last executing test programs: 3m8.456477801s ago: executing program 1 (id=247): r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x20, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd7}]}, 0x50}, 0x1, 0x0, 0x0, 0x50000}, 0x0) fcntl$setlease(r0, 0x400, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r3 = geteuid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x40000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}]}}) r5 = syz_open_dev$loop(&(0x7f00000004c0), 0x100000000, 0x4000) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) ioctl$KVM_RUN(r0, 0xae80, 0x0) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'trusted.', '[:{$\x0f:(#m,%\x00'}, &(0x7f0000000580)=""/187, 0xbb) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000680)=0x7fffffff) write$selinux_load(r0, &(0x7f00000006c0)={0xf97cff8c, 0x8, 'SE Linux', "b25ca649d98ad5fdd7c36f86db9f2de182dbaddbdde0b2102205295cba293dceb697eab6c0317ed8328072dc1dcabd09fa25f63ff374702bd7a43f1411c171b9e300cedadeaf"}, 0x56) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', r6, 0x29, 0xe, 0x40, 0xfffffffd, 0x14, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x10, 0x7800, 0x60b085dc, 0xffffffff}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x90, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa0da}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f00000009c0)=[@wrmsr={0x1e, 0x20, {0xa7d, 0x3fffffff8000}}, @rdmsr={0x32, 0x18, {0xa6b}}, @set_irq_handler={0xbe, 0x20, {0xd2, 0x2}}, @rdmsr={0x32, 0x18, {0x98f}}, @cpuid={0x14, 0x18, {0xfff, 0x6000}}, @uexit={0x0, 0x18, 0xfffffffffffffffc}, @wr_drn={0x6e, 0x20, {0x2, 0x7ff}}, @code={0xa, 0x59, {"66baf80cb8ec2ae78eef66bafc0c66ed0f01c8c462e0f3d5652640de20470f01b37b30566ac4234978a00100000004b8010000000f01c1660f3837202e465dc4e1a5eab54b5e0000"}}, @in_dx={0x82, 0x20, {0x462e, 0x2}}, @uexit={0x0, 0x18, 0x25330def}, @uexit={0x0, 0x18}, @wr_drn={0x6e, 0x20, {0x0, 0x8}}, @wr_crn={0x46, 0x20, {0x8, 0x5}}, @wrmsr={0x1e, 0x20, {0x238, 0x3}}], 0x1c9}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000c00)={0x8, 0x0, [{0x885, 0x0, 0x4}, {0xb16, 0x0, 0x8}, {0xb62, 0x0, 0x80000000}, {0x3b7, 0x0, 0x3}, {0x21c, 0x0, 0x4}, {0xb5a, 0x0, 0x5}, {0x9ae, 0x0, 0x400}, {0xc0010114, 0x0, 0x1}]}) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d00), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e40)={'syztnl1\x00', r8, 0x10, 0x700, 0x7, 0x5481, {{0x23, 0x4, 0x3, 0x4, 0x8c, 0x67, 0x0, 0xc, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@cipso={0x86, 0x66, 0x2, [{0x2, 0x3, "c2"}, {0x6, 0x11, "7ebc5d198a534780786c9839a142fb"}, {0x1, 0xc, "e73ae3e17d95a77a6fe1"}, {0x1, 0xf, "095e13d1384524517f453c9ea1"}, {0x5, 0x6, "01dbce50"}, {0x7, 0xa, "4473b8d99b387f3f"}, {0x2, 0x5, "95cfe1"}, {0x257bf7f7fd6322d8, 0xa, "b5512e425276ca6e"}, {0x1, 0x12, "44fdbc3aa814b006ca9c1d0814457df0"}]}, @rr={0x7, 0xf, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x35}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x7c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x7c}}, 0x4081) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000001040), &(0x7f0000001080)={'U-', 0x5}, 0x16, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl1\x00', r11, 0x29, 0x4, 0x5, 0x6, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x8, 0x40, 0xcbe, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'syztnl2\x00', r12, 0x2f, 0x4, 0x5, 0x4, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x700, 0x9, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001280)={0x39c, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x100, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "04cfc11034aca57d214b55597763170a4e517a4f6f19c8539414a1c84d3069b2d7a600bb708cf9a2bf3c00621b643c0059a5a0c7d3f4c56b553248ed7dc5f7fc82d1d43dfddcdff34d0b350b326685cf91868893bf9892bbbdac143be065adfa74734691e3"}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.nlink\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'max_read'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ef}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.nlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xdb2}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000016c0)={{0x5c, @multicast1, 0x4e22, 0x1, 'lblc\x00', 0x8, 0xba8, 0x57}, {@broadcast, 0x4e23, 0x0, 0x4, 0xfffffff4, 0xad4a}}, 0x44) 3m8.435334091s ago: executing program 1 (id=248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r1 = syz_open_dev$evdev(&(0x7f0000001f80), 0x34, 0x181002) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0xff1c) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/106) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x24, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x48) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x7}, @dead_binder_done], 0x26f, 0x0, &(0x7f00000003c0)="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"}) 3m8.346600202s ago: executing program 1 (id=252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x24, 0x3) setreuid(0xee01, 0xee01) lgetxattr(&(0x7f00000041c0)='./cgroup\x00', &(0x7f0000004200)=@known='security.selinux\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000100)) 3m8.315343762s ago: executing program 1 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdir(&(0x7f0000004240)='./file0\x00', 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="3800000040f8030003000040"]) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000080)) 3m8.240761692s ago: executing program 1 (id=255): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000680)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd5000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x28) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysv\x00', 0x12d4042, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getdents64(r3, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="7b42ca628a030c85b26bc1a6b66448f465d87db58397cdfc301b48dba3e8ec249d07738ec2281818031700f85257faf9eb5cbb526646442ef98ac6b82ba3114d900b878154aeeed66ed9714c06bbb7fbdd87502bebdbd66b190644cd8a9354b708847e38460f20f3012cc51de8b47014fd5ad1eec305f6b951293d88dedac494a10b3d18664bb584479f255ef8dcc9225d4678104d1e0089d56736a09417889955ccfb122b24eb228d0ebf9519d932942021c55331e2", 0xb6, 0x240000d1, &(0x7f0000000040)={0xa, 0x4e20, 0xfff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x84) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020029bd7000fcdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff0f000006001100faff0000080001007063690011000200303030303a30303a31302e300000000008000b00010000000600110006000000080001007063690011000200303030303a30303a31302e300000000008000b005c305a1406001100060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000700000006001100030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b002808000006001100ff7f0000"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="28f238e63aca9044745152608bdaf6156fd4faf6a42169ed13207a11465a686d519e188fda6a46a54195add6e5132839535d966edc8a73a667c1864f233122ecc4be95a38e", 0x45}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4c, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x5, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x7, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x7, 0xfffffffe, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x7e, 0x2, 0xcc52, 0x950bfab, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m8.163285103s ago: executing program 1 (id=256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r3, 0x6a9354ab0d020bb7, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x2cc, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xf7ce}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xfffffffc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0x55d}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1004}, {0x8, 0xb, 0x64ba}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2f}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8b13}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x9}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 3m8.133734623s ago: executing program 32 (id=256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r3, 0x6a9354ab0d020bb7, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x2cc, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xf7ce}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xfffffffc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0x55d}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1004}, {0x8, 0xb, 0x64ba}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2f}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8b13}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x9}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 2m5.638188274s ago: executing program 4 (id=1503): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x4080) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "90c8b39103e28dfbc7a8456842d41032"}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f00007aa000/0x2000)=nil, 0x2000, 0x2) r2 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='gid', &(0x7f0000000340)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x05\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\xf5O\xb1\x9f\xc5I\xect<\x8a\x00V\xcc\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\x11&\x1bM_\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k*5\xac\x9a\b}\xfb\xe1\x89)\x1eU\xb4', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 2m5.624456614s ago: executing program 4 (id=1504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d000000000008002200"], 0x148}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m5.569042175s ago: executing program 4 (id=1505): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1673c2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0x10000) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000240)={r2, 0x0, 0x0, 0x10000}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000000002) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000000080)={0x5000, 0x1000}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000000c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) 2m5.556291735s ago: executing program 4 (id=1506): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m5.554459204s ago: executing program 4 (id=1507): socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x4, 0x2, 0xff, 0x0, 0x6}, 0x20) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f00000001c0), 0x4) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x4000) setresuid(r1, r1, 0x0) getgroups(0x7, &(0x7f0000002400)=[0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xee01]) (async) stat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)) (async) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002800)) (async, rerun: 32) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449e, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r2]) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) fstat(r7, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) (async) setgroups(0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000062c0)='./file0\x00', &(0x7f0000006380), 0x4000) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0000000000000000000000000000000ffffffffffffd2809313000000000000ea0000000000000006000000196a00000500000000000000bb04000000000000090000000010000003000000000000000900000000000000070000000000000006000000df000000070000000060000002000000bdaf85852cb8b588aa4995d42bec8f474f4589427ce04a670a3d918d4e8f7607a5bac8d44a78ac7f026d6c44e5d1bad7dcf9c2e14f4fc361a915c04565cadf3b03a2d54ba14aaf67555dbc9c9b8ca3ed57cd884b0109000000ae095a5d4846be8d98a560b27b4dd4c6937dc040e0b07db6849b915143a8a1f2e6fbdeca152c4b8a12645134d13d41da10a2b8b72475fe7be150c40e801b06c1351248f314dfc8f9fb7444a5050629cec9a600000000250dd71ec2b83279f9d05ba66025c1857399d6012580637d4aa5c5f6062897c325be", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="ffffffff26f0000000000000ffffffffffffffff040000000000000005000000030000002e2624235c000000"], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020}, 0x2020) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000004c80)='./file0\x00', &(0x7f0000004cc0), 0x100) 2m5.455228585s ago: executing program 33 (id=1508): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = gettid() wait4(r0, 0x0, 0x20000000, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) getgroups(0x7, &(0x7f0000002400)=[0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xee01]) (async) stat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)) (async) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002800)) (async, rerun: 32) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449e, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r2]) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) fstat(r7, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) (async) setgroups(0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000062c0)='./file0\x00', &(0x7f0000006380), 0x4000) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="ffffffff26f0000000000000ffffffffffffffff040000000000000005000000030000002e2624235c000000"], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020}, 0x2020) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000004c80)='./file0\x00', &(0x7f0000004cc0), 0x100) 1m2.134856791s ago: executing program 3 (id=2651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000076001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) r3 = dup2(r0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2005c054}, 0x8880) 1m2.086185921s ago: executing program 3 (id=2652): clock_nanosleep(0xc, 0x1, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x14, r2, 0x132c5eba3bb8d9cf, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x44080) (async) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x14, r2, 0x132c5eba3bb8d9cf, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x44080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) 1m2.005299322s ago: executing program 3 (id=2653): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x525002, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'freezer'}, {0x2b, 'net'}, {0x0, 'net'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'blkio'}]}, 0x32) r1 = getpgrp(0x0) ptrace$poke(0x4, r1, &(0x7f00000000c0), 0x5) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000140)={@empty, @multicast1}) sched_getattr(r1, &(0x7f0000000180)={0x38}, 0x38, 0x0) setpgid(r1, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x6, 0x8, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x8, 0x10000, 0xffffffff}}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x877e}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xd, 0x2001) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x2, 0x4002) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8ee}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004810}, 0x68805) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8, 0x1) tkill(r1, 0x16) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r5, 0x4, 0xf3, 0x0, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, @private0, 0x7, 0x700, 0x6, 0x2}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000006c0)={@private1, 0x0}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x29c, r8, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040040) wait4(r1, 0x0, 0x8, &(0x7f0000000ac0)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000b80)=""/206) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000d80)=0xe8) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000dc0)={r1, r12, 0xee00}, 0xc) 1m2.004357882s ago: executing program 3 (id=2654): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x202) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) 1m1.968499732s ago: executing program 3 (id=2655): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x20, 0x6, 0x11, {0x11, 0x21, "68907e86eb404492bb8b2608fe22b7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140), 0x8800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}], [{@appraise_type}]}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) capset(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r3, 0xf648e000) ioctl$EVIOCRMFF(r4, 0x80085502, 0x0) setpriority(0x1, 0x0, 0xa4) r5 = dup(r2) r6 = socket(0x840000000002, 0x3, 0xff) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'bridge_slave_0\x00', 0xfc}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000040)={0xe, {0x6, 0x40, 0x8d}}, 0xc) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c616669643d3078303030309dc5303030303030303030382c6b"]) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0xc0}}) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) 1m1.768910903s ago: executing program 3 (id=2656): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x440440, 0x80}, 0x18) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b95e0a00000f3266b8b7000f00d8c42165d5b8358bf65a430f8b0001c0fef080ab000000005764650f79d2430f01dfb9800000c00f3235004000000f30f30f07c4c2c908a13249e4a1", 0x49}], 0x1, 0x1, &(0x7f0000000140)=[@cr0={0x0, 0x140040004}], 0x1) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b8f247e18c66efbafc0cb88126efbaf80c66b8e6bffd8b66efbafc0cb80900ef2e3e0f38099bcebcbaf80c66b88cec848666efbafc0c66b8ff05b67966ef0f01dfba4100b0bfee0f080fc768df20f70d1c70", 0x56}], 0x1, 0x1c, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc53}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, r1, 0x2) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000280)={0xbc, 0x0, 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, &(0x7f0000000300)={0xeeee0000, 0x8000}) splice(r0, &(0x7f0000000340)=0x2, r1, &(0x7f0000000380)=0x1, 0x5, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc4}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x4044845) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f0000000580)={0x13a8, 0x15, 0x20, 0x70bd26, 0x25dfdbfb, {0x11, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "32ee09985acc991c84b385f82e080084477948e19dfc25b94c8cb7909ea00ce98be010f60df35cc2d5"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "65a388c9880628342e8e250c3697f2d3728745808a0e608f0258ab6fb5c342d1de3eecec9f7d58ca2de6a92a60a163783f5cf62eb86481ae60d497cb756d169a5acdc693ed139e65d5919b6b043c7bb4b7c12c03d6e5f34f6ee878dea8df2b40942db1232b10a509b572874b7d49769b07d2d14c320d0b0ea4037ad3bd38a088c39ceb6647d537557fda0bd9256700fdadde50bf5203"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "2884b30af46b4c06be60b3eaeb4d7babfb0282a05854b5190fabb64c8ee2b426b7a66ee84c43949d42bb993d9afdebb2492ce3229539495a8ed9c81b6a447125d05ec4e7276d84550e119bfdcaa5604a28f6ed8cf17cce181a4f126cf9c6fc4a1ac8b7c8c85ba06d1e061e0a8d553c0ad9b190490632bdcbc7ddc022eba18dbcf763847f21a7357e2f9193a10f63b552538c06a4d4d3cb1b3255234eccadb052b8e35fb6f50ea4a576c0d3c977e6138be0d9262610f164c464fc0078f1200b9cc60932589ba2bde0f41aed0d335e88957ca304ecf05c23b3b8db171f9d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "5c2a57cc95012f0339b101f7ee841848bd590518a6db92e36f4d095f4952203012684f2961dc251c57fd18ca1eacd9e088b5e8d6b6f63b86c3d6783e7215d8202f98a46896c9cf009df6d5d351a706cd07ce1c83c488091f9990e323a733bdbf439dc4980443ab48686ed68c4a6600d14eab5df7b8fe2b645973b5609ecc05bc174dcbcf0c5d9263e7b1eabe5734fd89e5854aad2f1d13e609cbad46b88e63df6ce3cb491302df27"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "cfd9291bdd949343ca462f056d5dc224fe894970afab31a392b0f483e78a4e63af498cb2aa5b4b09fb9af03a6aa823e2d0dce4374981ac028c3c57069cb79dbc8cb9beec1081c2b77ad4dddcb7d023c06d4f78bfb64d1102f3d4372f35b5cadfaad7e46c22950fd8a50f5002f9ccf26403e916bf4eec1aef532ba213dce57ec9417280b67b2ef220152b0918e90ba224"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "c6f635f1e6a9497975c3e0500f10b0ffca5d03c57d54599eee5e1e3840ee44ab70258bc7b531ac"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "c7c8e9a5840224678b42be310d7463c7420371"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "8e2d385a73d85274e3beb048d428c19306cbdb47fc4765a540a09f0cd63c0d22fb01419029ca129a0c62e11423c9cfb3c311e110cd14e61f514f1acb2d1fbe5de90130a108a67d232fb7a44583ea9aa4f73405ba3b5060"}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x80}, 0x14048005) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000019c0)={0xd5e, 0x10000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000015b00), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000015bc0)={&(0x7f0000015ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000015b80)={&(0x7f0000015b40)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000) getresuid(&(0x7f0000015cc0), &(0x7f0000015d00), &(0x7f0000015d40)=0x0) mount$binderfs(&(0x7f0000015c00), &(0x7f0000015c40)='./binderfs2\x00', &(0x7f0000015c80), 0x803400, &(0x7f0000015d80)={[{@stats}, {@stats}, {@stats}], [{@fsname={'fsname', 0x3d, 'nl80211\x00'}}, {@fowner_gt={'fowner>', r4}}]}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000016080)={&(0x7f0000015e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000016040)={&(0x7f0000015e40)={0x1f4, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xc4, 0x8, "e6a59cc5f0173285b8f99abbbcb4d91232495001d0c733b0085acf7c954513cfe28c4129fdbe1dc4c2088d4e9a6936d19fc874fd045c66fbfab5e001004beec3d434e585566fee14b9eaf72f3f486b393c8aa96a5d33a34f4677ee2ae857824ac2ae144300708055ac3cee079ee8d5360f2bcd5a104e4397d6975d059d5f685d5ef14ffdb40e7488e76b69ec225cf6d60af135fbef3fea3757348105d5c406ca2dd924c960f3ce3e0948c212823de659b17e768a2a6564d915a75e376b637c71"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x102, 0x8, "f4980b8744b0b7401383f9d23fbbbe41adda48868c6a3df2084219c8406749bc43d21506cc66f3c6bef22492a38b3e638539f914ab9405adfbb555726315e44676b922bcca48b7f5cceffd36ee2dccae913b2e0bf005fdc9912fcd895edff82b02db1cd59dc366ebd082844cef70ee39f9951953c819cf50d0c51139d7660fce6ca61637cecd2631fb55548bd176f6a2a9feed72725985d1c3c8c84c4827a6d1fb73d0dfe1a2f1d9a77def18f509f688a26ad9ef8cd45b83acf62e57df70859bb1d7a379f9a94e14ffb296ccd7643662018448120ac07ccabc7e2e050f51912471f0086b97d8e07c92db8804611e5e200a630cb2dc54b2c4c738d843b7ba"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4010}, 0x20044) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000160c0)=0x2, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000016100), r0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000016180), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000016240)={&(0x7f0000016140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000016200)={&(0x7f00000161c0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000016280)={0xc0, 0x0, 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000016300)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000016940)={&(0x7f0000016340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000016900)={&(0x7f0000016380)={0x568, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x3}}}}, [@NL80211_ATTR_FRAME={0x15a, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @random="7572bbb36bc6", {0x5, 0x4}}, 0x0, 0x4, 0x3, @void, [{0xdd, 0x27, "b01ea8fe54eeb6d4e8b73906b60c5fd68cc1a4b49beb538d28820137e07a395bbe55660c2c326d"}, {0xdd, 0x1d, "6cde788aff91c9402dd0ef87f9ad9aa49d3ccd1057d10f05f66775f371"}, {0xdd, 0xee, "fa4421c36e8ded61752149520fc9ed013531923a7b21b6bfbba4ecf3106ec9bced58430c0d2efa0e526492347cec4206c93d00a15416f3374f26d89fd675e7cee05572b060966efde18f3f5e8d60bac4552eb24abff9de53d53b2acbbc8133b0ad2e2a0eb40895d21bddc72c995ab26f7ad021d1f3c754002f51f8d6405024b6a831b0cad80f242fe7e801b2c9775cca814675a29f44b6ffe7ec3232f1eab87a18cd41092efd28af5289f53dac26460d61888b5c4b3d1ec8c99d67626a4c8467c0f8f5b61913fd15eb5376f8bf76ed254d62cc5e11465bbce0e2ef488155c27bec6508d432bf37f9f6efe75b5b72"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3cc, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @device_b, @device_b, @device_a, {0x1, 0x5}, @broadcast, @value={0x9, 0x0, 0x1, 0x0, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x2}}, @a_msdu=[{@device_b, @broadcast, 0xf5, "d7371c6b1c3d7dfe4071545bd89dae7856ff46e29e37515b47a92d09dde1f7c4d75066af0b169f681fa8fe6ea5f58eae8476381ccb0b1a8e93c8b7613d332597937980d72e22b0b40137238f1e7162fdaa88fe625b8437cb6a5aeceb310106238c3d4a210de1bc5695da2207810d81c06c58efe1eb1a587040d32b0e7abf1f76149cd7a560d7279720a5901279c1bf97143df4e7892f4084317cd9f861614e5097029f6a5788b292fd38ee7dc802066dcc245654abfcec1cfe9884a4fc914b38e072a1c1849d07b55e159cbfc9c43885023662e85a3a7ca003da7362e92baee9a49067e8b6ebcb9f975da91e6ac255ad269f573844"}, {@device_b, @device_a, 0x10, "9e807cca003098839225173cb56022e1"}, {@device_a, @broadcast, 0x52, "9ac123a826a465c9d7229c7c3e65b3a9adb46ebe753953b9402f558ccbf0776acf5839f89ab9bfd503a09e513a39eac7ac4e6a28632b2c39d4d77beb0cc36f6c2e33eaf70cb5541b64b77e3e37c5e335659a"}, {@device_b, @broadcast, 0x39, "d16b06acbfcc9d4bc86f03041c7da9af6d9c81acc48d6cc67becd596a783ba9d6c4e091d6efe3ac28354f291f163043fbb899711f1c6610541"}, {@device_b, @device_b, 0x66, "35cb27da54f62d622ca3d070857d3780035133cfe47d1343ad901d0db90654b957894695b46734cbda8ed3f9b9fa8b6a68df6eaae31417e6a0f90a06e2014f9f9dc552a7bfe361fbcf297bfd28c4d5f8065fa72dd8f0ecf9290730b01e128e088ea0ba9a2d4b"}, {@device_a, @device_b, 0x55, "af8a372a8f73798173aeea0b6cb8d54a09936a2d88da8e1f7000e3d88c668192647ea63fc767be8c1c3c1797226897b7b963ecb91487ea786112e46a41a1e2dfab2de432484ff727f1a5ad3250af70cd93f061066b"}, {@device_a, @device_a, 0xf2, "d11aa428d39a106292adbb9a93b3fed58b2cb3b0d9c9a97f428c46546bcc88bf4fd6bb29ab333262552a704bcec44ec5b8fbe1d1d5d03b6ee81be86b11c99226ef708ace3581e4d2683ec148c5c8914f5ea5be501a4d5ea4d79412bb82a11033f0257a57364a2f9e9ecd255e439a42a39f06f53a60da544ef370cd976210c9b6954204baa7f91abaca9ef73e438627f5932cf05f3af4308aca4dbfc674625de85abfd528da77f20a371dea37e55c399ca6b72be4471aa3e6fac3189c3134fd1e7b63482009779e0f41196d63eac3e95aeda1e6b2ffc96bbd13684bcf2f4f7577e7dbaef4cb8602790e1112596bbf2fe332e7"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {}, @device_a, @broadcast}}]}, 0x568}, 0x1, 0x0, 0x0, 0x40}, 0x40041) 1m1.710788974s ago: executing program 34 (id=2656): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x440440, 0x80}, 0x18) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b95e0a00000f3266b8b7000f00d8c42165d5b8358bf65a430f8b0001c0fef080ab000000005764650f79d2430f01dfb9800000c00f3235004000000f30f30f07c4c2c908a13249e4a1", 0x49}], 0x1, 0x1, &(0x7f0000000140)=[@cr0={0x0, 0x140040004}], 0x1) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b8f247e18c66efbafc0cb88126efbaf80c66b8e6bffd8b66efbafc0cb80900ef2e3e0f38099bcebcbaf80c66b88cec848666efbafc0c66b8ff05b67966ef0f01dfba4100b0bfee0f080fc768df20f70d1c70", 0x56}], 0x1, 0x1c, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc53}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, r1, 0x2) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000280)={0xbc, 0x0, 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, &(0x7f0000000300)={0xeeee0000, 0x8000}) splice(r0, &(0x7f0000000340)=0x2, r1, &(0x7f0000000380)=0x1, 0x5, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc4}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x4044845) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f0000000580)={0x13a8, 0x15, 0x20, 0x70bd26, 0x25dfdbfb, {0x11, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "32ee09985acc991c84b385f82e080084477948e19dfc25b94c8cb7909ea00ce98be010f60df35cc2d5"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "65a388c9880628342e8e250c3697f2d3728745808a0e608f0258ab6fb5c342d1de3eecec9f7d58ca2de6a92a60a163783f5cf62eb86481ae60d497cb756d169a5acdc693ed139e65d5919b6b043c7bb4b7c12c03d6e5f34f6ee878dea8df2b40942db1232b10a509b572874b7d49769b07d2d14c320d0b0ea4037ad3bd38a088c39ceb6647d537557fda0bd9256700fdadde50bf5203"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "2884b30af46b4c06be60b3eaeb4d7babfb0282a05854b5190fabb64c8ee2b426b7a66ee84c43949d42bb993d9afdebb2492ce3229539495a8ed9c81b6a447125d05ec4e7276d84550e119bfdcaa5604a28f6ed8cf17cce181a4f126cf9c6fc4a1ac8b7c8c85ba06d1e061e0a8d553c0ad9b190490632bdcbc7ddc022eba18dbcf763847f21a7357e2f9193a10f63b552538c06a4d4d3cb1b3255234eccadb052b8e35fb6f50ea4a576c0d3c977e6138be0d9262610f164c464fc0078f1200b9cc60932589ba2bde0f41aed0d335e88957ca304ecf05c23b3b8db171f9d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "5c2a57cc95012f0339b101f7ee841848bd590518a6db92e36f4d095f4952203012684f2961dc251c57fd18ca1eacd9e088b5e8d6b6f63b86c3d6783e7215d8202f98a46896c9cf009df6d5d351a706cd07ce1c83c488091f9990e323a733bdbf439dc4980443ab48686ed68c4a6600d14eab5df7b8fe2b645973b5609ecc05bc174dcbcf0c5d9263e7b1eabe5734fd89e5854aad2f1d13e609cbad46b88e63df6ce3cb491302df27"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "cfd9291bdd949343ca462f056d5dc224fe894970afab31a392b0f483e78a4e63af498cb2aa5b4b09fb9af03a6aa823e2d0dce4374981ac028c3c57069cb79dbc8cb9beec1081c2b77ad4dddcb7d023c06d4f78bfb64d1102f3d4372f35b5cadfaad7e46c22950fd8a50f5002f9ccf26403e916bf4eec1aef532ba213dce57ec9417280b67b2ef220152b0918e90ba224"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "c6f635f1e6a9497975c3e0500f10b0ffca5d03c57d54599eee5e1e3840ee44ab70258bc7b531ac"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "c7c8e9a5840224678b42be310d7463c7420371"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "8e2d385a73d85274e3beb048d428c19306cbdb47fc4765a540a09f0cd63c0d22fb01419029ca129a0c62e11423c9cfb3c311e110cd14e61f514f1acb2d1fbe5de90130a108a67d232fb7a44583ea9aa4f73405ba3b5060"}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x80}, 0x14048005) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000019c0)={0xd5e, 0x10000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000015b00), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000015bc0)={&(0x7f0000015ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000015b80)={&(0x7f0000015b40)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000) getresuid(&(0x7f0000015cc0), &(0x7f0000015d00), &(0x7f0000015d40)=0x0) mount$binderfs(&(0x7f0000015c00), &(0x7f0000015c40)='./binderfs2\x00', &(0x7f0000015c80), 0x803400, &(0x7f0000015d80)={[{@stats}, {@stats}, {@stats}], [{@fsname={'fsname', 0x3d, 'nl80211\x00'}}, {@fowner_gt={'fowner>', r4}}]}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000016080)={&(0x7f0000015e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000016040)={&(0x7f0000015e40)={0x1f4, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xc4, 0x8, "e6a59cc5f0173285b8f99abbbcb4d91232495001d0c733b0085acf7c954513cfe28c4129fdbe1dc4c2088d4e9a6936d19fc874fd045c66fbfab5e001004beec3d434e585566fee14b9eaf72f3f486b393c8aa96a5d33a34f4677ee2ae857824ac2ae144300708055ac3cee079ee8d5360f2bcd5a104e4397d6975d059d5f685d5ef14ffdb40e7488e76b69ec225cf6d60af135fbef3fea3757348105d5c406ca2dd924c960f3ce3e0948c212823de659b17e768a2a6564d915a75e376b637c71"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x102, 0x8, "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"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4010}, 0x20044) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000160c0)=0x2, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000016100), r0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000016180), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000016240)={&(0x7f0000016140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000016200)={&(0x7f00000161c0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000016280)={0xc0, 0x0, 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000016300)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000016940)={&(0x7f0000016340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000016900)={&(0x7f0000016380)={0x568, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x3}}}}, [@NL80211_ATTR_FRAME={0x15a, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @random="7572bbb36bc6", {0x5, 0x4}}, 0x0, 0x4, 0x3, @void, [{0xdd, 0x27, "b01ea8fe54eeb6d4e8b73906b60c5fd68cc1a4b49beb538d28820137e07a395bbe55660c2c326d"}, {0xdd, 0x1d, "6cde788aff91c9402dd0ef87f9ad9aa49d3ccd1057d10f05f66775f371"}, {0xdd, 0xee, "fa4421c36e8ded61752149520fc9ed013531923a7b21b6bfbba4ecf3106ec9bced58430c0d2efa0e526492347cec4206c93d00a15416f3374f26d89fd675e7cee05572b060966efde18f3f5e8d60bac4552eb24abff9de53d53b2acbbc8133b0ad2e2a0eb40895d21bddc72c995ab26f7ad021d1f3c754002f51f8d6405024b6a831b0cad80f242fe7e801b2c9775cca814675a29f44b6ffe7ec3232f1eab87a18cd41092efd28af5289f53dac26460d61888b5c4b3d1ec8c99d67626a4c8467c0f8f5b61913fd15eb5376f8bf76ed254d62cc5e11465bbce0e2ef488155c27bec6508d432bf37f9f6efe75b5b72"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3cc, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @device_b, @device_b, @device_a, {0x1, 0x5}, @broadcast, @value={0x9, 0x0, 0x1, 0x0, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x2}}, @a_msdu=[{@device_b, @broadcast, 0xf5, "d7371c6b1c3d7dfe4071545bd89dae7856ff46e29e37515b47a92d09dde1f7c4d75066af0b169f681fa8fe6ea5f58eae8476381ccb0b1a8e93c8b7613d332597937980d72e22b0b40137238f1e7162fdaa88fe625b8437cb6a5aeceb310106238c3d4a210de1bc5695da2207810d81c06c58efe1eb1a587040d32b0e7abf1f76149cd7a560d7279720a5901279c1bf97143df4e7892f4084317cd9f861614e5097029f6a5788b292fd38ee7dc802066dcc245654abfcec1cfe9884a4fc914b38e072a1c1849d07b55e159cbfc9c43885023662e85a3a7ca003da7362e92baee9a49067e8b6ebcb9f975da91e6ac255ad269f573844"}, {@device_b, @device_a, 0x10, "9e807cca003098839225173cb56022e1"}, {@device_a, @broadcast, 0x52, "9ac123a826a465c9d7229c7c3e65b3a9adb46ebe753953b9402f558ccbf0776acf5839f89ab9bfd503a09e513a39eac7ac4e6a28632b2c39d4d77beb0cc36f6c2e33eaf70cb5541b64b77e3e37c5e335659a"}, {@device_b, @broadcast, 0x39, "d16b06acbfcc9d4bc86f03041c7da9af6d9c81acc48d6cc67becd596a783ba9d6c4e091d6efe3ac28354f291f163043fbb899711f1c6610541"}, {@device_b, @device_b, 0x66, "35cb27da54f62d622ca3d070857d3780035133cfe47d1343ad901d0db90654b957894695b46734cbda8ed3f9b9fa8b6a68df6eaae31417e6a0f90a06e2014f9f9dc552a7bfe361fbcf297bfd28c4d5f8065fa72dd8f0ecf9290730b01e128e088ea0ba9a2d4b"}, {@device_a, @device_b, 0x55, "af8a372a8f73798173aeea0b6cb8d54a09936a2d88da8e1f7000e3d88c668192647ea63fc767be8c1c3c1797226897b7b963ecb91487ea786112e46a41a1e2dfab2de432484ff727f1a5ad3250af70cd93f061066b"}, {@device_a, @device_a, 0xf2, "d11aa428d39a106292adbb9a93b3fed58b2cb3b0d9c9a97f428c46546bcc88bf4fd6bb29ab333262552a704bcec44ec5b8fbe1d1d5d03b6ee81be86b11c99226ef708ace3581e4d2683ec148c5c8914f5ea5be501a4d5ea4d79412bb82a11033f0257a57364a2f9e9ecd255e439a42a39f06f53a60da544ef370cd976210c9b6954204baa7f91abaca9ef73e438627f5932cf05f3af4308aca4dbfc674625de85abfd528da77f20a371dea37e55c399ca6b72be4471aa3e6fac3189c3134fd1e7b63482009779e0f41196d63eac3e95aeda1e6b2ffc96bbd13684bcf2f4f7577e7dbaef4cb8602790e1112596bbf2fe332e7"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {}, @device_a, @broadcast}}]}, 0x568}, 0x1, 0x0, 0x0, 0x40}, 0x40041) 22.444966944s ago: executing program 5 (id=3488): mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000440)={0x54e, 0x2, 0x10, 0xe, 0x2000000, 0x2}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 22.429801514s ago: executing program 5 (id=3489): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x6, 0x17) (async) ptrace$setopts(0x4200, r0, 0x6, 0x17) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 22.380004075s ago: executing program 5 (id=3490): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000018c0)=""/202, 0xca}, {&(0x7f0000001a80)=""/256, 0x100}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000180)=""/170, 0xaa}], 0x9}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a40)=@getsa={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbff, {@in6=@remote, 0x4d6, 0xa, 0x6c}}, 0x28}}, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x6e, 0x80800) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) 22.376339895s ago: executing program 5 (id=3491): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x800) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffffffffffffd85) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xbd2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x174) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x0, 'hiY'}, 0x6) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf3d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47d8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']:!*\':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '})\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x88, 0x4, "6cda2297858b44cd3b8a8206fbc6de351ef6d32be608e7af959523d3fd7b175bb75eb5707f5bb4bc3ea17b755219e7d45cc45dbefe7b7758a5ac04b6e933c99870d0a2c612a3877ecf010b9e4aa5c25b6fe0148a979ff2a52c7c1c88accec6834f4c3723f275afb1019a60af05c8bde4491930cdbfdbe31aa55f24b9642897aef65bca59"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x76c8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffa90}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x91}, 0x2000c000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000380)={0x73, @loopback, 0x4e22, 0x0, 'rr\x00', 0x25, 0xfffffefb, 0x5d}, 0x2c) socket$packet(0x11, 0x3, 0x300) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x25a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x13c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff1f8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2daa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair(0x18, 0x3, 0x9, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8000}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x10}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x48ba}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x75}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x2}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x400102, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe, 0x48}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x20040004) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x20002, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000980)={0x1000, 0x2102}) ioctl$BLKCRYPTOPREPAREKEY(r5, 0xc040128b, &(0x7f0000000a80)={&(0x7f00000009c0)="1e9415c3a89856bca3feef7d56a837fafefa070b822d8e1471ff53a4476160aff34233208a0c8df471420968a3bac5868c145cbca7dfcec9e09ff237539690750f6a7f548447063c1aad8b345a700821876e26819e53653ac1cbb45b101d829a1aa11b131cb7482aef85", 0x6a, &(0x7f0000000a40)=""/21, 0x15}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = openat$cgroup(r10, &(0x7f0000000ac0)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000000b00), 0x2, 0x0) 22.361606375s ago: executing program 5 (id=3492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000bc0)={0x18, 0x0, @ioapic={0x33325000, 0xb, 0xa, 0xfffffffc, 0x0, [{0xc, 0x6, 0x7, '\x00', 0xb5}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0xf8}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0x8, '\x00', 0xff}, {0x5, 0x7, 0x6, '\x00', 0x4}, {0x2, 0xd, 0x15, '\x00', 0x5}, {0x6, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x19, '\x00', 0x5}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0xfe, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa}]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x4005000, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = dup2(r5, r3) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x3, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 22.317105345s ago: executing program 5 (id=3493): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44, 0x100) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2) prctl$PR_SET_FP_MODE(0x2d, 0x2) write$ppp(r0, &(0x7f0000003700)="aaf5", 0xfffffe30) ioctl$FITHAW(r0, 0xc0045878) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xc}) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="34edbd45e826439f3a6dd3744a29b3f3f8bb6f6f01fec690a8f96349694a10befde275be994c20f978ecb3eb74c46eef28dc2e117d9520f36aaf865caa67e1b0374635b0a322b1e47b65441ace1cefdb2ee5f7d6c00a0aa7e356de96a0c44f6e427b6d621a0ab8975e8187c442ed70ffcf75d5e2b33ba9b1db09a9349c0fed", 0x7f, r4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 9.653300486s ago: executing program 0 (id=3531): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152", 0xc8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006600"], 0x1c}}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 9.653026146s ago: executing program 2 (id=3532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c) r3 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) mknodat$loop(r4, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef0ed07200000000000109022400010000c00009044000020300020009210000000122050009058103000000fc00"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a000a00"], 0x28}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x49}]}) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0006000000000e0000381f9bda"], 0x0}, 0x0) ptrace$cont(0x9, r1, 0xffffffffffffff7f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0}) 9.651717036s ago: executing program 6 (id=3534): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250a00000018000180140002006e723000"/38], 0x2c}}, 0x240448c0) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250a00000018000180140002006e723000"/38], 0x2c}}, 0x240448c0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000200)=""/4, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 7.897144126s ago: executing program 0 (id=3535): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=@report={0x4c, 0x20, 0x800, 0x70bd25, 0x25dfdbfe, {0xff, {@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x7, 0x4e22, 0x3ff, 0xa, 0x20, 0x20, 0x11}}}, 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x20004044) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x800, 0x5, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051016e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407eb12bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x1]}) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x100) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f00000001c0)=0xc3) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) 7.896964956s ago: executing program 2 (id=3536): openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x3, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x21], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 7.896766326s ago: executing program 6 (id=3537): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0xf}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x2) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x7) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 6.118067276s ago: executing program 0 (id=3538): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='\xa2\xd6\x05W\xfe\xf7)\x82\xff\xff\xff\x7f@\xed\x83dM\xc5\x9b\xa0\xcc\xb3\x86!&\x04\x0f\xa6v\xb71y)\xafe\xef \xe0\x8b\xd9\x99|\x90\x95KC\xd0\xa2>|^\xe8Vb\x97Y\xd2k\xff\xd8}\x13\x14\xdb\xc8\xb0\xd23\xfb-\xd7 p\xd5ft\x97j\xa3M\xf1\xf5\xe89\x1cZ^\x8e\x83\xb8^\xc3\xb9\x1c\xe2=U\xcb\xbb\x13J\re\x85g\xe7\xea\xc0u\x8d\xcc(B\xc3\xa33\xc0\xe89\xa4\x9f\x95\x80\'\xcd\x11Z\xf1y\xfb\xa8\xfe#D\xa6 O\xba') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 6.115374556s ago: executing program 2 (id=3539): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe58, 0x4a}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xfb, 0x1}, {0x7, 0x6}, {0x6, 0x6}, {0x8, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0xeb, 0x7}, {0xff, 0x7}, {0xf1, 0x4}], "541941b0eff0afe1"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6}, {0x8, 0x7}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x81, 0x7}, {0x44, 0x3}, {0x1}, {0x8, 0x5}, {0x0, 0x4}, {0xdd, 0x5}], "14fa693c8cfbbd5a"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x8, 0x3}, {0xf1, 0x1}, {0x3}, {0x4, 0x2}, {0x8c}, {0xff}, {0x7, 0x7}, {0x6, 0x4}, {0xff, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x8b, 0x2}, {0x81, 0x4}, {0x13}], "930c732c7794c339"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x4, 0x5}], "e3f72732aaa760e1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x7}, {0x6}, {0x81, 0x4}, {0x5, 0x5}, {0x3, 0x7}, {0x8, 0x4}, {0x5, 0x6}, {0x9, 0x2}, {0x0, 0x1}, {0x8, 0x5}, {0x8}, {0x1, 0x2}, {0x3, 0x3}, {}, {0x6, 0x3}, {0x1}], "35b53d9c07a12dd5"}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x128a, 0xfffffffffffffffd}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 6.115086616s ago: executing program 6 (id=3540): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0xa8083) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) setsockopt(r3, 0x0, 0x4, &(0x7f0000000080)="d69012773a47c11765a02651cc7105b65e13c8ef3749e75a7603d45ae2b9fae33107f0be6cf5adfef007", 0x2a) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d66737219ae941acd7964dee487605878bd17c04fb7fdefd60a36a46e7a4737a59e503eb80e61dd53ee234c3293b7f2f2f340dadabadd7c6823cb23bf627f76537121a901ab98719f7db261e4037eec34de90c93e218741a9a0259e025bec703000000fe47f1817eb458d41a529998503cfbe207a080c37b5884c0405c90d838f78998d3c5a1015cf4f8df0bc75adf356a10911740ec941581c5f85794a7f710", @ANYRES16=0x0, @ANYBLOB="000125bd7000fadbdf2501000000080001000200000008000100030000000800010002000000080001000300000008000100030000000800010000000000080001000000000008000100030000000800020002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 4.186242817s ago: executing program 0 (id=3541): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 4.185320857s ago: executing program 2 (id=3542): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 4.184837527s ago: executing program 6 (id=3543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x8, 0x4) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x7f, 0x100000000, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac141428000000003300000000000000000000000000000000004200"/57], 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) waitid(0x0, 0x0, &(0x7f0000000280), 0x4, 0x0) keyctl$link(0x8, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x62, 0x0, 0x33, 0x39, 0x33, 0x61, 0x64, 0x36, 0x38, 0x39, 0x66, 0x63, 0x62, 0x39, 0x36]}, &(0x7f0000000140)={0x0, "3db5e29b3098b153bb4d37597f71c804248afbe0028828bade2bd0d668d0ed6adcd58c05915af30997e3d2417346aa07c0bc411be415c812a79bde57e8ba58c2", 0x25}, 0x48, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r1, 0x2, 0x870, 0x7}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) r8 = socket$igmp(0x2, 0x3, 0x2) listen(r8, 0x6) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x1f4) 2.100910158s ago: executing program 0 (id=3544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55", 0x38}) (async) r2 = getpgid(0x0) (async) r3 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) (async, rerun: 32) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) (async) syz_clone3(&(0x7f0000000280)={0x20004000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x22}, &(0x7f0000000100)=""/52, 0x34, &(0x7f0000000180)=""/44, &(0x7f0000000240)=[r1, r2, r3, 0xffffffffffffffff, r4], 0x5, {r6}}, 0x58) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 2.099874448s ago: executing program 2 (id=3545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) write$selinux_context(r1, &(0x7f0000000240)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a) (async) write$selinux_context(r1, &(0x7f0000000240)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2777fd2b9d4030109029b0001000020000904c4e301fffd0180090582"], 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074) (async) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000009004d564b"]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x180400) (async) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x180400) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r7, 0x40, 0x1d97, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x4, 0x0, [{0xc0000001, 0x8d, 0x3, 0x5, 0x0, 0x9, 0x2981}, {0x6, 0x5, 0x4, 0x4, 0xd9c, 0x7e, 0x579}, {0xb, 0x8, 0x0, 0x800000, 0xfff, 0x3, 0x1}, {0xb, 0x3, 0x4, 0x8000, 0x0, 0x9, 0x200}]}) (async) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000280)={0x4, 0x0, [{0xc0000001, 0x8d, 0x3, 0x5, 0x0, 0x9, 0x2981}, {0x6, 0x5, 0x4, 0x4, 0xd9c, 0x7e, 0x579}, {0xb, 0x8, 0x0, 0x800000, 0xfff, 0x3, 0x1}, {0xb, 0x3, 0x4, 0x8000, 0x0, 0x9, 0x200}]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.099669708s ago: executing program 6 (id=3546): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x10402, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080008000d000000", 0x24) r3 = gettid() fcntl$lock(r1, 0x6, &(0x7f0000000100)={0x2, 0x4, 0x72, 0x9e0e, r3}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 1.24129ms ago: executing program 0 (id=3547): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x1002000, 0x0) write(r0, &(0x7f0000000140)="202657f71a16dbd65b68e609a12fe9005711b4b5c3556e7e2bd43e7366eb0af8f2ecea239c60852758d9ec329488cfceb4a396bd8eba187af3c9db9ce70d527ec41569e62d46a3c454593b6ef8b622582dc602ac838e686cd4f0cf1a9fadc98c9ab3c9ed2e9bf68eb4d1c40aacbfc88fadc524bb9bd1328febaac0cce2f9ab95fd7c356bae83bb4bc2e0dc86f7b81135d6f3a6d77727e75a76bd30670aa53da8b392d6d6af8121ae6857eb6aaccb74f64ecd92c0bd505893084195c1d1ef592981d77d6367b39b09e0b6040d33335030a356bc29d5", 0xd5) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7ff) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x3000008, 0x10010, r1, 0x6604f000) 665.04µs ago: executing program 2 (id=3548): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1220926, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000800008000000000050000000539"]) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0)={0x7, 0x0, 0x8, 0x3fb, 0xd5a}, 0x14) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 0s ago: executing program 6 (id=3549): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, 0x0, &(0x7f0000000000)=0x64) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0xb, &(0x7f0000000040)="ac4dd27172f0bd397f450d", 0xdc, 0x0, &(0x7f0000000200)="9f25e2f6753985fc23aab6559928fb625481e25fbe7aef7972447224df7d99c95d9503e35fab668544cd3cd1503ea5f53b416fb47f6be50ad56fda96fa4b4f2c7f8619f9c9c06d11d8dae7030c21ddd719d96f03ddb292325bf1a97df6d0328674598790c36217c3414abae48b9c00290a15b81e5ed472d5ca844349751b48019f023ce8914c8efa866392be6f44b510124aad79774f626f5cec84475b3489c49ee99fa5763b30e8efbd1f1db47a655a39e3d3ccae995c992d32f4573410fa896e77896f49e9d17ad21851f97f1765c9ca1b7b8f8ba2e0baf58dfe6f"}) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) kernel console output (not intermixed with test programs): _t tclass=vsock_socket permissive=1 [ 74.332147][ T2720] bridge0: entered allmulticast mode [ 74.404581][ T2745] netlink: 'syz.4.780': attribute type 30 has an invalid length. [ 74.423906][ T2745] netlink: 176 bytes leftover after parsing attributes in process `syz.4.780'. [ 74.445178][ T2751] overlayfs: failed to clone upperpath [ 74.488204][ T2757] overlayfs: failed to clone upperpath [ 74.501894][ T2757] overlay: ./bus is not a directory [ 74.574493][ T2777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'. [ 74.600353][ T2777] veth0: entered promiscuous mode [ 74.606491][ T2772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'. [ 74.619026][ T2774] veth0: left promiscuous mode [ 74.651928][ T2799] overlayfs: failed to resolve './bus': -2 [ 74.686052][ T2811] tipc: Can't bind to reserved service type 0 [ 74.707910][ T2815] 9pnet_fd: p9_fd_create_unix (2815): problem connecting socket: ./file0: -111 [ 74.781470][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.790213][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.800400][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.808524][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.817628][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.825944][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.832861][ T2837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 74.842823][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.851775][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.859959][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.868204][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.876414][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.885160][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.893249][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.901367][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.909698][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.917790][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.925915][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.934146][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.942504][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.950635][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.958674][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.966768][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.974908][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.983500][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 74.991891][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.000188][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.008284][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.016437][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.024544][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.032843][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.041250][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.050055][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.060544][ T2832] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 75.215146][ T2894] netlink: 9 bytes leftover after parsing attributes in process `syz.0.824'. [ 75.224671][ T2894] netlink: 5 bytes leftover after parsing attributes in process `syz.0.824'. [ 75.233773][ T2894] 0{X: renamed from gretap0 [ 75.240152][ T2894] 0{X: left promiscuous mode [ 75.245254][ T2894] 0{X: entered allmulticast mode [ 75.251535][ T2894] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 75.709641][ T2911] overlayfs: failed to clone upperpath [ 75.717367][ T2911] 9pnet_fd: Insufficient options for proto=fd [ 76.165808][ T2942] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 76.186013][ T2951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 76.228274][ T2965] veth0_to_team: entered promiscuous mode [ 76.234169][ T2965] veth0_to_team: entered allmulticast mode [ 76.905263][ T3017] netlink: 196 bytes leftover after parsing attributes in process `syz.3.866'. [ 76.985292][ T3028] fuse: Bad value for 'fd' [ 77.833502][ T3046] No source specified [ 77.905535][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 77.905653][ T36] audit: type=1400 audit(1761749836.319:640): avc: denied { ioctl } for pid=3048 comm="syz.3.878" path="socket:[16359]" dev="sockfs" ino=16359 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.948817][ T3052] 9pnet_fd: Insufficient options for proto=fd [ 78.505900][ T3064] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 78.514225][ T3064] overlayfs: missing 'lowerdir' [ 78.682133][ T3088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.682167][ T3088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 78.685245][ T3090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 78.714174][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.714194][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.720751][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.727497][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.734512][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.741182][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.747681][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.754182][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.760895][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.767391][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.773967][ T3093] rust_binder: Error in use_page_slow: ESRCH [ 78.774167][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.780459][ T3093] rust_binder: use_range failure ESRCH [ 78.789751][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.792974][ T3093] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 78.798779][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.804815][ T3093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.813012][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.819163][ T3093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:240 [ 78.828829][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.844096][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.850654][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.857179][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.863698][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.870234][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.876744][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.883254][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.889711][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.896160][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.902629][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.909143][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.915596][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.922330][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.928772][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.935217][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.941672][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.948090][ T3094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.081600][ T3119] rust_binder: Error in use_page_slow: ESRCH [ 79.088088][ T3119] rust_binder: use_range failure ESRCH [ 79.094300][ T3119] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 79.100085][ T3119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.108172][ T3119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:256 [ 79.173258][ T3116] mmap: syz.3.902 (3116) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.798562][ T3151] 9pnet_fd: Insufficient options for proto=fd [ 79.894731][ T3158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 80.179681][ T36] audit: type=1400 audit(1761749838.599:641): avc: denied { mount } for pid=3162 comm="syz.3.918" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.259563][ T495] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 80.411496][ T495] usb 5-1: Using ep0 maxpacket: 16 [ 80.417957][ T495] usb 5-1: config 8 has an invalid interface number: 108 but max is 1 [ 80.425801][ T3189] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 80.426422][ T495] usb 5-1: config 8 has an invalid interface number: 40 but max is 1 [ 80.443980][ T36] audit: type=1400 audit(1761749838.849:642): avc: denied { relabelto } for pid=3188 comm="syz.0.925" name="file0" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 80.477171][ T495] usb 5-1: config 8 has no interface number 0 [ 80.483620][ T495] usb 5-1: config 8 has no interface number 1 [ 80.489894][ T36] audit: type=1400 audit(1761749838.849:643): avc: denied { associate } for pid=3188 comm="syz.0.925" name="file0" dev="tmpfs" ino=1340 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 80.517057][ T495] usb 5-1: config 8 interface 40 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 80.528205][ T495] usb 5-1: config 8 interface 40 altsetting 6 bulk endpoint 0xF has invalid maxpacket 1024 [ 80.538558][ T495] usb 5-1: config 8 interface 40 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 80.549454][ T36] audit: type=1400 audit(1761749838.849:644): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 80.576890][ T495] usb 5-1: config 8 interface 40 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 80.587843][ T495] usb 5-1: config 8 interface 40 has no altsetting 0 [ 80.594940][ T3206] cgroup2: Unknown parameter 'obj_user' [ 80.601648][ T495] usb 5-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=6e.97 [ 80.615666][ T495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.623960][ T495] usb 5-1: Product: syz [ 80.628245][ T495] usb 5-1: Manufacturer: syz [ 80.633881][ T495] usb 5-1: SerialNumber: syz [ 80.641023][ T3212] overlayfs: missing 'lowerdir' [ 80.655829][ T36] audit: type=1400 audit(1761749839.069:645): avc: denied { remount } for pid=3209 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 80.848231][ T3160] netlink: 'syz.4.917': attribute type 6 has an invalid length. [ 80.858686][ T3160] rust_binder: Error in use_page_slow: ESRCH [ 80.858711][ T3160] rust_binder: use_range failure ESRCH [ 80.864841][ T3160] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 80.870437][ T3160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 80.878442][ T3160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:263 [ 80.889158][ T495] usb 5-1: bad CDC descriptors [ 80.907027][ T495] usb 5-1: USB disconnect, device number 16 [ 81.301832][ T3243] overlayfs: failed to resolve './file0': -2 [ 81.369188][ T36] audit: type=1400 audit(1761749839.779:646): avc: denied { execute } for pid=3253 comm="syz.3.950" path="/dev/rnullb0" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.532267][ T36] audit: type=1400 audit(1761749839.949:647): avc: denied { setopt } for pid=3289 comm="syz.3.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.570020][ T3297] overlay: ./file0 is not a directory [ 81.849485][ T436] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 82.001480][ T436] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 82.012301][ T436] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 82.014468][ T36] audit: type=1400 audit(1761749840.429:648): avc: denied { mounton } for pid=3316 comm="syz.3.967" path="/258/file0" dev="tmpfs" ino=1424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.022427][ T436] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 82.056847][ T436] usb 5-1: string descriptor 0 read error: -22 [ 82.063111][ T436] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.072201][ T436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.081130][ T3306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.988674][ T36] audit: type=1400 audit(1761749841.399:649): avc: denied { mounton } for pid=3375 comm="syz.2.986" path="/292/file0" dev="tmpfs" ino=1636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 83.011799][ T36] audit: type=1400 audit(1761749841.409:650): avc: denied { execute_no_trans } for pid=3375 comm="syz.2.986" path="/292/file1" dev="tmpfs" ino=1637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.288986][ T36] audit: type=1400 audit(1761749841.698:651): avc: denied { write } for pid=3399 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.764162][ T3428] 9pnet_fd: Insufficient options for proto=fd [ 84.219577][ T3444] 9pnet_fd: Insufficient options for proto=fd [ 84.219580][ T3445] 9pnet_fd: Insufficient options for proto=fd [ 84.249427][ T36] audit: type=1326 audit(1761749842.658:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3451 comm="syz.3.1011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e678efc9 code=0x0 [ 84.280713][ T36] audit: type=1326 audit(1761749842.698:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3455 comm="syz.0.1012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff02df8efc9 code=0x0 [ 84.366221][ T36] audit: type=1400 audit(1761749842.778:654): avc: denied { setattr } for pid=3464 comm="syz.0.1015" name="PACKET" dev="sockfs" ino=17907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.553712][ T3484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'. [ 84.575199][ T436] cdc_ncm 5-1:1.0: bind() failure [ 84.591810][ T436] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 84.600859][ T436] cdc_ncm 5-1:1.1: bind() failure [ 84.613115][ T436] usb 5-1: USB disconnect, device number 17 [ 84.683043][ T3486] capability: warning: `syz.4.1022' uses 32-bit capabilities (legacy support in use) [ 84.715211][ T36] audit: type=1400 audit(1761749843.128:655): avc: denied { accept } for pid=3485 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.776948][ T36] audit: type=1400 audit(1761749843.188:656): avc: denied { create } for pid=3490 comm="syz.4.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 84.851996][ T3495] rust_binder: Write failure EINVAL in pid:291 [ 84.855485][ T3495] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.866139][ T3495] rust_binder: Read failure Err(EFAULT) in pid:291 [ 85.141465][ T36] audit: type=1400 audit(1761749843.558:657): avc: denied { map } for pid=3514 comm="syz.3.1032" path="pipe:[17218]" dev="pipefs" ino=17218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 85.179083][ T36] audit: type=1400 audit(1761749843.588:658): avc: denied { execute } for pid=3514 comm="syz.3.1032" path="pipe:[17218]" dev="pipefs" ino=17218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 85.264036][ T3530] netlink: 'syz.4.1037': attribute type 10 has an invalid length. [ 85.267530][ T3527] 9pnet_fd: Insufficient options for proto=fd [ 85.272036][ T3530] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1037'. [ 85.287615][ T3530] bridge_slave_1: left promiscuous mode [ 85.293545][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.332083][ T3541] 9pnet_fd: Insufficient options for proto=fd [ 85.414430][ T3546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 85.441324][ T3548] vlan1: entered promiscuous mode [ 85.455638][ T3548] vlan1: entered allmulticast mode [ 85.460787][ T3548] veth0_vlan: entered allmulticast mode [ 85.792090][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 86.559463][ T495] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 86.710489][ T495] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 86.718697][ T495] usb 5-1: config 0 has no interface number 0 [ 86.724864][ T495] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.735896][ T495] usb 5-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.749500][ T495] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 86.758536][ T495] usb 5-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 86.766665][ T495] usb 5-1: Manufacturer: syz [ 86.771858][ T495] usb 5-1: config 0 descriptor?? [ 87.171521][ T3629] overlayfs: failed to clone upperpath [ 87.387738][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.396649][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.405278][ T3595] rust_binder: Write failure EFAULT in pid:313 [ 87.461119][ T495] usbhid 5-1:0.20: can't add hid device: -71 [ 87.473418][ T495] usbhid 5-1:0.20: probe with driver usbhid failed with error -71 [ 87.482244][ T495] usb 5-1: USB disconnect, device number 18 [ 87.853170][ T3659] overlayfs: failed to clone upperpath [ 87.875410][ T3664] 9pnet: Unknown protocol version  [ 87.924441][ T3675] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1090'. [ 87.933573][ T3675] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1090'. [ 88.063269][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.069770][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 88.069787][ T36] audit: type=1400 audit(1761749846.488:661): avc: denied { listen } for pid=3702 comm="syz.0.1099" path=2F3239302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.086232][ T3705] tipc: Enabling of bearer rejected, failed to enable media [ 88.874192][ T3737] fuse: Bad value for 'fd' [ 88.885711][ T3737] fuse: Unknown parameter '$C' [ 88.929431][ T36] audit: type=1400 audit(1761749847.318:662): avc: denied { nlmsg_tty_audit } for pid=3741 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 89.036361][ T3748] overlayfs: failed to clone lowerpath [ 89.042539][ T3748] overlayfs: failed to clone lowerpath [ 89.384148][ T3759] veth0: entered promiscuous mode [ 89.389520][ T3759] veth0: left promiscuous mode [ 89.654268][ T3774] batadv_slave_1: entered promiscuous mode [ 89.660634][ T3774] batadv_slave_1: left promiscuous mode [ 90.119465][ T964] Bluetooth: hci0: command 0x1003 tx timeout [ 90.125522][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.217066][ T3826] netlink: 'syz.2.1143': attribute type 4 has an invalid length. [ 90.648802][ T3857] /dev/rnullb0: Can't open blockdev [ 91.151306][ T3896] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 91.158609][ T3896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:334 [ 91.237710][ T36] audit: type=1400 audit(1761749849.648:663): avc: denied { shutdown } for pid=3899 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.281669][ T3909] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1173'. [ 91.838029][ T36] audit: type=1326 audit(1761749850.248:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.1186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0ea38efc9 code=0x0 [ 92.250556][ T36] audit: type=1400 audit(1761749850.668:665): avc: denied { connect } for pid=3969 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.250840][ T3970] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 92.303473][ T3977] netlink: 'syz.4.1194': attribute type 27 has an invalid length. [ 92.380911][ T3985] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1073741825 [ 92.445771][ T3988] overlayfs: missing 'lowerdir' [ 92.446635][ T3989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.478878][ T36] audit: type=1400 audit(1761749850.888:666): avc: denied { associate } for pid=3995 comm="syz.0.1202" name="memory.events" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 92.547154][ T4000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1204'. [ 92.557082][ T4000] fuse: Bad value for 'group_id' [ 92.562277][ T4000] fuse: Bad value for 'group_id' [ 92.682550][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 92.706009][ T4032] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1213'. [ 92.800657][ T36] audit: type=1400 audit(1761749851.218:667): avc: denied { bind } for pid=4038 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.069462][ T495] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 94.126194][ T4096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pid=4096 comm=syz.3.1237 [ 94.229454][ T495] usb 5-1: Using ep0 maxpacket: 32 [ 94.235961][ T495] usb 5-1: config index 0 descriptor too short (expected 2304, got 36) [ 94.244493][ T495] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 94.253429][ T495] usb 5-1: can't read configurations, error -22 [ 94.395216][ T495] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 94.408514][ T4118] netlink: 'syz.3.1245': attribute type 46 has an invalid length. [ 94.417004][ T36] audit: type=1326 audit(1761749852.828:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.3.1245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e678efc9 code=0x0 [ 94.549459][ T495] usb 5-1: Using ep0 maxpacket: 32 [ 94.555818][ T495] usb 5-1: config index 0 descriptor too short (expected 2304, got 36) [ 94.564150][ T495] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 94.572602][ T495] usb 5-1: can't read configurations, error -22 [ 94.578940][ T495] usb usb5-port1: attempt power cycle [ 94.674038][ T4125] futex_wake_op: syz.0.1248 tries to shift op by -1; fix this program [ 94.919579][ T495] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 94.939877][ T495] usb 5-1: Using ep0 maxpacket: 32 [ 94.946405][ T495] usb 5-1: config index 0 descriptor too short (expected 2304, got 36) [ 94.954789][ T495] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 94.963258][ T495] usb 5-1: can't read configurations, error -22 [ 95.099451][ T495] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 95.119822][ T495] usb 5-1: Using ep0 maxpacket: 32 [ 95.125905][ T495] usb 5-1: config index 0 descriptor too short (expected 2304, got 36) [ 95.134243][ T495] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 95.142713][ T495] usb 5-1: can't read configurations, error -22 [ 95.149126][ T495] usb usb5-port1: unable to enumerate USB device [ 95.717849][ T36] audit: type=1400 audit(1761749854.128:669): avc: denied { create } for pid=4174 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.180116][ T4197] netlink: 'syz.3.1276': attribute type 4 has an invalid length. [ 96.190089][ T4197] netlink: 'syz.3.1276': attribute type 4 has an invalid length. [ 96.236681][ T4199] overlayfs: failed to clone upperpath [ 96.294756][ T36] audit: type=1400 audit(1761749854.708:670): avc: denied { setattr } for pid=4213 comm="syz.3.1281" name="TIPC" dev="sockfs" ino=20514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.920033][ T4265] fuse: Bad value for 'fd' [ 97.024077][ T4293] binder: Bad value for 'stats' [ 97.038426][ T4295] rust_binder: Error while translating object. [ 97.038466][ T4295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.044702][ T4295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 97.086578][ T4301] rust_binder: Write failure EFAULT in pid:425 [ 97.108902][ T36] audit: type=1400 audit(1761749855.518:671): avc: denied { read } for pid=4302 comm="syz.4.1315" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.109614][ T4303] rust_binder: Error while translating object. [ 97.135920][ T4303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.142120][ T4303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 97.489494][ T495] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 97.650713][ T495] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 97.659896][ T495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.668859][ T495] usb 5-1: config 0 descriptor?? [ 97.697954][ T4315] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1321'. [ 97.707237][ T4315] gretap0: entered promiscuous mode [ 97.741590][ T4323] overlayfs: failed to clone upperpath [ 97.760420][ T4326] overlayfs: failed to clone lowerpath [ 98.606478][ T36] audit: type=1400 audit(1761749857.017:672): avc: denied { watch watch_reads } for pid=4370 comm="syz.0.1341" path="/376/file0" dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.647126][ T4377] 9pnet_fd: Insufficient options for proto=fd [ 98.698753][ T36] audit: type=1400 audit(1761749857.111:673): avc: denied { execute } for pid=4387 comm="syz.3.1348" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.730570][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 98.796161][ T36] audit: type=1400 audit(1761749857.196:674): avc: denied { bind } for pid=4391 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.981039][ T4411] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 99.544542][ T495] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 99.554679][ T495] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 99.564908][ T495] asix 5-1:0.0: probe with driver asix failed with error -71 [ 99.581475][ T495] usb 5-1: USB disconnect, device number 23 [ 99.856747][ T4454] netlink: 'syz.3.1370': attribute type 6 has an invalid length. [ 99.920442][ T4457] netlink: 'syz.3.1370': attribute type 6 has an invalid length. [ 99.994321][ T4467] 9pnet_fd: Insufficient options for proto=fd [ 100.088267][ T4478] sock: sock_set_timeout: `syz.3.1377' (pid 4478) tries to set negative timeout [ 100.234569][ T4485] rust_binder: Write failure EFAULT in pid:440 [ 100.246623][ T4487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 100.253080][ T4487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:442 [ 100.400203][ T4495] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.409577][ T4495] rust_binder: Read failure Err(EFAULT) in pid:450 [ 100.529809][ T36] audit: type=1400 audit(1761749858.828:675): avc: denied { ioctl } for pid=4497 comm="syz.4.1384" path="socket:[21853]" dev="sockfs" ino=21853 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.954455][ T36] audit: type=1400 audit(1761749859.213:676): avc: denied { mounton } for pid=4520 comm="syz.3.1390" path="/378/file0" dev="tmpfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.066297][ T4533] rust_binder: 465: no such ref 0 [ 101.129887][ T4534] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 101.137223][ T4534] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 101.144634][ T4535] rust_binder: 465: no such ref 0 [ 101.424403][ T727] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 101.562896][ T727] usb 5-1: device descriptor read/64, error -71 [ 101.818707][ T727] usb 5-1: device descriptor read/64, error -71 [ 102.074448][ T727] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 102.212986][ T727] usb 5-1: device descriptor read/64, error -71 [ 102.468769][ T727] usb 5-1: device descriptor read/64, error -71 [ 102.588221][ T727] usb usb5-port1: attempt power cycle [ 102.948382][ T727] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 102.970830][ T727] usb 5-1: device descriptor read/8, error -71 [ 103.109257][ T727] usb 5-1: device descriptor read/8, error -71 [ 103.155596][ T4580] overlayfs: failed to clone upperpath [ 103.278970][ T36] audit: type=1326 audit(1761749861.409:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4590 comm="syz.0.1413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x0 [ 103.363981][ T727] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 103.396969][ T727] usb 5-1: device descriptor read/8, error -71 [ 103.546283][ T727] usb 5-1: device descriptor read/8, error -71 [ 103.683841][ T727] usb usb5-port1: unable to enumerate USB device [ 103.838424][ T4624] overlayfs: failed to clone upperpath [ 104.474961][ T4669] 9pnet: Could not find request transport: fd0 [ 104.475361][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 105.073277][ T4690] x_tables: duplicate entry at hook 1 [ 105.327376][ T4716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.327405][ T4716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 105.350503][ T4719] devpts: called with bogus options [ 105.378906][ T4723] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 105.410222][ T4723] rust_binder: Write failure EINVAL in pid:484 [ 105.457845][ T4734] 9pnet_fd: Insufficient options for proto=fd [ 105.526276][ T4745] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1464'. [ 105.701125][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 106.111210][ T4816] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.1489'. [ 106.188305][ T4830] fuse: Unknown parameter '000000000000000000000000000000000000000000300000000000000000000' [ 106.339006][ T4866] /dev/rnullb0: Can't open blockdev [ 106.381552][ T4872] 9pnet_fd: Insufficient options for proto=fd [ 106.577154][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.584237][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.591291][ T4874] bridge_slave_0: entered allmulticast mode [ 106.597822][ T4874] bridge_slave_0: entered promiscuous mode [ 106.604196][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.611213][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.618302][ T4874] bridge_slave_1: entered allmulticast mode [ 106.624445][ T4874] bridge_slave_1: entered promiscuous mode [ 106.666235][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.673296][ T4874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.680585][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.687609][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.706719][ T2773] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.714141][ T2773] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.723256][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.730309][ T2794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.739614][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.746666][ T2794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.769276][ T4874] veth0_vlan: entered promiscuous mode [ 106.780548][ T4874] veth1_macvtap: entered promiscuous mode [ 106.810631][ T4885] rust_binder: 2: no such ref 1 [ 106.816102][ T36] audit: type=1326 audit(1761749864.721:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.5.1509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x0 [ 107.186595][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 107.213408][ T4897] mmap: syz.2.1513 (4897): VmData 17453056 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 107.255870][ T4917] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 107.290687][ T4923] incfs: Error accessing: ./file0. [ 107.295871][ T4923] incfs: mount failed -20 [ 107.309245][ T4925] overlayfs: failed to clone lowerpath [ 107.315884][ T4925] /dev/rnullb0: Can't lookup blockdev [ 107.374917][ T4940] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1532'. [ 107.387371][ T36] audit: type=1326 audit(1761749865.256:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.397787][ T4943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4943 comm=syz.0.1533 [ 107.410941][ T36] audit: type=1326 audit(1761749865.256:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.428047][ T4943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1533'. [ 107.447872][ T36] audit: type=1326 audit(1761749865.256:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.479328][ T36] audit: type=1326 audit(1761749865.256:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.502697][ T36] audit: type=1326 audit(1761749865.256:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.515407][ T4955] fuse: Unknown parameter 'roomode' [ 107.526136][ T36] audit: type=1326 audit(1761749865.256:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.563729][ T36] audit: type=1326 audit(1761749865.265:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.588201][ T36] audit: type=1326 audit(1761749865.265:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.611534][ T36] audit: type=1326 audit(1761749865.265:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x7ffc0000 [ 107.836558][ T4978] rust_binder: 7: no such ref 3 [ 107.841545][ T4978] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 107.852643][ T4978] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 107.856850][ T4982] netlink: 'syz.3.1548': attribute type 27 has an invalid length. [ 107.859861][ T4978] rust_binder: Write failure EFAULT in pid:7 [ 107.868179][ T4978] random: crng reseeded on system resumption [ 107.893604][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.900838][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.923027][ T4982] vlan1: left promiscuous mode [ 107.927888][ T4982] vlan1: left allmulticast mode [ 107.932760][ T4982] veth0_vlan: left allmulticast mode [ 107.941217][ T4978] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1546'. [ 107.952546][ T4985] random: crng reseeded on system resumption [ 107.952560][ T4986] rust_binder: 7: no such ref 3 [ 107.963900][ T4986] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 107.973231][ T4986] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 107.980879][ T4986] rust_binder: Write failure EFAULT in pid:7 [ 107.996958][ T4994] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 108.011239][ T4994] rust_binder: Write failure EINVAL in pid:12 [ 108.067110][ T5011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=586 sclass=netlink_route_socket pid=5011 comm=syz.5.1557 [ 108.992703][ T5050] 9pnet_fd: Insufficient options for proto=fd [ 108.999057][ T5050] tmpfs: Unknown parameter 'nr_iNDrㅸ' [ 109.268155][ T727] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.427998][ T727] usb 6-1: Using ep0 maxpacket: 32 [ 109.434307][ T727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.445412][ T727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.455182][ T727] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.464303][ T727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.472972][ T727] usb 6-1: config 0 descriptor?? [ 109.478761][ T727] hub 6-1:0.0: USB hub found [ 109.525675][ T5061] 9pnet_fd: Insufficient options for proto=fd [ 109.695405][ T727] hub 6-1:0.0: 1 port detected [ 110.337414][ T727] hub 6-1:0.0: activate --> -90 [ 110.692542][ T5107] 9pnet_fd: Insufficient options for proto=fd [ 110.699572][ T5107] 9pnet_fd: Insufficient options for proto=fd [ 110.975700][ T5117] tipc: Cannot configure node identity twice [ 111.195403][ T727] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 111.202321][ T495] usb 6-1: USB disconnect, device number 2 [ 111.341429][ T5137] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1602'. [ 111.744083][ T5139] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=5139 comm=syz.5.1603 [ 111.764598][ T5140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.773190][ T5140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.906507][ T5165] 9pnet_fd: Insufficient options for proto=fd [ 112.188301][ T495] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 112.209760][ T5188] 9pnet_fd: Insufficient options for proto=fd [ 112.349689][ T495] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 112.358791][ T495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.367758][ T495] usb 6-1: config 0 descriptor?? [ 112.526172][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 112.526189][ T36] audit: type=1400 audit(1761749870.079:714): avc: denied { audit_read } for pid=5189 comm="syz.2.1624" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.829473][ T5217] fuse: Unknown parameter '00000000000000000000' [ 113.146024][ T5219] 9pnet_fd: Insufficient options for proto=fd [ 113.554637][ T5244] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1644'. [ 114.961742][ T495] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.971850][ T495] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 114.982809][ T495] asix 6-1:0.0: probe with driver asix failed with error -71 [ 114.990729][ T5302] netlink: 456 bytes leftover after parsing attributes in process `syz.3.1664'. [ 114.993428][ T495] usb 6-1: USB disconnect, device number 3 [ 115.530860][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 115.540368][ T5321] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1672'. [ 115.717678][ T5355] overlayfs: failed to clone upperpath [ 115.774181][ T5364] incfs: mount failed -22 [ 115.776111][ T36] audit: type=1400 audit(1761749873.128:715): avc: denied { mounton } for pid=5363 comm="syz.0.1687" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 115.809474][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1688'. [ 115.819810][ T5367] rust_binder: Write failure EFAULT in pid:44 [ 115.831658][ T5369] input: syz1 as /devices/virtual/input/input24 [ 115.902179][ T5375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 115.902414][ T5375] rust_binder: Error while translating object. [ 115.911763][ T5375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.918017][ T5375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 115.951434][ T5379] rust_binder: Write failure EINVAL in pid:56 [ 116.008242][ T5385] rust_binder: Write failure EFAULT in pid:62 [ 116.238944][ T5396] rust_binder: Failed copying remainder into alloc: EFAULT [ 116.245188][ T5396] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 116.252839][ T5396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 116.261332][ T5396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:73 [ 116.292119][ T5398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 116.480537][ T5403] fuse: Unknown parameter 'gd' [ 116.777371][ T5429] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1711'. [ 117.341559][ T5454] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1720'. [ 117.521238][ T5490] usb usb8: usbfs: process 5490 (syz.5.1734) did not claim interface 0 before use [ 117.541163][ T5495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.541199][ T5495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:109 [ 117.943237][ T66] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 117.998328][ T5515] 9pnet_fd: Insufficient options for proto=fd [ 118.115121][ T66] usb 6-1: not running at top speed; connect to a high speed hub [ 118.123615][ T66] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 118.134608][ T66] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 118.147087][ T66] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.156125][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.164166][ T66] usb 6-1: Product: 쁁쵆꡴ꖋ뤚ꍘట좿쥆兲蝪ᗗ뜙㯽䱘ᴌว玴뢠밳᯷狣ꆋ讌䜕훡䈂㩽㜏곊쿧 [ 118.177216][ T66] usb 6-1: Manufacturer: Г [ 118.181741][ T66] usb 6-1: SerialNumber: 竴⢩ᚉ綦⏠欪쓹ॉ랚㭵飮櫹퇦矝壟韂誖凱䩏脽鷄驎弙ᨎ뵷旑㻢㝪邕 [ 118.194752][ T5497] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 118.380911][ T36] audit: type=1400 audit(1761749875.577:716): avc: denied { connect } for pid=5533 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.401476][ T36] audit: type=1400 audit(1761749875.577:717): avc: denied { accept } for pid=5533 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.600842][ T5540] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1754'. [ 118.637260][ T5497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.646795][ T5497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.661959][ T66] cdc_ncm 6-1:1.0: bind() failure [ 118.669116][ T66] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 118.675991][ T66] cdc_ncm 6-1:1.1: bind() failure [ 118.683541][ T66] usb 6-1: USB disconnect, device number 4 [ 118.773670][ T2773] tipc: Subscription rejected, illegal request [ 119.260032][ T5584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1769'. [ 119.309605][ T5586] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 119.316756][ T5586] rust_binder: Write failure EINVAL in pid:126 [ 119.331520][ T5588] rust_binder: 128: no such ref 1 [ 119.375282][ T5599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.143550][ T36] audit: type=1400 audit(1761749877.229:718): avc: denied { connect } for pid=5612 comm="syz.0.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.272522][ T5624] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1782'. [ 120.294184][ T5630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.294421][ T5629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 120.471052][ T36] audit: type=1326 audit(1761749877.539:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.5.1787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x0 [ 120.724218][ T5646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1788'. [ 120.733263][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1788'. [ 120.743857][ T5646] overlayfs: failed to clone upperpath [ 120.867600][ T5670] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1796'. [ 120.896045][ T36] audit: type=1326 audit(1761749877.933:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.0.1798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x0 [ 121.252516][ T5716] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1812'. [ 121.433319][ T5720] __vm_enough_memory: 56 callbacks suppressed [ 121.433338][ T5720] __vm_enough_memory: pid: 5720, comm: syz.5.1814, bytes: 18014402804453376 not enough memory for the allocation [ 121.592865][ T5739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=5739 comm=syz.3.1821 [ 121.592866][ T5740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5740 comm=syz.3.1821 [ 121.593398][ T5741] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1019 sclass=netlink_tcpdiag_socket pid=5741 comm=syz.3.1821 [ 121.726574][ T45] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.866332][ T5753] netlink: 'syz.0.1824': attribute type 4 has an invalid length. [ 121.886462][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 121.895791][ T45] usb 6-1: config 8 has an invalid interface number: 138 but max is 0 [ 121.904080][ T45] usb 6-1: config 8 has no interface number 0 [ 121.910388][ T45] usb 6-1: config 8 interface 138 has no altsetting 0 [ 121.918573][ T45] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 121.927616][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.935682][ T45] usb 6-1: Product: syz [ 121.939902][ T45] usb 6-1: Manufacturer: syz [ 121.944522][ T45] usb 6-1: SerialNumber: syz [ 121.955253][ T5765] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1828'. [ 121.975508][ T5767] netlink: 'syz.0.1829': attribute type 5 has an invalid length. [ 121.984452][ T36] audit: type=1400 audit(1761749878.955:721): avc: denied { setattr } for pid=5766 comm="syz.0.1829" name="AF_VSOCK" dev="sockfs" ino=26663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.172293][ T45] snd-usb-audio 6-1:8.138: probe with driver snd-usb-audio failed with error -71 [ 122.189297][ T45] usb 6-1: USB disconnect, device number 5 [ 122.358726][ T5800] rust_binder: Error while translating object. [ 122.358769][ T5800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.365131][ T5800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 122.395262][ T5804] random: crng reseeded on system resumption [ 123.100136][ T5835] 9pnet_fd: Insufficient options for proto=fd [ 123.118509][ T5839] __vm_enough_memory: pid: 5839, comm: syz.0.1853, bytes: 21200421171200 not enough memory for the allocation [ 123.133643][ T5842] __vm_enough_memory: pid: 5842, comm: syz.0.1853, bytes: 21200421171200 not enough memory for the allocation [ 123.389115][ T66] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 123.548985][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 123.687507][ T66] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 123.719655][ T5867] __nla_validate_parse: 1 callbacks suppressed [ 123.719671][ T5867] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1862'. [ 123.858020][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 123.863860][ T66] usb usb6-port1: attempt power cycle [ 124.231060][ T66] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 124.252722][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 124.390944][ T66] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 124.412583][ T66] usb 6-1: Invalid ep0 maxpacket: 64 [ 124.417984][ T66] usb usb6-port1: unable to enumerate USB device [ 124.481144][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 124.607857][ T5931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1544 sclass=netlink_tcpdiag_socket pid=5931 comm=syz.0.1886 [ 124.621601][ T5932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5932 comm=syz.0.1886 [ 124.634475][ T5930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5930 comm=syz.0.1886 [ 124.665706][ T5938] fuse: Bad value for 'group_id' [ 124.670721][ T5938] fuse: Bad value for 'group_id' [ 125.232700][ T5949] fuse: Unknown parameter 'd' [ 125.423348][ T5989] netlink: 'syz.0.1906': attribute type 16 has an invalid length. [ 125.431291][ T5989] netlink: 'syz.0.1906': attribute type 25 has an invalid length. [ 125.439140][ T5989] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.1906'. [ 125.451490][ T36] audit: type=1400 audit(1761749882.211:722): avc: denied { map } for pid=5988 comm="syz.0.1906" path="socket:[26201]" dev="sockfs" ino=26201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.514175][ T5997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1910'. [ 125.523318][ T5997] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1910'. [ 125.532367][ T5997] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1910'. [ 125.588281][ T6006] batadv_slave_1: entered promiscuous mode [ 125.594754][ T6006] batadv_slave_1: left promiscuous mode [ 125.608012][ T36] audit: type=1400 audit(1761749882.352:723): avc: denied { append } for pid=6010 comm="syz.0.1915" name="file0" dev="tmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.630669][ T36] audit: type=1326 audit(1761749882.352:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6010 comm="syz.0.1915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x0 [ 126.341679][ T6019] binder: Unknown parameter 'fscontext?}' [ 126.623042][ T6043] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1928'. [ 126.892378][ T6059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6059 comm=syz.5.1933 [ 127.225738][ T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 127.385585][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 127.391940][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.402065][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.412405][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.421498][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.429521][ T45] usb 6-1: Product: syz [ 127.433667][ T45] usb 6-1: Manufacturer: syz [ 127.438325][ T45] usb 6-1: SerialNumber: syz [ 127.457043][ T36] audit: type=1326 audit(1761749884.088:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e678efc9 code=0x7fc00000 [ 127.469145][ T6085] fuse: Bad value for 'group_id' [ 127.480575][ T36] audit: type=1326 audit(1761749884.088:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80e678efc9 code=0x7fc00000 [ 127.490990][ T6085] fuse: Bad value for 'group_id' [ 128.829505][ T36] audit: type=1326 audit(1761749885.374:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.0.1966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff02df8efc9 code=0x0 [ 128.842710][ T6150] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1967'. [ 128.861551][ T6151] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1967'. [ 129.091886][ T36] audit: type=1400 audit(1761749885.627:728): avc: denied { write } for pid=6164 comm="syz.3.1971" name="/" dev="configfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.143699][ T36] audit: type=1400 audit(1761749885.664:729): avc: denied { module_load } for pid=6171 comm="syz.3.1974" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 129.633158][ T6186] netlink: 'syz.2.1979': attribute type 13 has an invalid length. [ 129.641464][ T6186] erspan0: refused to change device tx_queue_len [ 129.665755][ T6192] overlayfs: failed to clone upperpath [ 129.878992][ T6204] veth1: entered allmulticast mode [ 129.899482][ T6204] veth1: left allmulticast mode [ 130.128554][ T45] usb 6-1: 0:2 : does not exist [ 130.136725][ T45] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 130.144054][ T36] audit: type=1400 audit(1761749886.603:730): avc: denied { read write } for pid=6226 comm="syz.5.1991" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.167264][ T36] audit: type=1400 audit(1761749886.603:731): avc: denied { open } for pid=6226 comm="syz.5.1991" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.194799][ T45] usb 6-1: USB disconnect, device number 10 [ 130.211814][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.383233][ T6238] 9pnet_fd: Insufficient options for proto=fd [ 130.415386][ T6245] fuse: Unknown parameter ' 5w' [ 130.456666][ T6250] rust_binder: Write failure EFAULT in pid:216 [ 130.806603][ T436] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 130.955982][ T436] usb 6-1: device descriptor read/64, error -71 [ 131.211574][ T436] usb 6-1: device descriptor read/64, error -71 [ 131.467389][ T436] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 131.616670][ T436] usb 6-1: device descriptor read/64, error -71 [ 131.872328][ T436] usb 6-1: device descriptor read/64, error -71 [ 131.989759][ T436] usb usb6-port1: attempt power cycle [ 132.066704][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 132.066720][ T36] audit: type=1400 audit(1761749888.414:734): avc: denied { unmount } for pid=6313 comm="syz.0.2020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 132.351943][ T436] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 132.374319][ T436] usb 6-1: device descriptor read/8, error -71 [ 132.512773][ T436] usb 6-1: device descriptor read/8, error -71 [ 132.654388][ T6328] overlayfs: failed to clone upperpath [ 132.681973][ T36] audit: type=1326 audit(1761749888.986:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.2028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff02df8efc9 code=0x0 [ 132.768953][ T436] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 132.772054][ T6349] fuse: Unknown parameter 'rootmode00 g000000000000100000' [ 132.785970][ T36] audit: type=1400 audit(1761749889.089:736): avc: denied { create } for pid=6348 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 132.806838][ T436] usb 6-1: device descriptor read/8, error -71 [ 132.950000][ T436] usb 6-1: device descriptor read/8, error -71 [ 133.066032][ T436] usb usb6-port1: unable to enumerate USB device [ 133.356989][ T36] audit: type=1400 audit(1761749889.624:737): avc: denied { getopt } for pid=6352 comm="syz.3.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.384128][ T6355] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2035'. [ 133.604233][ T6373] netlink: 'syz.0.2041': attribute type 30 has an invalid length. [ 133.775469][ T36] audit: type=1400 audit(1761749890.018:738): avc: denied { ioctl } for pid=6375 comm="syz.5.2042" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.842995][ T6380] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 133.879500][ T36] audit: type=1400 audit(1761749890.112:739): avc: denied { load_policy } for pid=6386 comm="syz.5.2046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 133.879804][ T6387] SELinux: failed to load policy [ 133.920948][ T36] audit: type=1400 audit(1761749890.159:740): avc: denied { map } for pid=6388 comm="syz.5.2047" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.944026][ T36] audit: type=1400 audit(1761749890.159:741): avc: denied { execute } for pid=6388 comm="syz.5.2047" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.174300][ T45] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.335309][ T45] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 134.344483][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.353501][ T45] usb 6-1: config 0 descriptor?? [ 134.359375][ T45] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 134.367280][ T45] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 134.629898][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2049'. [ 134.634052][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.647794][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.704305][ T6414] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2056'. [ 134.714469][ T6414] overlayfs: failed to clone upperpath [ 134.763057][ T36] audit: type=1400 audit(1761749890.947:742): avc: denied { mount } for pid=6425 comm="syz.2.2061" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.746441][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 137.161290][ T66] usb 6-1: USB disconnect, device number 15 [ 137.169349][ T66] ftdi_sio 6-1:0.0: device disconnected [ 137.323868][ T6508] rust_binder: Write failure EFAULT in pid:247 [ 137.346909][ T6513] rust_binder: 252: no such ref 3 [ 137.358198][ T6513] rust_binder: 252: no such ref 1 [ 137.363509][ T6513] rust_binder: Write failure EFAULT in pid:252 [ 137.414688][ T6531] netlink: 'syz.3.2095': attribute type 5 has an invalid length. [ 137.510870][ T36] audit: type=1326 audit(1761749893.528:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.5.2099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x0 [ 138.550319][ T6590] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.751577][ T36] audit: type=1400 audit(1761749894.691:744): avc: denied { module_load } for pid=6587 comm="syz.2.2114" path="/bus" dev="ramfs" ino=28297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 138.751627][ T6588] Invalid ELF header magic: != ELF [ 138.950375][ T6597] input: syz0 as /devices/virtual/input/input27 [ 138.966231][ T6597] 9pnet_fd: Insufficient options for proto=fd [ 138.998924][ T6599] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2118'. [ 139.009186][ T6599] rust_binder: Error while translating object. [ 139.009233][ T6599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 139.016193][ T6599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:282 [ 139.126352][ T6620] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 139.459455][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.466532][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.473832][ T6634] bridge_slave_0: entered allmulticast mode [ 139.480007][ T6634] bridge_slave_0: entered promiscuous mode [ 139.487374][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.494524][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.501592][ T6634] bridge_slave_1: entered allmulticast mode [ 139.507880][ T6634] bridge_slave_1: entered promiscuous mode [ 139.516765][ T2773] bridge_slave_1: left allmulticast mode [ 139.522419][ T2773] bridge_slave_1: left promiscuous mode [ 139.528086][ T2773] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.535503][ T2773] bridge_slave_0: left allmulticast mode [ 139.541134][ T2773] bridge_slave_0: left promiscuous mode [ 139.546760][ T2773] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.622441][ T2773] tipc: Left network mode [ 139.656473][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.663555][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.670813][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.677858][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.704974][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.712429][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.722873][ T2790] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.729954][ T2790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.742020][ T2790] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.749127][ T2790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.784758][ T6634] veth0_vlan: entered promiscuous mode [ 139.805798][ T6634] veth1_macvtap: entered promiscuous mode [ 139.820767][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 139.886012][ T6660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 139.906759][ T6662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 139.917750][ T36] audit: type=1326 audit(1761749895.780:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.0.2140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02df8efc9 code=0x0 [ 139.949645][ T36] audit: type=1400 audit(1761749895.798:746): avc: denied { getopt } for pid=6667 comm="syz.3.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.016288][ T36] audit: type=1400 audit(1761749895.873:747): avc: denied { accept } for pid=6684 comm="syz.3.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.054171][ T6685] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 140.064820][ T36] audit: type=1400 audit(1761749895.920:748): avc: denied { relabelto } for pid=6684 comm="syz.3.2148" name="syz1" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 140.093189][ T6685] 9pnet_fd: Insufficient options for proto=fd [ 140.111425][ T36] audit: type=1400 audit(1761749895.948:749): avc: denied { associate } for pid=6684 comm="syz.3.2148" name="syz1" dev="cgroup2" ino=169 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 140.509213][ T6730] syz.3.2163: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 140.524376][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.3.2163 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 140.524406][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.524414][ T6730] Call Trace: [ 140.524418][ T6730] [ 140.524423][ T6730] __dump_stack+0x21/0x30 [ 140.524442][ T6730] dump_stack_lvl+0x10c/0x190 [ 140.524455][ T6730] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.524469][ T6730] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 140.524490][ T6730] dump_stack+0x19/0x20 [ 140.524512][ T6730] warn_alloc+0x1bc/0x2a0 [ 140.524535][ T6730] ? __cfi_warn_alloc+0x10/0x10 [ 140.524558][ T6730] ? kasan_save_track+0x4f/0x80 [ 140.524578][ T6730] ? __kasan_kmalloc+0x96/0xb0 [ 140.524598][ T6730] ? __kmalloc_cache_noprof+0x24c/0x490 [ 140.524613][ T6730] ? do_sock_setsockopt+0x26d/0x400 [ 140.524627][ T6730] ? __x64_sys_setsockopt+0x1b8/0x250 [ 140.524640][ T6730] ? x64_sys_call+0x2adc/0x2ee0 [ 140.524654][ T6730] ? do_syscall_64+0x58/0xf0 [ 140.524666][ T6730] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.524678][ T6730] __vmalloc_node_range_noprof+0x135/0x1420 [ 140.524698][ T6730] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 140.524712][ T6730] ? kasan_save_alloc_info+0x40/0x50 [ 140.524725][ T6730] ? __kasan_kmalloc+0x96/0xb0 [ 140.524736][ T6730] ? __kmalloc_cache_noprof+0x24c/0x490 [ 140.524747][ T6730] vmalloc_user_noprof+0x77/0x90 [ 140.524761][ T6730] ? xskq_create+0xdb/0x2a0 [ 140.524777][ T6730] xskq_create+0xdb/0x2a0 [ 140.524791][ T6730] xsk_init_queue+0xb6/0x120 [ 140.524804][ T6730] xsk_setsockopt+0x43f/0x6f0 [ 140.524817][ T6730] ? __cfi_xsk_setsockopt+0x10/0x10 [ 140.524830][ T6730] ? do_futex+0x356/0x500 [ 140.524840][ T6730] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 140.524852][ T6730] ? security_socket_setsockopt+0x33/0xd0 [ 140.524863][ T6730] ? __cfi_xsk_setsockopt+0x10/0x10 [ 140.524876][ T6730] do_sock_setsockopt+0x26d/0x400 [ 140.524889][ T6730] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 140.524903][ T6730] __x64_sys_setsockopt+0x1b8/0x250 [ 140.524924][ T6730] x64_sys_call+0x2adc/0x2ee0 [ 140.524962][ T6730] do_syscall_64+0x58/0xf0 [ 140.524975][ T6730] ? clear_bhb_loop+0x50/0xa0 [ 140.524987][ T6730] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.524998][ T6730] RIP: 0033:0x7f658d98efc9 [ 140.525009][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.525019][ T6730] RSP: 002b:00007f658e8f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.525031][ T6730] RAX: ffffffffffffffda RBX: 00007f658dbe5fa0 RCX: 00007f658d98efc9 [ 140.525039][ T6730] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 140.525046][ T6730] RBP: 00007f658da11f91 R08: 0000000000000004 R09: 0000000000000000 [ 140.525053][ T6730] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.525060][ T6730] R13: 00007f658dbe6038 R14: 00007f658dbe5fa0 R15: 00007ffc3a2b7308 [ 140.525069][ T6730] [ 140.525091][ T6730] Mem-Info: [ 140.818557][ T6730] active_anon:18760 inactive_anon:6 isolated_anon:0 [ 140.818557][ T6730] active_file:9636 inactive_file:14567 isolated_file:0 [ 140.818557][ T6730] unevictable:2 dirty:52 writeback:0 [ 140.818557][ T6730] slab_reclaimable:5904 slab_unreclaimable:72788 [ 140.818557][ T6730] mapped:24679 shmem:8789 pagetables:1247 [ 140.818557][ T6730] sec_pagetables:0 bounce:0 [ 140.818557][ T6730] kernel_misc_reclaimable:0 [ 140.818557][ T6730] free:1506289 free_pcp:4484 free_cma:0 [ 140.863748][ T6730] Node 0 active_anon:75140kB inactive_anon:24kB active_file:38544kB inactive_file:58268kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:98716kB dirty:208kB writeback:0kB shmem:35156kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6656kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no [ 140.897226][ T6730] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB [ 140.927058][ T6730] lowmem_reserve[]: 0 3921 3921 [ 140.932001][ T6730] Normal free:3075708kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75136kB inactive_anon:24kB active_file:38544kB inactive_file:58268kB unevictable:8kB writepending:208kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2920kB local_pcp:2920kB free_cma:0kB [ 140.963433][ T6730] lowmem_reserve[]: 0 0 0 [ 140.967786][ T6730] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 140.983321][ T6730] Normal: 1839*4kB (UME) 748*8kB (UME) 900*16kB (UME) 211*32kB (UME) 304*64kB (UME) 79*128kB (UME) 66*256kB (UME) 53*512kB (UME) 26*1024kB (UME) 10*2048kB (ME) 713*4096kB (UM) = 3075644kB [ 141.002053][ T6730] 33023 total pagecache pages [ 141.006752][ T6730] 33 pages in swap cache [ 141.010990][ T6730] Free swap = 124576kB [ 141.015190][ T6730] Total swap = 124996kB [ 141.019391][ T6730] 2097051 pages RAM [ 141.023187][ T6730] 0 pages HighMem/MovableOnly [ 141.027903][ T6730] 351537 pages reserved [ 141.032162][ T6730] 0 pages cma reserved [ 141.037512][ T6730] Memory allocations: [ 141.041575][ T6730] 0 B 0 init/main.c:1370 func:do_initcalls [ 141.048908][ T6730] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 141.056955][ T6730] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 141.064670][ T6730] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 141.072639][ T6730] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 141.080595][ T6730] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 141.089179][ T6730] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 141.097189][ T6730] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 141.105181][ T6730] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 141.113120][ T6730] 0 B 0 init/initramfs.c:101 func:find_link [ 141.220814][ T6752] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 141.230528][ T6752] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 141.327972][ T36] audit: type=1400 audit(1761749897.103:750): avc: denied { mounton } for pid=6754 comm="syz.3.2172" path="/14/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 141.327989][ T6755] fuse: Unknown parameter 'Rootmode' [ 141.613139][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 141.772974][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 141.780737][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 141.789854][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.798085][ T45] usb 4-1: Product: syz [ 141.802246][ T45] usb 4-1: Manufacturer: syz [ 141.807101][ T45] usb 4-1: SerialNumber: syz [ 141.813878][ T45] r8152-cfgselector 4-1: Unknown version 0x0000 [ 141.820167][ T45] r8152-cfgselector 4-1: config 0 descriptor?? [ 141.827354][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 141.833276][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 142.040746][ T6757] rust_binder: Write failure EFAULT in pid:49 [ 142.042147][ T6777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.057106][ T6777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.168340][ T6794] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2185'. [ 142.178046][ T495] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 142.197681][ T36] audit: type=1400 audit(1761749897.919:751): avc: denied { setopt } for pid=6796 comm="syz.3.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.221936][ T36] audit: type=1400 audit(1761749897.947:752): avc: denied { ioctl } for pid=6796 comm="syz.3.2186" path="/22/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.321129][ T6803] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2189'. [ 142.334221][ T6803] rust_binder: Error while translating object. [ 142.334269][ T6803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 142.340568][ T6803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:317 [ 142.359470][ T6807] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 142.381488][ T6811] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 142.587142][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.602246][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.610372][ T6819] bridge_slave_0: entered allmulticast mode [ 142.616592][ T6819] bridge_slave_0: entered promiscuous mode [ 142.622907][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.629964][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.637313][ T6819] bridge_slave_1: entered allmulticast mode [ 142.643478][ T6819] bridge_slave_1: entered promiscuous mode [ 142.689235][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.696306][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.703608][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.710640][ T6819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.718824][ T2794] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.726178][ T2794] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.747619][ T2773] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.754704][ T2773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.765058][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.772127][ T2794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.794404][ T6819] veth0_vlan: entered promiscuous mode [ 142.803670][ T6833] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 142.805943][ T6819] veth1_macvtap: entered promiscuous mode [ 142.839605][ T6839] SELinux: security_context_str_to_sid () failed with errno=-22 [ 142.869610][ T6843] 8021q: VLANs not supported on xfrm0 [ 143.206223][ T6854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.206246][ T6854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 143.251867][ T6866] netlink: 'syz.3.2204': attribute type 1 has an invalid length. [ 143.338322][ T6870] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 143.338341][ T6870] rust_binder: Error while translating object. [ 143.349030][ T6870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.355654][ T6870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 143.407195][ T6875] tipc: Started in network mode [ 143.421385][ T6875] tipc: Node identity 4, cluster identity 4711 [ 143.427586][ T6875] tipc: Node number set to 4 [ 143.514304][ T6879] rust_binder: Write failure EINVAL in pid:356 [ 143.514868][ T6879] rust_binder: Write failure EFAULT in pid:356 [ 143.531727][ T6881] rust_binder: 358: no such ref 0 [ 143.542111][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 143.550844][ T6881] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 143.558101][ T6881] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 143.574501][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2212'. [ 143.703268][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 143.711468][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 143.721160][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.729570][ T10] usb 4-1: Product: syz [ 143.733802][ T10] usb 4-1: Manufacturer: syz [ 143.738592][ T10] usb 4-1: SerialNumber: syz [ 143.746125][ T6893] rust_binder: Error while translating object. [ 143.746160][ T6893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.748956][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 143.755344][ T6893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 143.762241][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 143.972378][ T6912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.993018][ T6915] __vm_enough_memory: pid: 6915, comm: syz.5.2221, bytes: 18014402804453376 not enough memory for the allocation [ 144.009356][ T10] r8152-cfgselector 4-1: Needed 2 retries to read version [ 144.016588][ T10] r8152-cfgselector 4-1: Unknown version 0x2440 [ 144.023010][ T10] r8152-cfgselector 4-1: bad CDC descriptors [ 144.042114][ T6919] netlink: 'syz.5.2223': attribute type 22 has an invalid length. [ 144.050477][ T6919] rust_binder: Error while translating object. [ 144.050517][ T6919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.058920][ T6919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 144.195441][ T6925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.204655][ T6925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 144.227365][ T45] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 144.609735][ T6936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6936 comm=syz.2.2228 [ 144.772263][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 144.772277][ T36] audit: type=1400 audit(1761749900.340:755): avc: denied { listen } for pid=6940 comm="syz.3.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.840231][ T6947] rust_binder: 19: no such ref 6 [ 144.845366][ T6947] rust_binder: 19: no such ref 3 [ 144.850337][ T6947] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 144.898282][ T6956] rust_binder: Error while translating object. [ 144.898304][ T6956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 144.904531][ T6956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 144.924954][ T6959] rust_binder: Error while translating object. [ 144.934151][ T6958] rust_binder: Error while translating object. [ 144.940680][ T6958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 144.946837][ T6959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 144.946862][ T6959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 144.956284][ T6958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 144.994096][ T6969] rust_binder: 33: no such ref 0 [ 145.008167][ T6969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 145.008531][ T6969] rust_binder: Error while translating object. [ 145.017634][ T6969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.023885][ T6969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 145.132392][ T6985] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 145.148589][ T6985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404 [ 145.187249][ T36] audit: type=1400 audit(1761749900.724:756): avc: denied { mounton } for pid=6993 comm="syz.0.2250" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 145.221825][ T6994] binder: Unknown parameter 'fscontext?}Җc+S ' [ 145.247298][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 145.429801][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 145.446308][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.451890][ T7008] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2254'. [ 145.460581][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.473887][ T10] usb 4-1: Product: syz [ 145.478154][ T10] usb 4-1: Manufacturer: syz [ 145.483165][ T10] usb 4-1: SerialNumber: syz [ 145.492299][ T10] usb 4-1: config 0 descriptor?? [ 145.501020][ T36] audit: type=1400 audit(1761749901.015:757): avc: denied { create } for pid=7005 comm="syz.2.2255" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 145.716947][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.727689][ T10] usb 4-1: USB disconnect, device number 18 [ 145.877131][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.887251][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.896780][ T45] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.905898][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.913975][ T45] usb 1-1: SerialNumber: syz [ 146.196169][ T7025] /dev/rnullb0: Can't open blockdev [ 146.217977][ T45] usb 1-1: 0:2 : does not exist [ 146.249173][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 146.252014][ T45] usb 1-1: USB disconnect, device number 18 [ 146.285222][ T7028] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 146.353356][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.360471][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.367675][ T7027] bridge_slave_0: entered allmulticast mode [ 146.373841][ T7027] bridge_slave_0: entered promiscuous mode [ 146.380184][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.387209][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.394333][ T7027] bridge_slave_1: entered allmulticast mode [ 146.400614][ T7027] bridge_slave_1: entered promiscuous mode [ 146.430506][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 146.438100][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 146.447210][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.455441][ T10] usb 6-1: Product: syz [ 146.459613][ T10] usb 6-1: Manufacturer: syz [ 146.464279][ T10] usb 6-1: SerialNumber: syz [ 146.464944][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.473071][ T10] usb 6-1: config 0 descriptor?? [ 146.476056][ T7027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.488267][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.495328][ T7027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.503934][ T2794] bridge_slave_1: left allmulticast mode [ 146.509930][ T2794] bridge_slave_1: left promiscuous mode [ 146.515690][ T2794] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.523305][ T2794] bridge_slave_0: left allmulticast mode [ 146.529262][ T2794] bridge_slave_0: left promiscuous mode [ 146.534904][ T2794] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.555795][ T2794] bridge0 (unregistering): left allmulticast mode [ 146.579564][ T66] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 146.666451][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.673737][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.683132][ T2773] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.690203][ T2773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.703401][ T2794] tipc: Left network mode [ 146.708741][ T2773] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.715846][ T2773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.727334][ T2794] veth1_macvtap: left promiscuous mode [ 146.733237][ T2794] veth0_vlan: left promiscuous mode [ 146.738553][ T10] usb 6-1: USB disconnect, device number 16 [ 146.761409][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 146.768703][ T66] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 146.790498][ T66] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 146.802033][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.810153][ T66] usb 4-1: Product: syz [ 146.814984][ T66] usb 4-1: Manufacturer: syz [ 146.820896][ T66] usb 4-1: SerialNumber: syz [ 146.826510][ T66] usb 4-1: config 0 descriptor?? [ 146.834349][ T66] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 146.839991][ T7027] veth0_vlan: entered promiscuous mode [ 146.846515][ T66] usb 4-1: Detected FT232R [ 146.855555][ T7027] veth1_macvtap: entered promiscuous mode [ 146.883355][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2265'. [ 146.896401][ T7049] /dev/rnullb0: Can't open blockdev [ 146.988001][ T36] audit: type=1400 audit(1761749902.413:758): avc: denied { module_load } for pid=7054 comm="syz.0.2267" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 147.056231][ T66] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 147.278839][ T66] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 147.286450][ T66] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 147.301491][ T66] usb 4-1: USB disconnect, device number 19 [ 147.314838][ T66] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 147.324398][ T66] ftdi_sio 4-1:0.0: device disconnected [ 147.373250][ T7074] rust_binder: Error while translating object. [ 147.373296][ T7074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.379737][ T7074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413 [ 147.783747][ T66] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 147.842395][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 147.844166][ T7096] SELinux: security_context_str_to_sid () failed with errno=-22 [ 147.954751][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 147.960995][ T66] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 147.969117][ T66] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 147.977323][ T66] usb 1-1: config 0 has no interface number 0 [ 147.984868][ T66] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 147.994043][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.002203][ T66] usb 1-1: Product: syz [ 148.006372][ T66] usb 1-1: Manufacturer: syz [ 148.011087][ T66] usb 1-1: SerialNumber: syz [ 148.018393][ T66] usb 1-1: config 0 descriptor?? [ 148.024330][ T66] smsc95xx v2.0.0 [ 148.030412][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.054311][ T7101] binder: Bad value for 'max' [ 148.059576][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.071271][ T9] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 148.080606][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.108940][ T9] usb 6-1: config 0 descriptor?? [ 148.112391][ T7105] rust_binder: Error while translating object. [ 148.114113][ T7105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 148.120451][ T7105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:110 [ 148.171170][ T7113] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 148.189093][ T7113] rust_binder: Write failure EINVAL in pid:120 [ 148.211463][ T7120] loop2: detected capacity change from 0 to 7 [ 148.258868][ T36] audit: type=1400 audit(1761749903.605:759): avc: denied { mounton } for pid=7121 comm="syz.3.2289" path="/42/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 148.291192][ T7124] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 148.291212][ T7124] rust_binder: Read failure Err(EFAULT) in pid:131 [ 148.310261][ T7126] netlink: 'syz.3.2291': attribute type 16 has an invalid length. [ 148.324772][ T7126] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2291'. [ 148.450863][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 148.461795][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 148.550738][ T9] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 148.583064][ T45] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 148.615000][ T9] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 148.623052][ T9] hid-steam 0003:28DE:1142.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 148.634922][ T9] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 148.686407][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 148.699004][ T66] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 148.709293][ T66] usb 1-1: USB disconnect, device number 19 [ 148.754597][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64255, setting to 64 [ 148.766801][ T45] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 148.769608][ T7092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.775923][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.791620][ T45] usb 4-1: config 0 descriptor?? [ 148.793388][ T7092] rust_binder: validate_parent_fixup: new_min_offset=144115188075855932, sg_entry.length=0 [ 148.796883][ T7092] rust_binder: Error while translating object. [ 148.803540][ T7126] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 148.807604][ T7092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.820886][ T7092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 148.840392][ T7139] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 148.888048][ T7146] syzkaller0: entered promiscuous mode [ 148.893637][ T7146] syzkaller0: entered allmulticast mode [ 148.901008][ T7146] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 148.909768][ T7146] rust_binder: Write failure EINVAL in pid:25 [ 148.936151][ T495] usb 6-1: USB disconnect, device number 17 [ 148.949384][ T495] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 149.023177][ T7148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 149.023631][ T7148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 149.032846][ T7148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:27 [ 149.043138][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 149.058149][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 149.067549][ T45] usb 4-1: USB disconnect, device number 20 [ 149.082542][ T7155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=7155 comm=syz.2.2298 [ 149.253790][ T7160] __vm_enough_memory: pid: 7160, comm: syz.0.2300, bytes: 18014402804453376 not enough memory for the allocation [ 149.327968][ T7166] rust_binder: Error while translating object. [ 149.327997][ T7166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.334550][ T7166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 149.371669][ T66] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 149.398221][ T7179] tmpfs: Cannot retroactively limit size [ 149.493942][ T36] audit: type=1400 audit(1761749904.769:760): avc: denied { mount } for pid=7191 comm="syz.5.2312" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 149.507584][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2311'. [ 149.528239][ T36] audit: type=1400 audit(1761749904.797:761): avc: denied { map } for pid=7189 comm="syz.0.2311" path="socket:[33130]" dev="sockfs" ino=33130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 149.531534][ T7196] rust_binder: Write failure EFAULT in pid:426 [ 149.568156][ T66] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.593014][ T66] usb 3-1: config 179 has no interface number 0 [ 149.600988][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 149.612556][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 149.629084][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 149.648473][ T66] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 149.654341][ T7208] rust_binder: 137: no such ref 4294967293 [ 149.658821][ T66] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 149.670083][ T7208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 149.678493][ T7209] rust_binder: 137: no such ref 4294967293 [ 149.693857][ T7209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 149.694192][ T66] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 149.712730][ T66] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 149.721049][ T66] usb 3-1: Product: syz [ 149.730282][ T7157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.739495][ T66] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 149.768310][ T7213] kvm: pic: non byte write [ 149.773506][ T36] audit: type=1400 audit(1761749905.022:762): avc: denied { validate_trans } for pid=7212 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.893882][ T495] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 149.958853][ T7157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.958887][ T7157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 149.970061][ T45] usb 3-1: USB disconnect, device number 9 [ 150.053733][ T495] usb 6-1: Using ep0 maxpacket: 8 [ 150.065515][ T495] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.075558][ T495] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.082219][ T495] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 150.091368][ T495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.101898][ T495] usb 6-1: config 0 descriptor?? [ 150.196599][ T36] audit: type=1400 audit(1761749905.425:763): avc: denied { append } for pid=7230 comm="syz.3.2325" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.373456][ T66] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 150.501327][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 150.534697][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.547523][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.554018][ T495] holtek 0003:1241:5015.000A: unknown main item tag 0x0 [ 150.558868][ T66] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 150.563465][ T495] holtek 0003:1241:5015.000A: unknown main item tag 0x0 [ 150.563493][ T495] holtek 0003:1241:5015.000A: unknown main item tag 0x0 [ 150.563515][ T495] holtek 0003:1241:5015.000A: unknown main item tag 0x0 [ 150.563537][ T495] holtek 0003:1241:5015.000A: item fetching failed at offset 6/7 [ 150.563705][ T495] holtek 0003:1241:5015.000A: parse failed [ 150.573387][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.579997][ T495] holtek 0003:1241:5015.000A: probe with driver holtek failed with error -22 [ 150.587287][ T66] usb 1-1: SerialNumber: syz [ 150.630835][ T66] usb 1-1: 0:2 : does not exist [ 150.671880][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 150.678104][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.686898][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.697038][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.707466][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.716571][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.724570][ T45] usb 4-1: Product: syz [ 150.728775][ T45] usb 4-1: Manufacturer: syz [ 150.733375][ T45] usb 4-1: SerialNumber: syz [ 150.780281][ T9] usb 6-1: USB disconnect, device number 18 [ 150.799781][ T727] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 150.959618][ T727] usb 3-1: Invalid ep0 maxpacket: 32 [ 151.090010][ T7226] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.098172][ T727] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 151.166420][ T45] usb 4-1: 0:2 : does not exist [ 151.173546][ T495] usb 1-1: USB disconnect, device number 20 [ 151.268669][ T727] usb 3-1: Invalid ep0 maxpacket: 32 [ 151.274080][ T727] usb usb3-port1: attempt power cycle [ 151.350837][ T7241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:439 [ 151.359945][ T7243] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 151.389860][ T36] audit: type=1400 audit(1761749906.542:764): avc: denied { append } for pid=7244 comm="syz.5.2331" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 151.456324][ T7253] TCP: TCP_TX_DELAY enabled [ 151.641705][ T727] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 151.663374][ T727] usb 3-1: Invalid ep0 maxpacket: 32 [ 151.716405][ T1360] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 151.801579][ T727] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 151.823250][ T727] usb 3-1: Invalid ep0 maxpacket: 32 [ 151.828689][ T727] usb usb3-port1: unable to enumerate USB device [ 151.854843][ T1360] usb 6-1: device descriptor read/64, error -71 [ 152.023799][ T7233] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 152.029885][ T45] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 152.051500][ T45] usb 4-1: USB disconnect, device number 21 [ 152.110604][ T1360] usb 6-1: device descriptor read/64, error -71 [ 152.366402][ T1360] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 152.504950][ T1360] usb 6-1: device descriptor read/64, error -71 [ 152.643088][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.652005][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.663349][ T7270] netlink: 'syz.0.2338': attribute type 4 has an invalid length. [ 152.672695][ T7270] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2338'. [ 152.683515][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.692751][ T7275] 9pnet: Could not find request transport: frfdno=0x0000000000000003 [ 152.693782][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.708975][ T7270] netlink: 'syz.0.2338': attribute type 16 has an invalid length. [ 152.782021][ T1360] usb 6-1: device descriptor read/64, error -71 [ 152.888609][ T66] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 152.899731][ T1360] usb usb6-port1: attempt power cycle [ 152.923295][ T7285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 152.923543][ T7286] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 152.977690][ T7285] rust_binder: Error in use_page_slow: ESRCH [ 152.977703][ T7285] rust_binder: use_range failure ESRCH [ 152.983685][ T7285] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 152.989488][ T7285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 152.997679][ T7285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:172 [ 153.027148][ T66] usb 1-1: device descriptor read/64, error -71 [ 153.272249][ T1360] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 153.293661][ T66] usb 1-1: device descriptor read/64, error -71 [ 153.294759][ T1360] usb 6-1: device descriptor read/8, error -71 [ 153.443954][ T1360] usb 6-1: device descriptor read/8, error -71 [ 153.549366][ T66] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 153.687918][ T66] usb 1-1: device descriptor read/64, error -71 [ 153.709218][ T1360] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 153.731518][ T1360] usb 6-1: device descriptor read/8, error -71 [ 153.760131][ T7289] binder: Bad value for 'stats' [ 153.870268][ T1360] usb 6-1: device descriptor read/8, error -71 [ 153.914183][ T36] audit: type=1400 audit(1761749908.916:765): avc: denied { setattr } for pid=7297 comm="syz.2.2347" name="NETLINK" dev="sockfs" ino=33519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.954315][ T66] usb 1-1: device descriptor read/64, error -71 [ 153.997021][ T1360] usb usb6-port1: unable to enumerate USB device [ 154.071804][ T66] usb usb1-port1: attempt power cycle [ 154.433897][ T66] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 154.456323][ T66] usb 1-1: device descriptor read/8, error -71 [ 154.594781][ T66] usb 1-1: device descriptor read/8, error -71 [ 154.753103][ T7324] rust_binder: Write failure EINVAL in pid:57 [ 154.754103][ T7326] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 154.760329][ T7326] rust_binder: Error in use_page_slow: EFAULT [ 154.770821][ T7326] rust_binder: use_range failure EFAULT [ 154.777031][ T7326] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 154.782579][ T7326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 154.789608][ T7327] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 154.790975][ T7326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57 [ 154.870897][ T66] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 154.903811][ T66] usb 1-1: device descriptor read/8, error -71 [ 155.042760][ T66] usb 1-1: device descriptor read/8, error -71 [ 155.073392][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.158668][ T66] usb usb1-port1: unable to enumerate USB device [ 155.233197][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 155.239427][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.249616][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.260137][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.269219][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.277238][ T10] usb 3-1: Product: syz [ 155.281383][ T10] usb 3-1: Manufacturer: syz [ 155.285964][ T10] usb 3-1: SerialNumber: syz [ 155.443004][ T36] audit: type=1400 audit(1761749910.342:766): avc: denied { create } for pid=7340 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.506383][ T7329] rust_binder: Error while translating object. [ 155.506429][ T7329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 155.511258][ T7344] netlink: 'syz.5.2362': attribute type 8 has an invalid length. [ 155.512741][ T7329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:61 [ 155.641122][ T7360] rust_binder: Failed copying remainder into alloc: EFAULT [ 155.650175][ T7360] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 155.657432][ T7360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 155.665725][ T7360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:186 [ 155.731833][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2365'. [ 155.894742][ T7380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7380 comm=syz.0.2374 [ 155.916966][ T7384] syz.0.2375 (7384): /proc/7383/oom_adj is deprecated, please use /proc/7383/oom_score_adj instead. [ 156.071549][ T10] usb 3-1: 0:2 : does not exist [ 156.083822][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 156.098810][ T10] usb 3-1: USB disconnect, device number 14 [ 156.110732][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.213385][ T36] audit: type=1400 audit(1761749911.065:767): avc: denied { setopt } for pid=7401 comm="syz.2.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.232787][ T36] audit: type=1400 audit(1761749911.084:768): avc: denied { read } for pid=7401 comm="syz.2.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.266947][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 156.278155][ T36] audit: type=1400 audit(1761749911.140:769): avc: denied { ioctl } for pid=7401 comm="syz.2.2381" path="socket:[33787]" dev="sockfs" ino=33787 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.427914][ T9] usb 1-1: config 3 has an invalid interface number: 117 but max is 0 [ 156.436136][ T9] usb 1-1: config 3 has no interface number 0 [ 156.442312][ T9] usb 1-1: config 3 interface 117 has no altsetting 0 [ 156.450566][ T9] usb 1-1: New USB device found, idVendor=23f2, idProduct=0003, bcdDevice=6d.2f [ 156.459696][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.467706][ T9] usb 1-1: Product: syz [ 156.471901][ T9] usb 1-1: Manufacturer: syz [ 156.476487][ T9] usb 1-1: SerialNumber: syz [ 156.699493][ T9] usb 1-1: NDI device with a latency value of 1 [ 156.706099][ T9] ftdi_sio 1-1:3.117: FTDI USB Serial Device converter detected [ 156.714006][ T9] ftdi_sio ttyUSB0: unknown device type: 0x6d2f [ 156.721199][ T9] usb 1-1: USB disconnect, device number 25 [ 156.728116][ T9] ftdi_sio 1-1:3.117: device disconnected [ 156.803716][ T7407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.815125][ T7409] rust_binder: Write failure EFAULT in pid:207 [ 156.822948][ T7409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 157.471236][ T1360] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 157.588468][ T495] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 157.631093][ T1360] usb 3-1: Using ep0 maxpacket: 32 [ 157.637309][ T1360] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.645665][ T1360] usb 3-1: config 0 has no interface number 0 [ 157.651743][ T1360] usb 3-1: config 0 interface 184 has no altsetting 0 [ 157.659909][ T1360] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.669077][ T1360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.677252][ T1360] usb 3-1: Product: syz [ 157.681585][ T1360] usb 3-1: Manufacturer: syz [ 157.686215][ T1360] usb 3-1: SerialNumber: syz [ 157.691485][ T1360] usb 3-1: config 0 descriptor?? [ 157.697184][ T1360] smsc75xx v1.0.0 [ 157.762310][ T495] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.771105][ T495] usb 1-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 157.781452][ T495] usb 1-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.794618][ T495] usb 1-1: config 1 interface 0 has no altsetting 0 [ 157.803168][ T495] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.812297][ T495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.820690][ T495] usb 1-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 157.844566][ T495] usb 1-1: SerialNumber: syz [ 157.845194][ T7450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.849250][ T7450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 158.076232][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7443 comm=syz.0.2394 [ 158.098116][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7443 comm=syz.0.2394 [ 158.111247][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7443 comm=syz.0.2394 [ 158.123955][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7443 comm=syz.0.2394 [ 158.136910][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7443 comm=syz.0.2394 [ 158.149552][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7443 comm=syz.0.2394 [ 158.166158][ T495] cdc_ether 1-1:1.0: skipping garbage [ 158.171604][ T495] cdc_ether 1-1:1.0: skipping garbage [ 158.177093][ T495] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.189822][ T495] usb 1-1: USB disconnect, device number 26 [ 158.350139][ T1360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 158.360974][ T1360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 158.370959][ T1360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 158.381277][ T1360] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 158.835479][ T36] audit: type=1326 audit(1761749913.523:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7352 comm="syz.5.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7fc00000 [ 158.907535][ T7491] rust_binder: Failed copying remainder into alloc: EFAULT [ 158.907560][ T7491] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 158.931310][ T7491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 158.955048][ T7491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:236 [ 158.967489][ T7498] binder: Unknown parameter 'fscontext?}' [ 158.967489][ T7429] binder: Unknown parameter 'fscontext?}' [ 159.123024][ T36] audit: type=1400 audit(1761749913.795:771): avc: denied { append } for pid=7517 comm="syz.0.2419" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.146510][ T36] audit: type=1400 audit(1761749913.814:772): avc: denied { read } for pid=7517 comm="syz.0.2419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 159.257022][ T7526] random: crng reseeded on system resumption [ 159.278322][ T7526] __vm_enough_memory: pid: 7526, comm: syz.3.2422, bytes: 18014402804453376 not enough memory for the allocation [ 159.318771][ T7529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.318906][ T7529] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 159.387583][ T7547] rust_binder: Write failure EINVAL in pid:224 [ 159.401262][ T7547] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 159.407563][ T7547] rust_binder: Read failure Err(EFAULT) in pid:224 [ 159.577196][ T7552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 159.583875][ T7552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:228 [ 159.619509][ T7562] sit0: entered promiscuous mode [ 159.635716][ T7562] netlink: 'syz.5.2437': attribute type 1 has an invalid length. [ 159.643626][ T7562] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2437'. [ 159.777887][ T7588] binder: Unknown parameter '' [ 159.859550][ T7594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 159.896484][ T7607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 159.905725][ T7607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:245 [ 159.967178][ T7620] rust_binder: Write failure EFAULT in pid:276 [ 159.989034][ T7626] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 159.995323][ T7626] rust_binder: Error while translating object. [ 160.006126][ T7626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 160.012511][ T7626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 160.063299][ T7631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:259 [ 160.247451][ T7643] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2461'. [ 160.274115][ T7643] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.439705][ T9] usb 3-1: USB disconnect, device number 15 [ 160.707389][ T7662] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 160.711081][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 160.741265][ T7669] incfs: Error accessing: ./file0. [ 160.746642][ T7669] incfs: mount failed -20 [ 160.786382][ T7669] cgroup: Need name or subsystem set [ 160.881619][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 160.887176][ T10] usb 4-1: no configurations [ 160.891870][ T10] usb 4-1: can't read configurations, error -22 [ 161.030847][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 161.190678][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 161.196225][ T10] usb 4-1: no configurations [ 161.200840][ T10] usb 4-1: can't read configurations, error -22 [ 161.207237][ T10] usb usb4-port1: attempt power cycle [ 161.577604][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 161.606649][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 161.612248][ T10] usb 4-1: no configurations [ 161.617160][ T10] usb 4-1: can't read configurations, error -22 [ 161.624609][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2477'. [ 161.662565][ T7698] 9pnet_fd: Insufficient options for proto=fd [ 161.755507][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 161.777246][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 161.783195][ T10] usb 4-1: no configurations [ 161.789150][ T10] usb 4-1: can't read configurations, error -22 [ 161.795594][ T10] usb usb4-port1: unable to enumerate USB device [ 161.858354][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2490'. [ 161.916634][ T7733] binder: Binderfs stats mode cannot be changed during a remount [ 161.936647][ T7739] No source specified [ 162.190000][ T7753] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2501'. [ 162.217873][ T36] audit: type=1326 audit(1761749916.704:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.241280][ T36] audit: type=1326 audit(1761749916.704:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.256422][ T495] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 162.265346][ T36] audit: type=1326 audit(1761749916.704:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.295862][ T36] audit: type=1326 audit(1761749916.704:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.319185][ T36] audit: type=1326 audit(1761749916.704:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.342832][ T36] audit: type=1326 audit(1761749916.704:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.366163][ T36] audit: type=1326 audit(1761749916.704:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.389574][ T36] audit: type=1326 audit(1761749916.704:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.413073][ T36] audit: type=1326 audit(1761749916.704:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.436296][ T36] audit: type=1326 audit(1761749916.704:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 162.437930][ T495] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 162.483868][ T495] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 162.493132][ T495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.502394][ T495] usb 1-1: config 0 descriptor?? [ 162.512885][ T495] usb 1-1: bad CDC descriptors [ 162.610138][ T7772] tmpfs: Unknown parameter 'hu' [ 162.662564][ T7786] fuse: Bad value for 'fd' [ 162.777248][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 162.827696][ T10] usb 1-1: USB disconnect, device number 27 [ 162.853073][ T7816] 9pnet_fd: Insufficient options for proto=fd [ 162.860649][ T7816] rust_binder: Write failure EFAULT in pid:285 [ 163.109297][ T7842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.130739][ T7842] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 163.162951][ T7842] overlayfs: failed to resolve './file1': -2 [ 163.195525][ T7848] rust_binder: 299: no such ref 0 [ 163.201503][ T7848] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 163.208828][ T7848] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 163.513972][ T66] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 163.652530][ T66] usb 1-1: device descriptor read/64, error -71 [ 163.658929][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 163.680135][ T7891] fuse: Bad value for 'fd' [ 163.685742][ T7891] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 163.685763][ T7891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 163.693804][ T7891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:303 [ 163.908328][ T66] usb 1-1: device descriptor read/64, error -71 [ 164.174776][ T66] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 164.217408][ T1360] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 164.313357][ T66] usb 1-1: device descriptor read/64, error -71 [ 164.378438][ T1360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.388339][ T1360] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.401299][ T1360] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 164.410454][ T1360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.419043][ T1360] usb 4-1: config 0 descriptor?? [ 164.569181][ T66] usb 1-1: device descriptor read/64, error -71 [ 164.686493][ T66] usb usb1-port1: attempt power cycle [ 164.852315][ T1360] logitech 0003:046D:C294.000B: item fetching failed at offset 2/5 [ 164.860434][ T1360] logitech 0003:046D:C294.000B: parse failed [ 164.866435][ T1360] logitech 0003:046D:C294.000B: probe with driver logitech failed with error -22 [ 165.048784][ T66] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 165.067196][ T495] usb 4-1: USB disconnect, device number 26 [ 165.074817][ T66] usb 1-1: device descriptor read/8, error -71 [ 165.220428][ T66] usb 1-1: device descriptor read/8, error -71 [ 165.475142][ T66] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 165.497446][ T66] usb 1-1: device descriptor read/8, error -71 [ 165.648273][ T66] usb 1-1: device descriptor read/8, error -71 [ 165.678487][ T7924] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 165.763005][ T66] usb usb1-port1: unable to enumerate USB device [ 165.770664][ T7924] kvm: pic: non byte read [ 165.775313][ T7924] kvm: pic: single mode not supported [ 165.775323][ T7924] kvm: pic: level sensitive irq not supported [ 165.780869][ T7924] kvm: pic: non byte read [ 166.030301][ T7953] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 166.459438][ T7962] __vm_enough_memory: pid: 7962, comm: syz.0.2571, bytes: 18014402804453376 not enough memory for the allocation [ 166.539121][ T7971] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=41 [ 166.539145][ T7971] rust_binder: Error while translating object. [ 166.547965][ T7971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.554165][ T7971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 166.571578][ T7974] random: crng reseeded on system resumption [ 166.959627][ T7979] kvm: kvm [7978]: vcpu0, guest rIP: 0x4e Unhandled WRMSR(0xc2) = 0x10000002ff [ 166.970673][ T7979] kvm: kvm [7978]: vcpu0, guest rIP: 0x4e Unhandled WRMSR(0xc1) = 0x10000002ff [ 166.982476][ T13] bridge_slave_0: left allmulticast mode [ 166.983560][ T7979] kvm: kvm [7978]: vcpu0, guest rIP: 0x4e Unhandled WRMSR(0xc2) = 0x10000003ff [ 166.988196][ T13] bridge_slave_0: left promiscuous mode [ 167.000310][ T7979] kvm: kvm [7978]: vcpu0, guest rIP: 0x4e Unhandled WRMSR(0xc1) = 0x10000003ff [ 167.003815][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.017808][ T7979] kvm: kvm [7978]: vcpu0, guest rIP: 0x4e Unhandled WRMSR(0xc2) = 0x10000002ff [ 167.072188][ T7986] rust_binder: 372: no such ref 1 [ 167.077468][ T7986] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 167.084823][ T7986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 167.150737][ T7993] rust_binder: 320: no such ref 2 [ 167.165098][ T13] veth1_macvtap: left promiscuous mode [ 167.165516][ T7993] rust_binder: 320: no such ref 2 [ 167.170744][ T13] veth0_vlan: left promiscuous mode [ 167.261099][ T8012] overlayfs: failed to clone upperpath [ 167.261309][ T8013] overlayfs: failed to clone upperpath [ 167.552394][ T8043] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 167.553578][ T495] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 167.728943][ T495] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.739175][ T495] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.749544][ T495] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.758708][ T495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.766760][ T495] usb 1-1: Product: syz [ 167.771210][ T495] usb 1-1: Manufacturer: syz [ 167.775862][ T495] usb 1-1: SerialNumber: syz [ 168.004808][ T8021] 9pnet_fd: Insufficient options for proto=fd [ 168.021748][ T495] usb 1-1: USB disconnect, device number 32 [ 168.029396][ T8094] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 168.029418][ T8094] rust_binder: Error while translating object. [ 168.038357][ T8094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 168.045526][ T8094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 168.381618][ T8138] overlayfs: failed to clone upperpath [ 168.491562][ T66] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 168.503934][ T8145] netlink: 'syz.5.2628': attribute type 4 has an invalid length. [ 168.674354][ T66] usb 4-1: config 1 has an invalid interface number: 68 but max is 0 [ 168.682535][ T66] usb 4-1: config 1 has no interface number 0 [ 168.688705][ T66] usb 4-1: config 1 interface 68 altsetting 115 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 168.699782][ T66] usb 4-1: config 1 interface 68 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 168.710792][ T66] usb 4-1: config 1 interface 68 altsetting 115 has a duplicate endpoint with address 0xA, skipping [ 168.721585][ T66] usb 4-1: config 1 interface 68 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 168.732547][ T66] usb 4-1: config 1 interface 68 altsetting 115 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 168.743644][ T66] usb 4-1: config 1 interface 68 altsetting 115 has a duplicate endpoint with address 0xE, skipping [ 168.754428][ T66] usb 4-1: config 1 interface 68 altsetting 115 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 168.765470][ T66] usb 4-1: config 1 interface 68 has no altsetting 0 [ 168.773678][ T66] usb 4-1: New USB device found, idVendor=12d1, idProduct=da3c, bcdDevice=71.f8 [ 168.782757][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.790763][ T66] usb 4-1: Product: syz [ 168.794916][ T66] usb 4-1: Manufacturer: В [ 168.799427][ T66] usb 4-1: SerialNumber: syz [ 169.055509][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2634'. [ 169.055716][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2634'. [ 169.086062][ T66] usb 4-1: USB disconnect, device number 27 [ 169.209967][ T8187] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2644'. [ 169.586534][ T8195] rust_binder: 8194 RLIMIT_NICE not set [ 169.690718][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'. [ 169.754098][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2649'. [ 169.827531][ T8208] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 169.827549][ T8208] rust_binder: Error while translating object. [ 169.838270][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 169.838318][ T8208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.852088][ T8208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 169.873262][ T8210] rust_binder: 422: no such ref 0 [ 169.887456][ T8210] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 169.894562][ T8210] rust_binder: 422: no such ref 2 [ 169.899635][ T8210] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 169.909892][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 169.909908][ T36] audit: type=1400 audit(1761749923.929:812): avc: denied { setattr } for pid=8212 comm="syz.3.2653" name="NETLINK" dev="sockfs" ino=38370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.939722][ T8215] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 169.948104][ T8215] rust_binder: Error while translating object. [ 169.957123][ T8215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.963548][ T8215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 169.994422][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 170.010393][ T10] usb 1-1: config 152 has an invalid interface number: 27 but max is 1 [ 170.018709][ T10] usb 1-1: config 152 has an invalid interface number: 5 but max is 1 [ 170.026939][ T10] usb 1-1: config 152 has an invalid interface number: 35 but max is 1 [ 170.035206][ T10] usb 1-1: config 152 has 3 interfaces, different from the descriptor's value: 2 [ 170.044370][ T10] usb 1-1: config 152 has no interface number 0 [ 170.050629][ T10] usb 1-1: config 152 has no interface number 1 [ 170.056853][ T10] usb 1-1: config 152 has no interface number 2 [ 170.063141][ T10] usb 1-1: config 152 interface 27 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 170.074194][ T10] usb 1-1: config 152 interface 27 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 170.085243][ T10] usb 1-1: config 152 interface 27 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 170.096334][ T10] usb 1-1: config 152 interface 27 altsetting 14 has a duplicate endpoint with address 0x9, skipping [ 170.107222][ T10] usb 1-1: config 152 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.120338][ T10] usb 1-1: config 152 interface 35 altsetting 253 has a duplicate endpoint with address 0xE, skipping [ 170.131300][ T10] usb 1-1: config 152 interface 35 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 170.144604][ T10] usb 1-1: config 152 interface 27 has no altsetting 0 [ 170.151434][ T10] usb 1-1: config 152 interface 5 has no altsetting 0 [ 170.158213][ T10] usb 1-1: config 152 interface 35 has no altsetting 0 [ 170.166597][ T10] usb 1-1: New USB device found, idVendor=2019, idProduct=ed17, bcdDevice=9f.6b [ 170.175713][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.183897][ T10] usb 1-1: Product: 냲㪢薟龙笞罼䮱羌䳶㍵ꃈ窩ჸ忱韣ᧈ䶣줣ꉭ⁾锒؂ჰ좎⋛愯삤솥׵囻צּ쿄쯂˓ [ 170.197446][ T10] usb 1-1: Manufacturer: 輄偌뱃횊웺諨䐴䕧徸Ԧᆌ栅㑳㩡띛묵京慧ꟼ줖⹺ữ㾁䞩퇽꿟ꏽ䆲⏝킯뎼谠솺瓣끖发麃፛돐ㅎ紉맔疅꫍悟럣ጼけ⇹쳣ቍꩂ咰䬚爴뭊ﾛ埑麪弻븑첽㋺泃Ꞑ퀁ѵ뎛徲⥮੿竷齏ݾⱺ鎇通ڸا㍤⇡灩ش昼︖闟㽨᳣깔姣ꏛ桯䑹勊㻱볗矠鲭㒶 [ 170.228707][ T10] usb 1-1: SerialNumber: 㙠♼䬲δᆙ쫪㤛䎕슃訴 [ 170.239341][ T2773] bridge_slave_1: left allmulticast mode [ 170.247062][ T2773] bridge_slave_1: left promiscuous mode [ 170.252886][ T2773] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.260559][ T2773] bridge_slave_0: left allmulticast mode [ 170.266803][ T2773] bridge_slave_0: left promiscuous mode [ 170.272585][ T2773] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.391007][ T36] audit: type=1400 audit(1761749924.380:813): avc: denied { create } for pid=8231 comm="syz.2.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.412402][ T2773] veth1_macvtap: left promiscuous mode [ 170.417954][ T2773] veth0_vlan: left promiscuous mode [ 170.467347][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 170.482229][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.489531][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.498342][ T8220] bridge_slave_0: entered allmulticast mode [ 170.505136][ T8220] bridge_slave_0: entered promiscuous mode [ 170.518521][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.525693][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.532823][ T8220] bridge_slave_1: entered allmulticast mode [ 170.539327][ T8220] bridge_slave_1: entered promiscuous mode [ 170.549924][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 170.601300][ T8258] netlink: 'syz.2.2673': attribute type 27 has an invalid length. [ 170.662556][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.669736][ T2794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.686290][ T10] usb 1-1: USB disconnect, device number 33 [ 170.717077][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.724170][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.739211][ T8220] veth0_vlan: entered promiscuous mode [ 170.753667][ T8220] veth1_macvtap: entered promiscuous mode [ 170.802193][ T8270] rust_binder: 2: no such ref 0 [ 170.807306][ T8270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 170.807528][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.817153][ T8270] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.839581][ T8274] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 171.050459][ T8285] input: syz1 as /devices/virtual/input/input30 [ 171.359833][ T8294] 9pnet: Found fid 0 not clunked [ 171.372917][ T8296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.372957][ T8296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:353 [ 171.496764][ T8302] rust_binder: Write failure EINVAL in pid:356 [ 171.507838][ T8302] rust_binder: 356: no such ref 1 [ 171.519230][ T8302] rust_binder: 356: no such ref 1 [ 171.524264][ T8302] rust_binder: 356: no such ref 1 [ 171.529515][ T8302] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 171.536697][ T8302] rust_binder: Read failure Err(EAGAIN) in pid:356 [ 171.646371][ T8302] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 171.652984][ T8302] rust_binder: Error in use_page_slow: EFAULT [ 171.663557][ T8302] rust_binder: use_range failure EFAULT [ 171.673439][ T8302] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 171.679070][ T8302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 171.687077][ T8302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:356 [ 171.749614][ T8320] fuse: Bad value for 'group_id' [ 171.764687][ T8320] fuse: Bad value for 'group_id' [ 171.805517][ T36] audit: type=1400 audit(1761749925.693:814): avc: denied { audit_write } for pid=8329 comm="syz.6.2693" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 171.923438][ T8332] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 171.923456][ T8332] rust_binder: Error while translating object. [ 171.935850][ T8332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.942206][ T8332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 172.033840][ T8341] rust_binder: 8340 RLIMIT_NICE not set [ 172.233778][ T8347] rust_binder: Error while translating object. [ 172.239467][ T8347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.246008][ T8347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 172.265172][ T36] audit: type=1400 audit(1761749926.125:815): avc: denied { write } for pid=8348 comm="syz.6.2700" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.426451][ T8369] GUP no longer grows the stack in syz.5.2707 (8369): 200000005000-200000008000 (200000004000) [ 172.437310][ T8369] CPU: 1 UID: 0 PID: 8369 Comm: syz.5.2707 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 172.437340][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.437352][ T8369] Call Trace: [ 172.437358][ T8369] [ 172.437365][ T8369] __dump_stack+0x21/0x30 [ 172.437394][ T8369] dump_stack_lvl+0x10c/0x190 [ 172.437416][ T8369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.437439][ T8369] ? futex_lock_pi_atomic+0xdd/0xc70 [ 172.437476][ T8369] dump_stack+0x19/0x20 [ 172.437497][ T8369] fixup_user_fault+0x63d/0x6d0 [ 172.437520][ T8369] fault_in_user_writeable+0x76/0xe0 [ 172.437535][ T8369] futex_lock_pi+0x258/0xa10 [ 172.437554][ T8369] ? futex_unqueue+0x136/0x160 [ 172.437572][ T8369] ? should_fail+0xf/0x20 [ 172.437589][ T8369] ? __cfi_futex_lock_pi+0x10/0x10 [ 172.437609][ T8369] ? __cfi_futex_wake_mark+0x10/0x10 [ 172.437630][ T8369] ? futex_setup_timer+0xb4/0xd0 [ 172.437645][ T8369] ? __cfi_futex_wake_mark+0x10/0x10 [ 172.437659][ T8369] ? up_read+0x6a/0x1d0 [ 172.437672][ T8369] do_futex+0x25c/0x500 [ 172.437682][ T8369] ? __cfi_do_futex+0x10/0x10 [ 172.437691][ T8369] ? vm_mmap_pgoff+0x145/0x4e0 [ 172.437702][ T8369] __se_sys_futex+0x28f/0x300 [ 172.437712][ T8369] ? __x64_sys_futex+0x110/0x110 [ 172.437722][ T8369] ? __kasan_check_write+0x18/0x20 [ 172.437737][ T8369] __x64_sys_futex+0xe9/0x110 [ 172.437746][ T8369] x64_sys_call+0x227f/0x2ee0 [ 172.437760][ T8369] do_syscall_64+0x58/0xf0 [ 172.437772][ T8369] ? clear_bhb_loop+0x50/0xa0 [ 172.437784][ T8369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.437794][ T8369] RIP: 0033:0x7f044078efc9 [ 172.437804][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.437814][ T8369] RSP: 002b:00007f04416e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.437827][ T8369] RAX: ffffffffffffffda RBX: 00007f04409e5fa0 RCX: 00007f044078efc9 [ 172.437842][ T8369] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 172.437849][ T8369] RBP: 00007f0440811f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.437856][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.437862][ T8369] R13: 00007f04409e6038 R14: 00007f04409e5fa0 R15: 00007ffec82e6498 [ 172.437878][ T8369] [ 172.701745][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 172.862787][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.873772][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.883639][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.896590][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.905707][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.914363][ T9] usb 1-1: config 0 descriptor?? [ 173.134624][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 173.142343][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 173.150141][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 173.157775][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 173.165461][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 173.172998][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 173.180677][ T9] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 173.192138][ T9] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 173.210215][ T9] usb 1-1: USB disconnect, device number 34 [ 173.232507][ T8391] __vm_enough_memory: pid: 8391, comm: syz.0.2714, bytes: 18014402804453376 not enough memory for the allocation [ 173.252973][ T8394] rust_binder: Write failure EFAULT in pid:377 [ 173.260705][ T36] audit: type=1400 audit(1761749927.063:816): avc: denied { map } for pid=8395 comm="syz.0.2716" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.188513][ T8417] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 174.188532][ T8417] rust_binder: Error while translating object. [ 174.200671][ T8417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.206885][ T8417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 174.482033][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 174.631047][ T10] usb 1-1: device descriptor read/64, error -71 [ 174.709002][ T8428] overlayfs: failed to clone upperpath [ 174.886823][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.041702][ T8448] /dev/loop0: Can't lookup blockdev [ 175.109965][ T36] audit: type=1400 audit(1761749928.799:817): avc: denied { accept } for pid=8467 comm="syz.5.2743" lport=3618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 175.142602][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 175.152883][ T8475] cgroup: none used incorrectly [ 175.281140][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.538845][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.654343][ T10] usb usb1-port1: attempt power cycle [ 175.863523][ T8500] netlink: 'syz.2.2755': attribute type 46 has an invalid length. [ 175.980078][ T8510] devpts: called with bogus options [ 175.994151][ T8512] netlink: 'syz.2.2759': attribute type 1 has an invalid length. [ 176.027564][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 176.049601][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.086766][ T36] audit: type=1326 audit(1761749929.718:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8539 comm="syz.2.2769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f537678efc9 code=0x0 [ 176.188461][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.442966][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 176.465910][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.502506][ T8560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 176.502590][ T8560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:61 [ 176.548025][ T36] audit: type=1400 audit(1761749930.150:819): avc: denied { map } for pid=8565 comm="syz.6.2779" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.576563][ T8566] netlink: 'syz.6.2779': attribute type 27 has an invalid length. [ 176.605611][ T8566] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 176.626684][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.733083][ T8570] fuse: Bad value for 'rootmode' [ 176.739026][ T8570] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 176.748357][ T8570] rust_binder: Write failure EFAULT in pid:71 [ 176.752355][ T10] usb usb1-port1: unable to enumerate USB device [ 176.819889][ T8577] rust_binder: Write failure EFAULT in pid:78 [ 177.010814][ T36] audit: type=1400 audit(1761749930.591:820): avc: denied { write } for pid=8589 comm="syz.2.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.051953][ T8594] 9p: Unknown access argument f Q#㌂#: -22 [ 177.536359][ T8611] rust_binder: Error while translating object. [ 177.536381][ T8611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 177.542590][ T8611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:393 [ 177.967156][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 178.109273][ T8639] overlayfs: failed to clone lowerpath [ 178.161783][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 178.182600][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.192910][ T9] usb 1-1: config 0 has no interface number 0 [ 178.202424][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.213437][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.223290][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 178.235679][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.249704][ T9] usb 1-1: config 0 descriptor?? [ 178.606406][ T8688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 178.606559][ T8688] rust_binder: Read failure Err(EFAULT) in pid:85 [ 178.644943][ T8692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.651479][ T8692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 178.815974][ T36] audit: type=1326 audit(1761749932.279:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.5.2831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f044078efc9 code=0x0 [ 180.158040][ T36] audit: type=1400 audit(1761749933.537:822): avc: denied { associate } for pid=8752 comm="syz.5.2843" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 180.182054][ T8751] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 180.189087][ T8751] overlayfs: failed to set xattr on upper [ 180.194851][ T8751] overlayfs: ...falling back to redirect_dir=nofollow. [ 180.201757][ T8751] overlayfs: ...falling back to uuid=null. [ 180.207833][ T8751] overlayfs: failed to clone lowerpath [ 180.734863][ T36] audit: type=1326 audit(1761749934.081:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.2.2845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f537678efc9 code=0x0 [ 180.842723][ T8757] bpf: Bad value for 'gid' [ 180.884249][ T9] uclogic 0003:28BD:0094.000D: failed retrieving string descriptor #100: -71 [ 180.896563][ T8759] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2846'. [ 180.905697][ T9] uclogic 0003:28BD:0094.000D: failed retrieving pen parameters: -71 [ 180.917246][ T9] uclogic 0003:28BD:0094.000D: pen probing failed: -71 [ 180.924343][ T9] uclogic 0003:28BD:0094.000D: failed probing parameters: -71 [ 180.932153][ T9] uclogic 0003:28BD:0094.000D: probe with driver uclogic failed with error -71 [ 180.942691][ T9] usb 1-1: USB disconnect, device number 39 [ 181.104621][ T8770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 181.104658][ T8770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:415 [ 181.123074][ T8785] 9pnet_fd: Insufficient options for proto=fd [ 181.369122][ T8807] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.378541][ T8807] kvm: pic: non byte read [ 181.383271][ T8807] kvm: pic: level sensitive irq not supported [ 181.383360][ T8807] kvm: pic: non byte read [ 181.394175][ T8807] kvm: pic: level sensitive irq not supported [ 181.394252][ T8807] kvm: pic: non byte read [ 181.405410][ T8807] kvm: pic: level sensitive irq not supported [ 181.405520][ T8807] kvm: pic: non byte read [ 181.431450][ T8807] rust_binder: inc_ref_done called when no active inc_refs [ 181.510973][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 181.528139][ T8823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2867'. [ 181.548737][ T8823] 8021q: VLANs not supported on ip_vti0 [ 181.554556][ T8823] binder: Bad value for 'max' [ 181.631696][ T36] audit: type=1400 audit(1761749934.916:824): avc: denied { create } for pid=8830 comm="syz.2.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 181.964178][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 182.124024][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 182.130502][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.138919][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.147661][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7 [ 182.160004][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.169123][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.177125][ T10] usb 1-1: Product: syz [ 182.181299][ T10] usb 1-1: Manufacturer: syz [ 182.185912][ T10] usb 1-1: SerialNumber: syz [ 182.405584][ T8835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:430 [ 183.175878][ T8949] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 183.194988][ T36] audit: type=1400 audit(1761749936.389:825): avc: denied { relabelto } for pid=8948 comm="syz.5.2901" name="356" dev="tmpfs" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 183.223127][ T36] audit: type=1400 audit(1761749936.389:826): avc: denied { associate } for pid=8948 comm="syz.5.2901" name="356" dev="tmpfs" ino=1938 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 183.231728][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2902'. [ 183.250543][ T36] audit: type=1400 audit(1761749936.417:827): avc: denied { write } for pid=4874 comm="syz-executor" name="356" dev="tmpfs" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 183.250575][ T36] audit: type=1400 audit(1761749936.417:828): avc: denied { remove_name } for pid=4874 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 183.250598][ T36] audit: type=1400 audit(1761749936.417:829): avc: denied { rmdir } for pid=4874 comm="syz-executor" name="356" dev="tmpfs" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 183.339401][ T8955] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2902'. [ 183.372274][ T8959] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 183.379340][ T8959] rust_binder: 102: no such ref 3 [ 183.384635][ T8959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 183.388878][ T8960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.411318][ T36] audit: type=1400 audit(1761749936.586:830): avc: denied { setattr } for pid=8963 comm="syz.6.2905" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 184.215949][ T36] audit: type=1400 audit(1761749937.346:831): avc: denied { checkpoint_restore } for pid=8986 comm="syz.2.2914" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.292367][ T8990] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.299635][ T8990] overlayfs: failed to set xattr on upper [ 184.305624][ T8990] overlayfs: ...falling back to redirect_dir=nofollow. [ 184.312600][ T8990] overlayfs: ...falling back to uuid=null. [ 184.799781][ T10] usb 1-1: 2:1 : unsupported format bits 0x800 [ 184.811295][ T10] usb 1-1: USB disconnect, device number 40 [ 184.820100][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.255847][ T9033] overlayfs: failed to clone lowerpath [ 185.367679][ T9045] fuse: Unknown parameter 'j0x0000000000000004' [ 185.711800][ T9065] fuse: Invalid rootmode [ 185.716593][ T9065] bridge0: port 3(ip6gretap0) entered blocking state [ 185.723285][ T9065] bridge0: port 3(ip6gretap0) entered disabled state [ 185.730074][ T9065] ip6gretap0: entered allmulticast mode [ 185.735889][ T9065] ip6gretap0: entered promiscuous mode [ 185.741474][ T9065] bridge0: port 3(ip6gretap0) entered blocking state [ 185.748185][ T9065] bridge0: port 3(ip6gretap0) entered forwarding state [ 185.825565][ T9066] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 185.995631][ T9092] incfs: Backing dir is not set, filesystem can't be mounted. [ 186.003157][ T9092] incfs: mount failed -2 [ 186.141373][ T9094] x_tables: duplicate underflow at hook 1 [ 186.165011][ T9098] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.2953'. [ 186.176697][ T9099] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.2953'. [ 186.210813][ T9105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2955'. [ 186.663138][ T9122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 186.663173][ T9122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:115 [ 186.683715][ T9127] binder: Unknown parameter 'defcontext01777777777777777777777' [ 186.777767][ T9135] tmpfs: Unknown parameter ';k6|.yy{[ub W۪wU' [ 187.009733][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.018311][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.261513][ T1360] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 187.432051][ T1360] usb 1-1: Using ep0 maxpacket: 8 [ 187.438179][ T1360] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 187.446659][ T1360] usb 1-1: config 179 has no interface number 0 [ 187.452988][ T1360] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 187.464631][ T1360] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 187.475874][ T1360] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 187.486008][ T1360] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 187.499353][ T1360] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 187.508400][ T1360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.517742][ T9150] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 187.739904][ T1360] usb 1-1: USB disconnect, device number 41 [ 187.772882][ T9183] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2982'. [ 187.782659][ T9183] 9pnet_fd: Insufficient options for proto=fd [ 188.350384][ T9210] rust_binder: Write failure EFAULT in pid:471 [ 188.690885][ T9225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 188.697109][ T9225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:485 [ 188.782724][ T9232] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 189.597401][ T9254] rust_binder: Error while translating object. [ 189.597444][ T9254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.603630][ T9254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:503 [ 189.664670][ T9260] syz.5.3013: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 189.689551][ T9260] CPU: 1 UID: 0 PID: 9260 Comm: syz.5.3013 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 189.689583][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.689597][ T9260] Call Trace: [ 189.689604][ T9260] [ 189.689612][ T9260] __dump_stack+0x21/0x30 [ 189.689643][ T9260] dump_stack_lvl+0x10c/0x190 [ 189.689679][ T9260] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.689704][ T9260] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 189.689729][ T9260] dump_stack+0x19/0x20 [ 189.689750][ T9260] warn_alloc+0x1bc/0x2a0 [ 189.689773][ T9260] ? __cfi_warn_alloc+0x10/0x10 [ 189.689796][ T9260] ? kasan_save_track+0x4f/0x80 [ 189.689813][ T9260] ? __kasan_kmalloc+0x96/0xb0 [ 189.689831][ T9260] ? __kmalloc_cache_noprof+0x24c/0x490 [ 189.689847][ T9260] ? do_sock_setsockopt+0x26d/0x400 [ 189.689873][ T9260] ? __x64_sys_setsockopt+0x1b8/0x250 [ 189.689897][ T9260] ? x64_sys_call+0x2adc/0x2ee0 [ 189.689920][ T9260] ? do_syscall_64+0x58/0xf0 [ 189.689940][ T9260] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.689958][ T9260] __vmalloc_node_range_noprof+0x135/0x1420 [ 189.689986][ T9260] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 189.690009][ T9260] ? kasan_save_alloc_info+0x40/0x50 [ 189.690031][ T9260] ? __kasan_kmalloc+0x96/0xb0 [ 189.690047][ T9260] ? __kmalloc_cache_noprof+0x24c/0x490 [ 189.690063][ T9260] ? futex_setup_timer+0xb4/0xd0 [ 189.690077][ T9260] vmalloc_user_noprof+0x77/0x90 [ 189.690098][ T9260] ? xskq_create+0xdb/0x2a0 [ 189.690120][ T9260] xskq_create+0xdb/0x2a0 [ 189.690141][ T9260] xsk_init_queue+0xb6/0x120 [ 189.690162][ T9260] xsk_setsockopt+0x43f/0x6f0 [ 189.690183][ T9260] ? __cfi_xsk_setsockopt+0x10/0x10 [ 189.690204][ T9260] ? do_futex+0x309/0x500 [ 189.690220][ T9260] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 189.690239][ T9260] ? security_socket_setsockopt+0x33/0xd0 [ 189.690256][ T9260] ? __cfi_xsk_setsockopt+0x10/0x10 [ 189.690278][ T9260] do_sock_setsockopt+0x26d/0x400 [ 189.690301][ T9260] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 189.690324][ T9260] __x64_sys_setsockopt+0x1b8/0x250 [ 189.690348][ T9260] x64_sys_call+0x2adc/0x2ee0 [ 189.690371][ T9260] do_syscall_64+0x58/0xf0 [ 189.690392][ T9260] ? clear_bhb_loop+0x50/0xa0 [ 189.690411][ T9260] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.690430][ T9260] RIP: 0033:0x7f044078efc9 [ 189.690446][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.690465][ T9260] RSP: 002b:00007f04416e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 189.690486][ T9260] RAX: ffffffffffffffda RBX: 00007f04409e5fa0 RCX: 00007f044078efc9 [ 189.690501][ T9260] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 189.690513][ T9260] RBP: 00007f0440811f91 R08: 0000000000000004 R09: 0000000000000000 [ 189.690527][ T9260] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.690540][ T9260] R13: 00007f04409e6038 R14: 00007f04409e5fa0 R15: 00007ffec82e6498 [ 189.690558][ T9260] [ 189.690566][ T9260] Mem-Info: [ 189.716511][ T9269] overlayfs: failed to clone upperpath [ 189.718987][ T9260] active_anon:23506 inactive_anon:7 isolated_anon:0 [ 189.718987][ T9260] active_file:9668 inactive_file:14598 isolated_file:0 [ 189.718987][ T9260] unevictable:16395 dirty:64 writeback:0 [ 189.718987][ T9260] slab_reclaimable:6306 slab_unreclaimable:75875 [ 189.718987][ T9260] mapped:24705 shmem:16635 pagetables:1072 [ 189.718987][ T9260] sec_pagetables:0 bounce:0 [ 189.718987][ T9260] kernel_misc_reclaimable:0 [ 189.718987][ T9260] free:1460684 free_pcp:24544 free_cma:0 [ 190.039824][ T9260] Node 0 active_anon:94084kB inactive_anon:28kB active_file:38672kB inactive_file:58392kB unevictable:65580kB isolated(anon):0kB isolated(file):0kB mapped:98776kB dirty:256kB writeback:0kB shmem:66468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6424kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no [ 190.072614][ T9260] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5724kB free_cma:0kB [ 190.102765][ T9260] lowmem_reserve[]: 0 3921 3921 [ 190.107661][ T9260] Normal free:2890108kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93984kB inactive_anon:28kB active_file:38672kB inactive_file:58392kB unevictable:65580kB writepending:256kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:84868kB local_pcp:14820kB free_cma:0kB [ 190.140464][ T9260] lowmem_reserve[]: 0 0 0 [ 190.144883][ T9260] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 190.160478][ T9260] Normal: 268*4kB (UME) 527*8kB (UME) 393*16kB (UME) 332*32kB (UME) 61*64kB (UME) 45*128kB (UME) 21*256kB (UME) 11*512kB (UME) 3*1024kB (UE) 10*2048kB (UME) 693*4096kB (UM) = 2904952kB [ 190.179436][ T9260] 57309 total pagecache pages [ 190.182001][ T1360] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 190.184297][ T9260] 35 pages in swap cache [ 190.196019][ T9260] Free swap = 124532kB [ 190.200212][ T9260] Total swap = 124996kB [ 190.204389][ T9260] 2097051 pages RAM [ 190.208178][ T9260] 0 pages HighMem/MovableOnly [ 190.212831][ T9260] 351537 pages reserved [ 190.217021][ T9260] 0 pages cma reserved [ 190.222311][ T9260] Memory allocations: [ 190.226346][ T9260] 0 B 0 init/main.c:1370 func:do_initcalls [ 190.233632][ T9260] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 190.241820][ T9260] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 190.249617][ T9260] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 190.257742][ T9260] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 190.265656][ T9260] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 190.274340][ T9260] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 190.282263][ T9260] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 190.290228][ T9260] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 190.298122][ T9260] 0 B 0 init/initramfs.c:101 func:find_link [ 190.336898][ T9283] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3022'. [ 190.352536][ T1360] usb 1-1: Using ep0 maxpacket: 8 [ 190.362937][ T1360] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.372912][ T1360] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice=19.01 [ 190.382118][ T1360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.390245][ T1360] usb 1-1: Product: syz [ 190.404107][ T1360] usb 1-1: Manufacturer: syz [ 190.408776][ T1360] usb 1-1: SerialNumber: syz [ 190.409913][ T9290] overlayfs: failed to clone upperpath [ 190.640245][ T9256] rust_binder: Error in use_page_slow: ESRCH [ 190.640300][ T9256] rust_binder: use_range failure ESRCH [ 190.646658][ T9256] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 190.652351][ T9256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 190.660653][ T9256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:505 [ 190.679898][ T1360] usb 1-1: USB disconnect, device number 42 [ 190.711654][ T9326] fuse: Bad value for 'rootmode' [ 190.718487][ T9326] fuse: Bad value for 'rootmode' [ 190.723719][ T9326] fuse: Bad value for 'rootmode' [ 190.729095][ T9326] fuse: Bad value for 'rootmode' [ 190.737089][ T9326] fuse: Bad value for 'rootmode' [ 190.742948][ T9326] fuse: Bad value for 'rootmode' [ 190.748247][ T9326] fuse: Bad value for 'rootmode' [ 190.754001][ T9326] fuse: Bad value for 'rootmode' [ 190.756171][ T9331] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 190.759870][ T9326] fuse: Bad value for 'rootmode' [ 190.769004][ T36] audit: type=1400 audit(1761749943.476:832): avc: denied { relabelfrom } for pid=9330 comm="syz.6.3039" name="NETLINK" dev="sockfs" ino=44645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 190.804167][ T9344] 9pnet_fd: Insufficient options for proto=fd [ 190.812250][ T36] audit: type=1400 audit(1761749943.523:833): avc: denied { relabelto } for pid=9330 comm="syz.6.3039" name="NETLINK" dev="sockfs" ino=44645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 190.984964][ T9382] netlink: 'syz.5.3053': attribute type 64 has an invalid length. [ 191.023436][ T9382] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3053'. [ 191.343130][ T9410] SELinux: security_context_str_to_sid () failed with errno=-22 [ 191.397141][ T9419] input: syz0 as /devices/virtual/input/input32 [ 191.412784][ T9419] rust_binder: 516: no such ref 1 [ 191.570965][ T36] audit: type=1400 audit(1761749944.236:834): avc: denied { nlmsg_write } for pid=9435 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 191.631596][ T36] audit: type=1400 audit(1761749944.236:835): avc: denied { audit_write } for pid=9435 comm="syz.0.3071" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 191.679863][ T36] audit: type=1107 audit(1761749944.236:836): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 191.849854][ T36] audit: type=1326 audit(1761749944.508:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 191.876795][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 191.968994][ T9456] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 192.004858][ T36] audit: type=1326 audit(1761749944.593:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 192.047277][ T36] audit: type=1326 audit(1761749944.593:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 192.089918][ T36] audit: type=1326 audit(1761749944.593:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 192.121886][ T36] audit: type=1326 audit(1761749944.593:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f044078efc9 code=0x7ffc0000 [ 192.187209][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.195359][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 192.203908][ T10] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 192.212106][ T10] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 192.228465][ T10] usb 1-1: config 17 has no interface number 0 [ 192.234761][ T10] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 192.256563][ T10] usb 1-1: config 17 interface 8 has no altsetting 0 [ 192.264748][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 192.273909][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.283404][ T10] usb 1-1: Product: syz [ 192.287734][ T10] usb 1-1: Manufacturer: syz [ 192.292345][ T10] usb 1-1: SerialNumber: syz [ 192.521894][ T9437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 192.521923][ T9437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:523 [ 192.535112][ T10] usb 1-1: selecting invalid altsetting 0 [ 192.551092][ T10] usb 1-1: 8:6 : no UAC_FORMAT_TYPE desc [ 192.556769][ T10] usb 1-1: selecting invalid altsetting 0 [ 192.566123][ T10] usb 1-1: USB disconnect, device number 43 [ 192.742790][ T9467] netlink: 'syz.5.3081': attribute type 4 has an invalid length. [ 192.756351][ T9468] netlink: 'syz.5.3081': attribute type 4 has an invalid length. [ 192.823707][ T9467] overlayfs: failed to clone upperpath [ 193.231361][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 193.240544][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 193.586785][ T9515] fuse: Bad value for 'fd' [ 193.791877][ T9544] loop5: detected capacity change from 0 to 7 [ 193.848094][ C1] blk_print_req_error: 2 callbacks suppressed [ 193.848113][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 193.861024][ T9545] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 193.863988][ C1] buffer_io_error: 2 callbacks suppressed [ 193.864000][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 193.871659][ T9545] rust_binder: Write failure EINVAL in pid:532 [ 194.110479][ T9567] /dev/rnullb0: Can't open blockdev [ 194.279099][ T9569] 9pnet_fd: Insufficient options for proto=fd [ 194.461010][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3127'. [ 194.989147][ T9630] rust_binder: 556: no such ref 0 [ 194.994272][ T9630] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 195.001410][ T9630] rust_binder: 556: no such ref 2 [ 195.006461][ T9630] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 195.276873][ T45] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 195.417472][ T9645] devpts: called with bogus options [ 195.434002][ T9647] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3144'. [ 195.459139][ T45] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 195.467343][ T45] usb 1-1: config 0 has no interface number 1 [ 195.473485][ T45] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 195.483352][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.494770][ T45] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 195.503851][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.511863][ T45] usb 1-1: SerialNumber: syz [ 195.516937][ T45] usb 1-1: config 0 descriptor?? [ 195.522752][ T45] usb 1-1: Found UVC 0.00 device (0002:0000) [ 195.529609][ T45] usb 1-1: No valid video chain found. [ 195.695839][ T9649] tipc: Failed to remove unknown binding: 66,1,1/4:1612743334/1612743336 [ 195.704954][ T9649] tipc: Failed to remove unknown binding: 66,1,1/4:1612743334/1612743336 [ 195.713383][ T9649] tipc: Failed to remove unknown binding: 66,1,1/4:1612743334/1612743336 [ 195.730460][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3146'. [ 195.756231][ T9653] 9pnet_fd: Insufficient options for proto=fd [ 195.788403][ T9657] fuse: Bad value for 'fd' [ 195.796471][ T10] usb 1-1: USB disconnect, device number 44 [ 196.025958][ T9670] netlink: 'syz.2.3155': attribute type 16 has an invalid length. [ 196.033855][ T9670] netlink: 'syz.2.3155': attribute type 2 has an invalid length. [ 196.041597][ T9670] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.3155'. [ 196.670758][ T36] kauditd_printk_skb: 489 callbacks suppressed [ 196.670774][ T36] audit: type=1400 audit(1761749949.030:1331): avc: denied { associate } for pid=9706 comm="syz.0.3168" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.703215][ T9714] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 196.703234][ T9714] rust_binder: Error while translating object. [ 196.712151][ T9714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.718399][ T9714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:574 [ 196.743255][ T36] audit: type=1400 audit(1761749949.096:1332): avc: denied { accept } for pid=9719 comm="syz.0.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.803923][ T9720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:582 [ 196.849431][ T9722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9722 comm=syz.0.3172 [ 197.131487][ T1360] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 197.292636][ T1360] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 197.302901][ T1360] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 197.314700][ T1360] usb 1-1: config 1 interface 0 has no altsetting 0 [ 197.322882][ T1360] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 197.332259][ T1360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.340452][ T1360] usb 1-1: Product: syz [ 197.344923][ T1360] usb 1-1: Manufacturer: syz [ 197.349679][ T1360] usb 1-1: SerialNumber: syz [ 197.355542][ T9724] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.363116][ T9724] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.600523][ T36] audit: type=1326 audit(1761749949.903:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9772 comm="syz.0.3188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee3078efc9 code=0x0 [ 197.611800][ T1360] rtl8150 1-1:1.0: couldn't reset the device [ 197.629619][ T1360] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 197.640388][ T1360] usb 1-1: USB disconnect, device number 45 [ 197.685882][ T36] audit: type=1400 audit(1761749949.987:1334): avc: denied { sys_module } for pid=9785 comm="syz.5.3193" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 197.784952][ T9807] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 197.792196][ T9807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 197.816062][ T9811] rust_binder: Write failure EINVAL in pid:161 [ 197.846490][ T36] audit: type=1400 audit(1761749950.137:1335): avc: denied { lock } for pid=9812 comm="syz.6.3204" path="socket:[45858]" dev="sockfs" ino=45858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 197.875880][ T36] audit: type=1400 audit(1761749950.137:1336): avc: denied { setattr } for pid=9812 comm="syz.6.3204" name="NFC_LLCP" dev="sockfs" ino=45858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.048182][ T1360] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 198.156898][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3212'. [ 198.166164][ T9833] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 198.173319][ T9833] rust_binder: Write failure EINVAL in pid:183 [ 198.183029][ T36] audit: type=1400 audit(1761749950.447:1337): avc: denied { mounton } for pid=9834 comm="syz.6.3213" path="/file0" dev="ramfs" ino=45909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 198.183617][ T9835] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 198.221004][ T1360] usb 1-1: device descriptor read/64, error -71 [ 198.325744][ T9849] rust_binder: 199: no such ref 1 [ 198.330857][ T9849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 198.367960][ T9860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.369496][ T36] audit: type=1400 audit(1761749950.616:1338): avc: denied { map } for pid=9857 comm="syz.6.3222" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 198.418424][ T36] audit: type=1400 audit(1761749950.616:1339): avc: denied { execute } for pid=9857 comm="syz.6.3222" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 198.433526][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 198.453421][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3226'. [ 198.474475][ T1360] usb 1-1: device descriptor read/64, error -71 [ 198.501186][ T36] audit: type=1400 audit(1761749950.747:1340): avc: denied { map } for pid=9881 comm="syz.5.3230" path="socket:[46680]" dev="sockfs" ino=46680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.524812][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3230'. [ 198.730296][ T1360] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 198.869062][ T1360] usb 1-1: device descriptor read/64, error -71 [ 199.124662][ T1360] usb 1-1: device descriptor read/64, error -71 [ 199.242078][ T1360] usb usb1-port1: attempt power cycle [ 199.610181][ T1360] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 199.624435][ T9900] 9pnet_fd: Insufficient options for proto=fd [ 199.637397][ T1360] usb 1-1: device descriptor read/8, error -71 [ 199.687104][ T9905] 9pnet_fd: Insufficient options for proto=fd [ 199.775842][ T1360] usb 1-1: device descriptor read/8, error -71 [ 199.915540][ T9923] __nla_validate_parse: 1 callbacks suppressed [ 199.915560][ T9923] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3246'. [ 199.943294][ T9927] netlink: 'syz.2.3248': attribute type 28 has an invalid length. [ 200.030656][ T1360] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 200.049844][ T9959] netlink: 'syz.2.3260': attribute type 16 has an invalid length. [ 200.058820][ T1360] usb 1-1: device descriptor read/8, error -71 [ 200.202329][ T1360] usb 1-1: device descriptor read/8, error -71 [ 200.318556][ T1360] usb usb1-port1: unable to enumerate USB device [ 200.798353][ T9989] 9pnet_fd: Insufficient options for proto=fd [ 200.814618][ T9989] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 200.888757][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 200.899079][T10008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595 [ 200.921040][T10014] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 200.930294][T10014] rust_binder: Read failure Err(EFAULT) in pid:597 [ 201.299087][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 201.448285][ T10] usb 1-1: device descriptor read/64, error -71 [ 201.477998][T10081] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3302'. [ 201.699634][T10128] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3318'. [ 201.704122][ T10] usb 1-1: device descriptor read/64, error -71 [ 201.970551][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 202.001362][T10160] netlink: 'syz.5.3329': attribute type 21 has an invalid length. [ 202.009349][T10160] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3329'. [ 202.040546][T10165] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3331'. [ 202.049867][T10165] z00X: renamed from gretap0 (while UP) [ 202.056341][T10165] z00X: entered allmulticast mode [ 202.109176][ T10] usb 1-1: device descriptor read/64, error -71 [ 202.364929][ T10] usb 1-1: device descriptor read/64, error -71 [ 202.484214][ T10] usb usb1-port1: attempt power cycle [ 202.501095][T10183] fuse: Bad value for 'fd' [ 202.506879][T10183] 9pnet_fd: Insufficient options for proto=fd [ 202.631831][T10202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.632222][T10203] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 202.645957][T10202] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 202.689864][T10206] 9pnet_fd: Insufficient options for proto=fd [ 202.752641][T10222] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3353'. [ 202.844546][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 202.852551][T10232] rust_binder: Write failure EFAULT in pid:224 [ 202.866886][ T10] usb 1-1: device descriptor read/8, error -71 [ 203.026772][ T10] usb 1-1: device descriptor read/8, error -71 [ 203.118393][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3367'. [ 203.302873][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 203.335819][ T10] usb 1-1: device descriptor read/8, error -71 [ 203.474465][ T10] usb 1-1: device descriptor read/8, error -71 [ 203.590735][ T10] usb usb1-port1: unable to enumerate USB device [ 204.188092][T10311] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 204.196330][T10311] __vm_enough_memory: pid: 10311, comm: syz.0.3381, bytes: 18014402804453376 not enough memory for the allocation [ 204.225425][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 204.225442][ T36] audit: type=1404 audit(1761749956.114:1349): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 204.301434][ T36] audit: type=1400 audit(1761749956.189:1350): avc: denied { shutdown } for pid=10316 comm="syz.0.3383" lport=12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 204.322079][ T36] audit: type=1400 audit(1761749956.189:1351): avc: denied { read } for pid=10316 comm="syz.0.3383" path="socket:[47705]" dev="sockfs" ino=47705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 204.347406][ T36] audit: type=1400 audit(1761749956.189:1352): avc: denied { read } for pid=10316 comm="syz.0.3383" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 204.370154][ T36] audit: type=1400 audit(1761749956.189:1353): avc: denied { read write } for pid=10316 comm="syz.0.3383" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 204.393755][ T36] audit: type=1400 audit(1761749956.189:1354): avc: denied { mounton } for pid=10316 comm="syz.0.3383" path="/205" dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 204.591327][ T36] audit: type=1400 audit(1761749956.461:1355): avc: denied { create } for pid=10319 comm="syz.5.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 204.611136][ T36] audit: type=1400 audit(1761749956.480:1356): avc: denied { create } for pid=10319 comm="syz.5.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 206.083767][ T36] audit: type=1400 audit(1761749957.859:1357): avc: denied { create } for pid=10322 comm="syz.5.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 206.103898][ T36] audit: type=1400 audit(1761749957.868:1358): avc: denied { create } for pid=10322 comm="syz.5.3385" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 206.522997][T10377] futex_wake_op: syz.6.3405 tries to shift op by -1; fix this program [ 207.418219][T10442] cgroup: fork rejected by pids controller in /syz5 [ 207.894196][T10529] netlink: 'syz.2.3435': attribute type 16 has an invalid length. [ 207.902141][T10529] netlink: 'syz.2.3435': attribute type 3 has an invalid length. [ 207.910138][T10529] netlink: 64054 bytes leftover after parsing attributes in process `syz.2.3435'. [ 207.979555][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3438'. [ 208.000567][T10538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10538 comm=syz.0.3439 [ 208.014851][T10538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10538 comm=syz.0.3439 [ 208.028131][T10538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10538 comm=syz.0.3439 [ 209.164440][T10653] netlink: 'syz.5.3480': attribute type 4 has an invalid length. [ 209.562000][ T36] kauditd_printk_skb: 493 callbacks suppressed [ 209.562045][ T36] audit: type=1400 audit(1761749961.124:1852): avc: denied { create } for pid=10684 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 209.644897][ T36] audit: type=1400 audit(1761749961.124:1853): avc: denied { create } for pid=10684 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 209.692217][ T36] audit: type=1400 audit(1761749961.124:1854): avc: denied { create } for pid=10684 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 209.743951][ T36] audit: type=1400 audit(1761749961.124:1855): avc: denied { create } for pid=10684 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 209.782985][ T36] audit: type=1400 audit(1761749961.124:1856): avc: denied { create } for pid=10684 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 209.804208][ T36] audit: type=1400 audit(1761749961.124:1857): avc: denied { create } for pid=10684 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 209.824473][ T36] audit: type=1400 audit(1761749961.124:1858): avc: denied { create } for pid=10684 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 209.845403][ T36] audit: type=1400 audit(1761749961.124:1859): avc: denied { mounton } for pid=10686 comm="syz.5.3492" path="/598/file0" dev="tmpfs" ino=3255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 209.869253][ T36] audit: type=1400 audit(1761749961.368:1860): avc: denied { create } for pid=10691 comm="syz.2.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 209.891260][ T36] audit: type=1400 audit(1761749961.368:1861): avc: denied { create } for pid=10691 comm="syz.2.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 215.300431][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 215.300448][ T36] audit: type=1400 audit(1761749966.509:1944): avc: denied { execmem } for pid=10759 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 215.327934][T10765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10765 comm=syz.2.3517 [ 215.347229][ T36] audit: type=1400 audit(1761749966.509:1945): avc: denied { read } for pid=10760 comm="syz.0.3516" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 215.378316][ T36] audit: type=1400 audit(1761749966.509:1946): avc: denied { read } for pid=10760 comm="syz.0.3516" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 215.409016][ T36] audit: type=1400 audit(1761749966.518:1947): avc: denied { read write } for pid=6819 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.436274][ T36] audit: type=1400 audit(1761749966.546:1948): avc: denied { execmem } for pid=10764 comm="syz.2.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 215.457825][ T36] audit: type=1400 audit(1761749966.640:1949): avc: denied { read write } for pid=8220 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.481763][ T36] audit: type=1400 audit(1761749967.616:1950): avc: denied { execmem } for pid=10769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 216.501873][ T36] audit: type=1400 audit(1761749967.616:1951): avc: denied { read write } for pid=8220 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.526051][ T36] audit: type=1400 audit(1761749967.635:1952): avc: denied { read write } for pid=10770 comm="syz.0.3519" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 216.549390][ T36] audit: type=1400 audit(1761749967.644:1953): avc: denied { read write } for pid=6819 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 217.853688][T10782] netlink: 393 bytes leftover after parsing attributes in process `syz.6.3524'. [ 220.677575][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 220.677590][ T36] audit: type=1400 audit(1761749971.547:2007): avc: denied { read write } for pid=10800 comm="syz.6.3530" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 220.684078][T10803] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3530'. [ 220.714894][ T36] audit: type=1400 audit(1761749971.556:2008): avc: denied { read write } for pid=10800 comm="syz.6.3530" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 220.737516][T10806] netlink: 'syz.2.3529': attribute type 27 has an invalid length. [ 220.739904][ T36] audit: type=1400 audit(1761749971.556:2009): avc: denied { execmem } for pid=10799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 220.767398][ T36] audit: type=1400 audit(1761749971.556:2010): avc: denied { create } for pid=10802 comm="syz.0.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 220.788011][ T36] audit: type=1400 audit(1761749971.556:2011): avc: denied { create } for pid=10802 comm="syz.0.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 220.808676][ T36] audit: type=1400 audit(1761749971.556:2012): avc: denied { read write } for pid=10802 comm="syz.0.3528" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:boot_t:s0" [ 220.835503][ T36] audit: type=1400 audit(1761749971.556:2013): avc: denied { name_bind } for pid=10801 comm="syz.2.3529" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 220.857333][ T36] audit: type=1400 audit(1761749971.556:2014): avc: denied { name_bind } for pid=10801 comm="syz.2.3529" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 220.879109][ T36] audit: type=1400 audit(1761749971.585:2015): avc: denied { read write } for pid=6819 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.903311][ T36] audit: type=1400 audit(1761749971.594:2016): avc: denied { mounton } for pid=10800 comm="syz.6.3530" path="/129" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 220.928096][T10806] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.935258][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.769329][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 227.769345][ T36] audit: type=1400 audit(1761749978.208:2053): avc: denied { execmem } for pid=10840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 227.794998][ T36] audit: type=1400 audit(1761749978.218:2054): avc: denied { mounton } for pid=10842 comm="syz.0.3541" path="/237/file0" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 227.817783][ T36] audit: type=1400 audit(1761749978.218:2055): avc: denied { mounton } for pid=10842 comm="syz.0.3541" path="/237/file0" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 227.841038][ T36] audit: type=1400 audit(1761749978.218:2056): avc: denied { read } for pid=10842 comm="syz.0.3541" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 227.863861][ T36] audit: type=1400 audit(1761749978.218:2057): avc: denied { read write } for pid=6819 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.887943][ T36] audit: type=1400 audit(1761749978.218:2058): avc: denied { name_bind } for pid=10845 comm="syz.6.3543" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 227.909672][ T36] audit: type=1400 audit(1761749978.218:2059): avc: denied { read } for pid=10845 comm="syz.6.3543" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 227.932439][ T36] audit: type=1400 audit(1761749978.218:2060): avc: denied { create } for pid=10845 comm="syz.6.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 227.952709][ T36] audit: type=1400 audit(1761749978.274:2061): avc: denied { create } for pid=10845 comm="syz.6.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 227.972194][ T36] audit: type=1400 audit(1761749978.274:2062): avc: denied { create } for pid=10845 comm="syz.6.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 232.085959][ T2790] bridge_slave_1: left allmulticast mode [ 232.091634][ T2790] bridge_slave_1: left promiscuous mode [ 232.104908][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.117758][ T2790] bridge_slave_0: left allmulticast mode [ 232.123515][ T2790] bridge_slave_0: left promiscuous mode [ 232.134068][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.275262][ T2790] veth1_macvtap: left promiscuous mode [ 232.280783][ T2790] veth0_vlan: left promiscuous mode [ 232.659228][ T2790] bridge_slave_1: left allmulticast mode [ 232.664901][ T2790] bridge_slave_1: left promiscuous mode [ 232.670580][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.677964][ T2790] bridge_slave_0: left allmulticast mode [ 232.683636][ T2790] bridge_slave_0: left promiscuous mode [ 232.689317][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.696823][ T2790] ip6gretap0: left allmulticast mode [ 232.702146][ T2790] ip6gretap0: left promiscuous mode [ 232.707414][ T2790] bridge0: port 3(ip6gretap0) entered disabled state [ 232.714615][ T2790] bridge_slave_1: left allmulticast mode [ 232.720241][ T2790] bridge_slave_1: left promiscuous mode [ 232.725879][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.733638][ T2790] bridge_slave_0: left allmulticast mode [ 232.739274][ T2790] bridge_slave_0: left promiscuous mode [ 232.745079][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.905998][ T2790] veth1_macvtap: left promiscuous mode [ 232.911513][ T2790] veth0_vlan: left promiscuous mode