last executing test programs: 7.234134357s ago: executing program 0 (id=242): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee42000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x19, 0x9c, 0x4f, 0x20, 0x7c9, 0xe, 0x5d4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x0, 0x10, 0x4, "dd55940a"}, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, &(0x7f0000000200)={0x40, 0x23, 0xfb, {0xfb, 0xf, "1b0371655e08ad8e55e807a7bbd7550c4e35b536b49164146b98577f1673c139fea833c9d404d258d7c44dcdfbd36eb6b7a8d7c6fdd1c5045bc1bd3d647cf1c89afe5cfce9d33b5a364b02e07d75f9a8d6329165db321db03f3d11fac23050cdd8a2b45ccee47845d3fa6a5c40491f6ac3455e1da61a86d8bcaf93044050f9ce8b782d4aaa050fc3565db2100753596d3cefe48b3214abcb21bcefcaa17008ce96706fef53734ad46c1cc0a38ac81c53c9834b924ef9083a0df63bc9a0475a14b4d10b0e27dd68f77091f86bfb14b4e36bbf69074777ee84e0e0f506ac43b40221b3551e3b8ff1daa9b3bc484c014ecd8a331abe5fcc6ad28d"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0xa, "ae5ce17a8d221457331d"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x7, 0x70ce, 0x1ff, 0xb8a0, 0x9, 0x5, 0x1, 0x8, 0x101, 0x5, 0x2, 0x3ff}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xfab1}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) 3.918888222s ago: executing program 0 (id=275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0xffffffff}) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.257109045s ago: executing program 0 (id=281): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005938d740109730000009040000ec000000000000000000000077591224ba1d8dee6a9316ee1d22ff020000efc1a278ebb441a0004f756ae7d3f5e4385a92819386967f36a19e789d347e1c777755fd7727ef5ff001a55cf550cc82efecc986eda08bd803c1ad8b46b9227dbe52beadf1a84588844e2c0c012b4fbf25533f0341680dda7e6dc415f8fe333257e11e636706fd931c58f745223523f565594e301c958713e5d0226c8f1c674dfe3bfa9d783190c67a61b65bd0235d654929900f54c6fbd6a831e2d5b3e3a8bd861a53ff815fa36f6d0d6896aed005f070eeee6be427"], 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r3, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f0000010140)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f00000002c0)) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000180)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400e46000000f63e12d474b3439eb73f3588d0603e405cfb01d649c269469d4a6467ee57d491e28ee6d13e1bf8550fb44e1e845296a132ff4425581146b91279e42b8830ff00000000000000"], &(0x7f0000000d00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)=ANY=[@ANYBLOB="001d000000"]}) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000340)="6be7f38541030d38aca9a17621b0d4e88d3804ef2b95cd6bea0822983c3a9803b67fccfa18be11cd42b164576385a1f7385b69aa66011086dcfbb5483de11bf54b4c3e14462fab639b3db5778fcd0e72708cf0985cedbb561653c31bba2ae199a4ffa37a773e9d6251189d33cd54a69e78758a76fd9ce0f4aa0f2613abd86057d393b2ae04c6125cea631e010626c7ade7b66f397ec7d7b379c50b3ba464eb9636956a25319e7c6d82c05bed565da650539540b6f7c149c86f6fa7d6e3683901239a543d23eabd434307d8f4a070903fbf6b07f89fde5dc81e110875922c28e6643007f075a153bcd85b2b2340dd", 0xee, 0xfffffffffffffffa) keyctl$read(0xb, r5, &(0x7f00000005c0)=""/83, 0x53) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1.018690909s ago: executing program 3 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f00003a9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xb6225ec) r4 = mmap$binder(&(0x7f0000139000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xfffffffffffffff7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0xd4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r3}, @increfs_done={0x40106308, 0x2}, @enter_looper, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x40}, @flat=@weak_handle={0x77682a85, 0x5, 0x2}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x10b}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/12, 0xc, 0x2, 0x34}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @register_looper], 0x9d, 0x0, &(0x7f00000003c0)="33ae7324abacf5664dcddd1a5e54671d1c3d97ea3508eb91e62c2a60e7ed89fdc27fa1be2c6ac238f66ac402d2217fb580e914d8d5fa1202772c2c388caa7fcd2c947e6f1c3f09ab6cec6f1280b901633319c8de30f2469246d32805fe64770a52f53ac6cfdb793a4bcdb6d8f856aaba12b5085ab51d11dba729e635a9da96064d9caf5dc9a8cc835340e19ab8131a8667284a4b35dd8acf2487189302"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000380)) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) setpgid(0x0, r1) (async) wait4(r1, 0x0, 0x2, 0x0) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00003a9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xb6225ec) (async) mmap$binder(&(0x7f0000139000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xfffffffffffffff7) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0xd4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r3}, @increfs_done={0x40106308, 0x2}, @enter_looper, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x40}, @flat=@weak_handle={0x77682a85, 0x5, 0x2}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x10b}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/12, 0xc, 0x2, 0x34}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @register_looper], 0x9d, 0x0, &(0x7f00000003c0)="33ae7324abacf5664dcddd1a5e54671d1c3d97ea3508eb91e62c2a60e7ed89fdc27fa1be2c6ac238f66ac402d2217fb580e914d8d5fa1202772c2c388caa7fcd2c947e6f1c3f09ab6cec6f1280b901633319c8de30f2469246d32805fe64770a52f53ac6cfdb793a4bcdb6d8f856aaba12b5085ab51d11dba729e635a9da96064d9caf5dc9a8cc835340e19ab8131a8667284a4b35dd8acf2487189302"}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000380)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, 0x0) (async) 857.297983ms ago: executing program 3 (id=321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000380), 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 828.094523ms ago: executing program 3 (id=322): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xa, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)}}, @exit_looper], 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x0) 827.960063ms ago: executing program 3 (id=323): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x24800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 827.644593ms ago: executing program 3 (id=324): keyctl$update(0x2, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x10001, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r0, &(0x7f0000000040)=""/141, 0x8d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="1b", 0x1}], 0x1}, 0x20008040) recvmmsg(r1, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000009ac0)=""/4105, 0x1009}], 0x1, &(0x7f0000000380)=""/61, 0x3d}, 0x9}], 0x1, 0x40, 0x0) (async) recvmmsg(r1, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000009ac0)=""/4105, 0x1009}], 0x1, &(0x7f0000000380)=""/61, 0x3d}, 0x9}], 0x1, 0x40, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x2a, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000558000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000961000/0x2000)=nil, &(0x7f0000028000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006e1000/0x1000)=nil, &(0x7f00007b5000/0x1000)=nil, &(0x7f0000b00000/0x2000)=nil, &(0x7f0000bde000/0x4000)=nil, &(0x7f000080e000/0x4000)=nil, &(0x7f0000425000/0x2000)=nil, &(0x7f0000000140)="f50d3c9ee6cd1ec905150f64fe943794d5861444f0", 0x15, r2}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000558000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000961000/0x2000)=nil, &(0x7f0000028000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006e1000/0x1000)=nil, &(0x7f00007b5000/0x1000)=nil, &(0x7f0000b00000/0x2000)=nil, &(0x7f0000bde000/0x4000)=nil, &(0x7f000080e000/0x4000)=nil, &(0x7f0000425000/0x2000)=nil, &(0x7f0000000140)="f50d3c9ee6cd1ec905150f64fe943794d5861444f0", 0x15, r2}, 0x68) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffe}, &(0x7f0000000040)=0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffe}, &(0x7f0000000040)=0x20) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 461.33182ms ago: executing program 1 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 458.466331ms ago: executing program 1 (id=332): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x141203, 0x0) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) (async) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="726c6f675f77616b6575705f6386af0940449fbc24373430303733"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x10000001) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x143100, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905cece4688f5cb986e060000000000000000020d000609b4c5b41d"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="00b892304e00abe763a8", @ANYRESHEX=r4, @ANYRESDEC, @ANYBLOB, @ANYRESOCT=r1, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000a40)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[]) (async) bind$bt_hci(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) futex_waitv(&(0x7f0000001980)=[{0x1, &(0x7f00000003c0)=0x8, 0x82}, {0x8, &(0x7f0000000400)=0x7, 0x2}, {0x5, &(0x7f0000000440)=0x8, 0x2}, {0x7fffffffffffffff, &(0x7f0000000480)=0x4, 0x2}, {0x9, &(0x7f00000004c0)=0x8325, 0x2}, {0xff, &(0x7f0000000580), 0x2}, {0x81, &(0x7f00000005c0), 0x2}, {0x9, &(0x7f0000000600)=0x2, 0x2}, {0x7fff, &(0x7f0000000640)=0xfffffffffffffe00, 0x2}, {0x8, &(0x7f0000000680), 0x82}, {0x5, &(0x7f00000006c0)=0x7, 0x82}, {0x7f, &(0x7f0000000700)=0x8, 0x2}, {0xc5, &(0x7f00000007c0)=0x5, 0x82}, {0x1, &(0x7f0000000800)=0x100000000, 0x82}, {0x8000000000000001, &(0x7f00000008c0)=0x6d9, 0x2}, {0x2, &(0x7f0000000880)=0x1, 0x82}], 0x10, 0x0, 0x0, 0x1) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @multicast1}, 0x40, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)='macsec0\x00', 0x2, 0x2, 0x6}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 437.069151ms ago: executing program 1 (id=333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 32) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) (rerun: 32) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000001c0)={0x1, 0x2, {0xa, 0x2e, 0x3, 0x3, 0x9, 0xfe3, 0x0, 0x151}}) close_range(r0, 0xffffffffffffffff, 0x0) 377.219082ms ago: executing program 1 (id=334): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x21}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4008040) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r2, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x58, 0x0, &(0x7f0000001c40)=[@free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x3}], 0xcd, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0bd1d0f0aca6836e768112db938863e35a5767c5915f661c40aac97e6bfc18a95bd354e77c6e6026ce26185686097d8d673ecb16748efa59c6ffd00271ad3c2dbbf6b4b357f4c289f45cf2f4618afe11"}) 376.606842ms ago: executing program 2 (id=335): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000004140)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004180)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004280)=0xe8) r6 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000042c0)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000043c0)=0xe8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001580)={&(0x7f0000000a80)={0x50, 0xfffffffffffffff5, 0xd5, {0x7, 0x2b, 0xf, 0x80, 0x1215, 0x8, 0x6, 0x6, 0x0, 0x0, 0x1, 0xa31}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x28, 0xffffffffffffffda, 0x4, {{0x40, 0x0, 0x0, r12}}}, &(0x7f0000000bc0)={0x60, 0x0, 0x4, {{0x5b8, 0x0, 0xff, 0xb, 0x4, 0x8, 0x1, 0x3}}}, 0x0, &(0x7f0000000d40)={0x21, 0x0, 0x8000, {'/dev/vhost-vsock\x00'}}, 0x0, &(0x7f0000000dc0)={0x78, 0x0, 0x3, {0x7f, 0xfff, 0x0, {0x1, 0x8, 0x8000, 0xc, 0x18c, 0xdeaf, 0xf, 0xe78, 0x5, 0xa000, 0xffff, r10, r11, 0x6, 0xf7}}}, 0x0, &(0x7f0000000f00)={0x80, 0xffffffffffffffda, 0x8000, [{0x3, 0xfffffffffffffffb, 0x2, 0x6, '%:'}, {0x5, 0x3, 0x1, 0x3, '-'}, {0x2, 0x80000000, 0x0, 0x8}, {0x1, 0xc0, 0x0, 0x9}]}, &(0x7f0000001080)={0x10, 0x0, 0x400}, 0x0, &(0x7f0000001200)={0x20, 0x0, 0x27cd, {0x7, 0x0, 0x7, 0x5}}, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000004400)={0x1f8, 0x0, r2, [{{0x4, 0x0, 0x2, 0x8, 0x4, 0x99, {0x5, 0x81, 0x1, 0x1000, 0x5aa, 0x7, 0x2, 0x7, 0x1ff, 0x1000, 0x7, r3, r4, 0x3, 0x5}}, {0x6, 0x0, 0xc, 0x9, '/dev/ashmem\x00'}}, {{0x0, 0x2, 0x7, 0x9, 0x3, 0x80000000, {0x5, 0x9, 0x1, 0xffffffff, 0x5, 0x1, 0x5, 0x7fffffff, 0x8, 0xc000, 0xc, r5, r6, 0x7, 0x4}}, {0x2, 0x5}}, {{0x4, 0x0, 0x2, 0x5, 0x75c, 0x7, {0x0, 0x3, 0x3, 0x7fff, 0x4, 0x100, 0x0, 0x6, 0x10, 0xc000, 0x1, r7, r11, 0x6, 0x714d}}, {0x5, 0x472, 0xc, 0x6, '/dev/ashmem\x00'}}]}, 0x1f8) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0xce33a000) 373.474472ms ago: executing program 2 (id=336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3a) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x4, r3}) dup(0xffffffffffffffff) mkdir(0x0, 0x21) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x100, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 362.641893ms ago: executing program 1 (id=337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, &(0x7f0000000100)={0x5, 0x0, [{0x2, 0x17, 0x4, 0x4, 0x3, 0x2e74, 0x7f}, {0x80000007, 0xc, 0x2, 0x10001, 0x9f9, 0x49c, 0x6}, {0xb, 0x6, 0x2, 0x8, 0x0, 0x6, 0xd8e}, {0x1, 0x8, 0x0, 0x1621, 0x8, 0x3, 0x6}, {0x80000008, 0xc2f, 0x5, 0x8, 0x2, 0x2, 0xd39}]}) signalfd4(r3, &(0x7f0000000240)={[0x8]}, 0x8, 0x800) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000200)=0x6, 0x4) (async) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) (async) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000080)={0x7ff, 0x0, 0x6, 0x5, 0x7}) 273.339824ms ago: executing program 2 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x1002, 0x0) r1 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)=',u\x00\xda\xab\xeb\xd4,\xa3\xb6\xf1\x90\xac\x11u\x83\v\xd4\xa6n\x11\x00'/36, &(0x7f00000000c0)='./file0\x00', r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000004c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 268.989924ms ago: executing program 2 (id=339): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffe2e) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b805002000b9fa0000000fa303d9d9c3d96dfac61bf7b805000000c4c27958fc0fae41d901107c7c00b87f8b7f26ba230000000f30660fc775022e0fe90c9866ba4100ec0f3566b8578b0000b842c700000f23c80f21f890380a0a23f8", 0x5d}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x62040200) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050b2bbd7000fcdbdf2552"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r9 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) (async) write$ppp(r10, &(0x7f0000000180)="99d64c", 0x3) readv(r10, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) fstatfs(r9, &(0x7f0000000140)=""/47) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 268.732694ms ago: executing program 1 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x803, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 268.054464ms ago: executing program 0 (id=341): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x46}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x40800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5ee}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}]}, 0x80}}, 0x10001) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r4, 0x404, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1be}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000600)={@private1}, 0x14) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r5 = socket$netlink(0x10, 0x3, 0x8) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000740)={0x0, r0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/custom0\x00', 0x802, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x6, 0x13, 0x1, 0xf0d, 0x20, @mcast1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80, 0x10, 0xfffffff9, 0x3}}) getsockname$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000a80)={@empty, @initdev, 0x0}, &(0x7f0000000ac0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x100}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x50b}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7fffffff}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_open_dev$usbfs(&(0x7f0000000c80), 0x6, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xb0, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000e40)=0x7fffffff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80100608}, 0xc, &(0x7f0000001380)={&(0x7f0000001000)={0x380, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x360, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x95, 0x4, "aba82b4b95e5243dd0ac6cbb95900c1e28711fa6271517ef82b5230506ed89f887ac96e7f6926339151befb62716f0423e57953345fe27c635d057113e95924c4a47b8d4b89f8cddd78b58df69d7eff1b98e79e6fbb1d91a9877dcb9606feefb2f6ab92a31192c2d563c3d25189d712c10e95c6cf0e96e61216cf1b0afeb6a2ec1e1df484d54360e453ac72652dff4e2e0"}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "bab64824f58e9cf7c811a92ef1ac018b926aaf877d7ada8b94aa810698a12475a869f2497535e8360648b4527c9d8a6cdf6de513f0b70d5c83e4b284cf903502bcb20a15af59a9666e9c727fa8b44ddcb60073734683879ac0170fc0632fffa71e57f964cfe1a21a146dd78189070b756406ec0aa6c53f1a9813a5fca0b68eef5176be4eece477a96a19a07c53d27bf15e38bc2536a7fe50058dbc0c5af3edfbb3efe7c8669a45627c3ef893ca54802e60186c7411f8"}, @ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "35f99bcd1920d2d6b923242564e341a5f0e577cec70ef8d8cca9086f45c8454330387cfb6c2665fb1866376fd68ff8d1e9fa1d27d37a4fbe11b86032b1ace351d036383332c6f7b71922db3187c1cb6470751a9ceb26f4532caa6ad4337c4c275fb1c2bdefd34da840fa21e903f598ee2ee1503da0b48c415b81de07fee8e76a79"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{\xd5\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "fd919c977ae3bab97f94ffbb5b165a2f0800ee0285adff1242b16a4eb16dca0b4daa51a81fb4f96112760d5f3ccad7c966990fda9f492f9b171a1dd89dc58d8d6b492f434ed602e7cd06fd66507d32fddeb93301f6f15e2d39c39bb61087161b232e5679ae2e252c17e721e35da4d161fda74bad7df964b80a6fc2150abd1fd720f011ccea163ab260224f35346203aeb49b9966039e35765979deef132b1072c0dd6c4dfa"}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "b25e0da63cf046ec0dc8e0c72fb7cda4d1502a7be8e4da8a64d47fae0e3af08e38541e78859c3b8cb4535ce112c9b4327d56a211ea0f477556fb44c1aa3cb9bc273557b5c243342752377964c411d5"}, @ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "da5aa2a6fa75f200c5e5c94aa09787b4ffa6f70a33ed62626dcd70b6bccf89a0b2909baf1a95"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x810}, 0x40008c0) prctl$PR_GET_IO_FLUSHER(0x3a) recvmmsg(r5, &(0x7f00000018c0)=[{{&(0x7f0000001400)=@ax25={{0x3, @default}, [@null, @null, @rose, @default, @netrom, @null, @remote, @rose]}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001480)=""/153, 0x99}, {&(0x7f0000001540)=""/61, 0x3d}, {&(0x7f0000001580)=""/220, 0xdc}, {&(0x7f0000001680)=""/250, 0xfa}, {&(0x7f0000001780)=""/118, 0x76}], 0x5, &(0x7f0000001880)=""/43, 0x2b}, 0x7}], 0x1, 0x40000020, &(0x7f0000001940)) 220.606695ms ago: executing program 0 (id=342): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0xfffffffffffffe3a, 0x18, &(0x7f0000000280)={@flat=@handle, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x0, 0x14}, @flat=@handle={0x73682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0xa5) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x40002010}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x201488, 0x4) 185.821275ms ago: executing program 2 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syslog(0x2, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{0x2, 0x101}, {0x0, 0x109403ff}, 0x7, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x50, 0x0, &(0x7f0000000400)="b9d787b3af89a5d99a5a970a084485fae40e5ad0c55c8de8677cb6d6c24e611e69b8982fd15313e6a00abff49a2b981f3f98967aff7a8c71c6ae7fbe95c5a960489eaa8e65f3104c316074bb009024bd"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) eventfd2(0x0, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) syslog(0x2, 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{0x2, 0x101}, {0x0, 0x109403ff}, 0x7, 0x3}) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x50, 0x0, &(0x7f0000000400)="b9d787b3af89a5d99a5a970a084485fae40e5ad0c55c8de8677cb6d6c24e611e69b8982fd15313e6a00abff49a2b981f3f98967aff7a8c71c6ae7fbe95c5a960489eaa8e65f3104c316074bb009024bd"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 105.154217ms ago: executing program 0 (id=344): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x8, 0xd4, &(0x7f00000000c0)="e68866e9d1e6d0209ae1a2379e2616ddff868bbb3cb584a8d5aab5e9425c2a6ac5a9e88b2f3e6867802b7da423d37c3b1d5d929b8c127c842600447255291fe022a7fafcb5bd4711921d286e0f4c97ded245ea2d2b56e340f22e0e294c5d2222b6122e9f0318d62881633d2fd91ee4f322fd9b57b2a5feae46b6213ea5ec07114d112da1e245a852255e4bb97b367545c0898fec7f29f6912fa95f01803e187123f3ccc1c570b7a44ca17a8a1a24f8ffdaed796693438f7085b8aa6ad5093838f00cf73d4939eed9430b8646ee33c9fb394e710d", 0x0, 0x1}, {0xf, 0xb0, &(0x7f0000000340)="ac401619706d5778178b5a1d7c35ec656e034d51ff9cbe094557ef6944be453ac01611d096a7c910e52a3ea72db5e6476640ae1cf75adcac361056d74e1e1e0ccad1cff11b9a196358926857451f44c8b3c321de6a3e481e2b60ae57d2ccb2c69034750a8a57b59320bf7ec52acd126f745bbf8f4cbb69c44fb3d092d4622e3718c8b96fadaa0722b88a840a5b64db8ab3d590a963b2a765c4425bc02909b648b6a39e261c283c36cf62ee0d21b6f58d", 0x0, 0x1}]}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 26.779849ms ago: executing program 2 (id=345): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfdc48000) futex(&(0x7f000000cffc), 0x80000000000b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x3, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 0s ago: executing program 3 (id=346): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) sendto$inet_nvme_icreq_pdu(r1, &(0x7f00000000c0)={{0x0, 0x3, 0x80, 0x7}, 0x0, 0x0, 0x3, 0x101}, 0x80, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x40106726, &(0x7f00000000c0)) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 27.375081][ T36] audit: type=1400 audit(1757115995.170:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.376409][ T281] cgroup: Unknown subsys name 'net' [ 27.398101][ T36] audit: type=1400 audit(1757115995.170:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.425213][ T36] audit: type=1400 audit(1757115995.200:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.425416][ T281] cgroup: Unknown subsys name 'devices' [ 27.609628][ T281] cgroup: Unknown subsys name 'hugetlb' [ 27.615248][ T281] cgroup: Unknown subsys name 'rlimit' [ 27.791825][ T36] audit: type=1400 audit(1757115995.590:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.815080][ T36] audit: type=1400 audit(1757115995.590:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.826120][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.840036][ T36] audit: type=1400 audit(1757115995.590:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.871558][ T36] audit: type=1400 audit(1757115995.650:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.897300][ T36] audit: type=1400 audit(1757115995.650:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.932374][ T36] audit: type=1400 audit(1757115995.730:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.957966][ T36] audit: type=1400 audit(1757115995.730:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.958021][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.222905][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.230085][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.237142][ T291] bridge_slave_0: entered allmulticast mode [ 29.243623][ T291] bridge_slave_0: entered promiscuous mode [ 29.251756][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.258865][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.265936][ T291] bridge_slave_1: entered allmulticast mode [ 29.272279][ T291] bridge_slave_1: entered promiscuous mode [ 29.303266][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.310479][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.317662][ T289] bridge_slave_0: entered allmulticast mode [ 29.323924][ T289] bridge_slave_0: entered promiscuous mode [ 29.335357][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.342529][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.349844][ T289] bridge_slave_1: entered allmulticast mode [ 29.356077][ T289] bridge_slave_1: entered promiscuous mode [ 29.373296][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.380486][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.387591][ T290] bridge_slave_0: entered allmulticast mode [ 29.393809][ T290] bridge_slave_0: entered promiscuous mode [ 29.400169][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.407197][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.414313][ T290] bridge_slave_1: entered allmulticast mode [ 29.420581][ T290] bridge_slave_1: entered promiscuous mode [ 29.458576][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.465648][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.472753][ T288] bridge_slave_0: entered allmulticast mode [ 29.479047][ T288] bridge_slave_0: entered promiscuous mode [ 29.485342][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.492433][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.499506][ T288] bridge_slave_1: entered allmulticast mode [ 29.505765][ T288] bridge_slave_1: entered promiscuous mode [ 29.652788][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.659964][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.667263][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.674332][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.695058][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.702146][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.709438][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.716462][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.726395][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.733467][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.740771][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.747822][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.778876][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.785959][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.793253][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.800302][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.816078][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.823343][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.831117][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.838416][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.846005][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.853857][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.861133][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.868555][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.889760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.896826][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.904625][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.911688][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.929075][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.936137][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.943776][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.950851][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.984087][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.991191][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.011831][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.019013][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.026592][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.033666][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.042626][ T288] veth0_vlan: entered promiscuous mode [ 30.057896][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.064966][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.076421][ T288] veth1_macvtap: entered promiscuous mode [ 30.099402][ T291] veth0_vlan: entered promiscuous mode [ 30.118374][ T290] veth0_vlan: entered promiscuous mode [ 30.142441][ T291] veth1_macvtap: entered promiscuous mode [ 30.161514][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.162386][ T290] veth1_macvtap: entered promiscuous mode [ 30.186183][ T289] veth0_vlan: entered promiscuous mode [ 30.229727][ T289] veth1_macvtap: entered promiscuous mode [ 30.279799][ T339] tmpfs: Unknown parameter '0x0000000000000003' [ 30.287115][ T337] rust_binder: Write failure EFAULT in pid:6 [ 30.311232][ T346] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 30.332062][ T347] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 30.340211][ T346] binder: Bad value for 'max' [ 30.370577][ T353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.394339][ T356] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.466253][ T356] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 30.607631][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.737600][ T45] usb 1-1: device descriptor read/64, error -71 [ 30.977805][ T45] usb 1-1: device descriptor read/64, error -71 [ 30.981471][ T381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.984180][ T381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 31.102426][ T397] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 31.112130][ T397] rust_binder: Error while translating object. [ 31.121001][ T397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.127297][ T397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 31.227718][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.243904][ T403] overlayfs: conflicting lowerdir path [ 31.254759][ T403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=403 comm=syz.2.26 [ 31.271807][ T403] syzkaller0: entered promiscuous mode [ 31.282080][ T403] syzkaller0: entered allmulticast mode [ 31.333835][ T409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 31.367577][ T45] usb 1-1: device descriptor read/64, error -71 [ 31.510783][ T424] rust_binder: Write failure EINVAL in pid:40 [ 31.511230][ T425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.546815][ T429] rust_binder: 45: no such ref 0 [ 31.558535][ T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 31.604281][ T432] netlink: 'syz.1.34': attribute type 12 has an invalid length. [ 31.621173][ T45] usb 1-1: device descriptor read/64, error -71 [ 31.723321][ T445] ======================================================= [ 31.723321][ T445] WARNING: The mand mount option has been deprecated and [ 31.723321][ T445] and is ignored by this kernel. Remove the mand [ 31.723321][ T445] option from the mount to silence this warning. [ 31.723321][ T445] ======================================================= [ 31.758401][ T45] usb usb1-port1: attempt power cycle [ 31.764280][ T445] binder: Unknown parameter 'contEԯi^ext' [ 31.806065][ T449] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 31.964848][ T458] rust_binder: 57: no such ref 2 [ 31.970146][ T458] rust_binder: 57: no such ref 3 [ 31.975366][ T458] rust_binder: Write failure EINVAL in pid:57 [ 32.021596][ T461] kvm: kvm [460]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 32.036504][ T461] kvm: kvm [460]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 32.107641][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.128539][ T45] usb 1-1: device descriptor read/8, error -71 [ 32.258578][ T45] usb 1-1: device descriptor read/8, error -71 [ 32.287589][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.437606][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 32.443922][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 32.452313][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 32.461044][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 32.470071][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.479733][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 32.489396][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.502360][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 32.507571][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.511643][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.527952][ T10] usb 2-1: config 0 descriptor?? [ 32.538801][ T45] usb 1-1: device descriptor read/8, error -71 [ 32.668874][ T45] usb 1-1: device descriptor read/8, error -71 [ 32.735130][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 32.747413][ T10] usb 2-1: USB disconnect, device number 2 [ 32.754172][ T10] usblp0: removed [ 32.777629][ T45] usb usb1-port1: unable to enumerate USB device [ 32.805437][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 32.805453][ T36] audit: type=1400 audit(1757116000.600:194): avc: denied { read } for pid=470 comm="syz.2.45" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.835642][ T36] audit: type=1400 audit(1757116000.600:195): avc: denied { open } for pid=470 comm="syz.2.45" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.859524][ T36] audit: type=1400 audit(1757116000.600:196): avc: denied { ioctl } for pid=470 comm="syz.2.45" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.884562][ T36] audit: type=1400 audit(1757116000.640:197): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.917585][ T467] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.057556][ T467] usb 4-1: device descriptor read/64, error -71 [ 33.131674][ T36] audit: type=1400 audit(1757116000.930:198): avc: denied { create } for pid=477 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.132453][ T478] rust_binder: Write failure EFAULT in pid:67 [ 33.218110][ T36] audit: type=1400 audit(1757116001.020:199): avc: denied { block_suspend } for pid=479 comm="syz.2.48" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.247592][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.273498][ T483] rust_binder: Write failure EFAULT in pid:69 [ 33.297598][ T467] usb 4-1: device descriptor read/64, error -71 [ 33.397556][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 33.404196][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 33.412632][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 33.421265][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 33.430275][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.447589][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.457242][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.472365][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 33.481449][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.490276][ T10] usb 2-1: config 0 descriptor?? [ 33.557590][ T467] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.687589][ T467] usb 4-1: device descriptor read/64, error -71 [ 33.696549][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 33.708020][ T36] audit: type=1400 audit(1757116001.510:200): avc: denied { nlmsg_read } for pid=464 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.767568][ T330] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.918540][ T36] audit: type=1400 audit(1757116001.720:201): avc: denied { read write } for pid=464 comm="syz.1.42" name="lp0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 33.920991][ T465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.943048][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.950350][ T467] usb 4-1: device descriptor read/64, error -71 [ 33.952635][ T465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.960705][ T36] audit: type=1400 audit(1757116001.720:202): avc: denied { open } for pid=464 comm="syz.1.42" path="/dev/usb/lp0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 33.974242][ T64] usb 2-1: USB disconnect, device number 3 [ 33.974866][ T330] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.016059][ T64] usblp0: removed [ 34.038046][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.047213][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.055261][ T330] usb 1-1: Product: syz [ 34.061801][ T36] audit: type=1400 audit(1757116001.860:203): avc: denied { read } for pid=492 comm="syz.1.50" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.074031][ T330] usb 1-1: Manufacturer: syz [ 34.083082][ T467] usb usb4-port1: attempt power cycle [ 34.119634][ T330] usb 1-1: SerialNumber: syz [ 34.139918][ T506] netlink: 68 bytes leftover after parsing attributes in process `syz.2.54'. [ 34.204194][ T517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 34.231307][ T522] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.323083][ T526] netlink: 92 bytes leftover after parsing attributes in process `syz.1.60'. [ 34.333788][ T330] usb 1-1: 0:2 : does not exist [ 34.346087][ T330] usb 1-1: cannot find UAC_HEADER [ 34.353690][ T330] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 34.364846][ T330] usb 1-1: USB disconnect, device number 6 [ 34.437579][ T467] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.458624][ T467] usb 4-1: device descriptor read/8, error -71 [ 34.540199][ T536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.540231][ T536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 34.588965][ T467] usb 4-1: device descriptor read/8, error -71 [ 34.847580][ T467] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.861046][ T544] binder: Unknown parameter 'context' [ 34.867939][ T544] SELinux: failed to load policy [ 34.878686][ T467] usb 4-1: device descriptor read/8, error -71 [ 35.005660][ T556] binder: Unknown parameter 'defcontext01777777777777777777777' [ 35.014709][ T467] usb 4-1: device descriptor read/8, error -71 [ 35.127656][ T467] usb usb4-port1: unable to enumerate USB device [ 35.677617][ T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.788995][ T593] binder: Bad value for 'max' [ 35.837574][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 35.843787][ T330] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 35.852682][ T330] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 35.861768][ T330] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 35.875192][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.885319][ T330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.895419][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.908594][ T330] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.917687][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.917893][ T64] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.927871][ T330] usb 3-1: config 0 descriptor?? [ 35.998923][ T597] 9pnet_fd: Insufficient options for proto=fd [ 36.067682][ T64] usb 1-1: device descriptor read/64, error -71 [ 36.143375][ T330] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 36.160964][ T330] usb 3-1: USB disconnect, device number 2 [ 36.168798][ T330] usblp0: removed [ 36.317600][ T64] usb 1-1: device descriptor read/64, error -71 [ 36.557617][ T64] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.597572][ T467] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.687586][ T64] usb 1-1: device descriptor read/64, error -71 [ 36.747562][ T467] usb 3-1: Using ep0 maxpacket: 32 [ 36.753970][ T467] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 36.763299][ T467] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 36.778360][ T467] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 36.787435][ T467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.797137][ T467] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.806953][ T467] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.820086][ T467] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 36.829340][ T467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.838679][ T467] usb 3-1: config 0 descriptor?? [ 36.865547][ T602] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 36.934722][ T610] tipc: Enabling of bearer rejected, failed to enable media [ 36.967623][ T64] usb 1-1: device descriptor read/64, error -71 [ 37.028442][ T617] netlink: 'syz.3.91': attribute type 4 has an invalid length. [ 37.039123][ T617] netlink: 'syz.3.91': attribute type 4 has an invalid length. [ 37.047101][ T467] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.079582][ T64] usb usb1-port1: attempt power cycle [ 37.141016][ T638] netlink: 188 bytes leftover after parsing attributes in process `syz.1.98'. [ 37.150920][ T639] capability: warning: `syz.1.98' uses deprecated v2 capabilities in a way that may be insecure [ 37.161707][ T638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 37.248452][ T467] usb 3-1: USB disconnect, device number 3 [ 37.269624][ T467] usblp0: removed [ 37.417838][ T64] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.438660][ T64] usb 1-1: device descriptor read/8, error -71 [ 37.557558][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.568750][ T64] usb 1-1: device descriptor read/8, error -71 [ 37.707585][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 37.713843][ T45] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 37.723201][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.732203][ T45] usb 4-1: config 0 descriptor?? [ 37.787837][ T655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 37.817588][ T64] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.838552][ T64] usb 1-1: device descriptor read/8, error -71 [ 37.941755][ T45] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 37.968609][ T64] usb 1-1: device descriptor read/8, error -71 [ 38.077697][ T64] usb usb1-port1: unable to enumerate USB device [ 39.691797][ T686] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 39.700154][ T686] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 39.780577][ T688] SELinux: security_context_str_to_sid () failed with errno=-22 [ 39.826326][ T690] __vm_enough_memory: pid: 690, comm: syz.0.113, bytes: 18014402804453376 not enough memory for the allocation [ 39.885325][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 39.885358][ T36] audit: type=1400 audit(1757116007.680:238): avc: denied { write } for pid=694 comm="syz.0.115" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.887153][ T695] x_tables: unsorted underflow at hook 3 [ 39.894427][ T36] audit: type=1400 audit(1757116007.680:239): avc: denied { ioctl } for pid=694 comm="syz.0.115" path="socket:[7319]" dev="sockfs" ino=7319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.944670][ T36] audit: type=1400 audit(1757116007.720:240): avc: denied { map } for pid=694 comm="syz.0.115" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.035673][ T697] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 40.035903][ T697] rust_binder: Read failure Err(EAGAIN) in pid:56 [ 40.045518][ T697] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 40.045539][ T698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.116860][ T702] kvm: pic: non byte write [ 40.183092][ T702] /dev/rnullb0: Can't open blockdev [ 40.196743][ T36] audit: type=1400 audit(1757116007.990:241): avc: denied { getopt } for pid=706 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.198427][ T707] tipc: Enabling of bearer rejected, failed to enable media [ 40.403854][ T719] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 40.403885][ T719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 40.412015][ T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:122 [ 40.550630][ T36] audit: type=1400 audit(1757116008.350:242): avc: denied { read write } for pid=730 comm="syz.2.125" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 40.591824][ T36] audit: type=1400 audit(1757116008.380:243): avc: denied { open } for pid=730 comm="syz.2.125" path="/40/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 40.629446][ T45] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 40.639862][ T45] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 40.645607][ T36] audit: type=1400 audit(1757116008.440:244): avc: denied { mounton } for pid=734 comm="syz.2.126" path="/41/file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 40.651041][ T45] asix 4-1:0.0: probe with driver asix failed with error -71 [ 40.683040][ T45] usb 4-1: USB disconnect, device number 6 [ 40.766921][ T739] tipc: Can't bind to reserved service type 0 [ 41.001546][ T750] rust_binder: Error while translating object. [ 41.001584][ T750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.007949][ T750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:71 [ 41.091217][ T752] rust_binder: Error while translating object. [ 41.100338][ T752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 41.106509][ T752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 41.206461][ T36] audit: type=1400 audit(1757116009.000:245): avc: denied { mount } for pid=763 comm="syz.3.135" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 41.250732][ T36] audit: type=1400 audit(1757116009.040:246): avc: denied { remount } for pid=763 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 41.287568][ T36] audit: type=1400 audit(1757116009.050:247): avc: denied { attach_queue } for pid=763 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.061564][ T782] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.269021][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.276651][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.284298][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.291972][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.299310][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 42.437555][ T482] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 42.598662][ T482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.609697][ T482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.619537][ T482] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 42.628603][ T482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.637250][ T482] usb 1-1: config 0 descriptor?? [ 43.044877][ T482] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 43.052203][ T482] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 43.059456][ T482] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 43.066682][ T482] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 43.075798][ T482] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 43.084071][ T482] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 43.232871][ T818] rust_binder: Error while translating object. [ 43.232907][ T818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.239206][ T818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:97 [ 43.308552][ T482] usb 1-1: USB disconnect, device number 11 [ 44.000672][ T847] 9pnet_fd: Insufficient options for proto=fd [ 44.179448][ T869] rust_binder: Error while translating object. [ 44.179515][ T869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.197608][ T869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 44.224111][ T871] syz.0.170: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 44.248250][ T871] CPU: 0 UID: 0 PID: 871 Comm: syz.0.170 Not tainted syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba [ 44.248284][ T871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.248307][ T871] Call Trace: [ 44.248316][ T871] [ 44.248324][ T871] __dump_stack+0x21/0x30 [ 44.248369][ T871] dump_stack_lvl+0x10c/0x190 [ 44.248399][ T871] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.248430][ T871] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 44.248466][ T871] dump_stack+0x19/0x20 [ 44.248494][ T871] warn_alloc+0x1bc/0x2a0 [ 44.248522][ T871] ? stack_depot_save_flags+0x38/0x800 [ 44.248547][ T871] ? __cfi_warn_alloc+0x10/0x10 [ 44.248574][ T871] ? kasan_save_track+0x4f/0x80 [ 44.248595][ T871] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 44.248638][ T871] ? xskq_create+0x68/0x2a0 [ 44.248661][ T871] ? xsk_init_queue+0xb6/0x120 [ 44.248694][ T871] ? xsk_setsockopt+0x43f/0x6f0 [ 44.248714][ T871] ? do_sock_setsockopt+0x26a/0x400 [ 44.248736][ T871] ? __x64_sys_setsockopt+0x1b8/0x250 [ 44.248756][ T871] ? x64_sys_call+0x2adc/0x2ee0 [ 44.248787][ T871] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.248814][ T871] __vmalloc_node_range_noprof+0x135/0x1420 [ 44.248849][ T871] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 44.248878][ T871] ? avc_has_perm+0x144/0x220 [ 44.248906][ T871] ? kasan_save_alloc_info+0x40/0x50 [ 44.248934][ T871] ? __kasan_kmalloc+0x96/0xb0 [ 44.248957][ T871] vmalloc_user_noprof+0x77/0x90 [ 44.248985][ T871] ? xskq_create+0xdb/0x2a0 [ 44.249007][ T871] xskq_create+0xdb/0x2a0 [ 44.249040][ T871] xsk_init_queue+0xb6/0x120 [ 44.249060][ T871] xsk_setsockopt+0x43f/0x6f0 [ 44.249080][ T871] ? __cfi_xsk_setsockopt+0x10/0x10 [ 44.249100][ T871] ? do_futex+0x309/0x500 [ 44.249121][ T871] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 44.249146][ T871] ? security_socket_setsockopt+0x33/0xd0 [ 44.249165][ T871] ? __cfi_xsk_setsockopt+0x10/0x10 [ 44.249185][ T871] do_sock_setsockopt+0x26a/0x400 [ 44.249205][ T871] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 44.249229][ T871] __x64_sys_setsockopt+0x1b8/0x250 [ 44.249250][ T871] x64_sys_call+0x2adc/0x2ee0 [ 44.249283][ T871] do_syscall_64+0x58/0xf0 [ 44.249313][ T871] ? clear_bhb_loop+0x50/0xa0 [ 44.249338][ T871] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.249362][ T871] RIP: 0033:0x7f34d4d8ebe9 [ 44.249386][ T871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.249403][ T871] RSP: 002b:00007f34d5bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 44.249425][ T871] RAX: ffffffffffffffda RBX: 00007f34d4fc5fa0 RCX: 00007f34d4d8ebe9 [ 44.249441][ T871] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 44.249453][ T871] RBP: 00007f34d4e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 44.249466][ T871] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.249479][ T871] R13: 00007f34d4fc6038 R14: 00007f34d4fc5fa0 R15: 00007ffe47c899d8 [ 44.249496][ T871] [ 44.249527][ T871] Mem-Info: [ 44.507554][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.509085][ T871] active_anon:6692 inactive_anon:422 isolated_anon:0 [ 44.509085][ T871] active_file:15572 inactive_file:15191 isolated_file:0 [ 44.509085][ T871] unevictable:0 dirty:55 writeback:0 [ 44.509085][ T871] slab_reclaimable:5873 slab_unreclaimable:74997 [ 44.509085][ T871] mapped:24118 shmem:700 pagetables:856 [ 44.509085][ T871] sec_pagetables:0 bounce:0 [ 44.509085][ T871] kernel_misc_reclaimable:0 [ 44.509085][ T871] free:1514458 free_pcp:2244 free_cma:0 [ 44.607294][ T871] Node 0 active_anon:26768kB inactive_anon:1688kB active_file:62288kB inactive_file:60764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96472kB dirty:220kB writeback:0kB shmem:2800kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5292kB pagetables:3424kB sec_pagetables:0kB all_unreclaimable? no [ 44.639605][ T871] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965948kB mlocked:0kB bounce:0kB free_pcp:5736kB local_pcp:5736kB free_cma:0kB [ 44.669734][ T871] lowmem_reserve[]: 0 3921 3921 [ 44.674613][ T871] Normal free:3100184kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26768kB inactive_anon:1688kB active_file:62288kB inactive_file:60764kB unevictable:0kB writepending:200kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2180kB local_pcp:2084kB free_cma:0kB [ 44.706151][ T871] lowmem_reserve[]: 0 0 0 [ 44.710590][ T871] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 44.711842][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.726143][ T871] Normal: 38*4kB (UME) 289*8kB (UME) 300*16kB (UME) 418*32kB (UME) 314*64kB (UME) 54*128kB (UME) 4*256kB (ME) 5*512kB (ME) 5*1024kB (ME) 4*2048kB (UM) 741*4096kB (M) = 3099680kB [ 44.736424][ T64] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 44.751602][ T871] 31881 total pagecache pages [ 44.751621][ T871] 422 pages in swap cache [ 44.751629][ T871] Free swap = 122668kB [ 44.751637][ T871] Total swap = 124996kB [ 44.751645][ T871] 2097051 pages RAM [ 44.751704][ T871] 0 pages HighMem/MovableOnly [ 44.759407][ T64] usb 3-1: can't read configurations, error -71 [ 44.764404][ T871] 351534 pages reserved [ 44.795570][ T871] 0 pages cma reserved [ 44.801633][ T871] Memory allocations: [ 44.805679][ T871] 0 B 0 init/main.c:1370 func:do_initcalls [ 44.812912][ T871] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 44.821023][ T871] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 44.828725][ T871] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 44.836714][ T871] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 44.844698][ T871] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 44.853357][ T871] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 44.861358][ T871] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 44.869307][ T871] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 44.877204][ T871] 0 B 0 init/initramfs.c:101 func:find_link [ 45.597582][ T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 45.747580][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 45.762902][ T890] rust_binder: 160: no such ref 1 [ 45.768203][ T890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160 [ 45.819154][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.836750][ T64] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 45.844401][ T64] usb 3-1: can't read configurations, error -71 [ 45.851394][ T64] usb usb3-port1: attempt power cycle [ 45.883169][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 45.883186][ T36] audit: type=1400 audit(1757116013.680:280): avc: denied { write } for pid=898 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.888948][ T901] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 45.889676][ T902] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 45.927708][ T901] rust_binder: Write failure EFAULT in pid:127 [ 45.976036][ T36] audit: type=1400 audit(1757116013.770:281): avc: denied { create } for pid=907 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 45.991483][ T908] syzkaller0: entered promiscuous mode [ 46.007032][ T908] syzkaller0: entered allmulticast mode [ 46.077850][ T919] fuse: Unknown parameter 'group' [ 46.083750][ T36] audit: type=1400 audit(1757116013.880:282): avc: denied { setopt } for pid=918 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.120597][ T36] audit: type=1400 audit(1757116013.920:283): avc: denied { create } for pid=924 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.215388][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 46.317600][ T482] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 46.338997][ T36] audit: type=1400 audit(1757116014.140:284): avc: denied { append } for pid=933 comm="syz.2.193" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.388737][ T10] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 46.398651][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 46.406765][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 46.416143][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.424367][ T10] usb 4-1: Product: syz [ 46.429491][ T10] usb 4-1: Manufacturer: syz [ 46.434116][ T10] usb 4-1: SerialNumber: syz [ 46.448242][ T910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.455491][ T482] usb 1-1: device descriptor read/64, error -71 [ 46.553843][ T36] audit: type=1400 audit(1757116014.350:285): avc: denied { setopt } for pid=941 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.662987][ T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.671629][ T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.681144][ T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.689648][ T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.697717][ T482] usb 1-1: device descriptor read/64, error -71 [ 46.705503][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 46.718089][ T10] usb 4-1: USB disconnect, device number 7 [ 46.724500][ T10] usblp0: removed [ 46.917570][ T64] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.938625][ T64] usb 3-1: device descriptor read/8, error -71 [ 46.947562][ T482] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 47.068762][ T64] usb 3-1: device descriptor read/8, error -71 [ 47.087551][ T482] usb 1-1: device descriptor read/64, error -71 [ 47.307615][ T64] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.324894][ T954] 9pnet_fd: Insufficient options for proto=fd [ 47.331648][ T36] audit: type=1400 audit(1757116015.130:286): avc: denied { mount } for pid=953 comm="syz.3.198" name="/" dev="ramfs" ino=9319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.337770][ T482] usb 1-1: device descriptor read/64, error -71 [ 47.353838][ T36] audit: type=1400 audit(1757116015.130:287): avc: denied { create } for pid=953 comm="syz.3.198" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 47.380059][ T64] usb 3-1: device descriptor read/8, error -71 [ 47.467686][ T482] usb usb1-port1: attempt power cycle [ 47.508515][ T64] usb 3-1: device descriptor read/8, error -71 [ 47.617676][ T64] usb usb3-port1: unable to enumerate USB device [ 47.647568][ T467] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.797537][ T467] usb 4-1: Using ep0 maxpacket: 8 [ 47.804381][ T467] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 47.814265][ T467] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 47.817576][ T482] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 47.828824][ T467] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.843771][ T467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.848658][ T482] usb 1-1: device descriptor read/8, error -71 [ 47.851772][ T467] usb 4-1: Product: syz [ 47.862090][ T467] usb 4-1: Manufacturer: 뀃낥괨辖ز堕㥊㑘㨖欌꼳ᛟ玘ꀉ嗭僤냨Dz [ 47.871533][ T467] usb 4-1: SerialNumber: syz [ 47.877130][ T958] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.884371][ T958] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.988560][ T482] usb 1-1: device descriptor read/8, error -71 [ 48.096218][ T467] usb 4-1: bad CDC descriptors [ 48.102585][ T467] usb 4-1: USB disconnect, device number 8 [ 48.228109][ T482] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 48.248542][ T482] usb 1-1: device descriptor read/8, error -71 [ 48.378739][ T482] usb 1-1: device descriptor read/8, error -71 [ 48.487637][ T482] usb usb1-port1: unable to enumerate USB device [ 48.847561][ T467] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.997564][ T467] usb 4-1: Using ep0 maxpacket: 32 [ 49.003791][ T467] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.012261][ T467] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.020907][ T467] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.029904][ T467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.039561][ T467] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.049215][ T467] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.062188][ T467] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.071268][ T467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.080107][ T467] usb 4-1: config 0 descriptor?? [ 49.099174][ T36] audit: type=1400 audit(1757116016.900:288): avc: denied { write } for pid=961 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.230647][ T965] random: crng reseeded on system resumption [ 49.237566][ T36] audit: type=1400 audit(1757116017.030:289): avc: denied { write } for pid=964 comm="syz.0.203" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 49.292828][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.305214][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.316809][ T467] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 49.328614][ T467] usb 4-1: USB disconnect, device number 9 [ 49.335196][ T467] usblp0: removed [ 49.514692][ T972] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=32795 sclass=netlink_xfrm_socket pid=972 comm=syz.0.205 [ 49.757560][ T482] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 49.835880][ T994] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 49.849378][ T994] rust_binder: Write failure EINVAL in pid:192 [ 49.902350][ T1007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 49.909663][ T482] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.929023][ T482] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.937877][ T482] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.946867][ T482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.956626][ T482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 49.967802][ T482] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.981242][ T482] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.990504][ T482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.999056][ T482] usb 4-1: config 0 descriptor?? [ 50.004325][ T960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.059770][ T1019] netlink: 'syz.1.220': attribute type 6 has an invalid length. [ 50.072326][ T1019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 50.104583][ T1023] kvm: kvm [1022]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 50.113186][ T1023] kvm: kvm [1022]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 50.212360][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.220995][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.232283][ T482] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 50.243068][ T466] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.251871][ T482] usb 4-1: USB disconnect, device number 10 [ 50.258761][ T482] usblp0: removed [ 50.408624][ T466] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.418900][ T466] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.428703][ T466] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.437840][ T466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.445830][ T466] usb 3-1: SerialNumber: syz [ 50.653409][ T466] usb 3-1: 0:2 : does not exist [ 50.658373][ T466] usb 3-1: unit 48 not found! [ 50.663074][ T466] usb 3-1: unit 27 not found! [ 50.667799][ T466] usb 3-1: unit 129 not found! [ 50.672565][ T466] usb 3-1: unit 84 not found! [ 50.677248][ T466] usb 3-1: unit 254 not found! [ 50.682045][ T466] usb 3-1: unit 169 not found! [ 50.688751][ T466] usb 3-1: USB disconnect, device number 8 [ 50.712688][ T1035] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 50.715090][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.767457][ T1037] Zero length message leads to an empty skb [ 51.033225][ T1052] rust_binder: 1051 RLIMIT_NICE not set [ 51.033461][ T1051] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 51.046193][ T1051] rust_binder: Error while translating object. [ 51.046210][ T1051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 51.052421][ T1051] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 51.061837][ T1051] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:166 [ 51.080087][ T467] rust_binder: 1050: removing orphan mapping 0:4248 [ 51.170743][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 51.170759][ T36] audit: type=1400 audit(1757116018.970:293): avc: denied { nlmsg_write } for pid=1057 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 51.714233][ T1077] kvm: pic: non byte write [ 51.719866][ T36] audit: type=1400 audit(1757116019.520:294): avc: denied { remount } for pid=1074 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.197552][ T466] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 52.347546][ T466] usb 1-1: Using ep0 maxpacket: 32 [ 52.353785][ T466] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 52.362086][ T466] usb 1-1: config 0 has no interface number 0 [ 52.368216][ T466] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 52.378243][ T466] usb 1-1: config 0 interface 214 has no altsetting 0 [ 52.386301][ T466] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 52.395409][ T466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.403422][ T466] usb 1-1: Product: syz [ 52.407608][ T466] usb 1-1: Manufacturer: syz [ 52.412211][ T466] usb 1-1: SerialNumber: syz [ 52.417411][ T466] usb 1-1: config 0 descriptor?? [ 52.422680][ T1082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.584021][ T1092] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=1092 comm=syz.1.245 [ 52.630612][ T1082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.651471][ T1096] syz.1.247 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.796765][ T1115] overlay: Unknown parameter 'subj_type' [ 52.844772][ T36] audit: type=1400 audit(1757116020.640:295): avc: denied { getopt } for pid=1121 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.873853][ T653] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 52.904631][ T36] audit: type=1400 audit(1757116020.700:296): avc: denied { ioctl } for pid=1127 comm="syz.1.259" path="socket:[8806]" dev="sockfs" ino=8806 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.971297][ T1134] tipc: Started in network mode [ 52.976416][ T1134] tipc: Node identity 7f000001, cluster identity 4 [ 52.983392][ T1134] tipc: Enabled bearer , priority 10 [ 53.027586][ T653] usb 4-1: Using ep0 maxpacket: 32 [ 53.033996][ T653] usb 4-1: config 0 has no interfaces? [ 53.041171][ T653] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 53.051240][ T653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.059464][ T653] usb 4-1: Product: syz [ 53.063883][ T653] usb 4-1: Manufacturer: syz [ 53.069019][ T653] usb 4-1: SerialNumber: syz [ 53.078910][ T653] usb 4-1: config 0 descriptor?? [ 53.336551][ T36] audit: type=1400 audit(1757116021.130:297): avc: denied { write } for pid=1093 comm="syz.3.246" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 53.359134][ T36] audit: type=1400 audit(1757116021.130:298): avc: denied { open } for pid=1093 comm="syz.3.246" path="/52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 53.361290][ T653] usb 4-1: USB disconnect, device number 11 [ 53.767985][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 53.779239][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 53.815861][ T1148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 53.824880][ T653] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 53.840131][ T36] audit: type=1400 audit(1757116021.640:299): avc: denied { getopt } for pid=1152 comm="syz.1.267" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.978641][ T653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.988905][ T653] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 53.998005][ T653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.006817][ T653] usb 4-1: config 0 descriptor?? [ 54.097564][ T467] tipc: Node number set to 2130706433 [ 54.230027][ T1145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.230062][ T1145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 54.239771][ T1145] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.248966][ T1145] rust_binder: Read failure Err(EFAULT) in pid:163 [ 54.380135][ T653] usb 4-1: USB disconnect, device number 12 [ 54.627564][ T467] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 54.777559][ T467] usb 3-1: Using ep0 maxpacket: 16 [ 54.785071][ T467] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 54.795974][ T467] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.805682][ T467] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 54.818159][ T467] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.827238][ T467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.835278][ T467] usb 3-1: Product: syz [ 54.839485][ T467] usb 3-1: Manufacturer: syz [ 54.844096][ T467] usb 3-1: SerialNumber: syz [ 54.899672][ T36] audit: type=1326 audit(1757116022.700:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f900ad8ebe9 code=0x0 [ 55.253169][ T467] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 55.260178][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 55.279181][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 55.290531][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 55.307267][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 55.318730][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 55.319915][ T1178] 9pnet_fd: Insufficient options for proto=fd [ 55.330075][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 55.336711][ T1179] incfs: Options parsing error. -22 [ 55.347564][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 55.352313][ T1179] incfs: mount failed -22 [ 55.367390][ T36] audit: type=1400 audit(1757116023.160:301): avc: denied { create } for pid=1177 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 55.367772][ T1178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 55.395789][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 55.406966][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 55.418235][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 55.434149][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 55.445572][ T36] audit: type=1400 audit(1757116023.240:302): avc: denied { bind } for pid=1182 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.445756][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 55.476595][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 55.490437][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 55.501672][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 55.512843][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 55.524161][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 55.535721][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 55.546808][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 55.558180][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 55.569329][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 55.580468][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 55.591731][ T466] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 55.604965][ T466] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 0e:64:16:7c:4b:0e [ 55.623059][ T466] usb 1-1: USB disconnect, device number 16 [ 55.630082][ T466] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 56.062081][ T1204] incfs: Options parsing error. -22 [ 56.067375][ T1204] incfs: mount failed -22 [ 56.067877][ T1166] binder: Unknown parameter 'context-2DmVBkoWZ;$*#ݩӄ0%>C' [ 56.084242][ T467] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 56.094085][ T467] usb 3-1: USB disconnect, device number 9 [ 56.106538][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.120433][ T466] rust_binder: 1201: removing orphan mapping 0:24 [ 56.137573][ T64] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 56.248908][ T1224] netlink: 'syz.3.291': attribute type 27 has an invalid length. [ 56.269523][ T1226] rust_binder: 186: no such ref 3 [ 56.274608][ T1226] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 56.281709][ T1226] rust_binder: 186: no such ref 1 [ 56.286770][ T1226] rust_binder: 186: no such ref 3 [ 56.292256][ T1226] rust_binder: Error while translating object. [ 56.292286][ T1226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.298551][ T1226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 56.299237][ T64] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 56.326344][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 56.334131][ T64] usb 1-1: can't read configurations, error -61 [ 56.350116][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 56.350176][ T36] audit: type=1400 audit(1757116024.150:309): avc: denied { lock } for pid=1227 comm="syz.3.293" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.467568][ T64] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 56.495130][ T1249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 56.628018][ T64] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 56.640799][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 56.652928][ T64] usb 1-1: can't read configurations, error -61 [ 56.663849][ T64] usb usb1-port1: attempt power cycle [ 56.947573][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.017582][ T64] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 57.038232][ T64] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 57.047062][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 57.054849][ T64] usb 1-1: can't read configurations, error -61 [ 57.098609][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.108761][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 57.119136][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.128315][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.136338][ T45] usb 3-1: Product: syz [ 57.140649][ T45] usb 3-1: Manufacturer: syz [ 57.145260][ T45] usb 3-1: SerialNumber: syz [ 57.151398][ T45] usb 3-1: config 0 descriptor?? [ 57.197562][ T64] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 57.218242][ T64] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 57.227097][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 57.234746][ T64] usb 1-1: can't read configurations, error -61 [ 57.241207][ T64] usb usb1-port1: unable to enumerate USB device [ 57.359162][ T36] audit: type=1400 audit(1757116025.160:310): avc: denied { connect } for pid=1264 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.376378][ T64] usb 3-1: USB disconnect, device number 10 [ 57.390926][ T36] audit: type=1400 audit(1757116025.190:311): avc: denied { setopt } for pid=1269 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.440972][ T1279] incfs: Options parsing error. -22 [ 57.446236][ T1279] incfs: mount failed -22 [ 57.462272][ T36] audit: type=1400 audit(1757116025.260:312): avc: denied { execute } for pid=1280 comm="syz.1.310" path="/dev/rnullb0" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.910835][ T1291] kvm: kvm [1290]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 57.919370][ T1291] kvm: kvm [1290]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 58.041190][ T36] audit: type=1400 audit(1757116025.840:313): avc: denied { read } for pid=1293 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.110705][ T1298] overlayfs: failed to clone upperpath [ 58.309453][ T1316] rust_binder: Write failure EFAULT in pid:211 [ 58.528739][ T36] audit: type=1400 audit(1757116026.330:314): avc: denied { map } for pid=1324 comm="syz.2.326" path="pipe:[3077]" dev="pipefs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 58.679868][ T1335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 58.786738][ T1358] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 58.847394][ T36] audit: type=1400 audit(1757116026.640:315): avc: denied { name_bind } for pid=1362 comm="syz.1.337" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 58.940760][ T36] audit: type=1400 audit(1757116026.740:316): avc: denied { create } for pid=1373 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 58.988600][ T1379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 58.988637][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:186 [ 59.031342][ T36] audit: type=1400 audit(1757116026.820:317): avc: denied { create } for pid=1382 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.059936][ T36] audit: type=1400 audit(1757116026.840:318): avc: denied { ioctl } for pid=1382 comm="syz.0.344" path="socket:[10530]" dev="sockfs" ino=10530 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.123646][ T64] rust_binder: 1380: removing orphan mapping 0:8 [ 59.235342][ T1390] ------------[ cut here ]------------ [ 59.240901][ T1390] WARNING: CPU: 1 PID: 1390 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 59.250396][ T1390] Modules linked in: [ 59.254318][ T1390] CPU: 1 UID: 0 PID: 1390 Comm: syz.3.346 Not tainted syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba [ 59.265819][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.275923][ T1390] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 59.281876][ T1390] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d9 48 ee 05 00 0f 85 be 00 00 00 c6 05 cc 48 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 59.301549][ T1390] RSP: 0018:ffffc9000d5bf9a0 EFLAGS: 00010246 [ 59.307726][ T1390] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 59.315718][ T1390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d5bfa58 [ 59.323740][ T1390] RBP: ffffc9000d5bfac8 R08: ffffc9000d5bfa57 R09: 0000000000000000 [ 59.331771][ T1390] R10: ffffc9000d5bfa40 R11: fffff52001ab7f4b R12: ffffc9000d5bf9e0 [ 59.339790][ T1390] R13: dffffc0000000000 R14: 1ffff92001ab7f38 R15: 0000000000000000 [ 59.347812][ T1390] FS: 00007f900bb5d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.356772][ T1390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.363417][ T1390] CR2: 000000110c344913 CR3: 000000013538a000 CR4: 00000000003526b0 [ 59.371436][ T1390] Call Trace: [ 59.374765][ T1390] [ 59.377726][ T1390] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 59.383475][ T1390] ? futex_wait_setup+0x1bc/0x260 [ 59.388639][ T1390] ? __futex_wait+0x218/0x2a0 [ 59.393347][ T1390] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 59.399541][ T1390] ___kmalloc_large_node+0xb5/0x250 [ 59.404770][ T1390] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 59.410971][ T1390] __kmalloc_large_node_noprof+0x1e/0xe0 [ 59.416638][ T1390] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 59.422842][ T1390] __kmalloc_noprof+0x26d/0x450 [ 59.427757][ T1390] ? __kasan_check_write+0x18/0x20 [ 59.432915][ T1390] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 59.438970][ T1390] ? futex_setup_timer+0xb4/0xd0 [ 59.443936][ T1390] ? futex_wait+0x29a/0x7a0 [ 59.448507][ T1390] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 59.454946][ T1390] ? selinux_file_ioctl+0x6e0/0x1360 [ 59.460268][ T1390] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 59.465837][ T1390] ? do_futex+0x309/0x500 [ 59.470224][ T1390] ? __cfi_do_futex+0x10/0x10 [ 59.474922][ T1390] ? __fget_files+0x2c5/0x340 [ 59.479637][ T1390] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.484603][ T1390] ? security_file_ioctl+0x34/0xd0 [ 59.489752][ T1390] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 59.496192][ T1390] __se_sys_ioctl+0x132/0x1b0 [ 59.500926][ T1390] __x64_sys_ioctl+0x7f/0xa0 [ 59.505557][ T1390] x64_sys_call+0x1878/0x2ee0 [ 59.510276][ T1390] do_syscall_64+0x58/0xf0 [ 59.514725][ T1390] ? clear_bhb_loop+0x50/0xa0 [ 59.519439][ T1390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.525397][ T1390] RIP: 0033:0x7f900ad8ebe9 [ 59.529869][ T1390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.549540][ T1390] RSP: 002b:00007f900bb5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.558032][ T1390] RAX: ffffffffffffffda RBX: 00007f900afc5fa0 RCX: 00007f900ad8ebe9 [ 59.566028][ T1390] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000b [ 59.574054][ T1390] RBP: 00007f900ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 59.582098][ T1390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.590117][ T1390] R13: 00007f900afc6038 R14: 00007f900afc5fa0 R15: 00007fffc2e85848 [ 59.598148][ T1390] [ 59.601194][ T1390] ---[ end trace 0000000000000000 ]--- [ 59.674484][ T290] ------------[ cut here ]------------ [ 59.680021][ T290] WARNING: CPU: 1 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 59.689383][ T290] Modules linked in: [ 59.693301][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba [ 59.706434][ T290] Tainted: [W]=WARN [ 59.710585][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.720802][ T290] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 59.726500][ T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 be 54 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c d7 4b 03 cc e8 e6 1f 43 ff <0f> 0b e9 3e ff ff ff e8 da 1f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 59.746148][ T290] RSP: 0018:ffffc9000b66fb68 EFLAGS: 00010293 [ 59.752272][ T290] RAX: ffffffff8242c42a RBX: 0000000000000000 RCX: ffff88810fe64c00 [ 59.760271][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.768280][ T290] RBP: ffffc9000b66fb90 R08: ffff88811d67babf R09: 1ffff11023acf757 [ 59.776292][ T290] R10: dffffc0000000000 R11: ffffed1023acf758 R12: 0000000000000000 [ 59.784318][ T290] R13: dffffc0000000000 R14: ffff88811d67ba20 R15: ffff888134195110 [ 59.792338][ T290] FS: 000055556c3c2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.801331][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.807967][ T290] CR2: 000055556c3e54e8 CR3: 0000000121cc2000 CR4: 00000000003526b0 [ 59.815957][ T290] Call Trace: [ 59.819266][ T290] [ 59.822232][ T290] ovl_do_remove+0x7b8/0xcf0 [ 59.826838][ T290] ? ovl_set_redirect+0x780/0x780 [ 59.831898][ T290] ? down_write+0xe9/0x2a0 [ 59.836337][ T290] ? __cfi_down_write+0x10/0x10 [ 59.841227][ T290] ovl_rmdir+0x1e/0x30 [ 59.845321][ T290] vfs_rmdir+0x3dd/0x560 [ 59.849652][ T290] incfs_kill_sb+0x109/0x230 [ 59.854285][ T290] deactivate_locked_super+0xd8/0x2a0 [ 59.859718][ T290] deactivate_super+0xb8/0xe0 [ 59.864455][ T290] cleanup_mnt+0x3f1/0x480 [ 59.868912][ T290] __cleanup_mnt+0x1d/0x40 [ 59.873337][ T290] task_work_run+0x1e3/0x250 [ 59.877963][ T290] ? __cfi_task_work_run+0x10/0x10 [ 59.883100][ T290] ? __x64_sys_umount+0x126/0x170 [ 59.888171][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 59.893572][ T290] ? __kasan_check_read+0x15/0x20 [ 59.898647][ T290] resume_user_mode_work+0x36/0x50 [ 59.903792][ T290] syscall_exit_to_user_mode+0x64/0xb0 [ 59.909302][ T290] do_syscall_64+0x64/0xf0 [ 59.913747][ T290] ? clear_bhb_loop+0x50/0xa0 [ 59.918470][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.924392][ T290] RIP: 0033:0x7f900ad8ff17 [ 59.929018][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 59.948683][ T290] RSP: 002b:00007fffc2e839e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 59.957121][ T290] RAX: 0000000000000000 RBX: 00007f900ae11c05 RCX: 00007f900ad8ff17 [ 59.965141][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc2e83aa0 [ 59.973161][ T290] RBP: 00007fffc2e83aa0 R08: 0000000000000000 R09: 0000000000000000 [ 59.981178][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc2e84b90 [ 59.989195][ T290] R13: 00007f900ae11c05 R14: 000000000000e8cd R15: 00007fffc2e85c60 [ 59.997174][ T290] [ 60.000214][ T290] ---[ end trace 0000000000000000 ]--- [ 60.006132][ T290] ------------[ cut here ]------------ [ 60.011666][ T290] WARNING: CPU: 0 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 60.021045][ T290] Modules linked in: [ 60.024960][ T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba [ 60.038145][ T290] Tainted: [W]=WARN [ 60.041957][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.052060][ T290] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 60.057785][ T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 be 54 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c d7 4b 03 cc e8 e6 1f 43 ff <0f> 0b e9 3e ff ff ff e8 da 1f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 60.077457][ T290] RSP: 0018:ffffc9000b66fb68 EFLAGS: 00010293 [ 60.083594][ T290] RAX: ffffffff8242c42a RBX: 0000000000000000 RCX: ffff88810fe64c00 [ 60.091683][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.099698][ T290] RBP: ffffc9000b66fb90 R08: ffff88811d67babf R09: 1ffff11023acf757 [ 60.107736][ T290] R10: dffffc0000000000 R11: ffffed1023acf758 R12: 0000000000000000 [ 60.115733][ T290] R13: dffffc0000000000 R14: ffff88811d67ba20 R15: ffff888134195110 [ 60.123753][ T290] FS: 000055556c3c2500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 60.132727][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.139343][ T290] CR2: 00007f78edd93ad8 CR3: 0000000121cc2000 CR4: 00000000003526b0 [ 60.147331][ T290] Call Trace: [ 60.150643][ T290] [ 60.153586][ T290] ovl_do_remove+0x7b8/0xcf0 [ 60.158210][ T290] ? ovl_set_redirect+0x780/0x780 [ 60.163256][ T290] ? down_write+0xe9/0x2a0 [ 60.167707][ T290] ? __cfi_down_write+0x10/0x10 [ 60.172591][ T290] ovl_rmdir+0x1e/0x30 [ 60.176661][ T290] vfs_rmdir+0x3dd/0x560 [ 60.180941][ T290] incfs_kill_sb+0x1a0/0x230 [ 60.185559][ T290] deactivate_locked_super+0xd8/0x2a0 [ 60.190973][ T290] deactivate_super+0xb8/0xe0 [ 60.195698][ T290] cleanup_mnt+0x3f1/0x480 [ 60.200155][ T290] __cleanup_mnt+0x1d/0x40 [ 60.204586][ T290] task_work_run+0x1e3/0x250 [ 60.209210][ T290] ? __cfi_task_work_run+0x10/0x10 [ 60.214335][ T290] ? __x64_sys_umount+0x126/0x170 [ 60.219389][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 60.224793][ T290] ? __kasan_check_read+0x15/0x20 [ 60.229862][ T290] resume_user_mode_work+0x36/0x50 [ 60.234997][ T290] syscall_exit_to_user_mode+0x64/0xb0 [ 60.240495][ T290] do_syscall_64+0x64/0xf0 [ 60.244933][ T290] ? clear_bhb_loop+0x50/0xa0 [ 60.249636][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.255547][ T290] RIP: 0033:0x7f900ad8ff17 [ 60.260008][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 60.279662][ T290] RSP: 002b:00007fffc2e839e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 60.288116][ T290] RAX: 0000000000000000 RBX: 00007f900ae11c05 RCX: 00007f900ad8ff17 [ 60.296106][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc2e83aa0 [ 60.304116][ T290] RBP: 00007fffc2e83aa0 R08: 0000000000000000 R09: 0000000000000000 [ 60.312130][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc2e84b90 [ 60.320167][ T290] R13: 00007f900ae11c05 R14: 000000000000e8cd R15: 00007fffc2e85c60 [ 60.328203][ T290] [ 60.331252][ T290] ---[ end trace 0000000000000000 ]---