last executing test programs: 1m1.574611428s ago: executing program 0 (id=5689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x2}, @exit_looper], 0xf, 0x0, &(0x7f0000000080)="6d2f8206ce5cbfef9a5d976594fb57"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m1.573466199s ago: executing program 0 (id=5690): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r3, 0x0, 0x2b, &(0x7f0000000200)="5e4140f10015", 0x6) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf250b0000002b1157106ca1db493cb52842da94e378c57e591fe178fa317d771fb6"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000090) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002a000040030000000400000000000000"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002240)=""/89, 0x80a0000}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000022c0)={[0x0, 0x120000000, 0x4, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x2, 0x1, 0x8d3, 0xff], 0x0, 0x41845}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1m1.572803568s ago: executing program 0 (id=5691): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m1.526818509s ago: executing program 0 (id=5695): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) fadvise64(r0, 0x3, 0x3, 0x5) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x380, 0x4, 0x1, 0x1, 0x10, 0x10000000}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) mmap(&(0x7f0000787000/0x3000)=nil, 0x3000, 0x3, 0x50, r0, 0x2eed4000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 1m1.510004829s ago: executing program 0 (id=5699): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x193}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8120}, 0xffffffffffffff85, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fcdbdf250f0000000c009900040000004800000008007e00020000000500d5000100000013000501"], 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040004) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) setreuid(0x0, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) setfsgid(0xee01) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1m1.42466845s ago: executing program 0 (id=5703): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) read(r4, &(0x7f0000000080)=""/1, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, 0x0) socket(0x1d, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4048002) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r8, @ANYRES64=r3, @ANYRESOCT=r4], 0x8) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r9 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x402480, 0x100, 0x6c}, 0x18) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc2, 0x0, 0xfffffffffffffffe}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000201, r13, &(0x7f00000000c0)='./file0\x00') 1m1.375600921s ago: executing program 32 (id=5703): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) read(r4, &(0x7f0000000080)=""/1, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, 0x0) socket(0x1d, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4048002) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r8, @ANYRES64=r3, @ANYRESOCT=r4], 0x8) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r9 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x402480, 0x100, 0x6c}, 0x18) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc2, 0x0, 0xfffffffffffffffe}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000201, r13, &(0x7f00000000c0)='./file0\x00') 3.883311972s ago: executing program 1 (id=6487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000002d3a000000000000405f000000002e2d00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 3.865920833s ago: executing program 1 (id=6488): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000000000)) open(&(0x7f0000000140)='./file0/file0\x00', 0x8648e, 0x60) r2 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r3, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1058c1, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40087705, 0x7) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x45e, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x74, {0x9, 0x21, 0xf92d, 0x4, 0x1, {0x22, 0x9f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x10, 0x9}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x4, 0xdc, 0x20, 0x81}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "9b201d53381db6c97b5be42d622e77bd"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140c}}, {0x7c, &(0x7f0000000280)=@string={0x7c, 0x3, "408ab16864f3daddc6f7aa5c5a8de716b3ad9d622e2907024790a39e62808147e8cb26118a6205fbd9c164ef0edeb14f83c353f2df342e6284fbf1d11cd4c649f8504bbe1cc82d6d372b27e4adf88c9a286eaeb23eb02d4d8bda6f78883240b65cef895c92cc1bfc6627c6d6b73fd2e5ab52bdf1d0026f38e055"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c01}}]}) 3.450551879s ago: executing program 3 (id=6494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860600702c1ffe80"], 0xffdd) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3.39089089s ago: executing program 3 (id=6495): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0xaf01, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="2ff43b29071d65b4a2f3e2d8f5e5046c5d0894c85fa54fe8fbcd1c559ffae964bed5300cec47c77d46e63a21082462184612ca5d2fc8229b3f49c7bca4c36730132384464e13374730adb08920ab05c8c6a10a333da094ed9ac0ec8e8d8b130612b3326419135ab55c847f0358f662126952136f98a3c5f2a96455973b68", 0x7e}, {&(0x7f00000001c0)="e66c11499fb289a06f4ba392a4948db11c832597a538ee7ec9973623d6807d736a11eba790783a4bea172a5bd84ee08268c2f92fdce4e34246cee88748d416003a09f21c0c1120f574bcde324cb496440d4f0dd19263d41e9b3945804b800fdabcd339c0a40b4e7ea2d63879bbd27aa618336f6fc5dc3afdb8a34a322f7cfc58737047dec5ce48383bef2ed3b2520b72e79faea8fc0a41324f979dbf91a38143ab6ffa86fcd0a7e5b2843cd9fa2f0cd7cd5d596c35efcd6898b94bcae8fa3ae93e68f8568d2e83134db204b540424a8fee11ab424f8b887df5912431d03d08792cf85c15af7897786627e49e3988cdab4b", 0xf1}, {&(0x7f00000002c0)="f722c2a3fd022842e5af9fbbc117c5ae4d8cc008e3f5abbe8203d42f1731", 0x1e}], 0x3) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x110, 0x110, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x527, 0x6f6, 0x7, 0x5, 0x2, 0x1, 'batadv_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x81, 0x5, 0x7, 0x0, 0x0, "7d3bd512c5919dcea6d82998b97246930085feee229b348b7f4226f29294182c659a0ef73a4797edb0aff0ed46ad7b17a85bfce07ee64266c2c40edd8302cce4"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r3, &(0x7f0000000080)=""/93, 0xffffff6c) 1.458956479s ago: executing program 4 (id=6514): timer_create(0x1, 0x0, &(0x7f0000000380)) (async) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) timer_getoverrun(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) fsmount(r2, 0x0, 0x5) (async) r3 = fsmount(r2, 0x0, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) fchdir(r3) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1.458468788s ago: executing program 2 (id=6515): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') pipe(&(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0xc5, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc03b43635c88f564, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4040040) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x160e) syz_open_procfs(r3, 0x0) 1.404174409s ago: executing program 4 (id=6516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc1, 0x0, 0x7fffffffffffffff}]}) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1, 0x6, 0x6) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x4, &(0x7f0000000000)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="76c2ae409b66", @empty, @private=0xa010102, 0xf, 0xffffffff}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 0xd, 0xf, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff]}}, 0xf564, 0x0, 0x40, 0x2, 0x1, 0x4, 'sit0\x00', 'caif0\x00', {0x8c7ddbcb5219470d}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @loopback, @remote, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.320255161s ago: executing program 3 (id=6517): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x308, 0x8, 0x1, 0x5, 0x300}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x10000c, 0x70, 0xc0000}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r3, &(0x7f00000007c0)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @any, 0x9639, 0x1}, 0x80, 0x0}}], 0x1, 0x20000850) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000080)={0x0, 0x8001, 0x1, [0x80, 0x6c4e, 0x8000000000000001, 0x81, 0x401], [0x80000001, 0x1, 0x37, 0x3, 0x6, 0x369, 0x8000, 0x2231, 0x27, 0x9, 0x9, 0x3, 0x53, 0xf9a, 0x9, 0x6, 0xfffffffffffff001, 0x7fff, 0x7, 0x9, 0x3, 0x8001, 0x4, 0x5, 0x6, 0x3, 0x6, 0x2, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xbe, 0x7, 0xb25, 0xaeb0, 0x5, 0xe140000000, 0x0, 0x4, 0xffffffff, 0x3, 0x5, 0x58a800000000, 0x8, 0x0, 0x7, 0x3ff, 0x2, 0xb51, 0x0, 0x80000001, 0x4, 0x1, 0x8000000000000000, 0xfffffffffffffffc, 0x6, 0x4, 0xf5b, 0x1000, 0x0, 0x3ff, 0x7, 0x0, 0x3, 0x80000000, 0x3ffffffffff, 0x401, 0x0, 0x100000000, 0x0, 0x3, 0xcce, 0x7fffffffffffffff, 0xfffffffffffffff8, 0x2, 0x3350, 0xe35b, 0x0, 0x81, 0x5, 0x77, 0x7, 0x7fffffff, 0x7, 0x3, 0x2, 0x3, 0x1, 0xa5, 0x1, 0x24, 0x8, 0x5, 0x5, 0x9, 0x23a0, 0x5, 0x100, 0xffffffffffffffff, 0x6, 0x3, 0x0, 0x8000000000000001, 0x3ff, 0x7c, 0x1, 0x4, 0x1, 0x10000, 0xcf, 0x7, 0x6, 0xae4, 0x40, 0x2, 0x1, 0x9, 0x85, 0x6, 0x5]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000001000/0x8000)=nil, 0x8000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe1aaf78605174331}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa14001980080001000400000008"], 0x44}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000cc0)={0x4, 0x0, {0x8000000000000001, @struct={0x7, 0x4ab}, r4, 0x9, 0x100000000, 0x7f, 0x78, 0x72, 0x40, @usage=0x4, 0x3, 0x2b7, [0x6, 0xfffffffffffffffa, 0x6, 0xb6, 0x2, 0x7]}, {0x10, @struct={0xfffffffc, 0xffff7bbe}, r5, 0x6, 0x9, 0x0, 0x5, 0xabad, 0x0, @struct={0x5, 0x3}, 0x2, 0x0, [0x6, 0x8, 0xfffffffffffffffa, 0x2, 0xcc, 0x5]}, {0x9, @usage=0x6, r8, 0xd, 0x8, 0x401, 0x7fffffffffffffff, 0x4, 0x41, @struct={0xffffffff, 0x8}, 0x400, 0xfffffc01, [0x2, 0x7, 0x80, 0x401, 0x3, 0x1]}, {0x10, 0x1, 0xc9c}}) 1.296151341s ago: executing program 3 (id=6518): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x04Xk\xd5\xbe\x80\xb5R\x7f\x87\xb7jS\x97\xe89O\x95H\x91<\x11H\xfc\xb1\xc8\xa9\xfc\xcd\xea3\a\x00\x00\x00\x8c\x1e\xd6\x89i\xe3\x943\xdd\xf2r\xec\xd3\x9f\\g\x83\"') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r1, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.215978342s ago: executing program 4 (id=6519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x4, 0x0, 0x0) timer_gettime(0x0, 0x0) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r3 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) tkill(r3, 0x7) socket$tipc(0x1e, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.213038962s ago: executing program 3 (id=6520): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000800)=""/127, 0x7f}], 0x7}, 0x81}], 0x2, 0x2100, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000)=0x5, 0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{}, {0x0, 0x7fffffff}, 0x0, 0x4}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) sendmmsg(r1, &(0x7f00000015c0)=[{{&(0x7f0000000080)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f7f9edab4c86c00c9eacc13e9e008db21062f0e16354e6cd62503bd0fbf03b3accd7b29c2f74d13fdd5f31069950fae1a5b266cba8168e24c08f628d0571485f16ad2ea97008f4b975b55e09fbec28df193bed9facbedcbadb6726858406a6a828c2b2b3c4dfaf631fa6e2ece9cab7b5650266ee08f9f236108f45f63f1be1c19f47f62a274b04872e6e1b0bbbbf49f3f615ba7e03e2cf0bb10141c115369374c9dc0c5b7f57eab217582cf3085f839ef7b6d92cd24c", 0xb6}, {&(0x7f0000000280)="94d2f4fee2f6b17ca252fbe4e14fe279e79ba1f887e60e112ec51c7b", 0x1c}], 0x2, &(0x7f0000003800)=[{0x80, 0x102, 0x9, "92bf31e1a2f17b9873a68866f704f610d482ef7a7b19960fae183032de98c39e23098f2328833d2b088a5976d49c5fd81507c27096e1d16438b08b6c07023c2f7716b6349b8962d6d3e32ddbda899f58227ec35c3a879bd338d27c84cbad78c57b8d4616865509bc1b780322d27d74"}, {0x1010, 0x3a, 0x8, "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"}, {0x38, 0x10c, 0x6, "eca689caa90780e49431aba310ee77cea7bba6f653f91805b89aa94eda38283a90"}, {0x90, 0x104, 0x7fffffff, "0d7c36aa2ba6435e9153081ac59bb8eeaa7a35e845af92e20c7a8a94f72dafdb3f59c65d5aa9863c28855d25c8470399bbebe41f9fab31a38aa084438e8e243d52f1d3c99fec0fa93a008e0e72fd3c90f9f40b32e90a0d3f4a3d854d7b4ab71ccdea88fbabffa3c28f1646820caf770cde1d0933123612c4dd"}, {0x68, 0x119, 0x3, "1bf31ff1f2c2643a3b266d28f984395dcab6828111dd1bbab0472f8a7d55984ce08d3bd49014253e36e0453b8b0da8f4eb0e524d6125f4928f757cb7af6d01baefad53b7a3c7aa1df2aafcc89fbb3b35d74e9b"}, {0x80, 0x102, 0x100, "894b7cdf9595da39fc995a18034c3b46fb1900db99f041e001352e7691ce58cd5f35d9babb3866fc378958356e5eb8fc001a7b824c97260b23f3240c538557c581db05dc43696dfbe47337e49d0ed1b20e6cb8b7cf89fb2235da842f989bb1403ac4dc064c506b8c6c2e1716f3"}], 0x1240}}, {{&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x8, @remote, 0x5}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)="a2a1e75f28d315f1f9314cc2391d121bbe83e92d97a1823bb948", 0x1a}, {&(0x7f0000000500)="ba944972167108d463d1a3bc8851c6f21f7fe41354f57506715a2b28eae2e9c6ca7e8502e3028d4e24457f3dc9c150092de7ac957625ab459b1b34026a008cd3293a1b2337718337c8b2221e7e3525a86f018eb82b2f5e7c6fb1f3d0543000dbf4be0137e42a3ed8721db39ba10bed35fc09a5ff445add21f46f5598b78b327f81bccf1708ed4d288df2651ab907c86eef5796068b9953177ef23ae48a72c1cd731de769c4ce4dd96f864d79b22864d0854be9518f161edbf48c86a05aca12ae0bc8a201dbd084d30ad1c4ebd02352c8c65b2bcae347ee0d9000835de6c8833161", 0xe1}, {&(0x7f0000000900)="1134a7f40091e053e088a475138ce0a53798140f03126fb8578bf54876459778e44c3031305d6e20d9e77516844435ceb5a4ff2d11b6c27785283ed69c5a807322c6f2b1976b4e375ad3ecf70614bc0a4f5e4d456af12f083875c0f4cbbcfef21882d5225179383d357c379e98061d01cba22b6c30c82b753a7255179a3165c9f3529c8675f4eb509b0bb281ec", 0x8d}, {&(0x7f00000009c0)="e72b59c856c7b5007b2e47c2c5112ee336259f19ad02184a84c5dd80e1a6b061a77e6a04d8fbf42009665a8011b702b4f935951cb7392d6fbbd90e45c422201490280d13a6d5f3d7c42e07f9656084e5ebea2e212830d381ba5aa5ab9e4ca9a3360a4615a2629e2421a9dd0d012d5763533b7d5c6c48fc8377624bd0c987eda6813540fb795757622ee565e8de8088c4186f7cb21ed5c57e240f43c4d17168cd53687bc9cde29da9e5b6eec267efd1a1fdcdbbf33438f35f54722b", 0xbb}, {&(0x7f0000000600)="50ef7f5ed8d918b563912b3d046c5d21b65ef2af87205b5ceb6154faaedd06e7", 0x20}, {&(0x7f0000000a80)="451977a58d3380071a5ef133e2783473d3778f3ed484b4c7006575977f45b9be69590ee1a01cd53285d27c0071d3bebe75797d0dd5057fc1cc3875aa71a7a509e26a3a34e105834b109906bafcc9e8d32bb633b7fa1a72552f0fc981a06f2ee457b104ceaa0a82a0bcb40304c55a043fcf007f315a7094e3b26304030b5fc940c80c23917ec98a0cedda26686e64b2918432d408077c572cea18cd659834e2fca753fb4ea62c87f6392fbeedb0f1b175ce0faf81c7d0098a93b6eb33c7d118da364a713ea4761f4836bd4e8d7473439dd73c859b92ce6ecc387eb4", 0xdb}], 0x6}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)="4bf4b895d928d8a38c7087ae61242752d86bf909431ad0b217f93dc6eef607be8b33ca1442ed494225239e5f5fce0c774ad413ae0c677c31e23668b02ed873018845004b0adc05d601cf17f36780b01af07a2fd777a91f7cd890bd7c231c0bbbe36f3ddd3df482c00431a963bf27df05bcb46c1f3bff83af310dd8fe958bff98e6fbe37055e5ab46aafbe769628181de27f8bafaa68e523ea1d4df81422f98975647e65aebc32b75291632ee96efdfe1ba26aac84e50ea6dbccd19d00c30fb890ad0fc2786be866a2a84684c2d1891c30a357c16e860057ff3e1", 0xda}], 0x1, &(0x7f0000000c80)=[{0xa8, 0x11, 0x1, "8d1b4bb8adbc03095872a211253079ede25c9b3717a94ee4eddee739b7ef18aa4680e174f60df067484793f13c0d3c73a86d145e2d2f976423cc30c25b38287fb991988201de5d73b9dd61f8483851300e14978c6cb2c749d6452d71bc94c2563e98d2070aadfb936635c03860a07c0794db221f0773c6588a33a6ddc103b4ae8cdaf9471b6fd2a42c163f5a9e3238a360"}, {0x60, 0x1, 0x7, "e7ed27565e74e313860c7269028ed6ba809738554b20de2940a127cbda90bfc715902d2b60cf3f13a89d3fb7a816a52c4c661cb8fca0209abdd7f8795a1a159c2b2d145fe9f128b99601"}, {0x80, 0x0, 0x9, "7db5ce50eccaf3973084ca9692b440ffb6a4140883b93b120451da021310f50981489c969027ab82ed85102de9f06c9c321d54134acb00e9a92e80b9f5e56491e3da3077ab181557f2b4436397eec07832466b31961d060fa3fda614a49400cce6ccde6aed58699adc15a7e5f781d7"}, {0x20, 0x6, 0x9, "8a03cf71d7fbe089cc41"}, {0x28, 0x103, 0x90, "887820940563d0812b9a1931f62caf20dbd3"}, {0x40, 0x10b, 0x0, "5fe1549c8b7b7bc983644b0bfa4c7c8c2abef9f455a38740aa4bc3b4e5e56a8ad4d7068b733d2c4ceff51da821d8e6"}, {0x70, 0x110, 0x1, "fc8fcbba4b728c86e20a8a5b9e7801d1c9fe7dfed77e17ce82bc662d970e1afe00b72b8ca3d0cd2b2375405428fc784cd3335618b263f18e4cafe68d09e3b5dc633a7e419ce93049fa6be1cdacbdc5acc2154271cd67ca5393b9baec1d8b10e0"}], 0x280}}, {{&(0x7f0000000f00)=@ll={0x11, 0x3, r8, 0x1, 0xff, 0x6, @local}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000f80)="bd086c097190e1a041d524a45c903d2d2e6cd3ef078a5ecc538aa2a5ad5de920ec048f583e8e450607f474fe8582a4fec90388d4f90d747577376fcb4efed126c348c07d1699250fc0b429b2089a62bb1a3a5641e4a764f41402516c5ba743", 0x5f}, {&(0x7f0000001000)="ea436cf271b0f10cd64fb25419bd9194ba78adda703cd9886283bba9d7f5837edb28f5fcb5be69141b86a17cd8022becc132c16cee33f42095776760a1bbbe1dc3f6760de61532ab508d6f5474c8720f9d", 0x51}, {&(0x7f0000001180)="ed898e58929f4e623040b07796de3a566e988b053fe771aafc1471f5ea7adfe598eb05ed084f2b32f98f793c7a76022c688cfe6a55efd8c464eaf898e8c4f726d7fb8a941b982c80a7167ae2b767b3530962b3390f6653740754a09ec495bb202ba750e8b4e76664d186237500610858922dae0da2930bfe07d1c181d2374dda65b44db5557d9af55ee188573ad69179205620b6edc4a95e3447a521559dc73bd788a5f69e0fcbe2d97224ddd84c344a7a322b2964e4fbf7baea429bcc2e0b85100d09fbe3e24f234c9e62df7775", 0xce}, {&(0x7f0000001080)="917f3cee10f95b320ffe41bb58790615f7545c963b4db22eaa615665980956aeeb1b1f7caa583a0ed6cbfe87d8d01d57d30491bf7b912337776851b3d9f7b1f482c67ed27beb3a678637", 0x4a}, {&(0x7f0000001300)="e8e5a44103292c46d328e6a1e9aaa9aba54824d1f92f1e45c22877e04ba5d8a6922f4565df800c6d6d29a7eaa2c55f5d48e3a61f150befbedb444ee9bcd52b8e4c051df48a8ef8a1415e27115981931003ec7c84ac5692", 0x57}, {&(0x7f0000001100)="e7", 0x1}, {&(0x7f0000001380)="31d2e93f41f94772f155dab62782c78e26c63be66248a275980cbad855d8840bcc233cda7d61bce6fa50e9e7bef250122bc72da8db195eca9afaa0090f07def7ccdfd69317cdbccdcf1141e517a6efd2f30bbd518c18027df96865f42215a2eab370827229c2c9ef073c0fcb82f657bfbed2f19f16d6ac7d0f9ed6af6d48e5b897493f6e4bc3ed6d8cd8529cd7cb27b642f3ca42cd48dfdae171d0abe1c90b23c960b367eecd0b29018e24c330eb0512974f549da30d551fafcec3ac2b118eaadd6a18937c19f18ea685a663e335fe0e9c4fb478457811300e7cc2e1f11af94060ba2c356d3577a7aa3e", 0xea}, {&(0x7f0000001480)="ff6052b466e5bb9ea9faca76694c3d72980744fb72f69cd88172b4a6be64889160ee4b6133ff52cc40639c62c91a3fa01f1baf531eec12e2ecddbd0ec48c61efd0bb3b728077453d319acb4c4dc4f03b5e9015a7e6e859502b0113b1015f718f337ddf59d53869c1c5db5f60db1048b7d827c20a40e52205dace57fb945ec3d5ab6ddcc044", 0x85}], 0x8, &(0x7f0000004a40)=[{0x70, 0x110, 0xd3, "860dc928bbcc4a8ddb81af229126bd04cc94b9a076ed515187cf0c871a66f4e54d79db4fd643c3bc30941c4943a88398c714fef86d09f939fbe957d22f2cc06a11566a95f76aec5bfc80f1578d67f343e6c1c77e98396e38ffbfb53a"}, {0x20, 0x107, 0x0, "d0ac9fa0f9585a6bad19"}, {0x80, 0x10e, 0xb50e, "baaa9c4b89fca2d226114a9232df5b43b1efa0ba1a6ed1b190fa68e7db69dc06c7f1f46345b8abc1700acff3c22a43e57a0d9b029231f7f8cc7cea09db4baca5e6cabf85953ac8bf936d8daceb0295df2325abd364ddfc82944540024723611eaeb2431579620838cdb53b9137cb"}, {0x78, 0x10c, 0xffff, "b56cb49c59b63900fc1f6704843072069d985836633a4275892ee9e2868567452de490b60189f39ddb60ab875d43bc62936de6b276ed5affa29e06f451533d2b2225b732ec2e5bf41b3a3dc0c25c113549c66b4d2aeeeb925cb06c404175798a32acee"}, {0x80, 0x88, 0x0, "05c5468b9c978162667679b2ae39542c23eb427c4b81c2647d350dcdbf5aedc35cb4d74759a97497ce0609ff3aef9752c181f4d4f6bd436e06201c08333733605f5715a1cccb1167eba216a66da8bdc9dccfecccb0e4dc2483463539d070c7a99fa30b9df68fdaabff5a4caf"}, {0x1010, 0x114, 0x0, "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"}], 0x1218}}], 0x4, 0x8840) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r9, 0x45809000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.177133533s ago: executing program 3 (id=6521): socket$key(0xf, 0x3, 0x2) r0 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='/d\xc0\xa1\xe5\x86v,w$\xb1\xe7\xfa\x85 (\x87\x02\x14oev/udmabufE', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x191901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0xc19, 0x0, 0x0, 0x8, "7f12ddc1517600"}) r4 = syz_open_pts(r1, 0x0) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x10, 0x3, 0xcd}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2001380000003807ab61bed3b6c17ddc3fcb0bdbe9d03c5a0a88b5e3"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xb, "cb4672ac02132ca6"}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 854.060497ms ago: executing program 1 (id=6522): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18802, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) capset(0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x10, "6496c0a48ee343defcc6488415d24c99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x4, "aa8208d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "a6ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x7709, 0x2) 640.1966ms ago: executing program 4 (id=6523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r1, &(0x7f0000000040)=""/25, 0x19, 0x7ffe) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000)) 639.150101ms ago: executing program 4 (id=6524): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write$snapshot(r0, 0x0, 0x1f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0x5, 0x4e23, 0x3, 0xa, 0x0, 0x0, 0x29}, {0x7, 0x9, 0x1, 0xb2, 0x5, 0x5, 0x3c46, 0xce}, {0x5, 0x1, 0x10001, 0x6}, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x1, 0x8, 0x4, 0x8001, 0x759}}, 0xe8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xc08, 0x2}) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x7}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) madvise(&(0x7f000083d000/0x2000)=nil, 0x2000, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000040)="c0", 0x1, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) read(r4, &(0x7f0000000240)=""/22, 0x16) setsockopt$inet6_int(r4, 0x29, 0x46, &(0x7f0000000000)=0x7, 0x4) 609.060421ms ago: executing program 2 (id=6525): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r2], 0x20}}, 0x40816) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001500)={0x34, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @register_looper], 0x0, 0x0, 0x0}) 595.032671ms ago: executing program 2 (id=6526): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x2c, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[], 0xffdd) close(r1) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r2}}, 0x20) 539.589732ms ago: executing program 2 (id=6527): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000002c0)=@updsa={0x694, 0x1a, 0x100, 0x70bd2c, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@multicast2, 0x4e21, 0x4, 0x4e24, 0x6, 0x2, 0x30, 0x20, 0x21, 0x0, r2}, {@in6=@mcast1, 0x4d6, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x1ff, 0x401, 0x7, 0x6, 0x6, 0x0, 0x6ad5, 0x6}, {0x9, 0x7ff, 0x9, 0x1}, {0x1, 0x1, 0x3ff}, 0x70bd2d, 0x0, 0x2, 0x1, 0x1, 0x4}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @migrate={0x1cc, 0x11, [{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x3b}, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x3, 0x0, 0x3507, 0xa, 0x8}, {@in=@multicast1, @in=@broadcast, @in=@multicast1, @in6=@remote, 0x3c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in=@multicast2, @in=@broadcast, 0x6c, 0x0, 0x0, 0x3500, 0xa, 0xa}, {@in6=@mcast1, @in6=@remote, @in=@multicast1, @in=@private=0xa010100, 0xff, 0x1, 0x0, 0x3502, 0xa, 0xa}, {@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0xb9, 0x0, 0x0, 0x3503, 0x2, 0xa}, {@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@multicast2, @in6=@remote, 0xff, 0x1, 0x0, 0x0, 0xa, 0xa}]}, @algo_aead={0x4c, 0x12, {{'gcm(aes)\x00'}, 0x0, 0xa0}}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @mark={0xc, 0x15, {0x350759, 0xef}}, @migrate={0x1cc, 0x11, [{@in=@empty, @in=@loopback, @in6=@private1, @in=@rand_addr=0x64010101, 0x3c, 0x3, 0x0, 0x3502, 0xa, 0x2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, @in=@multicast1, 0x6c, 0x2, 0x0, 0x3507, 0x2, 0xa}, {@in6=@remote, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x32, 0x1, 0x0, 0x3505, 0xa, 0x2}, {@in6=@loopback, @in=@remote, @in=@remote, @in=@rand_addr=0x64010100, 0xff, 0x4, 0x0, 0x3502, 0x0, 0x2}, {@in6=@empty, @in6=@local, @in=@rand_addr=0x64010100, @in=@remote, 0x3c, 0x2, 0x0, 0x3501, 0xa, 0xa}, {@in=@rand_addr=0x64010100, @in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @sec_ctx={0xae, 0x8, {0xaa, 0x8, 0x0, 0x6, 0xa2, "33be15075624252f25eabca8de5cb0c5bc55f9c85bc979281f8b3d90ca91775842ce6ea3b2a0e98c149b5f3e1ed3fd97df2c62d1933afab6d860f1627b8e0a17b70e4a872a495771aed7055084ca85f2043bd47e0d04d0d56dec4d41108585d6b2e71086f03cecca1b8e67abc5349521799d9a446dc0ff4aabd7f783ae2bea24f37993cbd428a0079be93815e7d99875990296d419027856eea7eea5e020c4e6a235"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @algo_comp={0xda, 0x3, {{'lzs\x00'}, 0x490, "8628fe0c0dc6f540ee2fe005edbd1a48f6cff686ddf707c58e29a798087294795f0d4490c9fb85cc13cad84cce4761850b1c1ec73ca16f06035f71eff5aede2d9ea9ee04142563bd5e865c128912f17c0d5c70af66a1c75940550dc25311d190a327a2664ec3aac213a1c28ec53f5ddfd84e73e656715254de4e43cb806d6edd5a572b01e8bc7b760cae1b31efb18d801deb"}}]}, 0x694}, 0x1, 0x0, 0x0, 0x5}, 0x40480c1) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004880) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000b00)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000003, 0x20010, r3, 0x8d4cb000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x154, r0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xf5, 0xac, "dc003c4a167accbd224e3568a04612e93753993c9301a4d651489939f2cb0e0c0b6f2580e82511949d09726f23fc2754b46094da9f10dd9dfa25bd86e5d0f9a5131a7665fca00bedd9cddec3fc672c6c6d86391f47935f36b321e916cd31bcb4c9255ca3c6847207601f748bb95967ece1c187aa89349c059cdc2b88a65cda38d63df27f14cde05b169d5565b2f7c93e80ac570f4159d42c080bb51b2d38bc4192facb8f04ea2db01193bbf42c2606f71b49e403662c6e15739ab71759a76ba317f38b49fb390d5c7cd9d5b13d71c2c1c8bc4a311a67f846bca6bb32eb4d82a7dc399e2a4398202895c0eb9f0790ca391e"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x4010) (async) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x154, r0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xf5, 0xac, "dc003c4a167accbd224e3568a04612e93753993c9301a4d651489939f2cb0e0c0b6f2580e82511949d09726f23fc2754b46094da9f10dd9dfa25bd86e5d0f9a5131a7665fca00bedd9cddec3fc672c6c6d86391f47935f36b321e916cd31bcb4c9255ca3c6847207601f748bb95967ece1c187aa89349c059cdc2b88a65cda38d63df27f14cde05b169d5565b2f7c93e80ac570f4159d42c080bb51b2d38bc4192facb8f04ea2db01193bbf42c2606f71b49e403662c6e15739ab71759a76ba317f38b49fb390d5c7cd9d5b13d71c2c1c8bc4a311a67f846bca6bb32eb4d82a7dc399e2a4398202895c0eb9f0790ca391e"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4000000, 0x79}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x40}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4000000, 0x79}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x40}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000ec0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f00000011c0)={0x2c, &(0x7f0000000f40)={0x20, 0xf, 0x5f, {0x5f, 0x7, "5f88215d61ee059838b6d330f22163f1345012a2f31d305f8041ade648dfc0d42b0decf9e7997b25b9022f7503e02f070cff61bb31ceadc9e3f3d01e075ddb12f915145f3a482ea678af92a87201610b6bd454c49781a776233848f2e2"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000001000)={0x0, 0xf, 0x130, {0x5, 0xf, 0x130, 0x2, [@generic={0xa5, 0x10, 0x2, "ec04b0450f1e56aeb514a91d71d77cdeae9ab662ce92fdba866469b689f2f127a7bfdd95da9f680b51b4a49e2cd6ba1130725d1fa2339a12624e9be5afcc6a8d78dcc81816babbfc69c471f96e4927e96418251f2757aa00ea6b71db10417e8af3fc8fc20103059ede3077d89e11864034f2f11c9ba22a4c499fde073f3019f0b004b16aab42401b2cc9fa981db9ad906c7db1573b21670282ab7eaa164e1099b519"}, @generic={0x86, 0x10, 0x8, "7191dbfae18889c5cf99d6ece77acaecbf35fa96ff53bc087763b9fb4b8bd00abd32a1733221aad44bd94fbf71b2cd2de4e3de59cc4d800fd46954d8f50d60d312b111571cf6f12b2f13798d89923ffae912f845cdaee32313888dccaca29239e7fc287df2e9c20d518a1b56825d863c023805d09eb41346ce1cb76cf0b3d1a8200aa4"}]}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x60, 0x0, 0x2, "1da5d585", "69f334a3"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0xf, 0x2, 0x1, 0x5, 0xc}}}, &(0x7f00000016c0)={0x84, &(0x7f0000001200)={0x20, 0x14, 0xc3, "84f3da18f5ccb43fb93a25cb6ddfa4e48a53fcdc9ebe744c4d72e776d097374c213f22989cbdc0f234e9bad89e6b7f6b0834b8112d2298d3684ed7d0b793e3e199d4f437d57d8312d98868ecb444831b7c1f601a52337ac9e06bd36abeb0e95301fb547f0cc35072877544e2c04e47d413aadfef732d04c9d419a2f3a8b3d3853c6509f0d9c4aa38328fb80743da181a05452f6914f2c05270c07cc19a97c20f22920649fc55803194061505f93d634371a4f379abc77693dba438a6b379529a178635"}, &(0x7f0000001300)={0x0, 0xa, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x8, {0x400, 0x80, [0xf0f]}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001480)={0x40, 0xb, 0x2, "5eac"}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000001500)={0x40, 0x13, 0x6}, &(0x7f0000001540)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001580)={0x40, 0x19, 0x2, "d912"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0xf6}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x75}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0xf8}}) (async) syz_usb_control_io(r6, &(0x7f00000011c0)={0x2c, &(0x7f0000000f40)={0x20, 0xf, 0x5f, {0x5f, 0x7, "5f88215d61ee059838b6d330f22163f1345012a2f31d305f8041ade648dfc0d42b0decf9e7997b25b9022f7503e02f070cff61bb31ceadc9e3f3d01e075ddb12f915145f3a482ea678af92a87201610b6bd454c49781a776233848f2e2"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000001000)={0x0, 0xf, 0x130, {0x5, 0xf, 0x130, 0x2, [@generic={0xa5, 0x10, 0x2, "ec04b0450f1e56aeb514a91d71d77cdeae9ab662ce92fdba866469b689f2f127a7bfdd95da9f680b51b4a49e2cd6ba1130725d1fa2339a12624e9be5afcc6a8d78dcc81816babbfc69c471f96e4927e96418251f2757aa00ea6b71db10417e8af3fc8fc20103059ede3077d89e11864034f2f11c9ba22a4c499fde073f3019f0b004b16aab42401b2cc9fa981db9ad906c7db1573b21670282ab7eaa164e1099b519"}, @generic={0x86, 0x10, 0x8, "7191dbfae18889c5cf99d6ece77acaecbf35fa96ff53bc087763b9fb4b8bd00abd32a1733221aad44bd94fbf71b2cd2de4e3de59cc4d800fd46954d8f50d60d312b111571cf6f12b2f13798d89923ffae912f845cdaee32313888dccaca29239e7fc287df2e9c20d518a1b56825d863c023805d09eb41346ce1cb76cf0b3d1a8200aa4"}]}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x60, 0x0, 0x2, "1da5d585", "69f334a3"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0xf, 0x2, 0x1, 0x5, 0xc}}}, &(0x7f00000016c0)={0x84, &(0x7f0000001200)={0x20, 0x14, 0xc3, "84f3da18f5ccb43fb93a25cb6ddfa4e48a53fcdc9ebe744c4d72e776d097374c213f22989cbdc0f234e9bad89e6b7f6b0834b8112d2298d3684ed7d0b793e3e199d4f437d57d8312d98868ecb444831b7c1f601a52337ac9e06bd36abeb0e95301fb547f0cc35072877544e2c04e47d413aadfef732d04c9d419a2f3a8b3d3853c6509f0d9c4aa38328fb80743da181a05452f6914f2c05270c07cc19a97c20f22920649fc55803194061505f93d634371a4f379abc77693dba438a6b379529a178635"}, &(0x7f0000001300)={0x0, 0xa, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x8, {0x400, 0x80, [0xf0f]}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001480)={0x40, 0xb, 0x2, "5eac"}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000001500)={0x40, 0x13, 0x6}, &(0x7f0000001540)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001580)={0x40, 0x19, 0x2, "d912"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0xf6}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x75}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0xf8}}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x44, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x20008844) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0), 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000004}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x10048850) r8 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000001a00)) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000001a40)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x2, {0x2, 0x4e22, @rand_addr=0x64010100}, 'rose0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x58, 0x2, 0x9, 0x0, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10000}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x20000050) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x20, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000851) openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8040) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8040) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x58, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x65, 0x14}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x63c2}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1bd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfe00}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000020c0), r10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc404}, 0x40040) 332.001465ms ago: executing program 1 (id=6528): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000200)=0xffffffffffffffe5, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4008041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) shutdown(r3, 0x1) close_range(r0, r2, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) read(r4, &(0x7f0000000140)=""/113, 0x71) 316.036696ms ago: executing program 1 (id=6529): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4020ae46, &(0x7f0000000600)=ANY=[@ANYBLOB="01010000000000000000000000004002000000000200000000000000000014"]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000400)=[@code={0x1, 0x7d, {"b805000000b90a0000000f01c1c481e3c29c33978e1a1f7a0f01df66baf80cb80a2c4586ef66bafc0c66b8850066ef66baa100b877601651efc4c1796ec2662e666765652e66660fc5e5fb470f41950c000000c4a2e50b84b40000000066baf80cb8fe183a8eef66bafc0cec"}}, @uexit={0x0, 0x18, 0xc3a7}, @cpuid={0x2, 0x18, {0x5, 0xdc4}}, @code={0x1, 0x47, {"66b84d000f00d8f242dece670f01c3362e0f90cab805000000b9895c00000f01d9c401f850e60f01c3c4622d00da0f00df65430f013a"}}, @uexit={0x0, 0x18, 0x2aa64abe}, @code={0x1, 0x65, {"66ba2100ed410f01cbc4627d194a2d0f07653e0f01c866baf80cb8aca78e8aef66bafc0cb805000000ef66ba2000ed48b870000000000000000f23d00f21f835200000020f23f836a3006800000000000045d1fd"}}, @cpuid={0x2, 0x18, {0x4, 0x9}}, @cpuid={0x2, 0x18, {0x7, 0xa}}, @code={0x1, 0x51, {"66baf80cb8f0de3185ef66bafc0ced2e64430f353e67410f017b00c403edcf0200c401997d9600800000f3420faee00f07640f01cb0f3036660f58bd0a000000"}}, @cpuid={0x2, 0x18, {0x4, 0x1}}, @code={0x1, 0x78, {"c481782903f30f586245430f00535ac4c37960e1000f35c74424007c000000c744240200000000c7442406000000000f011424b9800000c00f3235004000000f30440f009c847b1d0000f364f0203a48b8f9000000000000000f23d80f21f835400000c00f23f8"}}, @code={0x1, 0x56, {"b99b000000b800780000ba000000000f30c402a59c16650f0765430f7950a4660f3880a3000000004322b009000000430f3566b88f008ec8c4c17ff07300b9390200000f32"}}, @code={0x1, 0x57, {"f2420f5db54d0a7776f20f79eb45d1e0c442f9238d00000080660fc5e171c4a229aca2692200000f18a60c000000430f07b9800000c00f3235000100000f30b97f0b00000f32"}}, @cpuid={0x2, 0x18, {0x44fb, 0x3}}, @uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x0, 0x1}}, @code={0x1, 0x76, {"65440f01c9670f350f01cfc744240000000000c744240200000000c7442406000000000f011424650f18dc66baf80cb85c1d3b81ef66bafc0c66b8c86066ef66baf80cb8f46d838cef66bafc0ced66b8a2000f00d0400f32440f20c03508000000440f22c0"}}, @uexit={0x0, 0x18, 0xff}], 0x41d}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001f80)={{0x1, 0x0, 0x80, {0x1bbba9006, 0xeeef0000, 0x1}}, "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", "e5c8099a9923cbd119f5de24dffe00938304767ec0dff32ed32bdca0340918ba5286b9ad09ac1b04e5de5757574643c3a51189a7059b64feaa0d6baf3ae8c9c0bc1d82dfe33ae294d3c6f2875d026b5c35e1edde3160e752fb978f98327461643bce1d684a8bdb365f62c80129d76006ef61d6f1032da24332cd3b0598075aef2a5259075c5b5d8d482903df5a99355e7c1eb53e192db9f4c653327317daac3e1e44c2e760087da885c7c9041381ef41c8ce48514684880ca99dda49cb37815fa43a5fe55d10e52e7c4ca700d0e76bda39cafda73e6f022b225e94fa1f9a9b7ff3884bb6043c9a60fa800f7cf7948d08097d97d4021652e89a3a9d877742bd7ce5bc5d52633bef3351ec50e1025a16e2270161694645b9ef396797d79befa3b9b9f9f68821021641cdae476dad7713964cd3d1a270d22624de880131b99baae0688b263963756c151b5b1c844b6d50581f1ca79c67ba3bbff311de4eabedf59731035afa9c598ba7edd4a11d77fd699b3bfc4a1256345a707099cc006de36f565ddb734bd8a79977e65cef824defa73340251298bf6a7d8c98f799a5228d8904a7d04954f49267fc5b99458b48de6d88e85186d1ff2131727223b9096f91c232d22e10ca44c3d289995bd42a12d0a2ed108e739d2aa9801dff63d63bc9536b5f054f47c39ac33bf60404dd4186a7749cd4e2235c4b226d2f4e9c14b79b4bdce0a544ac52a47cd877766b480bdce0e981a2c260e6a0ef8e1dc6c9b1de7b16a671c3d7d5a11fcd45115291293148754dde189052b5a5c972683053f50ecc3d453a551b657a7f4bc402f1eddc1a202150f76bbfa6371e1189cea78f731df0a648362028b741bf328c55b5d135bd4dab81789ba8821ada8f885fd2ca74d52690b8bc22f5aa54bf71383f4fc7f02446b1a71568e78378e63ca54484510c2a6a16af6350c305f6d3a2fe50528a7ff6a78ee9bfe694ae7bb5dce56293ea3178ffaa42a85705bad05ddb5890d43b25e3e0d098b193a92014f8e6060456d4606d326dc0cd3f6a95cff98837c947024230d5ffb1e87dba8e60f053b7014a3678f51b33e692e096ca8464c9caf2f717a028388a8da4aeee96f3d72d88811450b513425d408ebc01a8bef6861d0b696eca82c5e6f0e03cc07f131122f8676fe68c48cbe3f44066644656f140296ce940cfeda259454fb8ecf06891d2345f3d8f75535dde9d36b3c91109720d44dbbaf8707577068970378291fd877922c5bc4ca9d1adf1643b729131a31df1d0550d1a37214d3a260490f3971a26e59617c851f8aabff1910fa08e21e6ee5352c19fa1d65797bb6ece80f85f6db10e61f26231d92ae49c251bc3418f4bd44083d2373507a87569467ea5a2181004b74cc82aa13b93c75026f58c06f5f8bb925eec614657ad5cd9a000f35202543a7614cfc0e0a865be5f0459b8c70f83f3574f129b8fc2c1d389bccee46668caa5953b3d16b12010bafbbc60d3bfb9dab6a9b622dde97bc7e4e54b501c2f9fd36776a41c6e40a994d53146f530838419d64d19fd6b4d2712f03f7fc8238ac191785e6f7809fef86a387f3aeb93643f95e4694aaaca859a5133476040f814afb2f9002b0ba46cd7ec8b1e784c470c24b1cbcc8a7457e67df246facf7dcbc447d76d8f5901a80328045f93757b20f56e1766ebe88804a46c19cb0fe9fdcf46c63ff77721fa5012bec6fddff18ff737391fa03d6416c497ef27d56615c1c4455b6ada5ca0559dab0a2e392d2568734ff6d7823df69c901bc582446f658fdd107fdb3560d6e33e6e70c2c40b3df1c3f948d6f639c7675940d74ff4a71eebed6742c45fd8bae3fdcd07c26b153213d49e37c5a5fe2610783c9401e052ac5009f3d3b1c0bcae0df73d56ae34a4b38bbab1fe985b9f40eb1fb1717f948719c4b0bee4746d8e4f6334e4424346d6d2605fed0e255b43516690a92630f5c524e9d9295716c26deb5ffb8098ddaf73d51c42a1d2a639160c94796fef9dd27cfeb40dc61f35d4c334fa5be32f48d53b3b36e2121b381796fc434277f0cb5ea4e22d67105dffe99a4a251879f7c9f769469dc7e050384d3c52dcf2c18836cd864f28118935c098c20220636d699c183aa18753f5e9785babb2ad70d5cd58695f31b55c0b691dbc1954beed88c68473d67f051dfef66d2f8821758414c5077d33d9bde92266f9e4582b2999336abceb19c2e22c7db21705e2abf11805767c2bb193d7b6ecaf3c7cf2c651b1b4cf5c5207483956feec8e431fa910534eebb388d5a4a6debd06380f706e00ccc7172fdf98e0d18bc041d8ccbca0eaf2f6a515cc03a4b7c7c8b7b4bb96816717b1bae02cb225f7a893030ec0798fc84877487cc3fbc4f24be1743a1cdd337ad52303c5ce19712f3791e0f683edc19f4883f61f8855045ec0a3a49396870f05413ae2284b98907592a6a54269334515abb3cb2a1157a93eb1769349397847f749caad135445d39735353a008d23365907e05faf97e7b76d4c9acd5607b5ad5ab098d92cebdeda52abca22cf08a5a2596259a291945cd34e4ce33eede45182728842dbc3e76ec2d1f522420636496fefc1885a402201da862788e78d74a638489d2333afa951190726acc33279738e576d773614cbb7962549d5da22ef1a02e77ec310b0bec5c6689f2693fd71d7d8c741a3170bd7fe84ce38ce85a1b086a09db8f9b8102bfe177855ff8d5db2e2a7f9a3acb39b33d8022feb7b44c4ca6f8686069f257d2176877fa44a7acfd95cc8522b47a3984ce7dd22ed1c054d84d250f5848bc63cf55bb6644ccfc9ffd7e8eea0af686bd8ee6f826a9fe9bd68af5592409543907b9ee774ecdf841ccc5f450dc1663867809053fae05e556b0fc4c11e913d362935ebd21e9a7f67d2e5ed03f8efd2a06437d1ce0c416209ca0c6a53cbbad25a239afbdafa9a2e9c1c8c29372e75341079a94a3797d45a2ae3dac8396ad25d2a25727ac3892e7c100042392653a81d6b7c9d0edb0676128fc9804bce317be033fcaaea4abdb4233f430aaa108f86fc44cb8de39883af8b062078559d0071faab5f03259ae0b04bebe68a835c78b9a22e75e3c1bfd6cd64053b0a4f793359ad730905a37b12592ed70a88e37480d9d4f252ad52c51d653dab828a40485d941a427682312db869e22ff4d10a25bc42eb29a193409a127d2c04838496585006526949978a13672afda2f77ee13e1ddbb8ddc0547763d9bfce54bf39a993c0e3e46afd359a028231723e4beefc856167143355b28bef31de3d24fa696cfc09392ab4c9afd061439ee8084b343faf68766d9e8534f1a419ab11c2e65605712e773fe124ceef1dcecc09952a70feff9371b3bddabc5a3230d5c8496608f8e7800441f698687ce82db241355fd225ed2794d582c59007be990997612d275b2c8317c9d707b3fca56978d2cd0c57c2c48dc1f955eb8104ff20073833795a30bca416ddd6dd1f35dbc6fc792737b57dded0a1d0e487d4bd39a05b2f09faf9a2e55bfe9de5a21173182ebd8bd1a8f461180f9e38314e4e80b5fbf13867d1a458aac2743ca339cc925712677cb96236673e52f4b305057c708d4352a64267c2ee67c5247bde5ae1cafee37e094824999672e5ec2a87034a1c7824704d778ccfc04d7ae5f2db704b0d41537dae0624d2515b9db8a2958db71e52cbe388a671fb89d2f0febafe1a231c6591f9302e8e469c123295b0a662b421e9fe2d2175a4ee321d90d0a7dcf3c58e78ccb03c9b2e530cf0d653a5a52e6a36882a8fbc0c41ca26f0a8faeef81cc06b0158c8a6b3ed575e89a1b728428152ea9479c3a2b6a8d4902c97ebec1fc766458d2e9d183976b2818464c2815974ebfa3b52d98c43a88383af5ab0d4cc8e711f7aeec39b7213a40a326c5843697286a9f7c8b9c3ac4afe9262890a4a983473e8606647dd1ef25500d16465a3b287fb8b6824776db7c3b2b09a970067bc0ba8f782e6712ab1cb4b366e419917ce8caca7e76320298cd364e1f407002fa10a3477d5e107a0424996f47d8f650e936fb0e51fbe7f82328bba2aa161ef21eb2c18cb867dc9858024523aa7ada8dc7b529187f5255f4eef6738d95cf61700aedcfcb7a41b706c6d64a0739384a503fd8e7eb4bf570ad537049b50162a01076f54fecb7a261398084080798e661699732d0e6585ac6a8a8c0af2c88d01e1994d107070b9618358cd27a6d3239d4aa9c6db22987663f6e67e426e990189a5b91ac1f0d427ee930eeb16cd71aa442f339a5d952fb8838525c9996ed18e4a352f4b1c6f2c136f9a86cf030cc3202483603619397309689e7a56792311a5e8413c80d1bcd652649d9fa46d4190803c68e4ef91c8e298de157a24ab6d31926ddf7ebadfffc5d6a5eff2d181347cf19340327def8ae973c71a6f71e6a241b7f2cc0948600107f8873b39e468f2f97c9615f527679ca50ed8240bed4212baffcb2886365c1d8f6a742fa87289feabbf48209e03f8f974db1569e8f83d24edee78768173489cbf083d0611f90956f6eececc9695267350975dafb90903c953698d2114b3974974f67fdd9818d2a605fb23b188fc01325a6ee783f9fcbb59c464f445269c8b699b65279f9115d24f5e70542f4be784f779ffb7aa9f4fb53cbd19a433284f5bc99688802a391320f8f873457277b19d0703a6d612502fa493385a0b10a2289c5fc7a1a680d8f008faa876686a9bb06ccbf8292bf1e14727f0f0ea3111357360b042d05c7a888ec9b5a09deab049f14089f68d8f689b3cd0149606fcddd866f0d8eb4fbaa43861c6e774a51d957e9143ec6a2b70f4f3fd96188d917dfdd100cf5f1f8c8003d5d6387981fc99e3f712e30405f38b9dbb7bd66af2b3bf78c2a93870cf56e3b6ab318f32a27d54870af0232ebc7e88bf389db434f858ddf0b7c3adf1f9cd61e22fde5c3d700011699c67441f3f9a56cdcd0051ac02fc12235f64f8b9d775de53f05d9d2fec480af742b51b4029f370fcd796b1236589715c9ea0e650719f1250b3e0d02fcb242f3da7555ec14e43f20ab64305e986f954dfbf88210dc165292fdf78d678b7d6a4b5d67d4a35d52a978dff1b5fa2fb321c21845ca141f3e7bc3adcf715989a341a65ab92089069c656814321fc9a44ead21afb66616c9c662816389e489334ba895c13f2a063e154ee35fab185d88d5ce75916504e1a3ecec90f99603e2699c9f961ec62c8b1f8fda2fa278044690ceedc189dd612a9daaae27d6f3daf535c85f3f1f5b23321e49670522892d4d0e994495dcf6af12b2644b9c1a3a190adb18e6dd2171f5f5200d2f26ccf72f1173d3c2998a0f884d489b3c9fe3f56fefd6b4b1db127585d6d94ecdec64c2d818b1e65bf8b6b8a52db4866f981f5e1eda711345508f2c51336e8cf4fcb5ab6a92498584544f13e9fd2b8cd218b2389e90be5a9aadcdbc1ba7b7ba8e8222c9bd19addac1bcb5162e7e59afcca29a3d26bbd135061670908541a40ab925c8a9233d2b13f6842b4075c9f19e9f08f94631af40e895c4acb986d651373787845dd3281ed3fcb2c84af51670587d4c72603ac2d4ef5c6820a821c46446abfaa57c0502f11cbda2fd44d130b8154772a89f136e406f69e250ade5f09366a137eb93f5146595862cb58e68a1f719f3aa9b4ee7a4876072ac8ef13565b569739adbe39b91d3e2e8c3fd3e67f7edf80d5c74308eb7214d61f20aa83fd8ac71451857916c1f0b02ac3df5a5fc92dc478a389f8db60240872ecc97b8fb90e5ad125311fa915e500ef240dcb9fb70d0449b27e"}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x4, 0x0, 0x1, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x1, 0x6314, 0x9}}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000280)={r5, 0x1, 0x6}, 0x10) mkdir(&(0x7f0000001f40)='./file0\x00', 0x86) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x7, "f0a23923263408"}, &(0x7f0000000200)=0x2b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4802, &(0x7f0000000040)=ANY=[]) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) 216.205467ms ago: executing program 4 (id=6530): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e"], 0x80}}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x2, "e911"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r3, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) 180.956718ms ago: executing program 1 (id=6531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FITHAW(r1, 0xc0045878) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xff, 0xf2, 0x3, '\x00', 0x5}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x5, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0x1}, {0x7, 0x5, 0x93, '\x00', 0xfd}, {0x1, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x7, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x2, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x8, 0x5, 0xf2, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x0, '\x00', 0x7}, {0x6, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x8008af26, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x0, 0xcb}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x403, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e0) close_range(r4, 0xffffffffffffffff, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 57.071129ms ago: executing program 2 (id=6532): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 0s ago: executing program 2 (id=6533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0x1, 0x7e, {0x7e, 0x2, "897e6a22808af86bbe8899e6b6e9c8cd1e87e70da86cb2d0e8f99b9fab204eeba8d7d4f0b9aeb5dc84611e8333b19d6745e151d0891661a822b013df424e0df621db1821c7d3f51f6b76106477b6363bd7cf266cdd8c27010021ed46aa72e7daeb8068042846bb77a232f5aa88a52d94493f5607c57d35105febe084"}}, &(0x7f0000000180)={0x0, 0x3, 0x23, @string={0x23, 0x3, "f804b41b6509547a78ebc6cc04647701359b1359f9aa9ef17fa507350bc611161d"}}, &(0x7f0000000380)={0x0, 0xf, 0x74, {0x5, 0xf, 0x74, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "217f3f223aaaa5aaee1938ce6f49c013"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0xbd, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x4, 0xff0f, 0x43, [0xc03f, 0xff0030, 0x7e00, 0xffc000, 0xc0c0]}, @ssp_cap={0x24, 0x10, 0xa, 0x6a, 0x6, 0xd6f, 0x770f, 0x0, [0xff0000, 0xff0030, 0x1800f, 0x0, 0xff00c0, 0xffc0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x9, 0x9, "0b2fbec8", "61ad0008"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0xcc, 0x4, 0x4, 0xfffc, 0x5}}}, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x40, 0x16, 0x64, "36d9ccf098ef807512cf769fcb84a190459d6245bd0994e358529c734ce5e840d6396c7d92b1e6cd42e3149a47675393596736b9c8672c1da0182e891af645bf5b5036ced9af7b15c9f52008db677aea9da944f1a499cc968e13ed0de287b224ef1380c2"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x1c00, 0x4, [0x0]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000740)={0x40, 0xb, 0x2, "ad28"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x52}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, "38c6"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xa}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x29}}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1de}]}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x400002, 0x9c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r8, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {r9, r10/1000+10000}}, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) kernel console output (not intermixed with test programs): 643][T12008] syz_tun: tun_net_xmit 42 [ 244.586370][T12008] syz_tun: tun_net_xmit 42 [ 244.591046][T12008] syz_tun: tun_net_xmit 42 [ 244.595992][T12008] syz_tun: tun_net_xmit 42 [ 244.600580][T12008] syz_tun: tun_net_xmit 42 [ 244.605314][T12008] syz_tun: tun_net_xmit 42 [ 244.609849][T12008] syz_tun: tun_net_xmit 42 [ 244.614366][T12008] syz_tun: tun_net_xmit 42 [ 244.619087][T12008] syz_tun: tun_net_xmit 42 [ 244.623607][T12008] syz_tun: tun_net_xmit 42 [ 244.628653][T12008] syz_tun: tun_net_xmit 42 [ 244.633180][T12008] syz_tun: tun_net_xmit 42 [ 244.638069][T12008] syz_tun: tun_net_xmit 42 [ 244.642598][T12008] syz_tun: tun_net_xmit 42 [ 244.647185][T12008] syz_tun: tun_net_xmit 42 [ 244.651714][T12008] syz_tun: tun_net_xmit 42 [ 244.656483][T12008] syz_tun: tun_net_xmit 42 [ 244.661001][T12008] syz_tun: tun_net_xmit 42 [ 244.665687][T12008] syz_tun: tun_net_xmit 42 [ 244.670255][T12008] syz_tun: tun_net_xmit 42 [ 244.674803][T12008] syz_tun: tun_net_xmit 42 [ 244.679366][T12008] syz_tun: tun_net_xmit 42 [ 244.683874][T12008] syz_tun: tun_net_xmit 42 [ 244.688613][T12008] syz_tun: tun_net_xmit 42 [ 244.693146][T12008] syz_tun: tun_net_xmit 42 [ 244.697674][T12008] syz_tun: tun_net_xmit 42 [ 244.702158][T12008] syz_tun: tun_net_xmit 42 [ 244.706776][T12008] syz_tun: tun_net_xmit 42 [ 244.711273][T12008] syz_tun: tun_net_xmit 42 [ 244.715848][T12008] syz_tun: tun_net_xmit 42 [ 244.721001][T12008] syz_tun: tun_net_xmit 42 [ 244.725536][T12008] syz_tun: tun_net_xmit 42 [ 244.730030][T12008] syz_tun: tun_net_xmit 42 [ 244.734503][T12008] syz_tun: tun_net_xmit 42 [ 244.739050][T12008] syz_tun: tun_net_xmit 42 [ 244.743575][T12008] syz_tun: tun_net_xmit 42 [ 244.748096][T12008] syz_tun: tun_net_xmit 42 [ 244.752669][T12008] syz_tun: tun_net_xmit 42 [ 244.757236][T12008] syz_tun: tun_net_xmit 42 [ 244.761721][T12008] syz_tun: tun_net_xmit 42 [ 244.766247][T12008] syz_tun: tun_net_xmit 42 [ 244.770739][T12008] syz_tun: tun_net_xmit 42 [ 244.775285][T12008] syz_tun: tun_net_xmit 42 [ 244.779779][T12008] syz_tun: tun_net_xmit 42 [ 244.784259][T12008] syz_tun: tun_net_xmit 42 [ 244.788914][T12008] syz_tun: tun_net_xmit 42 [ 244.793489][T12008] syz_tun: tun_net_xmit 42 [ 244.798086][T12008] syz_tun: tun_net_xmit 42 [ 244.802682][T12008] syz_tun: tun_net_xmit 42 [ 244.807206][T12008] syz_tun: tun_net_xmit 42 [ 244.811691][T12008] syz_tun: tun_net_xmit 42 [ 244.816238][T12008] syz_tun: tun_net_xmit 42 [ 244.820720][T12008] syz_tun: tun_net_xmit 42 [ 244.825242][T12008] syz_tun: tun_net_xmit 42 [ 244.829753][T12008] syz_tun: tun_net_xmit 42 [ 244.834222][T12008] syz_tun: tun_net_xmit 42 [ 244.838789][T12008] syz_tun: tun_net_xmit 42 [ 244.843279][T12008] syz_tun: tun_net_xmit 42 [ 244.847799][T12008] syz_tun: tun_net_xmit 42 [ 244.852289][T12008] syz_tun: tun_net_xmit 42 [ 244.857011][T12008] syz_tun: tun_net_xmit 42 [ 244.861508][T12008] syz_tun: tun_net_xmit 42 [ 244.866070][T12008] syz_tun: tun_net_xmit 42 [ 244.870752][T12008] syz_tun: tun_net_xmit 42 [ 244.875330][T12008] syz_tun: tun_net_xmit 42 [ 244.879942][T12008] syz_tun: tun_net_xmit 42 [ 244.884424][T12008] syz_tun: tun_net_xmit 42 [ 244.888941][T12008] syz_tun: tun_net_xmit 42 [ 244.893433][T12008] syz_tun: tun_net_xmit 42 [ 244.897984][T12008] syz_tun: tun_net_xmit 42 [ 244.902486][T12008] syz_tun: tun_net_xmit 42 [ 244.907033][T12008] syz_tun: tun_net_xmit 42 [ 244.911525][T12008] syz_tun: tun_net_xmit 42 [ 244.916070][T12008] syz_tun: tun_net_xmit 42 [ 244.920648][T12008] syz_tun: tun_net_xmit 42 [ 244.925170][T12008] syz_tun: tun_net_xmit 42 [ 244.929654][T12008] syz_tun: tun_net_xmit 42 [ 244.934131][T12008] syz_tun: tun_net_xmit 42 [ 244.938697][T12008] syz_tun: tun_net_xmit 42 [ 244.943186][T12008] syz_tun: tun_net_xmit 42 [ 244.947698][T12008] syz_tun: tun_net_xmit 42 [ 244.952174][T12008] syz_tun: tun_net_xmit 42 [ 244.956759][T12008] syz_tun: tun_net_xmit 42 [ 244.961242][T12008] syz_tun: tun_net_xmit 42 [ 244.965755][T12008] syz_tun: tun_net_xmit 42 [ 244.970239][T12008] syz_tun: tun_net_xmit 42 [ 244.974697][T12008] syz_tun: tun_net_xmit 42 [ 244.979265][T12008] syz_tun: tun_net_xmit 42 [ 244.983788][T12008] syz_tun: tun_net_xmit 42 [ 244.988407][T12008] syz_tun: tun_net_xmit 42 [ 244.992909][T12008] syz_tun: tun_net_xmit 42 [ 244.997563][T12008] syz_tun: tun_net_xmit 42 [ 245.002171][T12008] syz_tun: tun_net_xmit 42 [ 245.006685][T12008] syz_tun: tun_net_xmit 42 [ 245.011183][T12008] syz_tun: tun_net_xmit 42 [ 245.015735][T12008] syz_tun: tun_net_xmit 42 [ 245.020237][T12008] syz_tun: tun_net_xmit 42 [ 245.024698][T12008] syz_tun: tun_net_xmit 42 [ 245.029225][T12008] syz_tun: tun_net_xmit 42 [ 245.033683][T12008] syz_tun: tun_net_xmit 42 [ 245.038240][T12008] syz_tun: tun_net_xmit 42 [ 245.042737][T12008] syz_tun: tun_net_xmit 42 [ 245.047252][T12008] syz_tun: tun_net_xmit 42 [ 245.051782][T12008] syz_tun: tun_net_xmit 42 [ 245.056353][T12008] syz_tun: tun_net_xmit 42 [ 245.060835][T12008] syz_tun: tun_net_xmit 42 [ 245.065360][T12008] syz_tun: tun_net_xmit 42 [ 245.069860][T12008] syz_tun: tun_net_xmit 42 [ 245.074335][T12008] syz_tun: tun_net_xmit 42 [ 245.078943][T12008] syz_tun: tun_net_xmit 42 [ 245.083501][T12008] syz_tun: tun_net_xmit 42 [ 245.088051][T12008] syz_tun: tun_net_xmit 42 [ 245.092549][T12008] syz_tun: tun_net_xmit 42 [ 245.097135][T12008] syz_tun: tun_net_xmit 42 [ 245.101650][T12008] syz_tun: tun_net_xmit 42 [ 245.106284][T12008] syz_tun: tun_net_xmit 42 [ 245.110783][T12008] syz_tun: tun_net_xmit 42 [ 245.115359][T12008] syz_tun: tun_net_xmit 42 [ 245.119867][T12008] syz_tun: tun_net_xmit 42 [ 245.124362][T12008] syz_tun: tun_net_xmit 42 [ 245.128926][T12008] syz_tun: tun_net_xmit 42 [ 245.133431][T12008] syz_tun: tun_net_xmit 42 [ 245.138029][T12008] syz_tun: tun_net_xmit 42 [ 245.142731][T12008] syz_tun: tun_net_xmit 42 [ 245.154168][T12008] syz_tun: tun_net_xmit 42 [ 245.158957][T12008] syz_tun: tun_net_xmit 42 [ 245.163489][T12008] syz_tun: tun_net_xmit 42 [ 245.168046][T12008] syz_tun: tun_net_xmit 42 [ 245.172571][T12008] syz_tun: tun_net_xmit 42 [ 245.178880][T12008] syz_tun: tun_net_xmit 42 [ 245.183533][T12008] syz_tun: tun_net_xmit 42 [ 245.189613][T12008] syz_tun: tun_net_xmit 42 [ 245.195212][T12008] syz_tun: tun_net_xmit 42 [ 245.199845][T12008] syz_tun: tun_net_xmit 42 [ 245.204374][T12008] syz_tun: tun_net_xmit 42 [ 245.209067][T12008] syz_tun: tun_net_xmit 42 [ 245.213869][T12008] syz_tun: tun_net_xmit 42 [ 245.218508][T12008] syz_tun: tun_net_xmit 42 [ 245.223406][T12008] syz_tun: tun_net_xmit 42 [ 245.228279][T12008] syz_tun: tun_net_xmit 42 [ 245.234475][T12008] syz_tun: tun_net_xmit 42 [ 245.239121][T12008] syz_tun: tun_net_xmit 42 [ 245.244224][T12008] syz_tun: tun_net_xmit 42 [ 245.249875][T12008] syz_tun: tun_net_xmit 42 [ 245.254565][T12008] syz_tun: tun_net_xmit 42 [ 245.259194][T12008] syz_tun: tun_net_xmit 42 [ 245.263722][T12008] syz_tun: tun_net_xmit 42 [ 245.268747][T12008] syz_tun: tun_net_xmit 42 [ 245.273513][T12008] syz_tun: tun_net_xmit 42 [ 245.278810][T12008] syz_tun: tun_net_xmit 42 [ 245.283545][T12008] syz_tun: tun_net_xmit 42 [ 245.288153][T12008] syz_tun: tun_net_xmit 42 [ 245.292693][T12008] syz_tun: tun_net_xmit 42 [ 245.297437][T12008] syz_tun: tun_net_xmit 42 [ 245.302089][T12008] syz_tun: tun_net_xmit 42 [ 245.306835][T12008] syz_tun: tun_net_xmit 42 [ 245.311449][T12008] syz_tun: tun_net_xmit 42 [ 245.316121][T12008] syz_tun: tun_net_xmit 42 [ 245.320742][T12008] syz_tun: tun_net_xmit 42 [ 245.325311][T12008] syz_tun: tun_net_xmit 42 [ 245.330003][T12008] syz_tun: tun_net_xmit 42 [ 245.334530][T12008] syz_tun: tun_net_xmit 42 [ 245.339144][T12008] syz_tun: tun_net_xmit 42 [ 245.343676][T12008] syz_tun: tun_net_xmit 42 [ 245.348235][T12008] syz_tun: tun_net_xmit 42 [ 245.352774][T12008] syz_tun: tun_net_xmit 42 [ 245.357418][T12008] syz_tun: tun_net_xmit 42 [ 245.361952][T12008] syz_tun: tun_net_xmit 42 [ 245.366515][T12008] syz_tun: tun_net_xmit 42 [ 245.371033][T12008] syz_tun: tun_net_xmit 42 [ 245.375648][T12008] syz_tun: tun_net_xmit 42 [ 245.655315][T12225] /dev/rnullb0: Can't lookup blockdev [ 245.684275][T12229] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 245.698483][T12229] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 245.712918][T12229] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 245.720009][T12229] overlayfs: failed to set xattr on upper [ 245.725892][T12229] overlayfs: ...falling back to redirect_dir=nofollow. [ 245.732817][T12229] overlayfs: ...falling back to uuid=null. [ 245.915326][T12239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.117586][T12274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4185'. [ 247.026629][T12316] 9pnet_fd: Insufficient options for proto=fd [ 247.096000][T12324] batadv_slave_1: entered promiscuous mode [ 247.104089][T12323] batadv_slave_1: left promiscuous mode [ 247.131203][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 247.131221][ T36] audit: type=1326 audit(2000000046.600:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.4207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dfd38e929 code=0x0 [ 247.318470][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 247.327660][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 247.576257][T12348] overlayfs: failed to clone upperpath [ 247.859436][ T36] audit: type=1326 audit(2000000047.330:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.3.4220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99bfd8e929 code=0x0 [ 248.322978][T12395] bridge0: port 3(bond_slave_1) entered blocking state [ 248.329974][T12395] bridge0: port 3(bond_slave_1) entered disabled state [ 248.336933][T12395] bond_slave_1: entered allmulticast mode [ 248.343055][T12395] bond_slave_1: entered promiscuous mode [ 248.632129][T12411] /dev/rnullb0: Can't lookup blockdev [ 248.927199][T12426] /dev/rnullb0: Can't lookup blockdev [ 249.228641][T12446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4248'. [ 249.769254][T12464] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.4253'. [ 250.703143][T12533] batadv_slave_1: entered promiscuous mode [ 250.710553][T12532] batadv_slave_1: left promiscuous mode [ 251.368601][T12575] /dev/rnullb0: Can't lookup blockdev [ 251.657979][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4302'. [ 252.183645][T12622] overlayfs: failed to clone upperpath [ 252.201872][T12625] overlayfs: failed to clone upperpath [ 252.216184][T12625] fuse: Bad value for 'fd' [ 252.611299][ T36] audit: type=1400 audit(2000000052.080:1123): avc: denied { setattr } for pid=12677 comm="syz.2.4333" name="PPTP" dev="sockfs" ino=43168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.787932][ T36] audit: type=1400 audit(2000000052.260:1124): avc: denied { map } for pid=12682 comm="syz.0.4335" path="socket:[43181]" dev="sockfs" ino=43181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 253.130849][ T36] audit: type=1400 audit(2000000052.600:1125): avc: denied { accept } for pid=12709 comm="syz.1.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 253.620185][T12735] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 254.633608][T12792] IPv6: syztnl1: Disabled Multicast RS [ 255.637886][T12870] overlay: Unknown parameter 'mounts' [ 255.646471][T12870] overlay: Unknown parameter 'mounts' [ 255.652243][T12870] overlay: Unknown parameter 'mounts' [ 255.664508][T12870] overlay: Unknown parameter 'mounts' [ 255.674904][T12870] overlay: Unknown parameter 'mounts' [ 255.682556][T12870] overlay: Unknown parameter 'mounts' [ 255.690338][T12870] overlay: Unknown parameter 'mounts' [ 255.696166][T12870] overlay: Unknown parameter 'mounts' [ 255.701976][T12870] overlay: Unknown parameter 'mounts' [ 255.709303][T12870] overlay: Unknown parameter 'mounts' [ 255.715196][T12870] overlay: Unknown parameter 'mounts' [ 255.720842][T12870] overlay: Unknown parameter 'mounts' [ 255.727355][T12870] overlay: Unknown parameter 'mounts' [ 255.733048][T12870] overlay: Unknown parameter 'mounts' [ 255.744077][T12870] overlay: Unknown parameter 'mounts' [ 255.750777][T12870] overlay: Unknown parameter 'mounts' [ 255.765058][T12870] overlay: Unknown parameter 'mounts' [ 255.774903][T12870] overlay: Unknown parameter 'mounts' [ 255.787102][T12870] overlay: Unknown parameter 'mounts' [ 255.799241][T12870] overlay: Unknown parameter 'mounts' [ 255.810372][T12870] overlay: Unknown parameter 'mounts' [ 255.822515][T12870] overlay: Unknown parameter 'mounts' [ 255.833588][T12870] overlay: Unknown parameter 'mounts' [ 255.839427][T12870] overlay: Unknown parameter 'mounts' [ 255.845067][T12870] overlay: Unknown parameter 'mounts' [ 255.850686][T12870] overlay: Unknown parameter 'mounts' [ 255.856612][T12870] overlay: Unknown parameter 'mounts' [ 255.862297][T12870] overlay: Unknown parameter 'mounts' [ 255.868135][T12870] overlay: Unknown parameter 'mounts' [ 255.873735][T12870] overlay: Unknown parameter 'mounts' [ 255.879517][T12870] overlay: Unknown parameter 'mounts' [ 255.885235][T12870] overlay: Unknown parameter 'mounts' [ 255.891514][T12870] overlay: Unknown parameter 'mounts' [ 255.897368][T12870] overlay: Unknown parameter 'mounts' [ 255.903050][T12870] overlay: Unknown parameter 'mounts' [ 255.908730][T12870] overlay: Unknown parameter 'mounts' [ 255.914361][T12870] overlay: Unknown parameter 'mounts' [ 255.920284][T12870] overlay: Unknown parameter 'mounts' [ 255.926125][T12870] overlay: Unknown parameter 'mounts' [ 255.932828][T12870] overlay: Unknown parameter 'mounts' [ 255.938660][T12870] overlay: Unknown parameter 'mounts' [ 255.944255][T12870] overlay: Unknown parameter 'mounts' [ 255.949965][T12870] overlay: Unknown parameter 'mounts' [ 255.955619][T12870] overlay: Unknown parameter 'mounts' [ 255.961383][T12870] overlay: Unknown parameter 'mounts' [ 255.967066][T12870] overlay: Unknown parameter 'mounts' [ 255.973058][T12870] overlay: Unknown parameter 'mounts' [ 255.978754][T12870] overlay: Unknown parameter 'mounts' [ 255.984343][T12870] overlay: Unknown parameter 'mounts' [ 255.990017][T12870] overlay: Unknown parameter 'mounts' [ 255.995616][T12870] overlay: Unknown parameter 'mounts' [ 256.001273][T12870] overlay: Unknown parameter 'mounts' [ 256.006971][T12870] overlay: Unknown parameter 'mounts' [ 256.012598][T12870] overlay: Unknown parameter 'mounts' [ 256.018343][T12870] overlay: Unknown parameter 'mounts' [ 256.023939][T12870] overlay: Unknown parameter 'mounts' [ 256.029561][T12870] overlay: Unknown parameter 'mounts' [ 256.035716][T12870] overlay: Unknown parameter 'mounts' [ 256.041345][T12870] overlay: Unknown parameter 'mounts' [ 256.047018][T12870] overlay: Unknown parameter 'mounts' [ 256.052628][T12870] overlay: Unknown parameter 'mounts' [ 256.058446][T12870] overlay: Unknown parameter 'mounts' [ 256.064067][T12870] overlay: Unknown parameter 'mounts' [ 256.069979][T12870] overlay: Unknown parameter 'mounts' [ 256.075638][T12870] overlay: Unknown parameter 'mounts' [ 256.568028][T12913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4414'. [ 256.679013][T12920] fuse: Unknown parameter '000000000000000000000050x0000000000000005' [ 256.680691][T12921] fuse: Unknown parameter '000000000000000000000050x0000000000000005' [ 256.707273][T12923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4418'. [ 257.125900][T12927] tipc: Started in network mode [ 257.130845][T12927] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 257.139863][T12927] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 257.148229][T12927] tipc: Enabled bearer , priority 10 [ 257.180713][T12933] overlayfs: failed to clone upperpath [ 257.213870][T12937] syz.1.4424: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 257.229190][T12937] CPU: 0 UID: 0 PID: 12937 Comm: syz.1.4424 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 257.229234][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.229252][T12937] Call Trace: [ 257.229261][T12937] [ 257.229272][T12937] __dump_stack+0x21/0x30 [ 257.229424][T12937] dump_stack_lvl+0x10c/0x190 [ 257.229455][T12937] ? __cfi_dump_stack_lvl+0x10/0x10 [ 257.229488][T12937] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 257.229638][T12937] dump_stack+0x19/0x20 [ 257.229665][T12937] warn_alloc+0x1bc/0x2a0 [ 257.229747][T12937] ? stack_depot_save_flags+0x38/0x800 [ 257.229860][T12937] ? __cfi_warn_alloc+0x10/0x10 [ 257.229886][T12937] ? kasan_save_track+0x4f/0x80 [ 257.229979][T12937] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 257.230035][T12937] ? xskq_create+0x68/0x2a0 [ 257.230090][T12937] ? xsk_init_queue+0xb6/0x120 [ 257.230115][T12937] ? xsk_setsockopt+0x43f/0x6f0 [ 257.230139][T12937] ? do_sock_setsockopt+0x26a/0x400 [ 257.230209][T12937] ? __x64_sys_setsockopt+0x1b8/0x250 [ 257.230236][T12937] ? x64_sys_call+0x2adc/0x2ee0 [ 257.230270][T12937] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.230336][T12937] __vmalloc_node_range_noprof+0x135/0x1420 [ 257.230391][T12937] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 257.230422][T12937] ? avc_has_perm+0x144/0x220 [ 257.230484][T12937] ? kasan_save_alloc_info+0x40/0x50 [ 257.230512][T12937] ? __kasan_kmalloc+0x96/0xb0 [ 257.230550][T12937] vmalloc_user_noprof+0x77/0x90 [ 257.230579][T12937] ? xskq_create+0xdb/0x2a0 [ 257.230604][T12937] xskq_create+0xdb/0x2a0 [ 257.230630][T12937] xsk_init_queue+0xb6/0x120 [ 257.230656][T12937] xsk_setsockopt+0x43f/0x6f0 [ 257.230680][T12937] ? __cfi_xsk_setsockopt+0x10/0x10 [ 257.230705][T12937] ? do_futex+0x309/0x500 [ 257.230799][T12937] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 257.230853][T12937] ? security_socket_setsockopt+0x33/0xd0 [ 257.230906][T12937] ? __cfi_xsk_setsockopt+0x10/0x10 [ 257.230931][T12937] do_sock_setsockopt+0x26a/0x400 [ 257.230958][T12937] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 257.230987][T12937] __x64_sys_setsockopt+0x1b8/0x250 [ 257.231015][T12937] x64_sys_call+0x2adc/0x2ee0 [ 257.231049][T12937] do_syscall_64+0x58/0xf0 [ 257.231112][T12937] ? clear_bhb_loop+0x50/0xa0 [ 257.231139][T12937] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.231166][T12937] RIP: 0033:0x7f4f1db8e929 [ 257.231199][T12937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.231222][T12937] RSP: 002b:00007f4f1ea72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.231253][T12937] RAX: ffffffffffffffda RBX: 00007f4f1ddb5fa0 RCX: 00007f4f1db8e929 [ 257.231274][T12937] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 257.231292][T12937] RBP: 00007f4f1dc10b39 R08: 0000000000000004 R09: 0000000000000000 [ 257.231309][T12937] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 257.231335][T12937] R13: 0000000000000000 R14: 00007f4f1ddb5fa0 R15: 00007fff139e7bf8 [ 257.231358][T12937] [ 257.231374][T12937] Mem-Info: [ 257.538493][T12937] active_anon:8866 inactive_anon:517 isolated_anon:0 [ 257.538493][T12937] active_file:10334 inactive_file:14619 isolated_file:0 [ 257.538493][T12937] unevictable:15420 dirty:61 writeback:0 [ 257.538493][T12937] slab_reclaimable:6065 slab_unreclaimable:74417 [ 257.538493][T12937] mapped:23911 shmem:189 pagetables:1140 [ 257.538493][T12937] sec_pagetables:0 bounce:0 [ 257.538493][T12937] kernel_misc_reclaimable:0 [ 257.538493][T12937] free:1495923 free_pcp:5075 free_cma:0 [ 257.592353][T12937] Node 0 active_anon:35372kB inactive_anon:2068kB active_file:41336kB inactive_file:58476kB unevictable:61680kB isolated(anon):0kB isolated(file):0kB mapped:95644kB dirty:244kB writeback:0kB shmem:756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:5956kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no [ 257.625070][T12937] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966012kB mlocked:0kB bounce:0kB free_pcp:13864kB local_pcp:2636kB free_cma:0kB [ 257.655213][T12937] lowmem_reserve[]: 0 3921 3921 [ 257.660129][T12937] Normal free:3034840kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35372kB inactive_anon:2068kB active_file:41336kB inactive_file:58476kB unevictable:61680kB writepending:244kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3884kB local_pcp:3716kB free_cma:0kB [ 257.692227][T12937] lowmem_reserve[]: 0 0 0 [ 257.696921][T12937] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 257.716741][T12937] Normal: 161*4kB (UME) 1756*8kB (UME) 923*16kB (UME) 846*32kB (UME) 388*64kB (UME) 140*128kB (UME) 59*256kB (UME) 25*512kB (UME) 16*1024kB (UM) 20*2048kB (UME) 696*4096kB (UM) = 3035348kB [ 257.735696][T12937] 41077 total pagecache pages [ 257.740482][T12937] 519 pages in swap cache [ 257.745048][T12937] Free swap = 122416kB [ 257.749344][T12937] Total swap = 124996kB [ 257.753511][T12937] 2097051 pages RAM [ 257.757471][T12937] 0 pages HighMem/MovableOnly [ 257.762178][T12937] 351518 pages reserved [ 257.766413][T12937] 0 pages cma reserved [ 257.772683][T12937] Memory allocations: [ 257.776753][T12937] 0 B 0 init/main.c:1370 func:do_initcalls [ 257.783982][T12937] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 257.792097][T12937] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 257.799822][T12937] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 257.807827][T12937] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 257.815831][T12937] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 257.824827][T12937] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 257.833017][T12937] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 257.841368][T12937] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 257.849600][T12937] 0 B 0 init/initramfs.c:101 func:find_link [ 257.851654][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4431'. [ 257.881163][T12957] fuse: Unknown parameter '18446744073709551615ç|FÕUrzj©ó' [ 258.274776][ T45] tipc: Node number set to 1 [ 258.289638][ T36] audit: type=1326 audit(2000000057.760:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629d58e929 code=0x0 [ 258.367266][ T36] audit: type=1326 audit(2000000057.840:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.3.4444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99bfd8e929 code=0x0 [ 258.390376][ T36] audit: type=1326 audit(2000000057.840:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12987 comm="syz.3.4444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99bfd8e929 code=0x0 [ 258.567546][T13013] tmpfs: Bad value for 'nr_inodes' [ 258.976698][T13021] lo: entered promiscuous mode [ 258.981836][T13020] lo: left promiscuous mode [ 259.119256][T13034] =: entered promiscuous mode [ 259.205069][T13033] =: left promiscuous mode [ 260.582977][T13119] wg2: entered promiscuous mode [ 260.588229][T13119] wg2: entered allmulticast mode [ 260.721409][T13128] overlayfs: failed to resolve './file0': -2 [ 260.810919][T13150] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 262.033169][T13233] overlayfs: failed to clone lowerpath [ 262.412122][T13245] fuse: Bad value for 'user_id' [ 262.417220][T13245] fuse: Bad value for 'user_id' [ 263.207425][ T36] audit: type=1400 audit(2000000063.673:1129): avc: denied { create } for pid=13262 comm="syz.0.4545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 263.254950][T13267] netlink: 'syz.0.4547': attribute type 8 has an invalid length. [ 263.457945][T13321] overlay: Unknown parameter 'appraise' [ 263.465077][T13321] overlay: Unknown parameter 'subj_user' [ 264.308480][T13378] 9pnet: p9_errstr2errno: server reported unknown error [ 264.363049][ T36] audit: type=1326 audit(2000000064.823:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13384 comm="syz.3.4591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99bfd8e929 code=0x0 [ 265.734105][T13505] selinux_netlink_send: 57 callbacks suppressed [ 265.734132][T13505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13505 comm=syz.2.4632 [ 265.758192][T13505] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4632'. [ 266.192628][T13540] overlayfs: missing 'lowerdir' [ 266.967101][T13602] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4665'. [ 267.632273][T13659] syz_tun: tun_net_xmit 86 [ 268.285197][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4695'. [ 268.294271][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4695'. [ 268.378597][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'. [ 268.381672][T13703] overlayfs: failed to clone upperpath [ 268.459800][T13710] netlink: 'syz.0.4706': attribute type 4 has an invalid length. [ 268.544837][ T36] audit: type=1326 audit(2000000069.003:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.1.4710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f1db8e929 code=0x0 [ 268.704868][ C0] syz_tun: tun_net_xmit 86 [ 268.944696][T13734] fuse: Unknown parameter '000000000000000000000030x0000000000000004ÿÿÿÿÿÿÿÿ000000000000000000001844674407370955161500000000000000000000' [ 269.172451][T13752] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 269.180306][T13752] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 269.188685][T13752] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 269.196479][T13752] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 269.207823][T13753] overlayfs: failed to clone upperpath [ 269.744835][ C0] syz_tun: tun_net_xmit 86 [ 270.025631][ T36] audit: type=1400 audit(2000000070.493:1132): avc: denied { mount } for pid=13790 comm="syz.3.4736" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 270.052168][T13796] overlayfs: failed to clone upperpath [ 270.098852][ T36] audit: type=1326 audit(2000000070.563:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.130740][ T36] audit: type=1326 audit(2000000070.563:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.163905][ T36] audit: type=1326 audit(2000000070.563:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.191881][ T36] audit: type=1326 audit(2000000070.593:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.224361][ T36] audit: type=1326 audit(2000000070.593:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13810 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f1dbc11e5 code=0x7ffc0000 [ 270.234866][T13826] netlink: 'syz.1.4747': attribute type 12 has an invalid length. [ 270.255854][ T36] audit: type=1326 audit(2000000070.593:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.279930][ T36] audit: type=1326 audit(2000000070.593:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.305099][ T36] audit: type=1326 audit(2000000070.593:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.329560][ T36] audit: type=1326 audit(2000000070.593:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.1.4741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1db8e929 code=0x7ffc0000 [ 270.331556][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4753'. [ 270.365956][T13843] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4753'. [ 270.382431][T13847] overlayfs: failed to resolve './bus': -2 [ 270.618116][T13870] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.625578][T13870] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.632866][T13870] bridge_slave_0: entered allmulticast mode [ 270.639620][T13870] bridge_slave_0: entered promiscuous mode [ 270.647811][T13870] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.655115][T13870] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.662210][T13870] bridge_slave_1: entered allmulticast mode [ 270.668868][T13870] bridge_slave_1: entered promiscuous mode [ 270.693106][T13887] fuse: Unknown parameter '00000000000000000000003' [ 270.747934][T13870] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.755048][T13870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.762381][T13870] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.769468][T13870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.799593][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.807289][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.819533][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.826639][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.835880][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.842991][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.870308][T13870] veth0_vlan: entered promiscuous mode [ 270.882031][T13870] veth1_macvtap: entered promiscuous mode [ 270.915363][ T6522] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.322521][T13917] overlayfs: failed to clone upperpath [ 271.388514][T13929] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4782'. [ 271.397541][T13929] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 271.404096][T13929] 0ªî{X¹¦: entered allmulticast mode [ 271.409816][T13929] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 271.437054][T13931] bridge0: port 3(vlan0) entered blocking state [ 271.447007][T13931] bridge0: port 3(vlan0) entered disabled state [ 271.453357][T13931] vlan0: entered allmulticast mode [ 271.458912][T13931] veth0_vlan: entered allmulticast mode [ 271.467190][T13931] vlan0: entered promiscuous mode [ 271.472786][T13931] bridge0: port 3(vlan0) entered blocking state [ 271.479121][T13931] bridge0: port 3(vlan0) entered forwarding state [ 271.553013][T13942] tmpfs: Unknown parameter 'Z' [ 272.071848][T13948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13948 comm=syz.3.4787 [ 272.422628][T13960] overlayfs: missing 'lowerdir' [ 272.890773][T13990] overlayfs: failed to resolve './file1': -2 [ 272.944959][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 272.951063][ T8122] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 272.960652][ T6522] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.678236][T14011] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4809'. [ 273.687249][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4809'. [ 273.709158][T14013] fuse: Bad value for 'rootmode' [ 273.715370][T14013] batadv_slave_0: entered promiscuous mode [ 273.722284][T14012] batadv_slave_0: left promiscuous mode [ 273.846682][T14043] overlayfs: failed to clone upperpath [ 274.825059][T14096] overlayfs: failed to clone upperpath [ 275.024837][ T8122] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.025240][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 275.136402][T14134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 276.071387][T14187] binder: Unknown parameter 'ñ' [ 276.324806][ T2526] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 276.407064][T14234] fuse: Bad value for 'fd' [ 276.484791][ T2526] usb 3-1: Invalid ep0 maxpacket: 16 [ 276.503178][T14256] 9pnet: Could not find request transport: v [ 276.522314][T14258] overlayfs: failed to clone upperpath [ 276.614769][ T2526] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 276.764800][ T2526] usb 3-1: Invalid ep0 maxpacket: 16 [ 276.770248][ T2526] usb usb3-port1: attempt power cycle [ 276.981791][T14269] cgroup: fork rejected by pids controller in /syz0 [ 277.076791][T14400] overlayfs: failed to clone lowerpath [ 277.115293][ T2526] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 277.145158][ T2526] usb 3-1: Invalid ep0 maxpacket: 16 [ 277.284816][ T2526] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 277.305965][ T2526] usb 3-1: Invalid ep0 maxpacket: 16 [ 277.311409][ T2526] usb usb3-port1: unable to enumerate USB device [ 277.893146][T14437] x_tables: duplicate underflow at hook 1 [ 277.893163][T14436] x_tables: duplicate underflow at hook 1 [ 277.929223][T14441] overlay: Unknown parameter 'smackfstransmute' [ 278.146960][T14476] netlink: 'syz.3.4919': attribute type 63 has an invalid length. [ 278.154873][T14476] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4919'. [ 278.963880][T14510] overlayfs: failed to clone upperpath [ 279.736189][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4948'. [ 279.791229][T14563] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 280.186352][T14579] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.207098][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 280.207121][ T36] audit: type=1400 audit(2000000080.673:1169): avc: denied { ioctl } for pid=14580 comm="syz.2.4956" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.292279][T14587] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 280.302647][T14588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.302986][T14588] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 280.316456][T14588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 280.341870][T14588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:38 [ 280.363193][ T36] audit: type=1400 audit(2000000080.793:1170): avc: denied { relabelto } for pid=14586 comm="syz.3.4958" name="file0" dev="tmpfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 280.412137][ T36] audit: type=1400 audit(2000000080.793:1171): avc: denied { associate } for pid=14586 comm="syz.3.4958" name="file0" dev="tmpfs" ino=1261 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:public_content_t:s0" [ 280.415062][T14593] can: request_module (can-proto-0) failed. [ 280.446814][ T36] audit: type=1400 audit(2000000080.823:1172): avc: denied { unlink } for pid=10657 comm="syz-executor" name="file0" dev="tmpfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 280.568139][T14610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.891161][T14622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.038131][ T36] audit: type=1326 audit(2000000081.503:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14448 comm="syz.0.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d58e929 code=0x7fc00000 [ 281.076389][T14629] overlayfs: failed to clone upperpath [ 281.772014][ T36] audit: type=1400 audit(2000000082.233:1174): avc: denied { listen } for pid=14667 comm="syz.2.4986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.008824][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4999'. [ 282.032729][T14718] fuse: Unknown parameter 'userPid' [ 282.038944][T14718] overlayfs: failed to clone lowerpath [ 282.221811][T14740] overlayfs: failed to clone upperpath [ 282.880075][ T36] audit: type=1326 audit(2000000083.343:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1db8e929 code=0x7fc00000 [ 282.903750][ T36] audit: type=1326 audit(2000000083.343:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f1db8e929 code=0x7fc00000 [ 282.927359][ T36] audit: type=1326 audit(2000000083.343:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1db8e929 code=0x7fc00000 [ 282.952291][ T36] audit: type=1326 audit(2000000083.413:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14738 comm="syz.0.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d58e929 code=0x7fc00000 [ 282.958820][T14762] can: request_module (can-proto-0) failed. [ 283.064627][T14769] overlayfs: failed to clone upperpath [ 283.194544][T14772] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.203632][T14772] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.211018][T14772] bridge_slave_0: entered allmulticast mode [ 283.218028][T14772] bridge_slave_0: entered promiscuous mode [ 283.224662][T14772] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.231843][T14772] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.239056][T14772] bridge_slave_1: entered allmulticast mode [ 283.245493][T14772] bridge_slave_1: entered promiscuous mode [ 283.304231][T14795] overlayfs: disabling nfs_export due to verity=on [ 283.311031][T14795] overlayfs: missing 'lowerdir' [ 283.317688][T14795] overlayfs: failed to clone upperpath [ 283.325455][T14772] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.332548][T14772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.339896][T14772] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.346970][T14772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.391155][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.398595][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.407984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.415076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.424470][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.431601][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.460184][T14772] veth0_vlan: entered promiscuous mode [ 283.471828][T14772] veth1_macvtap: entered promiscuous mode [ 283.524451][T14807] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 283.524482][T14807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 283.532618][T14807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:5 [ 283.562930][T14813] input: syz1 as /devices/virtual/input/input11 [ 283.583694][T14540] udevd[14540]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 283.854792][ T2526] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 284.004804][ T2526] usb 2-1: Using ep0 maxpacket: 16 [ 284.011125][ T2526] usb 2-1: config 4 has an invalid interface number: 15 but max is 0 [ 284.019375][ T2526] usb 2-1: config 4 has no interface number 0 [ 284.025591][ T2526] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 284.035712][ T2526] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 284.045711][ T2526] usb 2-1: config 4 interface 15 has no altsetting 0 [ 284.055819][ T2526] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 284.065557][ T2526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.073594][ T2526] usb 2-1: Product: syz [ 284.078130][ T2526] usb 2-1: Manufacturer: syz [ 284.082765][ T2526] usb 2-1: SerialNumber: syz [ 284.088737][T14819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.097783][T14819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.171174][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5045'. [ 284.306120][T14819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.313397][T14819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.427397][T14847] overlayfs: conflicting options: userxattr,metacopy=on [ 284.535142][T14865] fuse: Unknown parameter 'f[S0xffffffffffffffff' [ 284.543264][T14865] 9pnet_fd: Insufficient options for proto=fd [ 284.697317][T14872] overlayfs: failed to clone upperpath [ 285.626125][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 286.043612][T14959] overlayfs: failed to clone upperpath [ 286.083107][T14965] fuse: Unknown parameter '„d' [ 286.325513][T14984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5093'. [ 286.341435][T14886] binder: Bad value for 'max' [ 287.370763][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 287.381859][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 287.393516][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 287.404822][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 287.416002][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 287.427363][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 287.438863][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 287.452924][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 287.464107][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 287.475286][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 287.491339][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 287.507627][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 287.518936][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 287.530446][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 287.542030][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 287.553591][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 287.564923][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 287.576068][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 287.588329][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 287.599518][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 287.610863][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 287.621917][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 287.633206][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 287.644333][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 287.655633][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 287.667033][ T2526] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 287.680735][ T2526] ax88179_178a 2-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter, 82:54:90:74:d4:27 [ 287.703172][ T2526] usb 2-1: USB disconnect, device number 23 [ 287.711447][ T2526] ax88179_178a 2-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter [ 287.728480][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 287.728499][ T36] audit: type=1400 audit(2000000088.193:1180): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 287.778305][ T36] audit: type=1400 audit(2000000088.193:1181): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.803159][ T36] audit: type=1400 audit(2000000088.193:1182): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.827996][ T36] audit: type=1400 audit(2000000088.193:1183): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.872178][ T36] audit: type=1400 audit(2000000088.193:1184): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.903968][ T36] audit: type=1326 audit(2000000088.223:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15002 comm="syz.0.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629d58e929 code=0x7fc00000 [ 287.932771][ T36] audit: type=1400 audit(2000000088.263:1186): avc: denied { read } for pid=15051 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.958891][ T36] audit: type=1400 audit(2000000088.263:1187): avc: denied { open } for pid=15051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.990548][ T36] audit: type=1400 audit(2000000088.263:1188): avc: denied { getattr } for pid=15051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.018027][ T36] audit: type=1400 audit(2000000088.483:1189): avc: denied { write } for pid=15044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.537726][T15137] fuse: Bad value for 'fd' [ 288.706206][T15151] fuse: Bad value for 'user_id' [ 288.716632][T15151] fuse: Bad value for 'user_id' [ 289.439511][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.448608][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.456286][T15160] bridge_slave_0: entered allmulticast mode [ 289.463196][T15160] bridge_slave_0: entered promiscuous mode [ 289.470302][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.477593][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.485273][T15160] bridge_slave_1: entered allmulticast mode [ 289.492010][T15160] bridge_slave_1: entered promiscuous mode [ 289.554809][ T6522] vlan0: left allmulticast mode [ 289.559902][ T6522] veth0_vlan: left allmulticast mode [ 289.565686][ T6522] vlan0: left promiscuous mode [ 289.570691][ T6522] bridge0: port 3(vlan0) entered disabled state [ 289.577575][ T6522] bridge_slave_1: left allmulticast mode [ 289.583321][ T6522] bridge_slave_1: left promiscuous mode [ 289.589674][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.597306][ T6522] bridge_slave_0: left allmulticast mode [ 289.602960][ T6522] bridge_slave_0: left promiscuous mode [ 289.608758][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.706856][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.713942][T15160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.721281][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.728355][T15160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.750521][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.758052][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.767862][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.774960][ T6541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.784812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.791898][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.800465][ T6522] tipc: Disabling bearer [ 289.805896][ T6522] tipc: Left network mode [ 289.812017][ T6522] veth1_macvtap: left promiscuous mode [ 289.817565][ T6522] veth0_vlan: left promiscuous mode [ 289.822918][ T2526] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 289.887045][T15160] veth0_vlan: entered promiscuous mode [ 289.898361][T15160] veth1_macvtap: entered promiscuous mode [ 289.995849][ T2526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.007739][ T2526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.017783][ T2526] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 290.026930][ T2526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.039445][ T2526] usb 2-1: config 0 descriptor?? [ 290.647889][T15176] rust_binder: Error while translating object. [ 290.647928][T15176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 290.654175][T15176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:40 [ 290.665009][ T2526] usbhid 2-1:0.0: can't add hid device: -71 [ 290.680075][ T2526] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 290.689011][ T2526] usb 2-1: USB disconnect, device number 24 [ 290.880629][T15205] overlayfs: failed to clone upperpath [ 291.218349][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5163'. [ 292.096697][T15262] rust_binder: Got transaction with invalid offset. [ 292.096750][T15262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 292.109947][T15262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 292.279599][T15284] IPv6: syztnl1: Disabled Multicast RS [ 292.534767][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 292.578776][T15303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5184'. [ 292.684759][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 292.691073][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 292.699327][ T10] usb 2-1: config 0 has no interface number 0 [ 292.705548][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 292.713735][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 292.722884][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.730919][ T10] usb 2-1: Product: syz [ 292.735130][ T10] usb 2-1: Manufacturer: syz [ 292.739754][ T10] usb 2-1: SerialNumber: syz [ 292.745212][ T10] usb 2-1: config 0 descriptor?? [ 292.752847][ T10] smsc75xx v1.0.0 [ 292.769458][T15307] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5186'. [ 292.793428][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 292.793448][ T36] audit: type=1400 audit(2000000093.253:1241): avc: denied { create } for pid=15308 comm="syz.2.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 292.886298][T15318] binder: Unknown parameter 'statæ*¾´s' [ 292.892081][T15318] binder: Unknown parameter 'statæ*¾´s' [ 292.941555][T15330] overlayfs: failed to clone upperpath [ 293.492006][T15342] lo: entered promiscuous mode [ 293.497265][T15341] lo: left promiscuous mode [ 293.552975][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 293.564407][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.574044][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 293.585078][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 293.594896][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 293.605413][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 293.614967][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 293.784726][ T36] audit: type=1326 audit(2000000350.250:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 293.788033][T15368] netlink: 424 bytes leftover after parsing attributes in process `syz.0.5206'. [ 293.808409][ T36] audit: type=1326 audit(2000000350.260:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 293.841080][ T36] audit: type=1326 audit(2000000350.260:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7f918d290 code=0x7ffc0000 [ 293.864739][ T36] audit: type=1326 audit(2000000350.260:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7f918d290 code=0x7ffc0000 [ 293.888273][ T36] audit: type=1326 audit(2000000350.260:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 293.912162][ T36] audit: type=1326 audit(2000000350.260:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 293.933744][ T632] usb 2-1: USB disconnect, device number 25 [ 293.935813][ T36] audit: type=1326 audit(2000000350.260:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 293.965065][ T36] audit: type=1326 audit(2000000350.260:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 293.988708][ T36] audit: type=1326 audit(2000000350.260:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.0.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 294.102584][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5212'. [ 294.133670][T15389] x_tables: duplicate underflow at hook 1 [ 294.139959][T15389] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5214'. [ 294.149298][T15389] gretap0: entered promiscuous mode [ 294.156685][T15389] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5214'. [ 294.166229][T15389] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5214'. [ 294.175444][T15389] 0ªî{X¹¦: renamed from gretap0 [ 294.181053][T15389] 0ªî{X¹¦: left promiscuous mode [ 294.186244][T15389] 0ªî{X¹¦: entered allmulticast mode [ 294.192288][T15389] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 295.054817][ T632] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 295.205871][ T632] usb 2-1: config 4 has an invalid interface number: 95 but max is 0 [ 295.214106][ T632] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 295.224313][ T632] usb 2-1: config 4 has no interface number 0 [ 295.230469][ T632] usb 2-1: config 4 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.240272][ T632] usb 2-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.251506][ T632] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 295.260649][ T632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.268886][ T632] usb 2-1: Product: syz [ 295.273063][ T632] usb 2-1: Manufacturer: syz [ 295.277710][ T632] usb 2-1: SerialNumber: syz [ 295.488676][T15401] overlayfs: conflicting lowerdir path [ 295.495733][T15401] rust_binder: Write failure EFAULT in pid:64 [ 295.498668][ T632] usb 2-1: MIDIStreaming interface descriptor not found [ 295.516951][ T632] usb 2-1: USB disconnect, device number 26 [ 295.532864][T14820] udevd[14820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 295.987738][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5225'. [ 296.011746][T15419] cgroup: none used incorrectly [ 296.020742][T15419] cgroup: none used incorrectly [ 296.102298][T15435] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 296.807041][T15459] overlayfs: missing 'lowerdir' [ 297.084955][T15481] tmpfs: Unknown parameter 'grpquota' [ 297.301049][ T632] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=632 comm=kworker/1:3 [ 297.314422][ T632] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=632 comm=kworker/1:3 [ 297.383248][T15516] FAT-fs (rnullb0): bogus number of reserved sectors [ 297.390051][T15516] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 297.684774][T15529] rust_binder: Got transaction with invalid offset. [ 297.684844][T15529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.691545][T15529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 297.701206][T15529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.710411][T15531] rust_binder: Got transaction with invalid offset. [ 297.723513][T15531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.723541][T15531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 297.838956][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 297.838978][ T36] audit: type=1326 audit(2000000354.310:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 297.878192][ T36] audit: type=1326 audit(2000000354.310:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 297.898663][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5272'. [ 297.902309][ T36] audit: type=1326 audit(2000000354.310:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.5270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 297.967595][T15562] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 298.167616][T15574] /dev/rnullb0: Can't lookup blockdev [ 298.256391][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5285'. [ 298.301346][T15604] fuseblk: Bad value for 'rootmode' [ 298.367101][T15606] cgroup: fork rejected by pids controller in /syz3 [ 298.549035][T15651] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5294'. [ 298.562253][T15651] tipc: Invalid UDP bearer configuration [ 298.562283][T15651] tipc: Enabling of bearer rejected, failed to enable media [ 299.063844][ T36] audit: type=1326 audit(2000000355.530:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15678 comm="syz.1.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3018e929 code=0x7fc00000 [ 299.125025][T15691] fuse: Bad value for 'group_id' [ 299.130062][T15691] fuse: Bad value for 'group_id' [ 299.188187][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5305'. [ 299.192739][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'. [ 299.278881][T15700] overlayfs: failed to resolve '/ëÒøéø¯¯$ˆöi ¹~': -2 [ 299.324985][T15705] binder: Unknown parameter 'stÈ‚ä£3ats†®øhUUâ.' [ 299.393950][T15713] 9pnet: Could not find request transport: fn7 Æûé MÐXd [ 299.406696][T15715] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 299.778527][ T36] audit: type=1400 audit(2000000356.250:1317): avc: denied { write } for pid=15728 comm="syz.0.5318" name="file7" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 299.778730][T15729] /dev/rnullb0: Can't lookup blockdev [ 299.865535][T15743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5324'. [ 299.914507][T15745] /dev/rnullb0: Can't lookup blockdev [ 300.338461][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'. [ 300.347485][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'. [ 300.408163][T15771] overlayfs: failed to resolve './file0': -2 [ 300.416118][T15771] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.5334'. [ 300.477250][ T36] audit: type=1326 audit(2000000356.950:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.5336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99bfd8e929 code=0x0 [ 300.528462][T15779] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 300.557264][T15786] overlayfs: failed to clone upperpath [ 301.471389][T15837] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 302.562852][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5361'. [ 303.218012][T15876] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 303.227869][ T36] audit: type=1400 audit(2000000359.700:1319): avc: denied { relabelto } for pid=15875 comm="syz.3.5369" name="cgroup" dev="tmpfs" ino=1835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 303.255155][ T36] audit: type=1400 audit(2000000359.700:1320): avc: denied { associate } for pid=15875 comm="syz.3.5369" name="cgroup" dev="tmpfs" ino=1835 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 303.283063][ T36] audit: type=1400 audit(2000000359.700:1321): avc: denied { unlink } for pid=10657 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 303.530507][T15887] netlink: 'syz.3.5374': attribute type 4 has an invalid length. [ 304.154774][ T728] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 304.294778][ T728] usb 2-1: device descriptor read/64, error -71 [ 304.534776][ T728] usb 2-1: device descriptor read/64, error -71 [ 304.596759][ T36] audit: type=1400 audit(2000000361.070:1322): avc: denied { setattr } for pid=15924 comm="syz.3.5387" path="socket:[51745]" dev="sockfs" ino=51745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.774772][ T728] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 304.904797][ T728] usb 2-1: device descriptor read/64, error -71 [ 305.141331][T15939] futex_wake_op: syz.3.5392 tries to shift op by -1; fix this program [ 305.149602][T15940] futex_wake_op: syz.3.5392 tries to shift op by -1; fix this program [ 305.149624][ T728] usb 2-1: device descriptor read/64, error -71 [ 305.264928][ T728] usb usb2-port1: attempt power cycle [ 305.604776][ T728] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 305.625872][ T728] usb 2-1: device descriptor read/8, error -71 [ 305.687865][T15948] overlayfs: failed to resolve './file0': -2 [ 305.772488][ T728] usb 2-1: device descriptor read/8, error -71 [ 306.024767][ T728] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 306.055763][ T728] usb 2-1: device descriptor read/8, error -71 [ 306.195783][ T728] usb 2-1: device descriptor read/8, error -71 [ 306.304859][ T728] usb usb2-port1: unable to enumerate USB device [ 306.546486][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5421'. [ 306.556631][T16024] overlayfs: failed to clone upperpath [ 306.955821][T16077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.008239][T16080] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 307.141861][T16095] overlayfs: conflicting options: userxattr,redirect_dir=on [ 307.158794][T16097] fuse: Unknown parameter 'use' [ 307.178807][T16102] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 307.187780][T16102] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 307.196136][T16102] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 307.205276][T16102] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 307.217269][T16102] overlayfs: missing 'lowerdir' [ 308.333325][ T36] audit: type=1400 audit(2000000364.800:1323): avc: denied { ioctl } for pid=16232 comm="syz.1.5485" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.564765][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 308.715900][ T10] usb 2-1: config index 0 descriptor too short (expected 64795, got 101) [ 308.724422][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 308.734568][ T10] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 308.745085][ T10] usb 2-1: New USB device found, idVendor=0825, idProduct=a4a8, bcdDevice= 0.40 [ 308.754175][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.762338][ T10] usb 2-1: Product: syz [ 308.766566][ T10] usb 2-1: Manufacturer: syz [ 308.771191][ T10] usb 2-1: SerialNumber: syz [ 308.843755][ T36] audit: type=1326 audit(2000000365.310:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 308.867422][ T36] audit: type=1326 audit(2000000365.310:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 308.891279][ T36] audit: type=1326 audit(2000000365.320:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 308.914931][ T36] audit: type=1326 audit(2000000365.320:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 308.938917][ T36] audit: type=1326 audit(2000000365.320:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 308.962610][ T36] audit: type=1326 audit(2000000365.320:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7f918d290 code=0x7ffc0000 [ 308.986215][ T36] audit: type=1326 audit(2000000365.320:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 309.009952][ T36] audit: type=1326 audit(2000000365.320:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7f918e52b code=0x7ffc0000 [ 309.033440][ T36] audit: type=1326 audit(2000000365.320:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.0.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f918e929 code=0x7ffc0000 [ 309.035133][ T10] usb 2-1: USB disconnect, device number 31 [ 309.375356][T16250] lo: entered promiscuous mode [ 309.432838][T16249] lo: left promiscuous mode [ 309.464429][T16255] overlayfs: failed to clone upperpath [ 309.519213][T16265] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 309.555979][T16269] vcan0: entered allmulticast mode [ 309.618949][T16278] overlayfs: failed to clone upperpath [ 309.784760][ T31] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 309.857529][T16300] fuse: Unknown parameter 'groupé¸ì_id' [ 309.924774][ T31] usb 2-1: device descriptor read/64, error -71 [ 310.164788][ T31] usb 2-1: device descriptor read/64, error -71 [ 310.404830][ T31] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 310.534775][ T31] usb 2-1: device descriptor read/64, error -71 [ 310.784809][ T31] usb 2-1: device descriptor read/64, error -71 [ 310.894839][ T31] usb usb2-port1: attempt power cycle [ 311.234750][ T31] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 311.255767][ T31] usb 2-1: device descriptor read/8, error -71 [ 311.385997][ T31] usb 2-1: device descriptor read/8, error -71 [ 311.624782][ T31] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 311.645920][ T31] usb 2-1: device descriptor read/8, error -71 [ 311.775827][ T31] usb 2-1: device descriptor read/8, error -71 [ 311.825852][T16396] netlink: 'syz.2.5547': attribute type 4 has an invalid length. [ 311.837049][T16396] netlink: 'syz.2.5547': attribute type 17 has an invalid length. [ 311.884911][ T31] usb usb2-port1: unable to enumerate USB device [ 312.028041][T16433] /dev/rnullb0: Can't lookup blockdev [ 312.567175][T16464] usb usb8: usbfs: process 16464 (syz.1.5572) did not claim interface 0 before use [ 312.627625][T16469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.644943][T16469] tipc: Started in network mode [ 312.656377][T16469] tipc: Node identity 82ee21b0c99d, cluster identity 4711 [ 312.663567][T16469] tipc: Enabled bearer , priority 0 [ 312.671140][T16469] tipc: Resetting bearer [ 312.683468][T16469] tipc: Disabling bearer [ 312.709315][T16469] rust_binder: Write failure EINVAL in pid:206 [ 312.721804][T16471] overlayfs: overlapping lowerdir path [ 313.346887][T16497] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5582'. [ 313.578625][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 313.578646][ T36] audit: type=1326 audit(2000000370.050:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3018e929 code=0x7fc00000 [ 313.608803][ T36] audit: type=1326 audit(2000000370.050:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c3018e929 code=0x7fc00000 [ 313.628738][T16506] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 313.642770][ T36] audit: type=1400 audit(2000000370.110:1354): avc: denied { accept } for pid=16505 comm="syz.1.5586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.727975][T16518] rust_binder: Write failure EFAULT in pid:218 [ 313.915754][T16534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 313.933309][T16534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 313.942479][T16534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.252495][T16545] netlink: 'syz.2.5600': attribute type 4 has an invalid length. [ 314.266805][T16545] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5600'. [ 314.318170][T16555] tmpfs: Unknown parameter 'nosw"7ðð‚Í+¦r˜ùGó‰8ùG”§Ý¬µ®-Ù' [ 314.338883][T16557] batadv_slave_0: entered promiscuous mode [ 314.351528][T16559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.351896][T16559] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 314.395875][T16564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.404271][T16564] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 314.421363][T16565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.434420][T16557] batadv_slave_0: left promiscuous mode [ 314.459757][T16572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.460214][T16572] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 314.554721][ T36] audit: type=1400 audit(2000000371.020:1355): avc: denied { map } for pid=16587 comm="syz.2.5615" path="socket:[54138]" dev="sockfs" ino=54138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.586876][ T36] audit: type=1400 audit(2000000371.020:1356): avc: denied { lock } for pid=16587 comm="syz.2.5615" path="socket:[54136]" dev="sockfs" ino=54136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.711889][ T36] audit: type=1400 audit(2000000371.170:1357): avc: denied { map } for pid=16595 comm="syz.3.5618" path="socket:[55299]" dev="sockfs" ino=55299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 314.779196][T16609] can: request_module (can-proto-0) failed. [ 314.944758][ T45] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 315.034740][T16640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16640 comm=syz.0.5633 [ 315.095950][ T45] usb 2-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 315.106252][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 315.117814][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 48367, setting to 64 [ 315.130176][ T45] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 315.139338][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.147403][ T45] usb 2-1: Product: syz [ 315.151563][ T45] usb 2-1: Manufacturer: syz [ 315.156247][ T45] usb 2-1: SerialNumber: syz [ 315.161472][ T45] usb 2-1: config 0 descriptor?? [ 315.166742][T16574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 315.376215][ T36] audit: type=1400 audit(2000000371.850:1358): avc: denied { nlmsg_write } for pid=16573 comm="syz.1.5610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 315.419188][ T45] usb 2-1: USB disconnect, device number 36 [ 316.205894][T16707] /dev/loop0: Can't lookup blockdev [ 316.496301][T16719] overlayfs: failed to clone upperpath [ 316.502870][T16719] overlay: Unknown parameter 'mounts' [ 316.518890][T16724] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 316.953540][T16780] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 316.953540][T16780] éC<+ [ 317.001578][T16789] netlink: 'syz.2.5683': attribute type 30 has an invalid length. [ 317.125373][T16804] fuse: Bad value for 'fd' [ 317.211409][T16824] 9pnet_fd: Insufficient options for proto=fd [ 317.252409][ T6536] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.282173][T16834] 9pnet_fd: Insufficient options for proto=fd [ 317.289642][T16834] overlayfs: failed to clone upperpath [ 317.468125][T16838] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.475378][T16838] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.482763][T16838] bridge_slave_0: entered allmulticast mode [ 317.489286][T16838] bridge_slave_0: entered promiscuous mode [ 317.495804][T16838] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.502842][T16838] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.510028][T16838] bridge_slave_1: entered allmulticast mode [ 317.516499][T16838] bridge_slave_1: entered promiscuous mode [ 317.565118][T16838] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.572193][T16838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.579553][T16838] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.585293][T16843] fuse: Bad value for 'rootmode' [ 317.586631][T16838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.613953][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.621449][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.631201][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.638302][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.647778][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.654879][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.681653][T16838] veth0_vlan: entered promiscuous mode [ 317.693180][T16838] veth1_macvtap: entered promiscuous mode [ 317.728209][ T36] audit: type=1400 audit(2000000374.200:1359): avc: denied { mounton } for pid=16844 comm="syz.4.5704" path="/proc/2/cgroup" dev="proc" ino=55769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 317.807804][ T36] audit: type=1326 audit(2000000374.280:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.4.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb1d8e929 code=0x7ffc0000 [ 317.831611][ T36] audit: type=1326 audit(2000000374.280:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.4.5706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb1d8e929 code=0x7ffc0000 [ 318.200806][T16881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 318.201191][T16882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.210754][T16883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 318.237977][T16885] kvm: user requested TSC rate below hardware speed [ 318.255944][T16885] rust_binder: Error while translating object. [ 318.255974][T16885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 318.262233][T16885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 318.450683][T16895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5721'. [ 318.483588][T16895] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 318.498456][T16898] binder: Unknown parameter 'fscontext?}' [ 319.264813][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.264828][ T8122] Bluetooth: hci0: command 0x1003 tx timeout [ 319.521039][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 319.521058][ T36] audit: type=1326 audit(2000000375.990:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16940 comm="syz.2.5737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f552938e929 code=0x0 [ 319.550327][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 319.704739][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 319.710958][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.722824][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.732899][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 319.742052][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.751031][ T9] usb 2-1: config 0 descriptor?? [ 320.124405][T16954] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 320.159105][ T9] appleir 0003:05AC:8241.0003: unknown main item tag 0x1 [ 320.166975][ T9] appleir 0003:05AC:8241.0003: global environment stack underflow [ 320.175122][ T9] appleir 0003:05AC:8241.0003: item 0 0 1 11 parsing failed [ 320.182623][ T9] appleir 0003:05AC:8241.0003: parse failed [ 320.188726][ T9] appleir 0003:05AC:8241.0003: probe with driver appleir failed with error -22 [ 320.276448][T16965] vcan0: entered allmulticast mode [ 320.281947][T16965] vcan0: left allmulticast mode [ 320.308269][T16969] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 320.308291][T16969] rust_binder: Error while translating object. [ 320.319070][T16969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.325425][T16969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 320.363068][T16937] binder: Unknown parameter 'ÿÿ01777777777777777777777' [ 320.379959][ T45] usb 2-1: USB disconnect, device number 37 [ 320.426723][T16975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=16975 comm=syz.2.5752 [ 320.831471][T16981] vcan0: MTU too low for tipc bearer [ 320.836973][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 320.845650][T16981] vcan0: MTU too low for tipc bearer [ 320.851007][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 320.860829][T16981] vcan0: MTU too low for tipc bearer [ 320.866181][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 320.876959][T16981] vcan0: MTU too low for tipc bearer [ 320.882406][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 320.895639][T16981] vcan0: MTU too low for tipc bearer [ 320.899231][T16984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.900992][ T36] audit: type=1400 audit(2000000377.370:1383): avc: denied { lock } for pid=16983 comm="syz.1.5755" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.901715][T16985] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 320.907575][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 320.948481][T16981] vcan0: MTU too low for tipc bearer [ 320.953946][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 320.968567][T16981] vcan0: MTU too low for tipc bearer [ 320.972834][T16990] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 320.974118][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 320.993343][T16981] vcan0: MTU too low for tipc bearer [ 320.998761][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.008779][T16981] vcan0: MTU too low for tipc bearer [ 321.014184][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.033654][T16981] vcan0: MTU too low for tipc bearer [ 321.039054][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.047870][T16981] vcan0: MTU too low for tipc bearer [ 321.053190][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.065892][T16981] vcan0: MTU too low for tipc bearer [ 321.071304][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.079930][T16981] vcan0: MTU too low for tipc bearer [ 321.085324][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.098898][T16981] vcan0: MTU too low for tipc bearer [ 321.104241][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.112858][T16981] vcan0: MTU too low for tipc bearer [ 321.118560][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.128426][T16981] vcan0: MTU too low for tipc bearer [ 321.133752][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.142758][T16981] vcan0: MTU too low for tipc bearer [ 321.148372][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.160721][T16981] vcan0: MTU too low for tipc bearer [ 321.168077][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.181420][T16981] vcan0: MTU too low for tipc bearer [ 321.186838][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.195335][ T305] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 321.196350][T16981] vcan0: MTU too low for tipc bearer [ 321.208360][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.218034][T16981] vcan0: MTU too low for tipc bearer [ 321.223356][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.233285][T16981] vcan0: MTU too low for tipc bearer [ 321.238636][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.256227][T16981] vcan0: MTU too low for tipc bearer [ 321.261556][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.271451][T16981] vcan0: MTU too low for tipc bearer [ 321.276992][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.286874][T16981] vcan0: MTU too low for tipc bearer [ 321.292199][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.302089][T16981] vcan0: MTU too low for tipc bearer [ 321.307465][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.316071][T16981] vcan0: MTU too low for tipc bearer [ 321.321466][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.334764][T16981] vcan0: MTU too low for tipc bearer [ 321.340113][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.348661][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 321.352327][T16981] vcan0: MTU too low for tipc bearer [ 321.355277][ T305] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.359420][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.379101][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 321.383278][T16981] vcan0: MTU too low for tipc bearer [ 321.395790][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 321.395895][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.407331][ T305] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 321.416021][T16981] vcan0: MTU too low for tipc bearer [ 321.425872][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.430503][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.449580][ T305] usb 2-1: config 0 descriptor?? [ 321.454958][T16988] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 321.464170][ T305] hub 2-1:0.0: USB hub found [ 321.469593][T16981] vcan0: MTU too low for tipc bearer [ 321.475025][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.484602][T16981] vcan0: MTU too low for tipc bearer [ 321.490039][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.501382][T16981] vcan0: MTU too low for tipc bearer [ 321.506767][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.517447][T16981] vcan0: MTU too low for tipc bearer [ 321.522790][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.531448][T16981] vcan0: MTU too low for tipc bearer [ 321.536802][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.546896][T16981] vcan0: MTU too low for tipc bearer [ 321.552233][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.576480][T16981] vcan0: MTU too low for tipc bearer [ 321.581839][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.590590][T16981] vcan0: MTU too low for tipc bearer [ 321.596283][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.606588][T16981] vcan0: MTU too low for tipc bearer [ 321.612004][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.624179][T16981] vcan0: MTU too low for tipc bearer [ 321.629591][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.638204][T16981] vcan0: MTU too low for tipc bearer [ 321.643532][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.656014][T16981] vcan0: MTU too low for tipc bearer [ 321.661364][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.663374][ T305] hub 2-1:0.0: 2 ports detected [ 321.671797][T16981] vcan0: MTU too low for tipc bearer [ 321.680408][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 321.705981][ T36] audit: type=1326 audit(2000000378.180:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 321.729629][ T36] audit: type=1326 audit(2000000378.180:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 321.753624][ T36] audit: type=1326 audit(2000000378.180:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17004 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55293c11e5 code=0x7ffc0000 [ 321.777901][ T36] audit: type=1326 audit(2000000378.180:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 321.801904][ T36] audit: type=1326 audit(2000000378.180:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 321.828823][ T36] audit: type=1326 audit(2000000378.180:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 321.842802][T17019] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 321.853129][ T36] audit: type=1326 audit(2000000378.180:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 321.886186][ T36] audit: type=1326 audit(2000000378.180:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 321.988000][T17026] fuse: Bad value for 'rootmode' [ 322.045024][T17028] overlayfs: failed to clone upperpath [ 323.447931][T17053] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 323.536470][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 323.538551][ T31] usb 2-1: USB disconnect, device number 38 [ 323.566520][T17063] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5778'. [ 335.975896][T17071] fuse: Unknown parameter 'secÏabel' [ 335.981456][T17075] can: request_module (can-proto-0) failed. [ 336.007439][T17071] xt_NFQUEUE: number of total queues is 0 [ 336.017453][T17086] /dev/loop0: Can't lookup blockdev [ 336.022770][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 336.022800][ T36] audit: type=1400 audit(2000000392.490:1438): avc: denied { listen } for pid=17070 comm="syz.4.5780" path=2F32352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 336.068026][ T36] audit: type=1326 audit(2000000392.540:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.088057][T17092] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 336.092723][ T36] audit: type=1326 audit(2000000392.540:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.124986][ T36] audit: type=1326 audit(2000000392.540:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.153201][ T36] audit: type=1326 audit(2000000392.540:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.177323][ T36] audit: type=1326 audit(2000000392.540:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.201740][ T36] audit: type=1326 audit(2000000392.540:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.211317][T17098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 336.225863][ T36] audit: type=1326 audit(2000000392.540:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.232207][T17098] rust_binder: Read failure Err(EFAULT) in pid:271 [ 336.237742][ T36] audit: type=1326 audit(2000000392.540:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.289983][ T36] audit: type=1326 audit(2000000392.540:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17089 comm="syz.2.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7ffc0000 [ 336.367219][T17115] rust_binder: Write failure EINVAL in pid:87 [ 336.367334][T17115] rust_binder: Read failure Err(EAGAIN) in pid:87 [ 336.428338][T17126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17126 comm=syz.2.5800 [ 336.493567][T17131] /dev/nullb0: Can't lookup blockdev [ 336.826826][T17138] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5803'. [ 336.953279][T17148] overlay: Unknown parameter 'mounts' [ 336.958952][T17148] overlay: Unknown parameter 'mounts' [ 336.964550][T17148] overlay: Unknown parameter 'mounts' [ 336.970245][T17148] overlay: Unknown parameter 'mounts' [ 336.975837][T17148] overlay: Unknown parameter 'mounts' [ 336.981381][T17148] overlay: Unknown parameter 'mounts' [ 336.986941][T17148] overlay: Unknown parameter 'mounts' [ 336.992438][T17148] overlay: Unknown parameter 'mounts' [ 336.998012][T17148] overlay: Unknown parameter 'mounts' [ 337.003591][T17148] overlay: Unknown parameter 'mounts' [ 337.009227][T17148] overlay: Unknown parameter 'mounts' [ 337.014814][T17148] overlay: Unknown parameter 'mounts' [ 337.020366][T17148] overlay: Unknown parameter 'mounts' [ 337.026256][T17148] overlay: Unknown parameter 'mounts' [ 337.031826][T17148] overlay: Unknown parameter 'mounts' [ 337.037706][T17148] overlay: Unknown parameter 'mounts' [ 337.043408][T17148] overlay: Unknown parameter 'mounts' [ 337.049376][T17148] overlay: Unknown parameter 'mounts' [ 337.055114][T17148] overlay: Unknown parameter 'mounts' [ 337.060899][T17148] overlay: Unknown parameter 'mounts' [ 337.066687][T17148] overlay: Unknown parameter 'mounts' [ 337.072734][T17148] overlay: Unknown parameter 'mounts' [ 337.078418][T17148] overlay: Unknown parameter 'mounts' [ 337.085229][T17148] overlay: Unknown parameter 'mounts' [ 337.096827][T17148] overlay: Unknown parameter 'mounts' [ 337.103859][T17148] overlay: Unknown parameter 'mounts' [ 337.104656][T17160] binder: Unknown parameter 'rï' [ 337.114631][T17148] overlay: Unknown parameter 'mounts' [ 337.124512][T17148] overlay: Unknown parameter 'mounts' [ 337.133664][T17148] overlay: Unknown parameter 'mounts' [ 337.139401][T17148] overlay: Unknown parameter 'mounts' [ 337.145145][T17148] overlay: Unknown parameter 'mounts' [ 337.150682][T17148] overlay: Unknown parameter 'mounts' [ 337.156535][T17148] overlay: Unknown parameter 'mounts' [ 337.180363][T17172] incfs: Error accessing: ./file0. [ 337.185798][T17172] incfs: mount failed -20 [ 337.240104][T17181] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 337.370527][T17195] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.442328][T17200] fuse: Bad value for 'user_id' [ 337.453920][T17200] fuse: Bad value for 'user_id' [ 337.604778][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 337.634328][T17211] netlink: 'syz.2.5829': attribute type 12 has an invalid length. [ 337.706579][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5830'. [ 337.728023][T17217] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5831'. [ 337.755900][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.767152][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.777444][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.790601][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.799893][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.811384][ T9] usb 2-1: config 0 descriptor?? [ 337.891826][T17236] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 338.028276][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 338.034358][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 338.041871][T17247] random: crng reseeded on system resumption [ 338.043721][ T9] usb 2-1: USB disconnect, device number 39 [ 338.353334][T17260] lo: entered promiscuous mode [ 338.359980][T17260] netlink: 'syz.2.5847': attribute type 11 has an invalid length. [ 338.369676][T17259] lo: left promiscuous mode [ 338.389605][T17262] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 338.399431][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 338.535293][ T9] usb 2-1: device descriptor read/64, error -71 [ 338.774759][ T9] usb 2-1: device descriptor read/64, error -71 [ 338.990859][T17287] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 339.014782][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 339.145872][ T9] usb 2-1: device descriptor read/64, error -71 [ 339.232365][T17314] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 339.387306][ T9] usb 2-1: device descriptor read/64, error -71 [ 339.408747][T17337] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5872'. [ 339.442034][T17338] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=17338 comm=syz.3.5872 [ 339.442034][T17337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=17337 comm=syz.3.5872 [ 339.497324][ T9] usb usb2-port1: attempt power cycle [ 339.630326][T17359] overlayfs: failed to clone lowerpath [ 339.844827][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 339.865802][ T9] usb 2-1: device descriptor read/8, error -71 [ 339.995924][ T9] usb 2-1: device descriptor read/8, error -71 [ 340.237791][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 340.282719][ T9] usb 2-1: device descriptor read/8, error -71 [ 340.417976][ T9] usb 2-1: device descriptor read/8, error -71 [ 340.419247][T17392] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 340.452652][T17398] overlayfs: missing 'lowerdir' [ 340.473896][T17400] rust_binder: Error while translating object. [ 340.473942][T17400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.480628][T17400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 340.522587][T17404] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 340.524940][ T9] usb usb2-port1: unable to enumerate USB device [ 340.817309][T17413] overlayfs: failed to clone upperpath [ 340.835216][T17415] fuse: Unknown parameter 'group_ÿnid' [ 341.377339][T17427] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 341.452689][T17438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5908'. [ 341.950157][T17463] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 342.105550][T17478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.264503][T17487] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 342.480749][T17520] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 342.605031][T17526] netlink: 'syz.3.5935': attribute type 29 has an invalid length. [ 342.612947][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5935'. [ 343.248233][T17545] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 343.274752][ T632] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 343.406117][ T632] usb 2-1: device descriptor read/64, error -71 [ 343.518760][T17573] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 343.592636][T17574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5949'. [ 343.641778][T17592] overlayfs: failed to clone upperpath [ 343.644804][ T632] usb 2-1: device descriptor read/64, error -71 [ 343.721964][T17604] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 343.884785][ T632] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 343.909851][T17635] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 344.025021][ T632] usb 2-1: device descriptor read/64, error -71 [ 344.264776][ T632] usb 2-1: device descriptor read/64, error -71 [ 344.374850][ T632] usb usb2-port1: attempt power cycle [ 344.631201][T17665] overlayfs: failed to clone upperpath [ 344.714775][ T632] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 344.735887][ T632] usb 2-1: device descriptor read/8, error -71 [ 344.855664][T17667] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 344.866525][ T632] usb 2-1: device descriptor read/8, error -71 [ 345.104929][ T632] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 345.125853][ T632] usb 2-1: device descriptor read/8, error -71 [ 345.156721][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 345.156742][ T36] audit: type=1400 audit(2000000401.630:1472): avc: denied { setattr } for pid=17686 comm="syz.4.5989" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.193910][ T36] audit: type=1326 audit(2000000401.660:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.3.5990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99bfd8e929 code=0x0 [ 345.243657][T17695] overlayfs: failed to clone upperpath [ 345.265842][ T632] usb 2-1: device descriptor read/8, error -71 [ 345.374860][ T632] usb usb2-port1: unable to enumerate USB device [ 346.974754][ T10] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 347.125927][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 6 [ 347.135032][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.146301][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 347.157477][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 347.168696][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 347.181574][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.192195][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.200465][ T10] usb 2-1: Product: syz [ 347.204887][ T10] usb 2-1: Manufacturer: syz [ 347.209571][ T10] usb 2-1: SerialNumber: syz [ 347.216021][T17747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 347.425094][T17747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 347.432391][T17747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 348.040577][T17747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 348.047912][T17747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 348.056192][ T10] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 348.062725][ T10] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 348.070386][ T10] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 348.263758][ T10] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 348.275762][ T10] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 348.474783][T17747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 348.475039][T17748] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 348.485022][T17747] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 348.506943][ T305] usb 2-1: USB disconnect, device number 48 [ 348.532574][ T305] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 348.976399][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6032'. [ 349.160810][T17888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17888 comm=syz.3.6045 [ 349.165559][T17890] binder: Bad value for 'defcontext' [ 349.201211][T17895] sit0: entered promiscuous mode [ 349.208447][T17895] netlink: 'syz.1.6048': attribute type 1 has an invalid length. [ 349.216330][T17895] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6048'. [ 349.464827][ T305] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 349.616888][ T305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.632191][ T305] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 349.641616][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.650701][ T305] usb 2-1: config 0 descriptor?? [ 349.829560][T17927] rust_binder: Error while translating object. [ 349.829599][T17927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 349.836026][T17927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:172 [ 349.928526][T17934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 349.938992][T17934] rust_binder: Read failure Err(EFAULT) in pid:178 [ 349.997999][T17947] binder: Unknown parameter 'euid<00000000000000000000' [ 350.061838][ T305] hid-generic 0003:1C4F:0059.0004: unknown main item tag 0x1 [ 350.069601][ T305] hid-generic 0003:1C4F:0059.0004: collection stack underflow [ 350.077395][ T305] hid-generic 0003:1C4F:0059.0004: item 0 1 0 12 parsing failed [ 350.086145][ T305] hid-generic 0003:1C4F:0059.0004: probe with driver hid-generic failed with error -22 [ 350.087147][T17954] 9pnet_fd: Insufficient options for proto=fd [ 350.266357][T17895] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 350.267846][ T305] usb 2-1: USB disconnect, device number 49 [ 350.647266][T17974] fuse: Unknown parameter 'Ê' [ 350.802887][T17992] syz.1.6081(17992): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 350.861421][ T36] audit: type=1400 audit(2000000407.330:1474): avc: denied { unmount } for pid=17998 comm="syz.2.6084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 350.887595][T18003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 350.901783][T18006] overlayfs: failed to clone upperpath [ 350.912090][T18010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 350.917929][T18010] rust_binder: Error while translating object. [ 350.927848][T18010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 350.934436][T18010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 351.058561][T18032] overlayfs: missing 'lowerdir' [ 351.074739][ T305] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 351.125170][ T36] audit: type=1326 audit(2000000407.600:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.2.6098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f552938e929 code=0x0 [ 351.151548][T18044] overlayfs: failed to clone upperpath [ 351.235772][ T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.245963][ T305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.256477][ T305] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.265678][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.273996][ T305] usb 2-1: SerialNumber: syz [ 351.336174][T18070] overlayfs: failed to resolve './file1': -2 [ 351.480506][T17996] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6083'. [ 351.490319][T17996] netlink: 'syz.1.6083': attribute type 4 has an invalid length. [ 351.498163][T17996] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6083'. [ 353.838797][ T305] usb 2-1: USB disconnect, device number 50 [ 353.847028][T18144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.847341][T18144] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 354.040494][T18149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:202 [ 354.177583][T18153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.472325][T18164] rust_binder: Write failure EINVAL in pid:217 [ 354.502914][T18167] tmpfs: Bad value for 'nr_inodes' [ 354.717425][T18174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 354.717467][T18174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:227 [ 354.727003][T18174] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 354.736215][T18174] rust_binder: Read failure Err(EFAULT) in pid:227 [ 354.782730][T18182] bpf: Bad value for 'mode' [ 354.794484][T18182] rust_binder: Got transaction with invalid offset. [ 354.794523][T18182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 354.801192][T18182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 354.825172][T18184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:235 [ 354.964753][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 355.124721][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 355.131042][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.141210][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 355.152125][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 355.161814][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.174142][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.183262][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.191294][ T9] usb 2-1: Product: syz [ 355.195479][ T9] usb 2-1: Manufacturer: syz [ 355.200103][ T9] usb 2-1: SerialNumber: syz [ 355.453427][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 355.464761][ T9] usb 2-1: USB disconnect, device number 51 [ 355.474303][T17197] udevd[17197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 355.986053][T18189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.192067][ T36] audit: type=1400 audit(2000000412.660:1476): avc: denied { setattr } for pid=18201 comm="syz.1.6155" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 356.196977][T18202] binder: Bad value for 'stats' [ 356.376455][T18209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.382470][T18209] rust_binder: Write failure EINVAL in pid:383 [ 356.389841][T18209] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 356.459383][T18213] rust_binder: Write failure EFAULT in pid:387 [ 356.615496][T18224] 8021q: VLANs not supported on ip6gre0 [ 356.705147][T18233] overlayfs: conflicting lowerdir path [ 356.766900][T18235] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.822526][T18239] tmpfs: Unknown parameter 'ý±¢' [ 357.004775][ T2526] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 357.154726][ T2526] usb 2-1: Using ep0 maxpacket: 16 [ 357.161737][ T2526] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 357.170839][ T2526] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.183690][ T2526] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 357.196193][ T2526] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.205320][ T2526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.213669][ T2526] usb 2-1: Product: syz [ 357.217907][ T2526] usb 2-1: Manufacturer: syz [ 357.222818][ T2526] usb 2-1: SerialNumber: syz [ 357.432609][ T2526] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 357.443879][ T2526] usb 2-1: USB disconnect, device number 52 [ 357.454057][T17197] udevd[17197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 358.007291][T18318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.007435][T18318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:405 [ 358.016484][T18318] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 358.054610][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.070345][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.096982][T18325] netlink: 'syz.1.6198': attribute type 4 has an invalid length. [ 358.105924][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.126160][T18325] netlink: 'syz.1.6198': attribute type 17 has an invalid length. [ 358.144174][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.159778][T18330] overlayfs: failed to clone upperpath [ 358.171660][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.204724][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.229299][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.248203][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.271686][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.278834][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.286182][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.292996][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.300681][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.307602][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.314956][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.321718][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.335989][T18338] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6203'. [ 358.345541][T18339] /dev/nullb0: Can't lookup blockdev [ 358.386319][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.400723][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.416134][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.441167][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.450563][T18345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6205'. [ 358.457222][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.485011][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.499975][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.514527][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.529341][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.543072][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.558487][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.572977][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.588359][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.601764][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.616624][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.631146][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.646115][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.659511][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.674375][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.688840][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.702597][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.717119][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.730829][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.745334][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.760101][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.773516][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.788361][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.802780][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.816526][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.835022][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.855021][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.871991][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.886818][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.903767][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.924282][T18321] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.935460][T18321] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 359.017482][T18352] FAT-fs (rnullb0): bogus number of reserved sectors [ 359.024238][T18352] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 359.036655][T18357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.036962][T18357] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 359.043768][T18357] rust_binder: Read failure Err(EFAULT) in pid:410 [ 359.063326][T18357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.330568][T18375] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.344169][T18375] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.351607][T18375] bridge_slave_0: entered allmulticast mode [ 359.358409][T18375] bridge_slave_0: entered promiscuous mode [ 359.376961][T18375] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.384127][T18375] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.391792][T18375] bridge_slave_1: entered allmulticast mode [ 359.398385][T18375] bridge_slave_1: entered promiscuous mode [ 359.453926][T18375] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.461067][T18375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.468405][T18375] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.474808][ T2526] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 359.475476][T18375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.507529][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.514930][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.524487][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.531587][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.542064][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.549192][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.586002][T18375] veth0_vlan: entered promiscuous mode [ 359.600584][T18375] veth1_macvtap: entered promiscuous mode [ 359.676829][T18399] rust_binder: Write failure EINVAL in pid:4 [ 359.676968][T18399] rust_binder: Read failure Err(EAGAIN) in pid:4 [ 359.714894][ T2526] usb 2-1: Invalid ep0 maxpacket: 16 [ 359.784910][T18418] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 359.784941][T18418] rust_binder: Error while translating object. [ 359.797356][T18418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.803664][T18418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 359.859416][ T2526] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 359.887834][T18431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6235'. [ 359.900228][T18431] rust_binder: Write failure EINVAL in pid:17 [ 360.034768][ T2526] usb 2-1: Invalid ep0 maxpacket: 16 [ 360.046345][ T2526] usb usb2-port1: attempt power cycle [ 360.384784][ T2526] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 360.405092][ T2526] usb 2-1: Invalid ep0 maxpacket: 16 [ 360.510487][T18438] bpf: Bad value for 'mode' [ 360.516925][T18438] UHID_CREATE from different security context by process 24 (syz.3.6238), this is not allowed. [ 360.534861][ T2526] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 360.555707][ T2526] usb 2-1: Invalid ep0 maxpacket: 16 [ 360.563805][ T2526] usb usb2-port1: unable to enumerate USB device [ 360.892437][ T36] audit: type=1400 audit(2000000417.360:1477): avc: denied { execute } for pid=18463 comm="syz.3.6248" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.999521][T18470] binder: Unknown parameter 'fscontext?}' [ 361.002657][ T36] audit: type=1400 audit(2000000417.470:1478): avc: granted { setsecparam } for pid=18469 comm="syz.3.6250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 361.334956][ T305] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 361.442898][ T36] audit: type=1400 audit(2000000417.910:1479): avc: denied { nlmsg_read } for pid=18500 comm="syz.2.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 361.471237][T18503] incfs: Error accessing: ./file0. [ 361.476513][T18503] incfs: mount failed -20 [ 361.485037][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 361.491315][ T305] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 361.499712][ T305] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 361.508924][ T305] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 361.518082][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.527814][ T305] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.537533][ T305] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 361.550528][ T305] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 361.559610][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.568404][ T305] usb 4-1: config 0 descriptor?? [ 361.774853][ T305] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 361.981019][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.989800][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.027057][ T305] usb 4-1: USB disconnect, device number 11 [ 362.037370][ T305] usblp0: removed [ 362.134134][ T36] audit: type=1326 audit(2000000418.600:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.4.6268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cb1d8e929 code=0x0 [ 362.167411][T18521] random: crng reseeded on system resumption [ 362.223613][T18526] overlayfs: failed to clone upperpath [ 362.243833][T18529] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 362.678332][ T36] audit: type=1326 audit(2000000419.150:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.3.6279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f474158e929 code=0x0 [ 362.812393][T18556] netlink: 22 bytes leftover after parsing attributes in process `syz.2.6283'. [ 363.191553][T18568] fuse: Unknown parameter '—roup_id' [ 363.254858][T18568] rust_binder: Error in use_page_slow: ESRCH [ 363.254886][T18568] rust_binder: use_range failure ESRCH [ 363.261044][T18568] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 363.267099][T18568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 363.275441][T18568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:431 [ 363.313706][T18570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.382333][T18571] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 363.525448][T18573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.584161][T18574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 363.590967][T18574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 363.600562][T18575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 363.890475][T18598] netlink: 'syz.2.6300': attribute type 4 has an invalid length. [ 363.894755][ T728] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 363.898418][T18598] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6300'. [ 364.054722][ T728] usb 4-1: Using ep0 maxpacket: 8 [ 364.060934][ T728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.071134][ T728] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.080099][ T728] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 364.091335][ T728] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 364.102530][ T728] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 364.111616][ T728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.121655][ T728] hub 4-1:1.0: bad descriptor, ignoring hub [ 364.127653][ T728] hub 4-1:1.0: probe with driver hub failed with error -5 [ 364.134959][ T728] cdc_wdm 4-1:1.0: skipping garbage [ 364.140177][ T728] cdc_wdm 4-1:1.0: skipping garbage [ 364.146050][ T728] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 364.153304][ T728] cdc_wdm 4-1:1.0: Unknown control protocol [ 364.207009][T18605] input: syz0 as /devices/virtual/input/input12 [ 364.298160][T18608] FAT-fs (rnullb0): bogus number of reserved sectors [ 364.305680][T18608] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 364.378449][T18611] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 364.401893][T18614] fuse: Bad value for 'user_id' [ 364.407268][T18614] fuse: Bad value for 'user_id' [ 364.425035][ T36] audit: type=1326 audit(2000000420.900:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18617 comm="syz.1.6307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c3018e929 code=0x0 [ 364.448059][ T728] usb 4-1: USB disconnect, device number 12 [ 364.774737][ T305] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 364.891663][T18643] overlayfs: failed to clone upperpath [ 364.925853][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.936102][ T305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.945261][ T305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 364.956707][ T305] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 364.965905][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.975264][T18583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.983673][ T305] hub 4-1:1.0: bad descriptor, ignoring hub [ 364.989672][ T305] hub 4-1:1.0: probe with driver hub failed with error -5 [ 364.997015][ T305] cdc_wdm 4-1:1.0: skipping garbage [ 365.002225][ T305] cdc_wdm 4-1:1.0: skipping garbage [ 365.007971][ T305] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 365.013904][ T305] cdc_wdm 4-1:1.0: Unknown control protocol [ 365.256673][ T36] audit: type=1400 audit(2000000421.730:1483): avc: denied { lock } for pid=18651 comm="syz.4.6320" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.294750][T18658] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.295053][T18658] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 365.338135][T18663] overlayfs: conflicting options: userxattr,redirect_dir=on [ 365.390282][T18666] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6324'. [ 365.400040][T18666] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 365.400062][T18666] rust_binder: Error while translating object. [ 365.410670][T18666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 365.416875][T18666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 365.444808][ T305] usb 4-1: USB disconnect, device number 13 [ 365.554227][T18677] rust_binder: Error while translating object. [ 365.554264][T18677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 365.560633][T18677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:292 [ 365.586115][T18679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:294 [ 365.716453][T18684] rust_binder: Error while translating object. [ 365.725686][T18684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 365.731879][T18684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:299 [ 365.755923][T18686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6332'. [ 365.885045][T18696] 9p: Unknown Cache mode or invalid value ;j¼¸~.r÷MŒ°ê0†9ýÏô]þ~ÞžïaÖ馸΋à!BŸ÷§\½nz\A/‹ [ 366.002167][T18716] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 366.002191][T18716] rust_binder: Error while translating object. [ 366.010942][T18716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 366.017162][T18716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 366.039607][T18720] rust_binder: Write failure EFAULT in pid:314 [ 366.050094][T18720] cgroup: Unknown subsys name 'measure' [ 366.396588][T18745] /dev/rnullb0: Can't lookup blockdev [ 366.799784][ T36] audit: type=1400 audit(2000000423.270:1484): avc: denied { append } for pid=18764 comm="syz.3.6360" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.363456][T18801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=18801 comm=syz.2.6372 [ 367.376112][T18801] netlink: 'syz.2.6372': attribute type 19 has an invalid length. [ 367.395739][T18805] futex_wake_op: syz.2.6373 tries to shift op by -1; fix this program [ 367.405533][T18805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6373'. [ 367.490433][T18816] overlayfs: failed to clone upperpath [ 367.731690][T18853] fuse: Bad value for 'user_id' [ 367.736661][T18853] fuse: Bad value for 'user_id' [ 367.804752][ T728] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 367.954732][ T728] usb 4-1: Using ep0 maxpacket: 16 [ 367.961008][ T728] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.970861][ T728] usb 4-1: config 1 interface 0 has no altsetting 0 [ 367.979054][ T728] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.40 [ 367.988221][ T728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.996350][ T728] usb 4-1: Product:  [ 368.000535][ T728] usb 4-1: Manufacturer: О [ 368.005163][ T728] usb 4-1: SerialNumber: 碟在⫶战쎢줆æ–㼎鸆囌싘䥷⑻ë¿î’£ï©é–‚䰨Ꚛ渞櫃볳ä¥å“œïŒ”î±æ¤á¤½êžŠâª¸ã˜™â¥­â³·å™¿é””肞ꮆ㳱ﱚî›ä—“ [ 368.226635][ T728] usbhid 4-1:1.0: can't add hid device: -71 [ 368.232689][ T728] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 368.241793][ T728] usb 4-1: USB disconnect, device number 14 [ 368.745426][T18874] xfrm0: mtu less than device minimum [ 368.792605][T18876] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6395'. [ 368.858722][T18884] syzkaller0: entered allmulticast mode [ 368.874747][T18884] syzkaller0 (unregistering): left allmulticast mode [ 369.017127][T18892] overlayfs: failed to clone upperpath [ 369.146340][T18911] binder: Bad value for 'stats' [ 369.187215][T18918] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 369.223832][T18922] overlayfs: failed to clone upperpath [ 369.261492][ T36] audit: type=1400 audit(2000000426.729:1485): avc: denied { mount } for pid=18924 comm="syz.3.6413" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 369.286114][T18926] overlayfs: failed to clone lowerpath [ 369.300331][T18930] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 369.300360][T18930] rust_binder: Error while translating object. [ 369.300568][T18931] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 369.320867][T18930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.327192][T18931] rust_binder: Error while translating object. [ 369.340937][ T36] audit: type=1400 audit(2000000426.799:1486): avc: denied { unmount } for pid=18375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 369.359064][T18931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.378558][T18930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 369.389634][T18931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 369.424479][ T36] audit: type=1400 audit(2000000426.889:1487): avc: denied { create } for pid=18942 comm="syz.2.6418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 369.526869][T18947] overlayfs: failed to clone upperpath [ 370.256273][T18964] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 370.662084][T19010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6438'. [ 370.671129][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6438'. [ 372.162729][T19036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 372.162762][T19036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 372.554866][ T305] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 372.694806][ T305] usb 4-1: device descriptor read/64, error -71 [ 372.714910][T19046] fuse: Unknown parameter '0x000000000000000600000000000000000008' [ 372.760333][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6453'. [ 372.934828][ T305] usb 4-1: device descriptor read/64, error -71 [ 373.174769][ T305] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 373.304783][ T305] usb 4-1: device descriptor read/64, error -71 [ 373.305107][T19059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=19059 comm=syz.1.6455 [ 373.397075][ T6522] tipc: Disabling bearer [ 373.402205][ T6522] tipc: Left network mode [ 373.408224][ T6522] veth1_macvtap: left promiscuous mode [ 373.413800][ T6522] veth0_vlan: left promiscuous mode [ 373.472532][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6457'. [ 373.566090][ T305] usb 4-1: device descriptor read/64, error -71 [ 373.685667][ T305] usb usb4-port1: attempt power cycle [ 373.817581][T19088] /dev/rnullb0: Can't lookup blockdev [ 374.020319][T19103] fuse: Bad value for 'fd' [ 374.035133][T19103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:334 [ 374.054749][ T305] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 374.095736][ T305] usb 4-1: device descriptor read/8, error -71 [ 374.226442][ T305] usb 4-1: device descriptor read/8, error -71 [ 374.465006][ T305] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 374.485767][ T305] usb 4-1: device descriptor read/8, error -71 [ 374.616028][ T305] usb 4-1: device descriptor read/8, error -71 [ 374.724860][ T305] usb usb4-port1: unable to enumerate USB device [ 374.739403][T19122] overlayfs: conflicting options: userxattr,redirect_dir=on [ 374.845242][T19139] /dev/rnullb0: Can't lookup blockdev [ 374.862575][T19142] tipc: Enabling of bearer rejected, failed to enable media [ 375.209680][T19159] rust_binder: Write failure EINVAL in pid:128 [ 375.213798][T19159] rust_binder: Read failure Err(EAGAIN) in pid:128 [ 375.301948][T19161] rust_binder: Error while translating object. [ 375.308604][T19161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 375.315091][T19161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 375.594738][ T728] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 375.755787][ T728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.766826][ T728] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 375.775908][ T728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.784676][ T728] usb 4-1: config 0 descriptor?? [ 375.830786][ T36] audit: type=1326 audit(2000000433.299:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19155 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552938e929 code=0x7fc00000 [ 375.900576][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'. [ 375.904970][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'. [ 376.119320][T19202] overlayfs: failed to clone upperpath [ 376.125815][T19202] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6507'. [ 376.191696][ T728] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 376.201806][ T728] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input14 [ 376.269316][ T728] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 376.514960][ T36] audit: type=1400 audit(2000000433.989:1489): avc: denied { read } for pid=19206 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 376.685236][T19210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19210 comm=syz.2.6510 [ 376.698977][T19210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=19210 comm=syz.2.6510 [ 376.712084][T19210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19210 comm=syz.2.6510 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK [ 376.865200][ T31] usb 4-1: USB disconnect, device number 19 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 376.991350][ T36] audit: type=1400 audit(2000000434.459:1490): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 377.016814][ T36] audit: type=1400 audit(2000000434.489:1491): avc: denied { read write } for pid=19231 comm="ip" path="/dev/console" dev="rootfs" ino=1144 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping iptables: [ 377.087832][ T36] audit: type=1400 audit(2000000434.559:1492): avc: denied { read write } for pid=19235 comm="iptables" path="/dev/console" dev="rootfs" ino=1144 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 377.114594][ T36] audit: type=1400 audit(2000000434.559:1493): avc: denied { search } for pid=19235 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.140826][ T36] audit: type=1400 audit(2000000434.559:1494): avc: denied { write } for pid=19235 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 377.165488][ T36] audit: type=1400 audit(2000000434.559:1495): avc: denied { add_name } for pid=19235 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.210229][ T36] audit: type=1400 audit(2000000434.559:1496): avc: denied { create } for pid=19235 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 377.243472][ T36] audit: type=1400 audit(2000000434.559:1497): avc: denied { read open } for pid=19235 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=4011 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 377.309392][T19251] kvm: kvm [19250]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 377.319898][T19252] rust_binder: BINDER_SET_CONTEXT_MGR already set done[ 377.319927][T19252] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 377.326564][T19252] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 377.503834][T19271] netlink: 'syz.3.6520': attribute type 4 has an invalid length. [ 377.518223][T19271] netlink: 'syz.3.6520': attribute type 27 has an invalid length. Stopping klogd: [ 377.526578][T19271] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.6520'. OK Stopping acpid: [ 377.814738][ T31] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 377.965824][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.976906][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.986661][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.999591][ T31] usb 4-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 378.008652][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.017225][ T31] usb 4-1: config 0 descriptor?? [ 378.076522][T19286] random: crng reseeded on system resumption [ 378.387908][ T6541] bridge_slave_1: left allmulticast mode [ 378.393726][ T6541] bridge_slave_1: left promiscuous mode [ 378.399511][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.407517][ T6541] bridge_slave_0: left allmulticast mode [ 378.413301][ T6541] bridge_slave_0: left promiscuous mode [ 378.420689][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.429487][ T31] ntrig 0003:1B96:0001.0006: item fetching failed at offset 1/5 [ 378.444934][ T31] ntrig 0003:1B96:0001.0006: parse failed [ 378.455997][ T31] ntrig 0003:1B96:0001.0006: probe with driver ntrig failed with error -22 [ 378.496768][T19300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6530'. OK Stopping syslogd: [ 378.630653][ T2526] usb 4-1: USB disconnect, device number 20 stopped /sbin/syslogd (pid 91) OK [ 378.641920][ T6541] veth1_macvtap: left promiscuous mode [ 378.648334][ T6541] veth0_vlan: left promiscuous mode umount: can't remount debugfs read-only Connection to 10.128.15.196 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 379.147703][ T6541] bridge_slave_1: left allmulticast mode [ 379.153405][ T6541] bridge_slave_1: left promiscuous mode [ 379.164855][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.185377][ T6541] bridge_slave_0: left allmulticast mode [ 379.191087][ T6541] bridge_slave_0: left promiscuous mode [ 379.207869][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.387040][ T6541] veth1_macvtap: left promiscuous mode [ 379.392570][ T6541] veth0_vlan: left promiscuous mode [ 379.656212][ T6541] bridge_slave_1: left allmulticast mode [ 379.661892][ T6541] bridge_slave_1: left promiscuous mode [ 379.667843][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.675475][ T6541] bridge_slave_0: left allmulticast mode [ 379.681123][ T6541] bridge_slave_0: left promiscuous mode [ 379.686734][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.796838][ T6541] tipc: Left network mode [ 379.802260][ T6541] veth1_macvtap: left promiscuous mode [ 379.807843][ T6541] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 380.939772][T19315] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 380.946861][T19315] ACPI: PM: Preparing to enter system sleep state S5 [ 380.953856][T19315] kvm: exiting hardware virtualization [ 380.959386][T19315] reboot: Power down serialport: VM disconnected.