing program 2 (id=1547): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0xa, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e", 0xa, 0x800, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e", 0xa, 0x800, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={0x0, 0x9, 0x7}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000004c0)=0xc6, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000004c0)=0xc6, 0x4) lsetxattr$trusted_overlay_opaque(&(0x7f00000008c0)='./cgroup\x00', &(0x7f0000000980), &(0x7f0000000940), 0x2, 0x2) (async) lsetxattr$trusted_overlay_opaque(&(0x7f00000008c0)='./cgroup\x00', &(0x7f0000000980), &(0x7f0000000940), 0x2, 0x2) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r6 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$can_raw(0x1d, 0x3, 0x1) ptrace$setregs(0xd, r7, 0x3, &(0x7f00000009c0)="f30663a339617cf210733c66ed7618f74e58e253827a9c1a5c85567778880b900800549f64b9f54f67c9e7b811a3ee7ce0c8cea5346bf88d5cc563efbdae79053f6c155e384fa3982775f5005f951d0cb43ee58088141b79ac73df64d354c72f370afd9dfea70a0070bc4a7aba018b09a6ecda9bb543f54ee7cf310436f494443331dbe23511b379935b13e09d6eda231e2df29eed2222e8774a797f122235f56330aea2490278ea") (async) ptrace$setregs(0xd, r7, 0x3, &(0x7f00000009c0)="f30663a339617cf210733c66ed7618f74e58e253827a9c1a5c85567778880b900800549f64b9f54f67c9e7b811a3ee7ce0c8cea5346bf88d5cc563efbdae79053f6c155e384fa3982775f5005f951d0cb43ee58088141b79ac73df64d354c72f370afd9dfea70a0070bc4a7aba018b09a6ecda9bb543f54ee7cf310436f494443331dbe23511b379935b13e09d6eda231e2df29eed2222e8774a797f122235f56330aea2490278ea") ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) close(r9) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x61) 46.041375403s ago: executing program 3 (id=1548): sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r2, 0xa0e4f000) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 37.60144551s ago: executing program 1 (id=1549): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@binder={0x73622a85, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x1a}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 33.140263599s ago: executing program 35 (id=1546): pause() r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)={0x40000, 0x4, 0xb}, 0x18) mkdirat(r0, &(0x7f0000001040)='./file0\x00', 0x0) pause() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000010c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = creat(&(0x7f0000003100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x33) r4 = accept$inet6(r3, 0x0, &(0x7f0000004100)) recvfrom(r4, &(0x7f0000004140)=""/178, 0xb2, 0x10000, &(0x7f0000004200)=@phonet={0x23, 0x2, 0x7, 0xb}, 0x80) clock_gettime(0x0, &(0x7f0000004280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000042c0)={{r5, r6+10000000}, {0x0, 0x989680}}, &(0x7f0000004300)) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000004340)='./file0\x00', &(0x7f0000004380)={0x8800, 0x88}, 0x18) mkdirat(r7, &(0x7f00000043c0)='./file0\x00', 0x2) lsm_get_self_attr(0x64, &(0x7f0000004400)={0x0, 0x0, 0x4a, 0x2a, ""/42}, &(0x7f0000004480)=0x4a, 0x1) r8 = socket(0x23, 0x5, 0x2621) timer_create(0x0, &(0x7f0000005500)={0x0, 0x19, 0x2, @thr={&(0x7f00000044c0)="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", &(0x7f00000054c0)="8971163b1c00715fbcd7fbf344373c5be00d81e451185a8b7d6444d03cfd4a880ad71f1066fb8266c45b9b"}}, &(0x7f0000005540)=0x0) timer_delete(r9) close(r8) timerfd_settime(r3, 0x3, &(0x7f0000005580)={{}, {0x0, 0x3938700}}, &(0x7f00000055c0)) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000005600)={0x0, 0x31, ""/49}) timer_gettime(r9, &(0x7f0000005640)) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005680), 0x2, 0x0) write$FUSE_POLL(r10, &(0x7f00000056c0)={0x18, 0x0, r2, {0x1}}, 0x18) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000005700), &(0x7f0000005740)=0x4) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000005780)={0x5, 0x0, [{0x40000001, 0xc4, 0x1, 0x4, 0xffff, 0x4}, {0x18000000f, 0x2, 0x5, 0x69, 0x1, 0x2, 0x1c000}, {0xa, 0x5, 0x1, 0x8, 0x0, 0xc}, {0x6, 0x9, 0x7, 0x2, 0x53d, 0xfffffffe, 0x97}, {0x80000019, 0x0, 0x3, 0x5, 0x6, 0x68cd, 0x9}]}) write$P9_RREAD(r3, &(0x7f0000005880)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f00000068c0)) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000006900)={0x8000, 0x8}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000006b80)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006b40)={&(0x7f0000006ac0)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 26.235948727s ago: executing program 36 (id=1547): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0xa, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e", 0xa, 0x800, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e", 0xa, 0x800, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={0x0, 0x9, 0x7}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000004c0)=0xc6, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000004c0)=0xc6, 0x4) lsetxattr$trusted_overlay_opaque(&(0x7f00000008c0)='./cgroup\x00', &(0x7f0000000980), &(0x7f0000000940), 0x2, 0x2) (async) lsetxattr$trusted_overlay_opaque(&(0x7f00000008c0)='./cgroup\x00', &(0x7f0000000980), &(0x7f0000000940), 0x2, 0x2) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r6 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$can_raw(0x1d, 0x3, 0x1) ptrace$setregs(0xd, r7, 0x3, &(0x7f00000009c0)="f30663a339617cf210733c66ed7618f74e58e253827a9c1a5c85567778880b900800549f64b9f54f67c9e7b811a3ee7ce0c8cea5346bf88d5cc563efbdae79053f6c155e384fa3982775f5005f951d0cb43ee58088141b79ac73df64d354c72f370afd9dfea70a0070bc4a7aba018b09a6ecda9bb543f54ee7cf310436f494443331dbe23511b379935b13e09d6eda231e2df29eed2222e8774a797f122235f56330aea2490278ea") (async) ptrace$setregs(0xd, r7, 0x3, &(0x7f00000009c0)="f30663a339617cf210733c66ed7618f74e58e253827a9c1a5c85567778880b900800549f64b9f54f67c9e7b811a3ee7ce0c8cea5346bf88d5cc563efbdae79053f6c155e384fa3982775f5005f951d0cb43ee58088141b79ac73df64d354c72f370afd9dfea70a0070bc4a7aba018b09a6ecda9bb543f54ee7cf310436f494443331dbe23511b379935b13e09d6eda231e2df29eed2222e8774a797f122235f56330aea2490278ea") ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) close(r9) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x61) 25.659361568s ago: executing program 37 (id=1548): sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r2, 0xa0e4f000) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 25.340268315s ago: executing program 1 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4854}, 0x24040840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000028}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x52}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3f6, 0x30}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "84863d33e0138d0012c7ed92715633dc"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d17cc89ba23ecdcf9fa3e4ad8724ad10"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "af66dc6347fde0ec984a37e11ea5232b"}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r1, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xb7a, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40084}, 0xc1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x2, 0x10000, 0x4, @mcast1, @mcast1, 0x7800, 0x8000, 0x0, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x20, 0x40, 0x5bbd, 0x6, {{0x15, 0x4, 0x3, 0xb, 0x54, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x19, 0x1, [{0x2, 0x6, "beb7014a"}, {0x7, 0xd, "c8c3f508e14b8391c24118"}]}, @timestamp={0x44, 0x14, 0xd2, 0x0, 0x8, [0x3, 0xa26d, 0x1, 0x387f]}, @ssrr={0x89, 0xf, 0x6d, [@broadcast, @rand_addr=0x64010102, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x114, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7acf053191e02f35}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x8c0}, 0x4804) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x118, r10, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x98, 0x3, "d5f34d6e43f658e2bb1fe9bbd067265d3d769ac0c6ff24a28254deac5606e5685623f702901ed8152ee0698b78c764c8f21b116b0f67b4fa61f698ed623bb107cc8572aa827578e6263905dbd97893d137554f80fd0ba090afe4d48143b2fc1a6457204f2203e5cbbb318f4c0e0feb8892212feca5b68b303f84c0546ea80e95ceefaeec4c6e3f48bcfed7bec2325dd3313991c9"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff60c}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x118}}, 0x3) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r11, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}]}, 0x28}}, 0x80) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2, 0x6, 0x5, 0x6, 0x6, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0x9, 0x0, 0x400000000}, @sadb_ident={0x2, 0xb, 0x9}]}, 0x30}}, 0x8800) gettid() sendto(r0, &(0x7f0000000f00)="742044dec9133368dc56c17fd1bbf2cfd6638ebf78a6608ddc4c53ebed21f0c9b7fbd077eec9cd9f5a5854b691cc9c387bc3178b3e607d591e4d7198fd9d7a0302a07a0e3184360b0b90741dd58cb07d2eb2d0f4ca51793d3ad5bd95a973ce3a40f4c615261785e99baf700436b23e3d141cd9becf6b80cc36bf4c08b34df64c3a94b5", 0x83, 0x4040010, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000fc0)) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001080), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r13, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x104, r14, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe296}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x78ce77a1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x90, r10, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x39}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}]}, 0x90}}, 0x400c050) sendmsg$IPVS_CMD_ZERO(r13, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x80, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x84) 16.238032976s ago: executing program 1 (id=1554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=0xe, 0x0) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1, 0x4, 0xfffffffb, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @multicast2}, {0x6, @broadcast}, 0x72, {0x2, 0x4e22, @multicast2}, 'syzkaller0\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}}, 0x14}}, 0xc082) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 38 (id=1554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=0xe, 0x0) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1, 0x4, 0xfffffffb, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @multicast2}, {0x6, @broadcast}, 0x72, {0x2, 0x4e22, @multicast2}, 'syzkaller0\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}}, 0x14}}, 0xc082) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .898378][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.904915][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.911610][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.918236][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.926558][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.933834][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.940462][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.947484][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.954546][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.961817][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.968930][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.976181][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.983261][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.990615][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.997583][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.004785][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.011822][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.018725][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.021037][ T1290] /dev/loop0: Can't lookup blockdev [ 45.026318][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.037519][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.044617][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.051674][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.058262][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.065219][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.075504][ T10] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 45.133039][ T1299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 45.133078][ T1299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:219 [ 45.145528][ T1300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.187877][ T1306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.196392][ T1306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.205946][ T1306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:224 [ 45.212939][ T1306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 45.255606][ T1315] overlayfs: failed to clone lowerpath [ 45.289813][ T1321] loop2: detected capacity change from 0 to 7 [ 45.305261][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.310988][ T1326] fuse: Unknown parameter '_&Jj^fd' [ 45.314586][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.329168][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.338690][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.346894][ T423] loop2: unable to read partition table [ 45.359417][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 45.373290][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.384130][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.396231][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.405568][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.414173][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.423825][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.432744][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.442058][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.450397][ T10] usb 1-1: USB disconnect, device number 10 [ 45.457465][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.467120][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.717494][ T1359] overlayfs: failed to clone upperpath [ 45.999631][ T36] kauditd_printk_skb: 3880 callbacks suppressed [ 45.999649][ T36] audit: type=1326 audit(7027790500.724:4187): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.029930][ T36] audit: type=1326 audit(7027790500.734:4188): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.053842][ T36] audit: type=1326 audit(7027790500.734:4189): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.078125][ T36] audit: type=1326 audit(7027790500.734:4190): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.103173][ T36] audit: type=1326 audit(7027790500.734:4191): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.127671][ T36] audit: type=1326 audit(7027790500.734:4192): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.129694][ T397] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 46.152554][ T36] audit: type=1326 audit(7027790500.734:4193): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.186264][ T36] audit: type=1326 audit(7027790500.734:4194): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.211600][ T36] audit: type=1326 audit(7027790500.734:4195): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.238833][ T36] audit: type=1326 audit(7027790500.734:4196): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x50000 [ 46.311724][ T397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.323583][ T397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.333891][ T397] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 46.343107][ T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.352149][ T397] usb 1-1: config 0 descriptor?? [ 46.562874][ T397] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 46.579385][ T397] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 46.588211][ T397] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 46.597560][ T397] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 46.608574][ T397] usb 1-1: USB disconnect, device number 11 [ 46.705489][ T1416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 46.719628][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 46.859722][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.079758][ T1431] tipc: Enabling of bearer rejected, failed to enable media [ 47.099634][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.349618][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 47.489641][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.590051][ T1445] netlink: 'syz.0.357': attribute type 58 has an invalid length. [ 47.600369][ T1446] netlink: 'syz.0.357': attribute type 58 has an invalid length. [ 47.620825][ T1446] devtmpfs: Unknown parameter 'fuse' [ 47.629113][ T1446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.639316][ T1446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.749608][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.859723][ T9] usb usb3-port1: attempt power cycle [ 47.865474][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.999614][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.209609][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 48.230682][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.239624][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.360625][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.479605][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 48.599634][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 48.619618][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.627507][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.760919][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.859619][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.870152][ T9] usb usb3-port1: unable to enumerate USB device [ 48.969902][ T10] usb usb1-port1: attempt power cycle [ 49.309612][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.340991][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.470650][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.555973][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.729604][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 49.770603][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.900581][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.948899][ T1466] GUP no longer grows the stack in syz.1.365 (1466): 200000001000-200000c01000 (200000000000) [ 49.959528][ T1466] CPU: 0 UID: 0 PID: 1466 Comm: syz.1.365 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 49.959572][ T1466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.959598][ T1466] Call Trace: [ 49.959607][ T1466] [ 49.959619][ T1466] __dump_stack+0x21/0x30 [ 49.959660][ T1466] dump_stack_lvl+0x10c/0x190 [ 49.959691][ T1466] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.959723][ T1466] ? find_vma+0xcd/0x110 [ 49.959745][ T1466] ? detach_entity_load_avg+0x7b0/0x7b0 [ 49.959770][ T1466] dump_stack+0x19/0x20 [ 49.959800][ T1466] __get_user_pages+0x1e34/0x22d0 [ 49.959828][ T1466] ? __kasan_check_write+0x18/0x20 [ 49.959867][ T1466] ? down_read_killable+0x79/0xf0 [ 49.959895][ T1466] ? populate_vma_page_range+0x230/0x230 [ 49.959923][ T1466] ? kernel_text_address+0xa9/0xe0 [ 49.959965][ T1466] __gup_longterm_locked+0xcb1/0x1580 [ 49.959997][ T1466] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 49.960035][ T1466] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.960072][ T1466] gup_fast_fallback+0x12ae/0x14a0 [ 49.960103][ T1466] ? kasan_save_track+0x4f/0x80 [ 49.960125][ T1466] ? kasan_save_track+0x3e/0x80 [ 49.960148][ T1466] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.960181][ T1466] ? get_user_pages_fast_only+0xc0/0xc0 [ 49.960213][ T1466] get_user_pages_fast+0x73/0xb0 [ 49.960241][ T1466] get_futex_key+0x24d/0x930 [ 49.960264][ T1466] ? __cfi_get_futex_key+0x10/0x10 [ 49.960286][ T1466] ? futex_setup_timer+0xb4/0xd0 [ 49.960308][ T1466] futex_lock_pi+0x1c0/0xa10 [ 49.960334][ T1466] ? futex_unqueue+0x136/0x160 [ 49.960357][ T1466] ? __cfi_futex_lock_pi+0x10/0x10 [ 49.960385][ T1466] ? __cfi_futex_wake_mark+0x10/0x10 [ 49.960415][ T1466] ? futex_setup_timer+0xb4/0xd0 [ 49.960437][ T1466] ? __cfi_futex_wake_mark+0x10/0x10 [ 49.960466][ T1466] ? __kasan_check_write+0x18/0x20 [ 49.960500][ T1466] ? up_read+0x26/0x1d0 [ 49.960528][ T1466] do_futex+0x2de/0x500 [ 49.960552][ T1466] ? __cfi_do_futex+0x10/0x10 [ 49.960574][ T1466] ? vm_mmap_pgoff+0x145/0x4e0 [ 49.960610][ T1466] __se_sys_futex+0x28f/0x300 [ 49.960634][ T1466] ? __x64_sys_futex+0x110/0x110 [ 49.960679][ T1466] ? __kasan_check_write+0x18/0x20 [ 49.960716][ T1466] __x64_sys_futex+0xe9/0x110 [ 49.960741][ T1466] x64_sys_call+0x227f/0x2ee0 [ 49.960777][ T1466] do_syscall_64+0x58/0xf0 [ 49.960811][ T1466] ? clear_bhb_loop+0x50/0xa0 [ 49.960839][ T1466] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.960867][ T1466] RIP: 0033:0x7fa990f8ebe9 [ 49.960895][ T1466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.960916][ T1466] RSP: 002b:00007fa991da4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.960958][ T1466] RAX: ffffffffffffffda RBX: 00007fa9911c5fa0 RCX: 00007fa990f8ebe9 [ 49.960978][ T1466] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000200000000b00 [ 49.960994][ T1466] RBP: 00007fa991011e19 R08: 0000000000000000 R09: 0000000000000002 [ 49.961010][ T1466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.961026][ T1466] R13: 00007fa9911c6038 R14: 00007fa9911c5fa0 R15: 00007fff107bc2f8 [ 49.961047][ T1466] [ 50.283846][ T10] usb usb1-port1: unable to enumerate USB device [ 50.297740][ T1468] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.366'. [ 50.365824][ T1482] netlink: 80 bytes leftover after parsing attributes in process `syz.3.371'. [ 50.405414][ T1492] bridge0: port 3(veth0_to_bridge) entered blocking state [ 50.413568][ T1492] bridge0: port 3(veth0_to_bridge) entered disabled state [ 50.421202][ T1492] veth0_to_bridge: entered allmulticast mode [ 50.427614][ T1492] veth0_to_bridge: entered promiscuous mode [ 50.433789][ T1492] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 50.446194][ T1492] bridge0: port 3(veth0_to_bridge) entered blocking state [ 50.453365][ T1492] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 50.699793][ T397] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 50.850691][ T397] usb 3-1: not running at top speed; connect to a high speed hub [ 50.859448][ T397] usb 3-1: config 5 has an invalid interface number: 125 but max is 1 [ 50.868601][ T397] usb 3-1: config 5 has an invalid interface number: 43 but max is 1 [ 50.877473][ T397] usb 3-1: config 5 has an invalid descriptor of length 36, skipping remainder of the config [ 50.888177][ T397] usb 3-1: config 5 has no interface number 0 [ 50.894559][ T397] usb 3-1: config 5 has no interface number 1 [ 50.900974][ T397] usb 3-1: config 5 interface 125 has no altsetting 0 [ 50.907882][ T397] usb 3-1: config 5 interface 43 has no altsetting 0 [ 50.923284][ T397] usb 3-1: string descriptor 0 read error: -22 [ 50.929672][ T397] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=91.20 [ 50.938859][ T397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.950688][ T397] ums-datafab 3-1:5.125: USB Mass Storage device detected [ 50.995445][ T397] ums-sddr55 3-1:5.125: USB Mass Storage device detected [ 51.048687][ T397] ums-datafab 3-1:5.43: USB Mass Storage device detected [ 51.121435][ T397] ums-sddr55 3-1:5.43: USB Mass Storage device detected [ 51.149147][ T1491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.149212][ T1491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.206948][ T1492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 51.271485][ T1530] overlayfs: failed to clone upperpath [ 51.368101][ T1552] EXT4-fs: dax option not supported [ 51.543479][ T1556] rust_binder: Write failure EFAULT in pid:139 [ 51.730867][ T1562] rust_binder: 145: no such ref 3 [ 51.742282][ T1562] rust_binder: 145: no such ref 0 [ 51.747362][ T1562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145 [ 51.761075][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 51.761094][ T36] audit: type=1400 audit(7027790506.484:4266): avc: denied { append } for pid=1565 comm="syz.0.398" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.015860][ T1587] 9p filesystem being mounted at /120/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 52.382340][ T1610] rust_binder: 152: no such ref 1 [ 52.388136][ T1610] rust_binder: Write failure EFAULT in pid:152 [ 53.410552][ T397] usb 3-1: USB disconnect, device number 17 [ 53.436644][ T1626] binder: Bad value for 'max' [ 53.462080][ T1629] 9pnet_virtio: no channels available for device 127.0.0.1 [ 53.489877][ T1631] rust_binder: Write failure EFAULT in pid:271 [ 53.504506][ T1634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.542266][ T36] audit: type=1400 audit(7027790508.264:4267): avc: denied { mounton } for pid=1640 comm="syz.2.422" path="/file0" dev="ramfs" ino=9783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 53.549629][ T1641] overlayfs: failed to clone lowerpath [ 53.579724][ T1641] overlayfs: failed to clone upperpath [ 53.619396][ T36] audit: type=1400 audit(7027790508.334:4268): avc: granted { setsecparam } for pid=1642 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 53.638801][ T36] audit: type=1400 audit(7027790508.334:4269): avc: denied { watch watch_reads } for pid=1644 comm="syz.0.424" path="/47" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.663697][ T36] audit: type=1400 audit(7027790508.354:4270): avc: denied { getopt } for pid=1642 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.698772][ T1652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 53.698813][ T1652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:286 [ 53.709491][ T1652] rust_binder: 286: no such ref 3 [ 53.729323][ T1652] rust_binder: Write failure EINVAL in pid:286 [ 53.739744][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.769453][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.847002][ T36] audit: type=1400 audit(7027790508.564:4271): avc: denied { mounton } for pid=1677 comm="syz.0.435" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.973943][ T1700] rust_binder: Write failure EFAULT in pid:296 [ 54.169648][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 54.309646][ T10] usb 1-1: device descriptor read/64, error -71 [ 54.549693][ T10] usb 1-1: device descriptor read/64, error -71 [ 54.706495][ T36] audit: type=1400 audit(7027790509.424:4272): avc: denied { block_suspend } for pid=1750 comm="syz.3.459" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.765375][ T36] audit: type=1326 audit(7027790509.484:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1690 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c58ebe9 code=0x7fc00000 [ 54.799630][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 54.939624][ T10] usb 1-1: device descriptor read/64, error -71 [ 55.079623][ T64] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 55.179626][ T10] usb 1-1: device descriptor read/64, error -71 [ 55.231112][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.247214][ T64] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 55.277907][ T64] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.299890][ T10] usb usb1-port1: attempt power cycle [ 55.316992][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 55.326676][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 55.341826][ T64] usb 3-1: Product: syz [ 55.354748][ T64] usb 3-1: Manufacturer: syz [ 55.364888][ T64] usb 3-1: SerialNumber: syz [ 55.403164][ T1793] fuse: blksize only supported for fuseblk [ 55.444493][ T36] audit: type=1400 audit(7027790510.164:4274): avc: denied { create } for pid=1786 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.582009][ T64] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 55.649656][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 55.680681][ T10] usb 1-1: device descriptor read/8, error -71 [ 55.783064][ T64] usb 3-1: USB disconnect, device number 18 [ 55.799873][ T36] audit: type=1400 audit(7027790510.504:4275): avc: denied { read write } for pid=1758 comm="syz.2.463" name="lp0" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.838119][ T10] usb 1-1: device descriptor read/8, error -71 [ 55.856554][ T64] usblp0: removed [ 56.038062][ T1841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=1841 comm=syz.1.487 [ 56.089620][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 56.133184][ T10] usb 1-1: device descriptor read/8, error -71 [ 56.151704][ T1847] devtmpfs: Unknown parameter 'fuse' [ 56.270756][ T10] usb 1-1: device descriptor read/8, error -71 [ 56.390428][ T10] usb usb1-port1: unable to enumerate USB device [ 56.736976][ T1866] netlink: 'syz.3.495': attribute type 4 has an invalid length. [ 57.110668][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 57.110687][ T36] audit: type=1400 audit(7027790511.834:4279): avc: denied { map } for pid=1875 comm="syz.2.499" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.160053][ T1877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.179702][ T36] audit: type=1400 audit(7027790511.874:4280): avc: denied { ioctl } for pid=1875 comm="syz.2.499" path="/dev/usbmon0" dev="devtmpfs" ino=89 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.219682][ T36] audit: type=1400 audit(7027790511.934:4281): avc: denied { unmount } for pid=1880 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.291543][ T36] audit: type=1400 audit(7027790512.014:4282): avc: denied { setopt } for pid=1886 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.341816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.354196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.366975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.382210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.395565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.408444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.421544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.434631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.448798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.462108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.549591][ T36] audit: type=1400 audit(7027790512.264:4283): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.589658][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 57.760709][ T10] usb 1-1: config 0 has no interfaces? [ 57.768512][ T10] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 57.779343][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.795607][ T10] usb 1-1: SerialNumber: syz [ 57.809018][ T10] usb 1-1: config 0 descriptor?? [ 57.889400][ T36] audit: type=1400 audit(7027790512.604:4284): avc: denied { shutdown } for pid=1907 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.091307][ T338] usb 1-1: USB disconnect, device number 20 [ 58.179969][ T1913] binder: Bad value for 'stats' [ 58.267733][ T1919] 9p filesystem being mounted at /54/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 58.297663][ T1919] netlink: 104 bytes leftover after parsing attributes in process `syz.0.514'. [ 58.587240][ T36] audit: type=1400 audit(7027790513.304:4285): avc: denied { lock } for pid=1924 comm="syz.0.517" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.629708][ T338] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 58.809614][ T338] usb 3-1: Invalid ep0 maxpacket: 32 [ 58.949847][ T338] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 59.079613][ T64] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 59.105818][ T338] usb 3-1: Invalid ep0 maxpacket: 32 [ 59.111915][ T338] usb usb3-port1: attempt power cycle [ 59.231453][ T64] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 59.240475][ T64] usb 1-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 59.251263][ T64] usb 1-1: config 0 has no interface number 0 [ 59.259263][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 59.269222][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.277899][ T64] usb 1-1: Product: syz [ 59.282561][ T64] usb 1-1: Manufacturer: syz [ 59.288583][ T64] usb 1-1: SerialNumber: syz [ 59.295819][ T64] usb 1-1: config 0 descriptor?? [ 59.303741][ T64] hub 1-1:0.31: bad descriptor, ignoring hub [ 59.310637][ T64] hub 1-1:0.31: probe with driver hub failed with error -5 [ 59.362928][ T36] audit: type=1326 audit(7027790514.084:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.3.522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a3b18ebe9 code=0x0 [ 59.459726][ T338] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 59.490197][ T338] usb 3-1: Invalid ep0 maxpacket: 32 [ 59.572721][ T1943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.585011][ T1943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.595218][ T1943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1024 sclass=netlink_xfrm_socket pid=1943 comm=syz.0.520 [ 59.611188][ T1943] rust_binder: 1933 RLIMIT_NICE not set [ 59.639706][ T338] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 59.701608][ T338] usb 3-1: Invalid ep0 maxpacket: 32 [ 59.714277][ T338] usb usb3-port1: unable to enumerate USB device [ 60.223856][ T1964] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 60.253560][ T1964] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 60.366084][ T1975] rust_binder: Write failure EFAULT in pid:202 [ 60.373831][ T1975] rust_binder: Write failure EFAULT in pid:202 [ 60.433526][ T36] audit: type=1400 audit(7027790515.154:4287): avc: denied { bind } for pid=1981 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.812609][ T1991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=1991 comm=syz.1.541 [ 60.827898][ T1991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1281 sclass=netlink_tcpdiag_socket pid=1991 comm=syz.1.541 [ 60.842335][ T1991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1991 comm=syz.1.541 [ 60.933869][ T36] audit: type=1400 audit(7027790515.654:4288): avc: denied { accept } for pid=1994 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.371317][ T2011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.374496][ T2012] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 61.391609][ T2012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.402685][ T2012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:211 [ 61.441036][ T2014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.464901][ T2014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.599822][ T2021] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.554'. [ 61.624759][ T2023] rust_binder: Write failure EFAULT in pid:344 [ 62.118002][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.139325][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.349708][ C1] net_ratelimit: 46258 callbacks suppressed [ 62.349733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.369805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.384152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.399162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 62.413005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.426954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.440606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.454514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 62.467491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.480616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.710922][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 62.710945][ T36] audit: type=1400 audit(7027790517.434:4292): avc: denied { read } for pid=2075 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.004312][ T36] audit: type=1400 audit(7027790517.724:4293): avc: denied { setattr } for pid=2085 comm="syz.3.577" name="NETLINK" dev="sockfs" ino=12284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.196408][ T2101] overlayfs: failed to clone lowerpath [ 63.461030][ T36] audit: type=1400 audit(7027790518.184:4294): avc: denied { setattr } for pid=2104 comm="syz.2.582" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.717783][ T36] audit: type=1400 audit(7027790518.434:4295): avc: denied { relabelfrom } for pid=2113 comm="syz.0.585" name="" dev="pipefs" ino=12418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 63.756717][ T36] audit: type=1401 audit(7027790518.464:4296): op=setxattr invalid_context="" [ 63.959595][ T1934] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 64.119697][ T1934] usb 3-1: Using ep0 maxpacket: 8 [ 64.126269][ T1934] usb 3-1: config index 0 descriptor too short (expected 546, got 34) [ 64.136470][ T1934] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 64.145267][ T1934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.155790][ T1934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 64.165009][ T1934] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 64.174577][ T1934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.186972][ T1934] usb 3-1: config 0 descriptor?? [ 64.380637][ T64] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 64.393410][ T64] usb 1-1: No valid video chain found. [ 64.401811][ T2115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.402378][ T2115] rust_binder: Error while translating object. [ 64.416419][ T2115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 64.426859][ T2115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:377 [ 64.441189][ T64] usb 3-1: USB disconnect, device number 23 [ 64.692114][ T2151] netlink: 'syz.3.596': attribute type 6 has an invalid length. [ 64.789576][ T2158] fuse: Unknown parameter 'dont_appraise' [ 64.797887][ T2157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2157 comm=syz.3.597 [ 64.818898][ T2158] syz.0.599: attempt to access beyond end of device [ 64.818898][ T2158] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 64.832497][ T2158] EXT4-fs (loop0): unable to read superblock [ 64.964990][ T36] audit: type=1400 audit(7027790519.684:4297): avc: denied { map } for pid=2165 comm="syz.0.602" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 64.998315][ T2168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.998419][ T2167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.077953][ T36] audit: type=1400 audit(7027790519.794:4298): avc: denied { ioctl } for pid=2175 comm="syz.2.604" path="uts:[4026532466]" dev="nsfs" ino=4026532466 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.110544][ T2178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 65.110585][ T2178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:380 [ 65.175558][ T2184] rust_binder: Error while translating object. [ 65.185587][ T2184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 65.193842][ T2184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:384 [ 65.376428][ T2202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.400171][ T2202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.640846][ T36] audit: type=1400 audit(7027790520.364:4299): avc: denied { create } for pid=2205 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.154698][ T2231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.164499][ T2231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.186721][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.323867][ T36] audit: type=1400 audit(7027790521.044:4300): avc: denied { create } for pid=2243 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.344966][ T36] audit: type=1326 audit(7027790521.064:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2243 comm="syz.3.628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a3b18ebe9 code=0x0 [ 67.256214][ T2276] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 67.293134][ T2278] sit0: entered promiscuous mode [ 67.300403][ T2278] netlink: 1 bytes leftover after parsing attributes in process `syz.3.642'. [ 67.328078][ T2280] fuse: Bad value for 'fd' [ 67.332961][ T2281] fuse: Bad value for 'fd' [ 67.359589][ C1] net_ratelimit: 50799 callbacks suppressed [ 67.359620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.378350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.390868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 67.403121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.415352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.427983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.441001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 67.454294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.466652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.479341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.530749][ T2298] tipc: Enabling of bearer rejected, failed to enable media [ 68.211498][ T2311] netlink: 'syz.3.655': attribute type 46 has an invalid length. [ 68.220227][ T2232] Bluetooth: hci0: command 0x1003 tx timeout [ 68.226624][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.235881][ T2311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'. [ 68.252632][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 68.252651][ T36] audit: type=1400 audit(7027790522.974:4305): avc: denied { getopt } for pid=2310 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.895554][ T2343] netlink: 'syz.0.666': attribute type 4 has an invalid length. [ 69.035045][ T2352] overlayfs: failed to clone upperpath [ 69.081991][ T36] audit: type=1400 audit(7027790523.794:4306): avc: denied { map } for pid=2357 comm="syz.0.672" path="socket:[13460]" dev="sockfs" ino=13460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 69.940221][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.980585][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.051219][ T2397] tipc: Started in network mode [ 70.057279][ T2397] tipc: Node identity ac14140f, cluster identity 4711 [ 70.069154][ T36] audit: type=1400 audit(7027790524.784:4307): avc: denied { bind } for pid=2391 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.095189][ T2397] tipc: New replicast peer: 255.255.255.255 [ 70.115304][ T2397] tipc: Enabled bearer , priority 10 [ 70.248752][ T2419] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 70.613190][ T2426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.693'. [ 71.103076][ T2442] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 71.123478][ T2441] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.123508][ T2441] rust_binder: Read failure Err(EFAULT) in pid:422 [ 71.194667][ T36] audit: type=1400 audit(7027790525.914:4308): avc: denied { remount } for pid=2445 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.221906][ T2446] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 71.236794][ T1934] tipc: Node number set to 2886997007 [ 71.246319][ T36] audit: type=1400 audit(7027790525.964:4309): avc: denied { write } for pid=2444 comm="syz.0.700" name="anycast6" dev="proc" ino=4026532863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.271249][ T2452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 71.280810][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 71.294529][ T2450] netlink: 44 bytes leftover after parsing attributes in process `syz.1.702'. [ 71.566465][ T2477] rust_binder: Write failure EFAULT in pid:328 [ 71.846074][ T64] rust_binder: 0: removing orphan mapping 0:4248 [ 71.879605][ T1934] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 71.905134][ T953] bridge_slave_1: left allmulticast mode [ 71.919802][ T953] bridge_slave_1: left promiscuous mode [ 71.928925][ T953] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.948557][ T953] bridge_slave_0: left allmulticast mode [ 71.955698][ T10] usb 1-1: USB disconnect, device number 21 [ 71.969648][ T953] bridge_slave_0: left promiscuous mode [ 71.985179][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.039607][ T1934] usb 3-1: Using ep0 maxpacket: 32 [ 72.057440][ T1934] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.091799][ T1934] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.117388][ T1934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.137126][ T1934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.157529][ T1934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.179229][ T1934] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.207290][ T1934] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.229576][ T1934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.250898][ T1934] usb 3-1: config 0 descriptor?? [ 72.325989][ T953] tipc: Disabling bearer [ 72.336904][ T953] tipc: Left network mode [ 72.357253][ T953] veth1_macvtap: left promiscuous mode [ 72.363381][ T953] veth0_vlan: left promiscuous mode [ 72.369605][ C1] net_ratelimit: 54567 callbacks suppressed [ 72.369626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.388181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 72.400982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.413258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.425533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.438324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 72.450553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.462817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.470504][ T1934] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.475329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.498054][ T1934] usb 3-1: USB disconnect, device number 24 [ 72.498402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 72.506852][ T1934] usblp0: removed [ 72.681519][ T2490] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.689657][ T2490] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.703983][ T2490] bridge_slave_0: entered allmulticast mode [ 72.710940][ T2490] bridge_slave_0: entered promiscuous mode [ 72.717671][ T2490] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.725344][ T2490] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.732715][ T2490] bridge_slave_1: entered allmulticast mode [ 72.739380][ T2490] bridge_slave_1: entered promiscuous mode [ 72.849355][ T2490] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.856611][ T2490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.864067][ T2490] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.871338][ T2490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.906152][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.915412][ T953] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.930101][ T953] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.937550][ T953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.967042][ T953] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.974300][ T953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.019652][ T1934] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 73.033317][ T2490] veth0_vlan: entered promiscuous mode [ 73.050777][ T2490] veth1_macvtap: entered promiscuous mode [ 73.169637][ T1934] usb 3-1: Using ep0 maxpacket: 32 [ 73.179140][ T1934] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 73.188179][ T1934] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 73.197453][ T1934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 73.207742][ T1934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.218044][ T1934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.228389][ T1934] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 73.242812][ T1934] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 73.252592][ T1934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.273125][ T1934] usb 3-1: config 0 descriptor?? [ 73.314312][ T36] audit: type=1400 audit(7027790528.034:4310): avc: denied { unlink } for pid=2505 comm="syz.4.717" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 73.732838][ T1934] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.779232][ T1934] usb 3-1: USB disconnect, device number 25 [ 73.797638][ T1934] usblp0: removed [ 74.206230][ T2553] overlayfs: failed to clone upperpath [ 74.216027][ T2553] overlayfs: failed to clone upperpath [ 74.247226][ T2558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 74.299481][ T2564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.309845][ T2564] rust_binder: Failed copying remainder into alloc: EFAULT [ 74.317219][ T2564] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 74.325177][ T2564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 74.334368][ T2564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:440 [ 74.568072][ T2572] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 74.587793][ T36] audit: type=1400 audit(7027790529.304:4311): avc: denied { relabelto } for pid=2571 comm="syz.4.743" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 74.626593][ T36] audit: type=1400 audit(7027790529.334:4312): avc: denied { associate } for pid=2571 comm="syz.4.743" name="file0" dev="tmpfs" ino=56 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 74.694241][ T36] audit: type=1400 audit(7027790529.404:4313): avc: denied { unlink } for pid=2490 comm="syz-executor" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 74.742617][ T2580] overlayfs: missing 'lowerdir' [ 74.779666][ T1934] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 74.897652][ T2591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.906714][ T2591] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 74.917353][ T2591] overlayfs: missing 'lowerdir' [ 74.927186][ T2591] fuse: Unknown parameter 'rootmoden' [ 74.933269][ T1934] usb 3-1: Using ep0 maxpacket: 16 [ 74.940863][ T1934] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.958213][ T1934] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.978094][ T1934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.990830][ T1934] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 75.022490][ T1934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.038403][ T1934] usb 3-1: config 0 descriptor?? [ 75.087795][ T2598] overlayfs: failed to clone upperpath [ 75.142952][ T2605] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 75.151499][ T36] audit: type=1400 audit(7027790529.864:4314): avc: denied { load_policy } for pid=2603 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.173049][ T2605] SELinux: failed to load policy [ 75.448578][ T1934] microsoft 0003:045E:009D.0005: item fetching failed at offset 10/11 [ 75.463177][ T1934] microsoft 0003:045E:009D.0005: parse failed [ 75.478166][ T1934] microsoft 0003:045E:009D.0005: probe with driver microsoft failed with error -22 [ 75.519261][ T2624] rust_binder: 44: no such ref 0 [ 75.534321][ T2624] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.552528][ T2624] rust_binder: 44: no such ref 0 [ 75.667352][ T2628] rust_binder: Read failure Err(EAGAIN) in pid:46 [ 75.678304][ T1934] usb 3-1: USB disconnect, device number 26 [ 77.379661][ C1] net_ratelimit: 49946 callbacks suppressed [ 77.379687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.403165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 77.417736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.431383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.445960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.461630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 77.475707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.489918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.502983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.515411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 77.957344][ T2667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.016292][ T2667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.081765][ T2667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.143851][ T2667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.199598][ T1934] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 78.293888][ T2673] netlink: 'syz.3.781': attribute type 16 has an invalid length. [ 78.364930][ T2673] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.781'. [ 78.409728][ T2670] rust_binder: Error in use_page_slow: ESRCH [ 78.409757][ T2670] rust_binder: use_range failure ESRCH [ 78.416097][ T2670] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 78.479458][ T2670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.559498][ T1934] usb 3-1: device descriptor read/all, error -61 [ 78.600784][ T2670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:461 [ 78.761561][ T1934] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 78.882340][ T2683] overlayfs: missing 'lowerdir' [ 78.936140][ T36] audit: type=1400 audit(7027790533.654:4315): avc: denied { listen } for pid=2685 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 78.966797][ T1934] usb 3-1: device descriptor read/64, error -71 [ 79.114426][ T2693] syz.3.788 uses obsolete (PF_INET,SOCK_PACKET) [ 79.132693][ T2692] overlayfs: failed to clone lowerpath [ 79.243571][ T36] audit: type=1400 audit(7027790533.964:4316): avc: denied { write } for pid=2696 comm="syz.3.790" name="file2" dev="tmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.266996][ T1934] usb 3-1: device descriptor read/64, error -71 [ 79.284846][ T36] audit: type=1400 audit(7027790533.964:4317): avc: denied { open } for pid=2696 comm="syz.3.790" path="/229/file2" dev="tmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.322377][ T36] audit: type=1400 audit(7027790533.964:4318): avc: denied { ioctl } for pid=2696 comm="syz.3.790" path="/229/file2" dev="tmpfs" ino=1266 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.365480][ T36] audit: type=1400 audit(7027790534.084:4319): avc: denied { create } for pid=2703 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.389745][ T1934] usb usb3-port1: attempt power cycle [ 79.416309][ T36] audit: type=1400 audit(7027790534.124:4320): avc: denied { write } for pid=2703 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.467666][ T2706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 79.543626][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.709629][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 79.717479][ T64] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 79.727245][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.735393][ T1934] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 79.746830][ T64] usb 5-1: config 0 descriptor?? [ 79.770756][ T1934] usb 3-1: device descriptor read/8, error -71 [ 79.900422][ T36] audit: type=1326 audit(7027790534.624:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.3.797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a3b18ebe9 code=0x0 [ 79.924397][ T1934] usb 3-1: device descriptor read/8, error -71 [ 79.955202][ T64] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 80.169892][ T1934] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 80.210782][ T1934] usb 3-1: device descriptor read/8, error -71 [ 80.334586][ T2731] tipc: Enabling of bearer rejected, failed to enable media [ 80.345661][ T1934] usb 3-1: device descriptor read/8, error -71 [ 80.461825][ T1934] usb usb3-port1: unable to enumerate USB device [ 81.164353][ T64] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 81.192634][ T64] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 81.218801][ T64] asix 5-1:0.0: probe with driver asix failed with error -71 [ 81.246333][ T64] usb 5-1: USB disconnect, device number 2 [ 81.783682][ T36] audit: type=1400 audit(7027790536.504:4322): avc: denied { map } for pid=2809 comm="syz.4.832" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.865918][ T2818] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.877600][ T2818] rust_binder: Write failure EFAULT in pid:59 [ 81.919381][ T36] audit: type=1400 audit(7027790536.634:4323): avc: denied { create } for pid=2813 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.081678][ T2822] rust_binder: Write failure EFAULT in pid:63 [ 82.389690][ C1] net_ratelimit: 49611 callbacks suppressed [ 82.389715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 82.410293][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.418254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.438446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.451922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.464777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 82.477898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.491219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.503751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.516989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 82.529646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.591251][ T2848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 82.600686][ T64] usb 5-1: device descriptor read/64, error -71 [ 82.776731][ T2859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.777169][ T2859] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 82.836371][ T2864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.849633][ T64] usb 5-1: device descriptor read/64, error -71 [ 83.109618][ T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.259640][ T64] usb 5-1: device descriptor read/64, error -71 [ 83.326130][ T2884] 9pnet_fd: Insufficient options for proto=fd [ 83.333087][ T36] audit: type=1400 audit(7027790538.044:4324): avc: denied { create } for pid=2883 comm="syz.3.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 83.529596][ T64] usb 5-1: device descriptor read/64, error -71 [ 83.646293][ T64] usb usb5-port1: attempt power cycle [ 83.933780][ T2906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.934278][ T2906] rust_binder: Got transaction with invalid offset. [ 83.941540][ T2906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.948512][ T2906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 83.999622][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.026552][ T2909] binder: Bad value for 'stats' [ 84.033069][ T64] usb 5-1: device descriptor read/8, error -71 [ 84.155256][ T36] audit: type=1400 audit(7027790538.874:4325): avc: denied { view } for pid=2910 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.177121][ T64] usb 5-1: device descriptor read/8, error -71 [ 84.201747][ T36] audit: type=1400 audit(7027790538.924:4326): avc: denied { create } for pid=2914 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 84.380198][ T2933] 9pnet_fd: Insufficient options for proto=fd [ 84.400410][ T2934] netlink: 'syz.3.876': attribute type 4 has an invalid length. [ 84.417723][ T2934] netlink: 'syz.3.876': attribute type 4 has an invalid length. [ 84.425748][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.451178][ T64] usb 5-1: device descriptor read/8, error -71 [ 84.581080][ T64] usb 5-1: device descriptor read/8, error -71 [ 84.699711][ T64] usb usb5-port1: unable to enumerate USB device [ 86.102379][ T2982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 86.791689][ T2987] rust_binder: Error in use_page_slow: ESRCH [ 86.791719][ T2987] rust_binder: use_range failure ESRCH [ 86.838527][ T2987] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 86.863709][ T2987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 86.924090][ T2987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:520 [ 87.190213][ T2998] binder: Unknown parameter 'fscontext?}' [ 87.399618][ C1] net_ratelimit: 37094 callbacks suppressed [ 87.399642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 87.418347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.430909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.444593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.457170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 87.469570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.483182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.497193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.509675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 87.521946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.229572][ T36] audit: type=1400 audit(7027790542.944:4327): avc: denied { create } for pid=3037 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.639600][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 88.799581][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 88.806147][ T10] usb 3-1: config 1 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 1024 [ 88.816880][ T10] usb 3-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.831925][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 88.840663][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.850351][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.858858][ T10] usb 3-1: Product: Ж [ 88.863485][ T10] usb 3-1: Manufacturer: 灱铵꺰즚猇渄菚ﻄ䰤粡㧎᷄봜븛쌶총뭣φﴫր෧髾떓᫙쾊쵆榚⾛Რ冹姉륏ﴶ美ீ烡遤㳛푁㧥㔓⹁屏슨⼀㡆꒏湠坷ࢤ鶠恶⷇⇟욦咝༩വ樲췾餦꤭฿䪚ວ璝荎࿜䛐辽续杤屽琒肺ꭚ欅码ᖅ༠朴䙨唦⓿遬꩔㲼漱㝵嗆딾㘌椋ꋺ㛓鸑控뺧愅챳졧ꞣ볖㜤凞쵢五⦤ [ 88.906902][ T10] usb 3-1: SerialNumber: syz [ 88.914367][ T3045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.129270][ T3045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.139807][ T3045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.150981][ T3043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.161337][ T3043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.279155][ T3088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.933'. [ 89.436092][ T3105] overlayfs: failed to clone upperpath [ 89.448100][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 249 proto 1 vid 0x0525 pid 0xA4A8 [ 89.464931][ T10] usb 3-1: USB disconnect, device number 31 [ 89.481224][ T10] usblp0: removed [ 89.639639][ T1934] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.779640][ T1934] usb 5-1: device descriptor read/64, error -71 [ 90.019627][ T1934] usb 5-1: device descriptor read/64, error -71 [ 90.092702][ T3130] !@: renamed from xfrm0 (while UP) [ 90.209628][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 90.279830][ T1934] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 90.369602][ T10] usb 3-1: device descriptor read/64, error -71 [ 90.429601][ T1934] usb 5-1: device descriptor read/64, error -71 [ 90.609608][ T10] usb 3-1: device descriptor read/64, error -71 [ 90.679582][ T1934] usb 5-1: device descriptor read/64, error -71 [ 90.790317][ T1934] usb usb5-port1: attempt power cycle [ 90.819060][ T3157] 9pnet_fd: Insufficient options for proto=fd [ 90.849596][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 90.868586][ T36] audit: type=1400 audit(7027790545.584:4328): avc: denied { create } for pid=3166 comm="syz.1.961" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.890546][ T3167] cgroup: No subsys list or none specified [ 90.902864][ T36] audit: type=1400 audit(7027790545.614:4329): avc: denied { mounton } for pid=3166 comm="syz.1.961" path="/303/file0" dev="tmpfs" ino=1641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.934972][ T36] audit: type=1400 audit(7027790545.624:4330): avc: denied { setattr } for pid=3166 comm="syz.1.961" name="file0" dev="tmpfs" ino=1641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.989599][ T10] usb 3-1: device descriptor read/64, error -71 [ 91.139632][ T1934] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.181080][ T1934] usb 5-1: device descriptor read/8, error -71 [ 91.239689][ T10] usb 3-1: device descriptor read/64, error -71 [ 91.332413][ T1934] usb 5-1: device descriptor read/8, error -71 [ 91.349725][ T10] usb usb3-port1: attempt power cycle [ 91.569611][ T1934] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 91.600623][ T1934] usb 5-1: device descriptor read/8, error -71 [ 91.689601][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 91.720713][ T10] usb 3-1: device descriptor read/8, error -71 [ 91.730798][ T1934] usb 5-1: device descriptor read/8, error -71 [ 91.842501][ T1934] usb usb5-port1: unable to enumerate USB device [ 91.850891][ T10] usb 3-1: device descriptor read/8, error -71 [ 92.089603][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 92.111412][ T10] usb 3-1: device descriptor read/8, error -71 [ 92.253468][ T10] usb 3-1: device descriptor read/8, error -71 [ 92.330624][ T36] audit: type=1400 audit(7027790547.054:4331): avc: denied { ioctl } for pid=3224 comm="syz.3.982" path="socket:[17369]" dev="sockfs" ino=17369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.382312][ T10] usb usb3-port1: unable to enumerate USB device [ 92.409639][ C1] net_ratelimit: 44977 callbacks suppressed [ 92.409662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.429067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.442295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.447649][ T3230] rust_binder: Error while translating object. [ 92.456164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.456754][ T3230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 92.463189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.475860][ T3230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:102 [ 92.485437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 92.521383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.534174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.547059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.559825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.569031][ T3237] netlink: 44 bytes leftover after parsing attributes in process `syz.4.986'. [ 92.582217][ T3237] netlink: 43 bytes leftover after parsing attributes in process `syz.4.986'. [ 92.591774][ T3237] netlink: 'syz.4.986': attribute type 6 has an invalid length. [ 92.604472][ T3237] netlink: 'syz.4.986': attribute type 5 has an invalid length. [ 92.612935][ T3237] netlink: 43 bytes leftover after parsing attributes in process `syz.4.986'. [ 92.819085][ T3248] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 92.819118][ T3248] rust_binder: Error while translating object. [ 92.836102][ T3248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.842746][ T3248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 92.890647][ T3252] batadv_slave_1: entered promiscuous mode [ 92.912721][ T3252] netlink: 32 bytes leftover after parsing attributes in process `syz.1.994'. [ 92.923790][ T3249] batadv_slave_1: left promiscuous mode [ 93.049567][ T36] audit: type=1400 audit(7027790547.764:4332): avc: denied { accept } for pid=3260 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.086760][ T3262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.106211][ T3264] fuse: Unknown parameter './file0' [ 93.185399][ T36] audit: type=1326 audit(7027790547.904:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.4.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52d998ebe9 code=0x0 [ 93.324875][ T3286] tipc: Enabling of bearer rejected, failed to enable media [ 93.430622][ T3296] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 93.439204][ T3299] tipc: Started in network mode [ 93.444253][ T3299] tipc: Node identity ac14140f, cluster identity 4711 [ 93.451300][ T3296] rust_binder: 129: no such ref 3 [ 93.457039][ T3296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 93.457219][ T3299] tipc: New replicast peer: 255.255.255.255 [ 93.474705][ T36] audit: type=1400 audit(7027790548.194:4334): avc: denied { read write } for pid=3292 comm="syz.4.1011" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.499065][ T3299] tipc: Enabled bearer , priority 10 [ 93.506061][ T36] audit: type=1400 audit(7027790548.194:4335): avc: denied { open } for pid=3292 comm="syz.4.1011" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.560639][ T36] audit: type=1400 audit(7027790548.254:4336): avc: denied { map } for pid=3298 comm="syz.1.1013" path="socket:[17653]" dev="sockfs" ino=17653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.659648][ T1934] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 93.812396][ T1934] usb 3-1: not running at top speed; connect to a high speed hub [ 93.821742][ T1934] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.836603][ T1934] usb 3-1: config 1 interface 0 has no altsetting 0 [ 93.845634][ T1934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.855318][ T1934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.863626][ T64] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 93.871504][ T1934] usb 3-1: Product: 티埵㢈咄秖ᗿ㨶ꩊ턒ᨩ즗￿綐숟㶿ힵ஛諦唧鄺뗸➙꿞ꄰ揱Ὦ዇뉼䠈́᦬눬奟觇껪靃겤암♓掷骜ꖩ埃컵ᝒ慿ᓋ⃤눹璃俠钄磶⣤漎炆ﬓ꥾锿෶⊐ⷌ⫨◣봂埍⣷뇬蓄㵘靈馻ⱇㅬ᪃뺐糕慴鿧໇䤟㴾ꟼ᳕ꙗ不嵀쿒蹖狃ꪺ刡层夶뵰莑싷묱ꙏ佹⟾솮㵮텠ମ絢왚龍늱먣 [ 93.907875][ T1934] usb 3-1: Manufacturer: ј [ 93.912789][ T1934] usb 3-1: SerialNumber: syz [ 94.062471][ T64] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 94.071740][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.082601][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.093559][ T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.103242][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.113302][ T64] usb 5-1: Product: syz [ 94.117538][ T64] usb 5-1: Manufacturer: syz [ 94.122638][ T64] usb 5-1: SerialNumber: syz [ 94.136184][ T1934] usb 3-1: USB disconnect, device number 36 [ 94.489603][ T1934] tipc: Node number set to 2886997007 [ 94.554470][ T64] usb 5-1: 0:2 : does not exist [ 94.970244][ T3306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.986817][ T3306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.006184][ T3306] rust_binder: Error while translating object. [ 95.006224][ T3306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 95.017272][ T3306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:131 [ 95.028558][ T3342] rust_binder: Error in use_page_slow: ESRCH [ 95.038730][ T3342] rust_binder: use_range failure ESRCH [ 95.049500][ T3342] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 95.055239][ T3342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 95.063879][ T3342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:570 [ 95.074363][ T64] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 95.096350][ T64] usb 5-1: USB disconnect, device number 11 [ 95.109270][ T423] udevd[423]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.185091][ T36] audit: type=1400 audit(2000000001.050:4337): avc: denied { create } for pid=3346 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.271934][ T3349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 95.291824][ T3357] No source specified [ 95.296984][ T3357] x_tables: unsorted underflow at hook 2 [ 95.468943][ T3376] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 95.633996][ T3389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.650960][ T3389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.748175][ T3393] rust_binder: Write failure EFAULT in pid:137 [ 95.859605][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 96.009603][ T9] usb 3-1: device descriptor read/64, error -71 [ 96.145631][ T64] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 96.168622][ T3406] netlink: 'syz.1.1049': attribute type 4 has an invalid length. [ 96.236115][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 96.236135][ T36] audit: type=1326 audit(2000000002.100:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.1.1050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990f8ebe9 code=0x0 [ 96.279705][ T9] usb 3-1: device descriptor read/64, error -71 [ 96.302396][ T64] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 96.312241][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.331054][ T64] usb 5-1: Product: syz [ 96.340921][ T64] usb 5-1: Manufacturer: syz [ 96.348238][ T64] usb 5-1: SerialNumber: syz [ 96.354441][ T64] usb 5-1: config 0 descriptor?? [ 96.366710][ T64] usb-storage 5-1:0.0: USB Mass Storage device detected [ 96.519664][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 96.568980][ T36] audit: type=1400 audit(2000000002.430:4343): avc: denied { rename } for pid=3394 comm="syz.4.1045" name="file1" dev="overlay" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.599375][ T36] audit: type=1400 audit(2000000002.430:4344): avc: denied { setattr } for pid=3394 comm="syz.4.1045" name="#b" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.679618][ T9] usb 3-1: device descriptor read/64, error -71 [ 96.919620][ T9] usb 3-1: device descriptor read/64, error -71 [ 97.029704][ T9] usb usb3-port1: attempt power cycle [ 97.379692][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 97.410787][ T9] usb 3-1: device descriptor read/8, error -71 [ 97.419585][ C1] net_ratelimit: 52158 callbacks suppressed [ 97.419603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.437655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.450224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.463210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 97.475748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 97.488162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.500407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.512824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.525249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.537779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.562041][ T9] usb 3-1: device descriptor read/8, error -71 [ 97.754560][ T36] audit: type=1400 audit(2000000003.620:4345): avc: denied { write } for pid=3448 comm="syz.1.1063" path="socket:[18309]" dev="sockfs" ino=18309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.809904][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 97.860585][ T9] usb 3-1: device descriptor read/8, error -71 [ 97.952961][ T3460] overlayfs: failed to clone lowerpath [ 98.000655][ T9] usb 3-1: device descriptor read/8, error -71 [ 98.429474][ T9] usb usb3-port1: unable to enumerate USB device [ 98.759565][ T36] audit: type=1400 audit(2000000004.620:4346): avc: denied { create } for pid=3492 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 98.816957][ T10] usb 5-1: USB disconnect, device number 12 [ 98.835617][ T36] audit: type=1400 audit(2000000004.650:4347): avc: denied { sys_admin } for pid=3492 comm="syz.1.1078" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 98.887109][ T36] audit: type=1400 audit(2000000004.650:4348): avc: denied { associate } for pid=3494 comm="syz.1.1078" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 98.976800][ T36] audit: type=1400 audit(2000000004.840:4349): avc: denied { create } for pid=3497 comm="syz.4.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.080136][ T3502] 9pnet_fd: Insufficient options for proto=fd [ 99.090705][ T36] audit: type=1400 audit(2000000004.950:4350): avc: denied { mounton } for pid=3501 comm="syz.1.1081" path="/350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.162320][ T3500] Invalid ELF header magic: != ELF [ 99.262663][ T36] audit: type=1400 audit(2000000005.030:4351): avc: denied { module_load } for pid=3499 comm="syz.4.1083" path="/bus" dev="ramfs" ino=18450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 99.836354][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.478264][ T3553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 100.709839][ T3564] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1103'. [ 101.182488][ T3586] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1110'. [ 101.346812][ T3589] netlink: 'syz.1.1111': attribute type 12 has an invalid length. [ 101.627763][ T3596] binder: Bad value for 'stats' [ 101.985459][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 101.985479][ T36] audit: type=1400 audit(2000000007.850:4373): avc: denied { map } for pid=3611 comm="syz.2.1118" path="socket:[18813]" dev="sockfs" ino=18813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.191900][ T3619] tipc: Failed to remove unknown binding: 66,1,1/0:2035496351/2035496353 [ 102.304759][ T3622] rust_binder: Write failure EFAULT in pid:163 [ 102.340750][ T36] audit: type=1400 audit(2000000008.210:4374): avc: denied { create } for pid=3623 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.389223][ T3624] fuse: Bad value for 'group_id' [ 102.408008][ T3624] fuse: Bad value for 'group_id' [ 102.414821][ T3628] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1122'. [ 102.429592][ C1] net_ratelimit: 51784 callbacks suppressed [ 102.429613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.430562][ T3624] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1123'. [ 102.436498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 102.470449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 102.478773][ T3624] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1123'. [ 102.482787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.501439][ T3631] pim6reg1: entered promiscuous mode [ 102.504347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.521246][ T3631] pim6reg1: entered allmulticast mode [ 102.522398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.539430][ T3624] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1123'. [ 102.539982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.561547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.573978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.586990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 102.669147][ T36] audit: type=1400 audit(2000000008.530:4375): avc: denied { read } for pid=3641 comm="syz.2.1127" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 102.703319][ T3642] rust_binder: Write failure EINVAL in pid:606 [ 102.830167][ T3657] binder: Unknown parameter 'defcontext01777777777777777777777' [ 102.885328][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 103.088647][ T36] audit: type=1326 audit(2000000008.950:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.1.1139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990f8ebe9 code=0x0 [ 103.159573][ T36] audit: type=1326 audit(2000000008.950:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.1.1139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990f8ebe9 code=0x0 [ 103.248285][ T3688] overlayfs: failed to clone upperpath [ 103.330217][ T36] audit: type=1400 audit(2000000009.180:4378): avc: denied { setattr } for pid=2490 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.485838][ T3698] netlink: 'syz.3.1146': attribute type 16 has an invalid length. [ 103.502620][ T3697] rust_binder: Error while translating object. [ 103.502665][ T3697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.505428][ T3698] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1146'. [ 103.519706][ T3697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 103.597744][ T3693] 9pnet_fd: Insufficient options for proto=fd [ 103.704199][ T36] audit: type=1400 audit(2000000009.570:4379): avc: denied { ioctl } for pid=3703 comm="syz.2.1148" path="socket:[19143]" dev="sockfs" ino=19143 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.273891][ T36] audit: type=1400 audit(2000000010.140:4380): avc: denied { listen } for pid=3719 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.039601][ T36] audit: type=1326 audit(2000000010.890:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990f8ebe9 code=0x0 [ 106.030413][ T36] audit: type=1326 audit(2000000011.900:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.1.1172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa990f8ebe9 code=0x0 [ 107.439622][ C1] net_ratelimit: 35691 callbacks suppressed [ 107.439649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.458533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.471165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.483694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.496863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 107.509640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 107.522439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.534661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.547130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.559762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.685764][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 107.685784][ T36] audit: type=1400 audit(2000000013.550:4384): avc: denied { read } for pid=3811 comm="syz.2.1188" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.809569][ T36] audit: type=1400 audit(2000000013.580:4385): avc: denied { open } for pid=3811 comm="syz.2.1188" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.989598][ T64] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 108.150644][ T64] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 108.163360][ T64] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.198840][ T64] usb 3-1: config 1 interface 0 has no altsetting 0 [ 108.218962][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.228584][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.258764][ T64] usb 3-1: Product: syz [ 108.277322][ T64] usb 3-1: Manufacturer: ш [ 108.284597][ T64] usb 3-1: SerialNumber: syz [ 108.304510][ T3812] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.313541][ T3812] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.589600][ T36] audit: type=1400 audit(2000000014.450:4386): avc: denied { write } for pid=3811 comm="syz.2.1188" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.830244][ T64] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 108.868503][ T64] usb 3-1: USB disconnect, device number 41 [ 108.900479][ T64] usblp0: removed [ 110.945730][ T3854] binder: Unknown parameter 'fscontext?}' [ 111.249599][ T64] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 111.291794][ T3864] overlayfs: failed to resolve './file1': -2 [ 111.411954][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 111.430426][ T64] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.438923][ T64] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.471308][ T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.509857][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.529594][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.549856][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.586539][ T64] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.606050][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.625305][ T64] usb 3-1: config 0 descriptor?? [ 111.848715][ T64] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.882166][ T64] usb 3-1: USB disconnect, device number 42 [ 111.896239][ T64] usblp0: removed [ 112.152537][ T36] audit: type=1400 audit(2000000018.020:4387): avc: denied { sqpoll } for pid=3902 comm="syz.1.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.369680][ T64] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 112.449681][ C1] net_ratelimit: 35462 callbacks suppressed [ 112.449704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.468121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.480328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.493352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.506197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 112.518602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 112.531474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.539695][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 112.544056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.561311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.562014][ T64] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.574148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.591811][ T64] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.629584][ T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.660994][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.690126][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.721546][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.763778][ T64] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.782901][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.805688][ T64] usb 3-1: config 0 descriptor?? [ 113.222209][ T64] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.256241][ T64] usb 3-1: USB disconnect, device number 43 [ 113.284215][ T64] usblp0: removed [ 113.842947][ T3931] 9pnet_fd: Insufficient options for proto=fd [ 114.866655][ T36] audit: type=1400 audit(2000000020.730:4388): avc: denied { accept } for pid=3948 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.887370][ T3949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:657 [ 114.909168][ T36] audit: type=1400 audit(2000000020.750:4389): avc: denied { write } for pid=3948 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.034218][ T3955] overlayfs: failed to clone lowerpath [ 115.249854][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 115.309619][ T36] audit: type=1400 audit(2000000021.170:4390): avc: denied { listen } for pid=3965 comm="syz.1.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.352890][ T36] audit: type=1400 audit(2000000021.200:4391): avc: denied { read } for pid=3965 comm="syz.1.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.744332][ T36] audit: type=1400 audit(2000000021.610:4392): avc: denied { create } for pid=3968 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.785751][ T36] audit: type=1400 audit(2000000021.650:4393): avc: denied { write } for pid=3968 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.828997][ T36] audit: type=1400 audit(2000000021.650:4394): avc: denied { nlmsg_write } for pid=3968 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.928053][ T3972] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 116.750399][ T36] audit: type=1400 audit(2000000022.610:4395): avc: denied { execmem } for pid=3987 comm="syz.2.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 117.459599][ C1] net_ratelimit: 34603 callbacks suppressed [ 117.459623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 117.478029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.490529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.503293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.516517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.528805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.541061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.559678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 117.572156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 117.584641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.526007][ T4021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 118.997642][ T13] bridge_slave_1: left allmulticast mode [ 119.005504][ T13] bridge_slave_1: left promiscuous mode [ 119.039829][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.064415][ T36] audit: type=1400 audit(2000000024.930:4396): avc: denied { setopt } for pid=4028 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.089455][ T13] bridge_slave_0: left allmulticast mode [ 119.104218][ T13] bridge_slave_0: left promiscuous mode [ 119.119488][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.245650][ T36] audit: type=1400 audit(2000000025.110:4397): avc: denied { bind } for pid=4046 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.282079][ T4037] veth1: entered allmulticast mode [ 119.303670][ T4036] veth1: left allmulticast mode [ 119.317513][ T4053] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 119.385449][ T13] veth1_macvtap: left promiscuous mode [ 119.394018][ T13] veth0_vlan: left promiscuous mode [ 119.738991][ T4079] bpf: Bad value for 'gid' [ 119.938778][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.959565][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.977247][ T4035] bridge_slave_0: entered allmulticast mode [ 119.994285][ T4035] bridge_slave_0: entered promiscuous mode [ 120.013021][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.035275][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.051162][ T4035] bridge_slave_1: entered allmulticast mode [ 120.064379][ T4035] bridge_slave_1: entered promiscuous mode [ 120.434118][ T4035] veth0_vlan: entered promiscuous mode [ 120.447519][ T4035] veth1_macvtap: entered promiscuous mode [ 120.487363][ T4104] tmpfs: Unknown parameter '' [ 120.564457][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.571799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.582101][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.589310][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.748168][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 120.748188][ T36] audit: type=1400 audit(2000000026.610:4405): avc: denied { ioctl } for pid=4118 comm="syz.5.1292" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.151797][ T12] bridge_slave_1: left allmulticast mode [ 121.178446][ T12] bridge_slave_1: left promiscuous mode [ 121.204321][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.260206][ T12] bridge_slave_0: left allmulticast mode [ 121.291722][ T12] bridge_slave_0: left promiscuous mode [ 121.319717][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.469368][ T4163] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1308'. [ 121.478635][ T36] audit: type=1400 audit(2000000027.330:4406): avc: denied { nlmsg_read } for pid=4162 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.515357][ T36] audit: type=1400 audit(2000000027.370:4407): avc: denied { read } for pid=4162 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.598952][ T4171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1311'. [ 121.632284][ T4171] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1311'. [ 121.644299][ T12] veth1_macvtap: left promiscuous mode [ 121.650672][ T12] veth0_vlan: left promiscuous mode [ 121.658778][ T4171] netlink: 'syz.2.1311': attribute type 6 has an invalid length. [ 121.668207][ T4171] netlink: 'syz.2.1311': attribute type 5 has an invalid length. [ 121.676720][ T4171] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1311'. [ 121.734727][ T36] audit: type=1400 audit(2000000027.600:4408): avc: denied { write } for pid=4180 comm="syz.2.1313" path="socket:[21587]" dev="sockfs" ino=21587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.823943][ T4182] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 122.027329][ T4187] overlayfs: failed to clone lowerpath [ 122.053256][ T36] audit: type=1326 audit(2000000027.920:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b18ebe9 code=0x7ffc0000 [ 122.084961][ T4190] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 122.093428][ T36] audit: type=1326 audit(2000000027.940:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1a3b18ebe9 code=0x7ffc0000 [ 122.122033][ T36] audit: type=1326 audit(2000000027.950:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b18ebe9 code=0x7ffc0000 [ 122.147354][ T36] audit: type=1326 audit(2000000027.950:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a3b18d550 code=0x7ffc0000 [ 122.173672][ T4161] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.181692][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.190619][ T4161] bridge_slave_0: entered allmulticast mode [ 122.207311][ T4161] bridge_slave_0: entered promiscuous mode [ 122.213568][ T36] audit: type=1326 audit(2000000027.950:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a3b1c14a5 code=0x7ffc0000 [ 122.242416][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.264167][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.271807][ T4161] bridge_slave_1: entered allmulticast mode [ 122.296866][ T36] audit: type=1326 audit(2000000027.950:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a3b18d550 code=0x7ffc0000 [ 122.330530][ T4161] bridge_slave_1: entered promiscuous mode [ 122.346246][ T4205] 9pnet_fd: Insufficient options for proto=fd [ 122.408310][ T4210] rust_binder: Write failure EFAULT in pid:747 [ 122.469558][ C1] net_ratelimit: 34199 callbacks suppressed [ 122.469583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.496521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.509028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.521714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.534317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.546594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.560133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 122.572567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 122.585211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.597753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.615577][ T4223] sit0: entered promiscuous mode [ 122.628059][ T4223] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 122.641286][ T4223] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1324'. [ 122.686291][ T4230] rust_binder: Write failure EFAULT in pid:755 [ 122.812177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.825814][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.836252][ T4246] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 122.836279][ T4246] rust_binder: Error while translating object. [ 122.851861][ T4246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.861579][ T4248] new mount options do not match the existing superblock, will be ignored [ 122.866880][ T4246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:759 [ 122.892267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.909360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.993808][ T4161] veth0_vlan: entered promiscuous mode [ 123.021278][ T4161] veth1_macvtap: entered promiscuous mode [ 123.027980][ T4257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.028018][ T4257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 123.198943][ T4270] overlayfs: failed to clone upperpath [ 123.293807][ T4278] netlink: 'syz.1.1341': attribute type 4 has an invalid length. [ 123.488293][ T4293] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 123.561390][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1345'. [ 123.815006][ T4305] rust_binder: Write failure EFAULT in pid:9 [ 124.099180][ T4318] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12 sclass=netlink_xfrm_socket pid=4318 comm=syz.2.1353 [ 124.126275][ T4316] binder: Unknown parameter 'trans' [ 124.373164][ T4331] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1357'. [ 124.414016][ T4331] rust_binder: 24: no such ref 0 [ 125.934767][ T4359] netlink: 57 bytes leftover after parsing attributes in process `syz.6.1367'. [ 126.000172][ T4366] netlink: 'syz.3.1370': attribute type 27 has an invalid length. [ 126.110277][ T4366] sit0: left promiscuous mode [ 126.169563][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.177261][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.479598][ C1] net_ratelimit: 32785 callbacks suppressed [ 127.479626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.499881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.512365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.524774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 127.537148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:3e:64:b1:53:5b, vlan:0) [ 127.549566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.562116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.574602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.586927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.599321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.752514][ T4404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4404 comm=syz.2.1382 [ 127.884462][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 127.884484][ T36] audit: type=1400 audit(2000000033.750:4425): avc: denied { create } for pid=4401 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.356416][ T4415] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 128.396594][ T4415] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1386'. [ 129.144627][ T4440] overlayfs: failed to clone upperpath [ 129.177156][ T4436] 9pnet_fd: Insufficient options for proto=fd [ 129.265786][ T4451] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.278084][ T4451] rust_binder: Write failure EFAULT in pid:46 [ 129.543851][ T4474] netlink: 'syz.3.1404': attribute type 16 has an invalid length. [ 129.559313][ T4474] netlink: 'syz.3.1404': attribute type 3 has an invalid length. [ 129.567981][ T4474] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.1404'. [ 129.622557][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.622591][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.643650][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.643686][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.657508][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.657545][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.671833][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.671865][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.685988][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.686018][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.700980][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.701180][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.716077][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.716112][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.722879][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.767835][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.767871][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.782474][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.798955][ T4481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.873108][ T36] audit: type=1400 audit(2000000035.740:4426): avc: denied { execute_no_trans } for pid=4493 comm="syz.1.1412" path=2F6D656D66643AC9F01D050BAFA9B8C65B0BDB58AE5B1AA9FD16AED16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.193319][ T64] rust_binder: 4510: removing orphan mapping 0:24 [ 130.243972][ T4517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 130.497507][ T36] audit: type=1400 audit(2000000036.360:4427): avc: denied { accept } for pid=4526 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.649589][ T64] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 130.665041][ T4552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1430'. [ 130.809606][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 130.817396][ T64] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 130.829308][ T64] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 130.839831][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.059963][ T4521] rust_binder: Error while translating object. [ 131.060009][ T4521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.067391][ T4521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 131.092482][ T64] usb 7-1: string descriptor 0 read error: -71 [ 131.117234][ T64] hub 7-1:32.0: USB hub found [ 131.123195][ T64] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 131.170014][ T64] usb 7-1: USB disconnect, device number 2 [ 131.255545][ T4568] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1436'. [ 131.268412][ T4570] overlayfs: empty lowerdir [ 131.323713][ T4577] fuse: Bad value for 'rootmode' [ 131.820512][ T36] audit: type=1400 audit(2000000037.690:4428): avc: denied { listen } for pid=4584 comm="syz.6.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.189578][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 132.202271][ T36] audit: type=1400 audit(2000000038.070:4429): avc: denied { listen } for pid=4598 comm="syz.1.1445" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.401699][ T4603] 9pnet_fd: Insufficient options for proto=fd [ 132.409639][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 132.422690][ T64] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 132.449154][ T64] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.479863][ T64] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.521689][ T64] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.561576][ T64] usb 7-1: config 7 interface 0 has no altsetting 0 [ 132.585077][ T64] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 132.613115][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.067285][ T64] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0006/input/input7 [ 133.116593][ T64] kye 0003:0458:5010.0006: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 133.310269][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.319052][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.153495][ T4666] can: request_module (can-proto-0) failed. [ 134.169952][ C0] kye 0003:0458:5010.0006: usb_submit_urb(ctrl) failed: -1 [ 134.836394][ T36] audit: type=1400 audit(2000000040.700:4430): avc: denied { accept } for pid=4675 comm="syz.6.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.948420][ T4679] overlayfs: failed to clone upperpath [ 134.960134][ T9] usb 7-1: USB disconnect, device number 3 [ 135.018554][ T36] audit: type=1400 audit(2000000040.880:4431): avc: denied { read } for pid=4682 comm="syz.6.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.101624][ T4692] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 135.112832][ T4695] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1475'. [ 135.131713][ T4692] incfs: Error accessing: ./file0. [ 135.136945][ T4692] incfs: mount failed -20 [ 135.252415][ T4715] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 135.421765][ T4726] fuse: Bad value for 'user_id' [ 135.437071][ T4726] fuse: Bad value for 'user_id' [ 135.639584][ T64] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 135.801393][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 135.828838][ T64] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 135.848833][ T64] usb 7-1: config 0 has no interface number 0 [ 135.877690][ T64] usb 7-1: config 0 interface 41 has no altsetting 0 [ 135.897277][ T64] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 135.922257][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.957923][ T64] usb 7-1: Product: syz [ 135.986169][ T64] usb 7-1: Manufacturer: syz [ 136.010663][ T64] usb 7-1: SerialNumber: syz [ 136.037976][ T64] usb 7-1: config 0 descriptor?? [ 136.058961][ T64] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 136.269475][ T64] usb 7-1: USB disconnect, device number 4 [ 136.896957][ T4807] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1512'. [ 137.034392][ T4816] tipc: Enabling of bearer rejected, failed to enable media [ 137.224963][ T4826] tipc: Started in network mode [ 137.230473][ T4826] tipc: Node identity 2a6608d1ff53, cluster identity 4711 [ 137.237894][ T4826] tipc: Enabled bearer , priority 0 [ 137.262555][ T4826] tipc: Disabling bearer [ 137.411233][ T4831] rust_binder: Write failure EFAULT in pid:108 [ 137.435638][ T4833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:111 [ 137.885973][ T36] audit: type=1400 audit(2000000043.630:4432): avc: denied { nlmsg_write } for pid=4862 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 139.178809][ T36] audit: type=1107 audit(2000000043.630:4433): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 140.725110][ T4877] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1536'. [ 141.200552][ T687] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 153.232704][ T17] sched: DL replenish lagged too much [ 227.863744][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.961904][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.969161][ T4923] bridge_slave_0: entered allmulticast mode [ 228.012427][ T4923] bridge_slave_0: entered promiscuous mode [ 228.374907][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.402899][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.441168][ T4918] bridge_slave_0: entered allmulticast mode [ 228.471396][ T4918] bridge_slave_0: entered promiscuous mode [ 228.551274][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.558455][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.702692][ T4923] bridge_slave_1: entered allmulticast mode [ 228.740320][ T4923] bridge_slave_1: entered promiscuous mode [ 229.176899][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.194134][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.221382][ T4918] bridge_slave_1: entered allmulticast mode [ 229.251183][ T4918] bridge_slave_1: entered promiscuous mode [ 230.016421][ T4925] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.032440][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.060634][ T4925] bridge_slave_0: entered allmulticast mode [ 230.083473][ T4925] bridge_slave_0: entered promiscuous mode [ 230.522360][ T4925] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.541113][ T4925] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.548281][ T4925] bridge_slave_1: entered allmulticast mode [ 230.601726][ T4925] bridge_slave_1: entered promiscuous mode [ 231.725534][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.750570][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.757838][ T4922] bridge_slave_0: entered allmulticast mode [ 231.803944][ T4922] bridge_slave_0: entered promiscuous mode [ 232.181360][ T4922] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.188656][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.220744][ T4922] bridge_slave_1: entered allmulticast mode [ 232.341588][ T4922] bridge_slave_1: entered promiscuous mode [ 284.732737][ T4940] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.759649][ T4940] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.766921][ T4940] bridge_slave_0: entered allmulticast mode [ 284.831529][ T4940] bridge_slave_0: entered promiscuous mode [ 285.073021][ T4940] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.091855][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.099013][ T4940] bridge_slave_1: entered allmulticast mode [ 285.129782][ T4940] bridge_slave_1: entered promiscuous mode [ 286.686403][ T4942] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.697155][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.762595][ T4942] bridge_slave_0: entered allmulticast mode [ 286.796793][ T4942] bridge_slave_0: entered promiscuous mode [ 286.910927][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.918027][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.950329][ T4942] bridge_slave_1: entered allmulticast mode [ 286.981951][ T4942] bridge_slave_1: entered promiscuous mode [ 287.391904][ T4943] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.399113][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.439745][ T4943] bridge_slave_0: entered allmulticast mode [ 287.475299][ T4943] bridge_slave_0: entered promiscuous mode [ 288.040878][ T4943] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.048238][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.080433][ T4943] bridge_slave_1: entered allmulticast mode [ 288.111427][ T4943] bridge_slave_1: entered promiscuous mode [ 289.964927][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.981097][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.988377][ T4945] bridge_slave_0: entered allmulticast mode [ 290.039571][ T4945] bridge_slave_0: entered promiscuous mode [ 290.431994][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.439086][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.480781][ T4945] bridge_slave_1: entered allmulticast mode [ 290.500339][ T4945] bridge_slave_1: entered promiscuous mode [ 331.273848][ T37] INFO: task syz-executor:4161 blocked for more than 122 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.413414][ T37] Not tainted syzkaller #0 [ 331.418431][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.470412][ T36] audit: type=1400 audit(2000000237.230:4434): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1873]" dev="pipefs" ino=1873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 331.727013][ T37] task:syz-executor state:D stack:0 pid:4161 tgid:4161 ppid:1 flags:0x00004006 [ 331.767979][ T37] Call Trace: [ 331.771387][ T37] [ 331.774366][ T37] __schedule+0x1322/0x1df0 [ 331.778904][ T37] ? __sched_text_start+0x10/0x10 [ 331.784186][ T37] ? __kasan_check_write+0x18/0x20 [ 331.789351][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 331.794634][ T37] ? __kasan_check_write+0x18/0x20 [ 331.799840][ T37] ? trace_contention_begin+0xc0/0xc0 [ 331.805251][ T37] schedule+0xc6/0x240 [ 331.809462][ T37] schedule_preempt_disabled+0x14/0x30 [ 331.815051][ T37] __mutex_lock+0x81e/0x1b50 [ 331.819786][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 331.826683][ T37] ? preempt_schedule+0xb0/0xd0 [ 331.831778][ T37] ? __cfi_preempt_schedule+0x10/0x10 [ 331.837278][ T37] ? __kasan_check_write+0x18/0x20 [ 331.842669][ T37] ? preempt_schedule_thunk+0x1a/0x40 [ 331.848179][ T37] ? wake_up_q+0x10f/0x1c0 [ 331.852951][ T37] ? __mutex_unlock_slowpath+0x4f6/0x740 [ 331.858634][ T37] ? mutex_unlock+0x240/0x240 [ 331.863524][ T37] __mutex_lock_slowpath+0xe/0x20 [ 331.868601][ T37] mutex_lock+0x102/0x1c0 [ 331.873168][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 331.878064][ T37] rcu_barrier+0x4d/0x530 [ 331.882542][ T37] ? __kasan_slab_free+0x6a/0x80 [ 331.887523][ T37] netdev_run_todo+0x10e/0xcb0 [ 331.892475][ T37] ? kvfree+0x39/0x50 [ 331.896625][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 331.902111][ T37] rtnl_unlock+0x12/0x20 [ 331.906515][ T37] tun_chr_close+0xc5/0x150 [ 331.911084][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 331.916236][ T37] __fput+0x1fb/0xa00 [ 331.920319][ T37] ? call_rcu+0x14/0x20 [ 331.924519][ T37] ____fput+0x20/0x30 [ 331.928649][ T37] task_work_run+0x1e3/0x250 [ 331.933308][ T37] ? __cfi_task_work_run+0x10/0x10 [ 331.938468][ T37] ? free_nsproxy+0x223/0x290 [ 331.943300][ T37] do_exit+0x9bc/0x2630 [ 331.947503][ T37] ? avc_has_perm+0x144/0x220 [ 331.952373][ T37] ? __cfi_do_exit+0x10/0x10 [ 331.957104][ T37] ? __kasan_check_write+0x18/0x20 [ 331.962379][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 331.967559][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.973272][ T37] do_group_exit+0x22a/0x300 [ 331.977903][ T37] ? __kasan_check_write+0x18/0x20 [ 331.983300][ T37] get_signal+0x139d/0x14f0 [ 331.987934][ T37] arch_do_signal_or_restart+0x96/0x720 [ 331.993584][ T37] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 331.999182][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 332.005507][ T37] ? __kasan_check_read+0x15/0x20 [ 332.010620][ T37] ? __x64_sys_setsockopt+0x1d6/0x250 [ 332.016136][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 332.021683][ T37] do_syscall_64+0x64/0xf0 [ 332.026320][ T37] ? clear_bhb_loop+0x50/0xa0 [ 332.031051][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 332.037062][ T37] RIP: 0033:0x7f73d9590ada [ 332.041627][ T37] RSP: 002b:00007ffd1b608348 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 332.050108][ T37] RAX: 0000000000000000 RBX: 00007ffd1b6083d0 RCX: 00007f73d9590ada [ 332.058196][ T37] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 332.066492][ T37] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 332.074608][ T37] R10: 00007f73d9792d00 R11: 0000000000000206 R12: 00007f73d9792ca0 [ 332.082810][ T37] R13: 00007ffd1b60836c R14: 0000000000000000 R15: 00007f73d9794e60 [ 332.090866][ T37] [ 332.704730][ T37] INFO: task syz.2.1332:4251 blocked for more than 124 seconds. [ 333.182346][ T37] Not tainted syzkaller #0 [ 333.187435][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.143750][ T37] task:syz.2.1332 state:D stack:0 pid:4251 tgid:4251 ppid:291 flags:0x00004006 [ 334.262043][ T37] Call Trace: [ 334.265394][ T37] [ 334.268453][ T37] __schedule+0x1322/0x1df0 [ 334.273274][ T37] ? __sched_text_start+0x10/0x10 [ 334.278326][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 334.283796][ T37] ? __kasan_check_write+0x18/0x20 [ 334.289054][ T37] ? llist_add_batch+0x109/0x1e0 [ 334.294344][ T37] schedule+0xc6/0x240 [ 334.298458][ T37] schedule_timeout+0xb2/0x3a0 [ 334.303370][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 334.308801][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 334.314513][ T37] ? generic_exec_single+0x201/0x500 [ 334.319868][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 334.325803][ T37] wait_for_common+0x359/0x630 [ 334.330736][ T37] ? wait_for_completion+0x40/0x40 [ 334.335903][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 334.342569][ T37] wait_for_completion+0x1c/0x40 [ 334.347634][ T37] rcu_barrier+0x415/0x530 [ 334.352292][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 334.357712][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 334.363171][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 334.368361][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 334.374353][ T37] ? __kasan_check_write+0x18/0x20 [ 334.379619][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 334.385387][ T37] ? free_pages+0x86/0x90 [ 334.389791][ T37] kvm_put_kvm+0xb04/0x12b0 [ 334.394331][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 334.399512][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 334.405299][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 334.410565][ T37] kvm_vm_release+0x47/0x70 [ 334.415109][ T37] __fput+0x1fb/0xa00 [ 334.419128][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 334.425007][ T37] ____fput+0x20/0x30 [ 334.429025][ T37] task_work_run+0x1e3/0x250 [ 334.433760][ T37] ? __cfi_task_work_run+0x10/0x10 [ 334.439045][ T37] ? __kasan_check_write+0x18/0x20 [ 334.444314][ T37] do_exit+0x9bc/0x2630 [ 334.448603][ T37] ? __sched_text_start+0x10/0x10 [ 334.453866][ T37] ? __cfi_do_exit+0x10/0x10 [ 334.458618][ T37] ? __kasan_check_write+0x18/0x20 [ 334.463876][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 334.469049][ T37] ? __kasan_check_read+0x15/0x20 [ 334.474292][ T37] ? cgroup_update_frozen+0x160/0x990 [ 334.479732][ T37] do_group_exit+0x22a/0x300 [ 334.484361][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 334.489784][ T37] get_signal+0x139d/0x14f0 [ 334.494417][ T37] arch_do_signal_or_restart+0x96/0x720 [ 334.500048][ T37] ? common_nsleep+0x93/0xb0 [ 334.504668][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 334.511021][ T37] ? __se_sys_clock_nanosleep+0x300/0x390 [ 334.516798][ T37] ? __kasan_check_read+0x15/0x20 [ 334.521980][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 334.528526][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 334.534067][ T37] do_syscall_64+0x64/0xf0 [ 334.538560][ T37] ? clear_bhb_loop+0x50/0xa0 [ 334.543401][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 334.549357][ T37] RIP: 0033:0x7f874c5c14a5 [ 334.554021][ T37] RSP: 002b:00007f874d484f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 334.562592][ T37] RAX: fffffffffffffdfc RBX: 00007f874c7c5fa0 RCX: 00007f874c5c14a5 [ 334.570638][ T37] RDX: 00007f874d484fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.578735][ T37] RBP: 00007f874c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.586858][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 334.594888][ T37] R13: 00007f874c7c6038 R14: 00007f874c7c5fa0 R15: 00007ffe2f067368 [ 334.603041][ T37] [ 336.589153][ T37] NMI backtrace for cpu 0 [ 336.589178][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 336.589212][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.589227][ T37] Call Trace: [ 336.589234][ T37] [ 336.589243][ T37] __dump_stack+0x21/0x30 [ 336.589277][ T37] dump_stack_lvl+0x10c/0x190 [ 336.589306][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 336.589338][ T37] dump_stack+0x19/0x20 [ 336.589376][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 336.589407][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 336.589439][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 336.589465][ T37] ? sched_show_task+0x379/0x560 [ 336.589494][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 336.589520][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.589548][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.589576][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 336.589607][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 336.589634][ T37] watchdog+0xd8f/0xed0 [ 336.589665][ T37] ? __cfi_watchdog+0x10/0x10 [ 336.589693][ T37] ? __kasan_check_read+0x15/0x20 [ 336.589725][ T37] ? __kthread_parkme+0x138/0x180 [ 336.589745][ T37] ? schedule+0xc6/0x240 [ 336.589764][ T37] kthread+0x2c7/0x370 [ 336.589785][ T37] ? __cfi_watchdog+0x10/0x10 [ 336.589814][ T37] ? __cfi_kthread+0x10/0x10 [ 336.589836][ T37] ret_from_fork+0x64/0xa0 [ 336.589866][ T37] ? __cfi_kthread+0x10/0x10 [ 336.589889][ T37] ret_from_fork_asm+0x1a/0x30 [ 336.589924][ T37] [ 336.750067][ T37] Sending NMI from CPU 0 to CPUs 1: [ 336.755434][ C1] NMI backtrace for cpu 1 [ 336.755451][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 336.755473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.755483][ C1] RIP: 0010:update_stack_state+0x36f/0x4b0 [ 336.755511][ C1] Code: 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 f7 e8 11 e5 97 00 48 8b 45 d0 49 89 06 48 8b 45 98 42 80 3c 20 00 <4c> 8b 75 c8 4c 8b 6d c0 74 08 4c 89 f7 e8 ef e4 97 00 49 c7 06 00 [ 336.755525][ C1] RSP: 0018:ffffc90000230418 EFLAGS: 00000246 [ 336.755541][ C1] RAX: 1ffff920000460b8 RBX: ffffc90000230568 RCX: ffffc90000230901 [ 336.755554][ C1] RDX: ffffc900002309d0 RSI: 1ffff920000460ae RDI: ffffc900002305c0 [ 336.755566][ C1] RBP: ffffc900002304d8 R08: ffffc90000230630 R09: ffffc90000230628 [ 336.755579][ C1] R10: 0000000000000005 R11: ffffffff81744330 R12: dffffc0000000000 [ 336.755590][ C1] R13: 0000000000000000 R14: ffffc900002305a0 R15: 1ffff920000460b5 [ 336.755602][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 336.755616][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.755627][ C1] CR2: 000055d95d038b90 CR3: 000000010b712000 CR4: 00000000003526b0 [ 336.755643][ C1] Call Trace: [ 336.755648][ C1] [ 336.755657][ C1] unwind_next_frame+0x3c2/0x750 [ 336.755678][ C1] ? __kernel_text_address+0x11/0x40 [ 336.755699][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 336.755725][ C1] arch_stack_walk+0x139/0x170 [ 336.755740][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 336.755765][ C1] stack_trace_save+0x9d/0xe0 [ 336.755787][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 336.755810][ C1] ? netif_receive_skb+0x161/0x7b0 [ 336.755835][ C1] kasan_save_track+0x3e/0x80 [ 336.755851][ C1] ? kasan_save_track+0x3e/0x80 [ 336.755866][ C1] ? kasan_save_free_info+0x4a/0x60 [ 336.755887][ C1] ? __kasan_slab_free+0x5f/0x80 [ 336.755927][ C1] ? kmem_cache_free+0x1c1/0x510 [ 336.755951][ C1] ? __kfree_skb+0x18f/0x210 [ 336.755973][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 336.756003][ C1] kasan_save_free_info+0x4a/0x60 [ 336.756025][ C1] __kasan_slab_free+0x5f/0x80 [ 336.756048][ C1] kmem_cache_free+0x1c1/0x510 [ 336.756072][ C1] ? __kfree_skb+0x18f/0x210 [ 336.756095][ C1] __kfree_skb+0x18f/0x210 [ 336.756116][ C1] ? ip6_mc_input+0x4f3/0x670 [ 336.756136][ C1] sk_skb_reason_drop+0xd8/0x310 [ 336.756159][ C1] ip6_mc_input+0x4f3/0x670 [ 336.756180][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 336.756200][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 336.756224][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 336.756243][ C1] ip6_rcv_finish+0x341/0x3c0 [ 336.756263][ C1] ipv6_rcv+0xed/0x220 [ 336.756282][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 336.756302][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 336.756320][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 336.756346][ C1] process_backlog+0x44b/0xae0 [ 336.756372][ C1] __napi_poll+0xd3/0x610 [ 336.756394][ C1] net_rx_action+0x584/0xce0 [ 336.756419][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 336.756442][ C1] ? sched_clock+0x44/0x60 [ 336.756462][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 336.756484][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 336.756502][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 336.756524][ C1] handle_softirqs+0x1ab/0x630 [ 336.756550][ C1] __do_softirq+0xf/0x16 [ 336.756564][ C1] do_softirq+0xa6/0x100 [ 336.756587][ C1] [ 336.756592][ C1] [ 336.756597][ C1] ? __cfi_do_softirq+0x10/0x10 [ 336.756621][ C1] ? dst_destroy+0x37d/0x460 [ 336.756637][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 336.756654][ C1] __local_bh_enable_ip+0x74/0x80 [ 336.756678][ C1] rcu_do_batch+0x5c6/0xd20 [ 336.756701][ C1] ? rcu_core+0xd20/0xd20 [ 336.756722][ C1] ? __kasan_check_write+0x18/0x20 [ 336.756744][ C1] ? _raw_spin_lock+0x8c/0x120 [ 336.756767][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 336.756791][ C1] ? __kasan_check_read+0x15/0x20 [ 336.756813][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 336.756836][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 336.756861][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 336.756884][ C1] ? __kasan_check_write+0x18/0x20 [ 336.756906][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 336.756929][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 336.756952][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 336.756974][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 336.756990][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 336.757006][ C1] ? __kasan_check_read+0x15/0x20 [ 336.757028][ C1] ? __kthread_parkme+0x138/0x180 [ 336.757048][ C1] ? schedule+0xc6/0x240 [ 336.757062][ C1] kthread+0x2c7/0x370 [ 336.757077][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 336.757100][ C1] ? __cfi_kthread+0x10/0x10 [ 336.757116][ C1] ret_from_fork+0x64/0xa0 [ 336.757137][ C1] ? __cfi_kthread+0x10/0x10 [ 336.757153][ C1] ret_from_fork_asm+0x1a/0x30 [ 336.757179][ C1]