last executing test programs: 1.654292148s ago: executing program 3 (id=208): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000023c0)='tmpfs\x00', 0x189, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = socket(0x25, 0x4, 0x3) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = socket(0x2, 0x1, 0x3) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000024c0), r0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f00000027c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="a95f0000", @ANYRES16=r4, @ANYBLOB="040029bd7000fddbdf2508000000bc0004800900010073797a30000000000c00078008000400000000001300010062726f6164636173742d6c696e6b00000900010073797a3100000000240007800800040006000000080004000300000008000300af39000008000200080000001300010062726f6164636173742d6c696e6b00002400078008000300ff7f000008000300010000000800030009000000080003004dffffff24000780080003000300000008000400094200000800040005000000080004000700000060000780080002000b0000000c000300600000000000000008000100050000000c00030002000000000000000c00030001000000000000800c000400b6010000000000000c0003000400000000000000080001000100008008000200080000007c0001800e00010069623a6e69637666300000000d00010069623a63616966300000000008000300010001000800030004000000130001006574683a73797a6b616c6c65723000003400028008000400030000000800030020ec00000800020007000000080001001200000008000400080000000800040002000000580004805400078008000400040000000800010010000000080001001e00000008000400040000000800020002000000080001001800000008000200030000000800040007290000080002000000cdd908000100060000004c00038008000100090000000800020000000000080002000100000008000100ffffffff0800020051db00000800020000010000080002000900000008000300f7ffffff0800030055010000240006800400050004000200110003005245357e8e94b48c1c94633dd7000000040002003c0002800400040008000200030000000400040008000200030000000800010001000000080001000400000008000200060000000800020000010000"], 0x2b0}, 0x1, 0x0, 0x0, 0x22000041}, 0x4000804) close_range(r2, r3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x39b3, @mcast1={0xff, 0x7}, 0xfffff001}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}}}, 0x108) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x11) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f00000022c0)={0x3ff, 0x0, 0xff5c}, &(0x7f0000002300)=[{}]) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', &(0x7f0000002400)={0x2000, 0x1, 0x20}, 0x18) mkdirat(r7, 0xfffffffffffffffc, 0xc4) sendfile(r0, r0, &(0x7f0000002380)=0x5, 0x263) r8 = dup3(r6, r1, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x81, 0xfffffffb, 0xfe}) lsm_set_self_attr(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="6500000000000000050002000000000023000000000000000000cfa7ae"], 0x23, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd8, 0x200000000000000, &(0x7f0000002180)="d2d01708fa5259e2d971d9808dc5e6f1d3d5faad3f99d762c6812ae07e09e593c69efdc832292f4d545f10762e339eda3d30a5c97258883b5c527d549b9edc671a236e5f876b692cc47e1f8613d447b10c0e83b735f8adcf5baca37a1489885059485e3dde37d2d035e6168c76960e89cff4a9ced47cdef65c2f7581fd10013dd23ddfc555e7bfc4aaf78b1aadd7e0a6d9b795b38f4836a273c6682ed4ea349bfa3caa2cb19760ec94c6a7c21b683365ede51ffd5f4302b6c9d194468b3aba2dfe7e9929baa55ad358f58e23e577a444d9634031ea3949af"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.002619321s ago: executing program 1 (id=215): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getuid() setreuid(0xee00, r2) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x340, 0x39, 0x100, 0x70bd28, 0x25dfdbfb, {0x11}, [@nested={0x242, 0x4, 0x0, 0x1, [@generic="4ea7efd810a3b2cc60b242e1f561b775cab4d5010743193ba7a7661fe5b4c8f23db7ef836321f14e58e7aed0a4bd3ec66c2bb657c4514b8afd2c6a5e2616a0a3544f7186af38a47254b4bf4f7e2b57c48ce38512f70d38f2a7102a74268da1e63399c89305c2cf7165c4ae6fa2aec35e78bb8488081821725eb5787da89a", @typed={0xa, 0xfd, 0x0, 0x0, @str=']!%/[\x00'}, @generic="c145a8043e535a54561ec370fe1675f1a68f2c07350893680275b8029e4a6ec68a788e84f007558bc4120c8539ab10e41cd513c51c1952089bb4a6e470e4900cbc80b2b70b6a2e653a337b82d603ff6e83e608c82fa36577bd1859a11acab3aa846ed778d8c6222b02d5648299c767e6554879cf0b7cf24e47a7481ca87135d985155db924e8811859c19eef41fc64db9f5562b2f2b85b7485cd9ee33f475173f562df06e981bef3a9faf40f6a021a3853a64c87bf5775e50e", @nested={0x4, 0x8d}, @generic="789d83c52db6b3e5fff0642e52a671fa1e35a51aec41bb2217a35797c4d1b8e474f76ba5844f37c665cfd058aaf7553686fe8ccb1b54328c2839fe3997d0c5324ef08a672afcad91a373334e2977d50b9cc3c5999f369ea026f7b1327456cb228c50bc117fffb6695d7f3551fb873a0e9373adaa06fe3494062e6bb09480930695195d714c27601d41cba04e2d8d571fd40783a9f4d2d74fd88c9641c77092764bc7c505b97389b500ab7f9b73c96ab47259ab7cbd1a64762dde8cc859cbaa0f0f56f1e7aac5506a57d76156611ed66bc5ffc8fb4e9d5e2269acd9cc5caf12f6a8c4cec0333ae474e0b87cceca0ac5d78ae6b9964f4d81"]}, @typed={0x4, 0x9a}, @typed={0x8, 0x121, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x2b, 0xc1, 0x0, 0x0, @binary="4ecdfb1ce90f5bb611de5692bb24f28b16d6567f904f69aaeb464e0af77219be70ae4bf547cfc2"}, @typed={0x8, 0x103, 0x0, 0x0, @uid=r2}, @nested={0x20, 0x7, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x53, 0x0, 0x0, @u64}, @nested={0x4, 0x11}, @nested={0x4, 0xbc}]}, @generic="26ed4ebf05a201cc7d8b5d77491f4f0b6a5ba02518eb51df6daea7db1ce7b599132f643ef15e9206784c8f924350cdb59ec1ca9479171628bd65bc5a5a6eefe91b8687b35815e318afeb9066ef765561685600417c075ffc4afe66632621e23674d29bf840251bb821d84c4e203b11bfd029949a368094ad3be3470387e28ae53418e07d333293b3"]}, 0x340}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000811) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 936.414852ms ago: executing program 1 (id=217): r0 = inotify_init1(0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) (rerun: 32) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 934.920502ms ago: executing program 2 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setregid(0x0, r4) (async) setresgid(r4, r3, r4) (async) close_range(r0, 0xffffffffffffffff, 0x0) 875.019503ms ago: executing program 2 (id=219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = epoll_create(0x7) (async) r3 = epoll_create1(0x80000) r4 = epoll_create(0x7) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) (async) r5 = epoll_create1(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) (async) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000080)={0xa0002010}) (async) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, 0x0, 0x0) (async) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000200)) (async) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) (async) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 865.045243ms ago: executing program 2 (id=220): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000280)=0xffffffffffffffff, 0x3595d79e) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xc0095) write(r0, &(0x7f0000000400)="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", 0x1f000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) sendfile(0xffffffffffffffff, r1, &(0x7f0000000280)=0xffffffffffffffff, 0x3595d79e) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xc0095) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) 810.484155ms ago: executing program 3 (id=221): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 805.042405ms ago: executing program 2 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 803.223735ms ago: executing program 3 (id=223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) unshare(0x62040200) (async) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x105001, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904"], 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd18751300000000"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) (async) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0) unshare(0x4050200) (async) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0xc0044) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) (async) close_range(r0, 0xffffffffffffffff, 0x0) 802.600765ms ago: executing program 2 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x24004000) r1 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000155000/0x2000)=nil, 0x2000, 0x11) (async) madvise(&(0x7f0000155000/0x2000)=nil, 0x2000, 0x11) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x67c73cf113316710}, 0x20000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a8000, 0x0) 801.813385ms ago: executing program 3 (id=225): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) flistxattr(r3, &(0x7f0000000000)=""/28, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = dup(r5) setsockopt$packet_int(r6, 0x65, 0x10, 0x0, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x1, 0x12b, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x3c00, 0x2, 0x3}}) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000340)=@usbdevfs_driver={0x9, 0x0, 0x0}) finit_module(r7, 0x0, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000040)=0x618a, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x80800, &(0x7f0000000c40)="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", 0x1000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="324a168f0ddbe53f5787efa7ecda830c63ddbe131b2fc644ece50a21026ae599a26b3283cc50a6f3e466383ae5db057ebdc782b2b1b86d8abaa30b66daacd56cc3e0b39fe1ca9b8c9c7f364862766d3526ff2c142664b0a63a64b00cd822bfa0d1498e23f464f8ae3430314b563b0d6e8246611bf9d225613e47c4162a8540c09018638efff8597474b21546462b6e2ef100ec6b2ede6f47eeb8a3d4b83a2dea4dfb06f8db4bb9cc9aa672be8a277c61f784e95bdc7712ecfed7772b7e08300415239451b4b2c1785bbc81027253") fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x2, 0x4, 0x0, 0x5, r10}) 743.930716ms ago: executing program 3 (id=226): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="7db7e7e5ecf650acb29dc5e93f89bd35ea9d12ef63b921b7426c9310", 0x1c}, {0x0}], 0x2, 0xfffffff5, 0x8) 733.979856ms ago: executing program 3 (id=227): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="f333e3", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000001) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000040)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22b}], 0x2}}], 0x1, 0x4040001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000640)=0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x7, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0xa, 0x1000008, 0x4c74, 0x80000000, 0x7, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x1, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0x3, 0x3, 0x9, 0x4, 0x7, 0xe1, 0x47, 0x8000, 0x200001, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xee2, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x9, 0xfffffffe, 0x800100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xbc8, 0xbe, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x40005, 0x938, 0x6, 0x6, 0x16, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x1, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0xb, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0xff, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x6, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0x80a0000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'vlan0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000200001"], 0x40}}, 0x90) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x4, &(0x7f0000000240)=[{0x0, 0x70, 0xfe, 0x6}, {0x90}, {0x0, 0x7, 0x7, 0x49}, {0x4, 0x8, 0x3, 0x5}]}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{0x6, 0x3, 0x4, 0x10}, {0x7ff, 0x4, 0x40, 0x5}, {0x467c, 0x6, 0x7, 0xff}, {0x5, 0x25, 0xfa}, {0x1, 0x2, 0x2, 0xff}, {0xc2e, 0xf, 0x7, 0x2}, {0x7, 0x8, 0x52, 0xfe6e}, {0x800, 0xd, 0x80, 0x5}]}, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x8, 0x7, 0xb, 0x0, 0xeb, 0x9, 0x81, 0x9, 0xf7, [0x8000a, 0x224, 0x7ffdffff, 0x8, 0x529, 0x7, 0x4d, 0xb9ac]}}) 674.343247ms ago: executing program 2 (id=228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) pipe(&(0x7f0000001300)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = epoll_create1(0x0) r7 = socket(0x1, 0x80802, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@private1, 0x56}) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x0) bind$bt_hci(r5, &(0x7f00000003c0), 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 130.676678ms ago: executing program 1 (id=232): r0 = getpid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\a\x00\x00\x00SP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r&\"\xff\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00\x00\x00\x00\x00', 0x8) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1, 0x2, 0x2, 0xfd, 0x7, r0}) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) fcntl$setstatus(r3, 0x4, 0x46800) umount2(&(0x7f0000000000)='./file0\x00', 0x2) 81.288068ms ago: executing program 0 (id=235): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103182, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x8020000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000000c0)={0xc223}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) r3 = dup(r0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000180)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x64}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000340)=0x4, &(0x7f0000000380)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) r7 = open(&(0x7f0000000400)='./file0\x00', 0x8000, 0x1a2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) timer_create(0x7, &(0x7f0000000480)={0x0, 0x40, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000004c0)=0x0) timer_settime(r8, 0x0, &(0x7f0000000500)={{0x77359400}, {0x77359400}}, &(0x7f0000000540)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000580)={{r7}, 0x81, 0x4, 0x7f9b}) ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, &(0x7f00000005c0)) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xc3) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000600)) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@private1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000680)=@nullb, r10, &(0x7f0000000800)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r9, 0x942e, 0x0) lseek(r1, 0x800, 0x3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}}, 0x0) 80.899869ms ago: executing program 0 (id=236): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40500, 0x0) read$ptp(r0, &(0x7f0000000040)=""/112, 0x70) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) 49.952099ms ago: executing program 0 (id=237): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0xe5441000) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, &(0x7f0000004480)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x200000, 0x81) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') preadv2(r2, &(0x7f0000002600)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1, 0x1, 0x8, 0x8) (async) read$FUSE(r2, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00004e3000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3e8, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x1f048e83907ec8f}, 0x0) (async) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvfrom$inet(r1, &(0x7f0000000100)=""/147, 0x93, 0x2100, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) pread64(r4, &(0x7f0000000240)=""/36, 0x24, 0x800000000004) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) write$FUSE_LK(r1, &(0x7f0000000200)={0x28, 0xfffffffffffffffe, r7, {{0x4e9f7ed0, 0xff, 0x2, r8}}}, 0x28) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 49.238809ms ago: executing program 0 (id=238): keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1ff, 0x0, 0x7, 0x100}, {0x7fff, 0x42, 0x1, 0xbe0}, {0xdddd, 0x3, 0xff, 0x3}]}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0xa1, 0xc95a, 0xfffffff3, 0x3, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x50, 0x39cc191b, 0x80000000, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x2000003, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x1, 0x1, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x38, 0x6, 0xa, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x1000006, 0x2bf, 0x10000005, 0x1000, 0xfffffffc, 0x0, 0xffffffff, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x2, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x8, 0x8, 0x9, 0x9, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x4000, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x4, 0x1005, 0x0, 0x1f0, 0xfffffff9, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1ff, 0x1000002, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x40000002, 0x1002, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x520002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x77, 0xbb32, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x1, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0xe37, 0x2, 0x14c, 0x60a7, 0x5, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a2d, 0xc, 0x17, 0x1, 0x10, 0x1, 0x2, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r0}) setgroups(0x1, &(0x7f0000000040)=[0x0]) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000440)="4d0100000000fe8006000100e504c50900000000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0), 0x2a000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x1f8c) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x20040) ioctl$LOOP_CLR_FD(r4, 0x4c01) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000500)=[{&(0x7f0000000280)="dc", 0x1}, {&(0x7f0000000100)='v', 0x1}, {&(0x7f0000000480)="9d", 0x1}, {&(0x7f0000000340)="d9", 0x1}], 0x4, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x14100, 0x180) close(r6) socket$inet(0x2, 0xa, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x4aa82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0xfe8e, 0x12) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000300), 0x4) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) 48.091199ms ago: executing program 1 (id=239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) sendto$inet6(r0, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/157, 0x9d, 0x1, 0x0}, &(0x7f0000000180)=0x40) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x1fd) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_clone(0x2028411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000004740)={0x40, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}]}]}]}, 0x40}}, 0x0) ptrace(0x4210, r3) read$eventfd(r2, &(0x7f0000000080), 0x8) 47.842129ms ago: executing program 0 (id=240): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0xc0) sysinfo(&(0x7f0000000140)=""/4096) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 1.80491ms ago: executing program 1 (id=241): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000000)=[@wrmsr={0x1e, 0x20, {0x225, 0x5}}, @cpuid={0x14, 0x18, {0x2, 0x8}}, @code={0xa, 0x4b, {"0f01c8f0808cbc0f000000716d67656736430f238f360f38f63f66b806008ed066baf80cb8205fd784ef66bafc0ced400f07c4417b2dcc0f23e4"}}, @cpuid={0x14, 0x18, {0xa, 0x6}}, @cpuid={0x14, 0x18, {0x9, 0x81}}, @wr_crn={0x46, 0x20, {0x8}}, @wrmsr={0x1e, 0x20, {0xbcf, 0xfff}}, @cpuid={0x14, 0x18, {0x80, 0x6}}, @uexit={0x0, 0x18, 0xb}, @uexit={0x0, 0x18, 0x4}, @wr_crn={0x46, 0x20, {0x4, 0x2}}, @code={0xa, 0x76, {"0f01f80f20d835080000000f22d8c4234d7a6100f366ba4000ed67460f381d9900000000440f20c03506000000440f22c066baf80cb8d0efae85ef66bafc0ced660f754100c7442400336a06c9c744240237000000c7442406000000000f011c240f1b3487"}}, @code={0xa, 0x59, {"66b8bd008ee80f20d835080000000f22d8400f22d6450f005c326266ba2100ecc482f53902c443a9ce39ab66baf80cb8f16cec8eef66bafc0cb000eec4217f1271ebc4e1fa2d411e"}}, @code={0xa, 0x69, {"26660f3a44fa00c441782821460f09420f21a466baf80cb874fb4482ef66bafc0cb800200000efb9800000c00f3235000400000f30b9e40200000f32f3450fbd16b9b6030000b85426001cba000000000f308fe9600161d2"}}, @wrmsr={0x1e, 0x20, {0x929, 0x4}}, @wrmsr={0x1e, 0x20, {0xbbb, 0x1000}}, @code={0xa, 0x61, {"660f38416a48400f01d1f30f09b9800000c00f3235000800000f30b9e2090000b826ffffffbaffffffff0f30403bc2b99b0b00000f32b805000000b9d6b46b820f01d9450fbea9ee66833666ba4100ed"}}, @rdmsr={0x32, 0x18, {0x86c}}, @rdmsr={0x32, 0x18, {0x20f}}, @cpuid={0x14, 0x18, {0x3, 0xfbe8}}, @code={0xa, 0x48, {"430f0966b88e000f00d06533f2b9d40800000f3266b838008ee8c463b56d684f96f36e66410f62a4920ec491640f01cab90f0900000f32"}}, @rdmsr={0x32, 0x18, {0x86d}}, @uexit={0x0, 0x18, 0x9}, @wrmsr={0x1e, 0x20, {0x2c6, 0x4}}], 0x414}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000480)={'\x00', 0x0, 0x9, 0x3, 0x0, 0x1ff, 0x2000, 0xdddd1000, '\x00', 0x3}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000980)={0x0, &(0x7f0000000640)=[@rdmsr={0x32, 0x18, {0xbc1}}, @code={0xa, 0x6e, {"430f320f35660fea81139800002e64360f302e0fc7b9a881000066ba430066b8070066ef66baf80cb8b6697886ef66bafc0cb00deec744240008010000c744240269a2361bff1c24440f011eb909080000b875c8cca0ba6fa30c470f30"}}, @uexit={0x0, 0x18, 0x8}, @wrmsr={0x1e, 0x20, {0xaf7, 0x7f}}, @wr_crn={0x46, 0x20, {0x2, 0x2}}, @code={0xa, 0x5e, {"4768f7cfc0e566b815008ec8c4821db7ba0500000066baf80cb8a210288cef66bafc0cec0f78c366ba4200b8173762a2ef440f20c03508000000440f22c00f094b0fc79f73000000670fc77534"}}, @cpuid={0x14, 0x18, {0x7, 0x1}}, @wr_crn={0x46, 0x20, {0x4, 0xfffffffffffffff7}}, @rdmsr={0x32, 0x18, {0x395}}, @cpuid={0x14, 0x18, {0xeb9b}}, @code={0xa, 0x6f, {"66ba200066b8a36e66ef64470f23cb0f20e035004000000f22e06644f4c7442400e9000000c74424023b580000c7442406000000000f011c240f01f8c48225bc4601470f01cbb9800000c00f3235004000000f308f884887be23b579e29b"}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @wr_crn={0x46, 0x20, {0x4, 0x23c3f14f}}, @cpuid={0x14, 0x18, {0x81, 0x7}}, @rdmsr={0x32, 0x18, {0x400000b2}}, @cpuid={0x14, 0x18, {0x27, 0x7}}, @wrmsr={0x1e, 0x20, {0x843, 0xfd1f}}, @rdmsr={0x32, 0x18, {0xb0a}}, @rdmsr={0x32, 0x18, {0xbdd}}], 0x30b}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) setxattr$security_capability(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), &(0x7f0000000a80)=@v2={0x2000000, [{0x3, 0x7}, {0xa, 0x1000}]}, 0x14, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0x80000000, 0x660400) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000b00)) connect$netlink(0xffffffffffffffff, &(0x7f0000000b40)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x220002, 0x0) lgetxattr(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)=@known='system.advise\x00', &(0x7f0000000c40)=""/88, 0x58) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2000, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000d00)=0x4) r5 = syz_open_dev$mouse(&(0x7f0000000d40), 0x10, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000d80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000f80)=r6) ioctl$FIONCLEX(r3, 0x5450) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000fc0)={0x1, 0x3, 0x10000}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x401}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000001180)=0x2) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) fsetxattr(r5, &(0x7f00000012c0)=@random={'os2.', '/\x00'}, &(0x7f0000001300)=']\x00', 0x2, 0x1) recvfrom(r5, &(0x7f0000001340)=""/159, 0x9f, 0x40, &(0x7f0000001400)=@rc={0x1f, @any, 0x3}, 0x80) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x400, 0x151, 0x51}, 0x18) renameat(r5, &(0x7f0000001480)='./file0\x00', r8, &(0x7f0000001540)='./file0\x00') epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x64, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x23}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x9}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x40}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) fcntl$notify(r2, 0x402, 0x80000020) 1.27525ms ago: executing program 0 (id=242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) getitimer(0x2, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r4, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xe83ff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xec) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000500)={0xdddd1000, 0x5000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 22.070165][ T36] audit: type=1400 audit(1757410216.209:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.071308][ T281] cgroup: Unknown subsys name 'net' [ 22.093001][ T36] audit: type=1400 audit(1757410216.209:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.120880][ T36] audit: type=1400 audit(1757410216.249:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.121032][ T281] cgroup: Unknown subsys name 'devices' [ 22.325951][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.331581][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.422877][ T36] audit: type=1400 audit(1757410216.559:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.446149][ T36] audit: type=1400 audit(1757410216.559:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.462743][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.471003][ T36] audit: type=1400 audit(1757410216.559:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.502498][ T36] audit: type=1400 audit(1757410216.629:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.508933][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.528104][ T36] audit: type=1400 audit(1757410216.629:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.562405][ T36] audit: type=1400 audit(1757410216.649:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.588058][ T36] audit: type=1400 audit(1757410216.649:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.923430][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.930707][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.937840][ T288] bridge_slave_0: entered allmulticast mode [ 23.944195][ T288] bridge_slave_0: entered promiscuous mode [ 23.951657][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.958735][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.965849][ T288] bridge_slave_1: entered allmulticast mode [ 23.972106][ T288] bridge_slave_1: entered promiscuous mode [ 24.003240][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.010412][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.017625][ T289] bridge_slave_0: entered allmulticast mode [ 24.023967][ T289] bridge_slave_0: entered promiscuous mode [ 24.030344][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.037545][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.044631][ T289] bridge_slave_1: entered allmulticast mode [ 24.050995][ T289] bridge_slave_1: entered promiscuous mode [ 24.104898][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.112034][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.119383][ T291] bridge_slave_0: entered allmulticast mode [ 24.125632][ T291] bridge_slave_0: entered promiscuous mode [ 24.131785][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.138875][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.146017][ T290] bridge_slave_0: entered allmulticast mode [ 24.152237][ T290] bridge_slave_0: entered promiscuous mode [ 24.164400][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.171662][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.178834][ T291] bridge_slave_1: entered allmulticast mode [ 24.185067][ T291] bridge_slave_1: entered promiscuous mode [ 24.191209][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.198510][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.205649][ T290] bridge_slave_1: entered allmulticast mode [ 24.211867][ T290] bridge_slave_1: entered promiscuous mode [ 24.355123][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.362303][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.369682][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.376845][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.402748][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.409848][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.417199][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.424249][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.433176][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.440277][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.447605][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.454666][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.466712][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.473822][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.481144][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.488235][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.524468][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.531973][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.540140][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.547611][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.555159][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.562671][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.570106][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.577602][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.588255][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.595364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.606927][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.614007][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.638839][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.645990][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.683961][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.691040][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.698656][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.705790][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.713986][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.721039][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.730491][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.737573][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.745459][ T288] veth0_vlan: entered promiscuous mode [ 24.753703][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.760769][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.775147][ T289] veth0_vlan: entered promiscuous mode [ 24.795817][ T288] veth1_macvtap: entered promiscuous mode [ 24.811573][ T289] veth1_macvtap: entered promiscuous mode [ 24.840331][ T291] veth0_vlan: entered promiscuous mode [ 24.853733][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.862331][ T291] veth1_macvtap: entered promiscuous mode [ 24.909815][ T334] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 24.915678][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.944982][ T290] veth0_vlan: entered promiscuous mode [ 24.964414][ T290] veth1_macvtap: entered promiscuous mode [ 24.979620][ T338] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 25.022039][ T340] ======================================================= [ 25.022039][ T340] WARNING: The mand mount option has been deprecated and [ 25.022039][ T340] and is ignored by this kernel. Remove the mand [ 25.022039][ T340] option from the mount to silence this warning. [ 25.022039][ T340] ======================================================= [ 25.093131][ T349] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.150809][ T353] rust_binder: 350 RLIMIT_NICE not set [ 25.154365][ T10] rust_binder: 346: removing orphan mapping 0:4248 [ 25.241420][ T360] GUP no longer grows the stack in syz.3.9 (360): 200000005000-200000008000 (200000004000) [ 25.252367][ T360] CPU: 0 UID: 0 PID: 360 Comm: syz.3.9 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 25.252399][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 25.252418][ T360] Call Trace: [ 25.252424][ T360] [ 25.252431][ T360] __dump_stack+0x21/0x30 [ 25.252471][ T360] dump_stack_lvl+0x10c/0x190 [ 25.252493][ T360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.252516][ T360] ? futex_lock_pi_atomic+0xdd/0xc70 [ 25.252539][ T360] dump_stack+0x19/0x20 [ 25.252560][ T360] fixup_user_fault+0x63d/0x6d0 [ 25.252581][ T360] fault_in_user_writeable+0x76/0xe0 [ 25.252607][ T360] futex_lock_pi+0x258/0xa10 [ 25.252629][ T360] ? __cfi_futex_lock_pi+0x10/0x10 [ 25.252653][ T360] ? __kasan_check_write+0x18/0x20 [ 25.252679][ T360] ? wake_up_q+0x10f/0x1c0 [ 25.252707][ T360] ? __cfi_futex_wake_mark+0x10/0x10 [ 25.252728][ T360] ? mas_find+0x358/0x5f0 [ 25.252747][ T360] ? __kasan_check_write+0x18/0x20 [ 25.252770][ T360] do_futex+0x25c/0x500 [ 25.252788][ T360] ? __cfi_do_futex+0x10/0x10 [ 25.252805][ T360] ? __vm_munmap+0x2c7/0x370 [ 25.252823][ T360] __se_sys_futex+0x28f/0x300 [ 25.252841][ T360] ? __x64_sys_futex+0x110/0x110 [ 25.252860][ T360] ? __kasan_check_write+0x18/0x20 [ 25.252883][ T360] __x64_sys_futex+0xe9/0x110 [ 25.252906][ T360] x64_sys_call+0x227f/0x2ee0 [ 25.252930][ T360] do_syscall_64+0x58/0xf0 [ 25.252957][ T360] ? clear_bhb_loop+0x50/0xa0 [ 25.252979][ T360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.253000][ T360] RIP: 0033:0x7f8a9d18ebe9 [ 25.253021][ T360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 25.253035][ T360] RSP: 002b:00007f8a9df98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 25.253061][ T360] RAX: ffffffffffffffda RBX: 00007f8a9d3c5fa0 RCX: 00007f8a9d18ebe9 [ 25.253075][ T360] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 25.253087][ T360] RBP: 00007f8a9d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 25.253099][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.253111][ T360] R13: 00007f8a9d3c6038 R14: 00007f8a9d3c5fa0 R15: 00007fff92bfafa8 [ 25.253127][ T360] [ 25.500184][ T359] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 25.666315][ T405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 25.709627][ T414] Zero length message leads to an empty skb [ 25.817879][ T416] lo: entered allmulticast mode [ 25.823668][ T416] lo: left allmulticast mode [ 25.867066][ T429] rust_binder: Error while translating object. [ 25.867136][ T429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 25.875439][ T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 25.932181][ T434] process 'syz.3.25' launched './file0' with NULL argv: empty string added [ 25.962568][ T434] pim6reg1: entered promiscuous mode [ 25.969358][ T434] pim6reg1: entered allmulticast mode [ 26.223659][ T329] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.312403][ T458] bridge0: port 3(syz_tun) entered blocking state [ 26.318974][ T458] bridge0: port 3(syz_tun) entered disabled state [ 26.325900][ T458] syz_tun: entered allmulticast mode [ 26.331918][ T458] syz_tun: entered promiscuous mode [ 26.337872][ T458] bridge0: port 3(syz_tun) entered blocking state [ 26.344370][ T458] bridge0: port 3(syz_tun) entered forwarding state [ 26.374019][ T329] usb 3-1: Using ep0 maxpacket: 8 [ 26.381796][ T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 26.391344][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.399690][ T329] usb 3-1: Product: syz [ 26.404647][ T329] usb 3-1: Manufacturer: syz [ 26.409386][ T329] usb 3-1: SerialNumber: syz [ 26.413853][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.577398][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 26.584122][ T64] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 26.595594][ T64] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 26.605974][ T64] usb 2-1: config 1 interface 0 has no altsetting 0 [ 26.613886][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.614535][ T64] usb 2-1: New USB device found, idVendor=0486, idProduct=0186, bcdDevice= 0.40 [ 26.633586][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.642172][ T64] usb 2-1: Product: 、 [ 26.642285][ T329] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.647035][ T64] usb 2-1: Manufacturer:  [ 26.662385][ T64] usb 2-1: SerialNumber: ⠉ [ 26.773652][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 26.780199][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 26.788823][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 26.797559][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 26.806649][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.816387][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.826345][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.839711][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 26.848331][ T10] usb 3-1: USB disconnect, device number 2 [ 26.848781][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.858699][ T10] usblp0: removed [ 26.866620][ T31] usb 1-1: config 0 descriptor?? [ 26.970791][ T64] usbhid 2-1:1.0: can't add hid device: -71 [ 26.977246][ T64] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 26.991302][ T64] usb 2-1: USB disconnect, device number 2 [ 27.073513][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 27.087675][ T31] usb 1-1: USB disconnect, device number 2 [ 27.094404][ T31] usblp0: removed [ 27.187344][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 27.187362][ T36] audit: type=1400 audit(1757410221.329:159): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.233872][ T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.322524][ T36] audit: type=1400 audit(1757410221.459:160): avc: denied { name_bind } for pid=474 comm="syz.1.37" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.344067][ T36] audit: type=1400 audit(1757410221.459:161): avc: denied { node_bind } for pid=474 comm="syz.1.37" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.383801][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 27.392301][ T36] audit: type=1400 audit(1757410221.529:162): avc: denied { read } for pid=478 comm="syz.1.39" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 27.409136][ T329] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 27.415032][ T36] audit: type=1400 audit(1757410221.529:163): avc: denied { open } for pid=478 comm="syz.1.39" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 27.424298][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.448357][ T36] audit: type=1400 audit(1757410221.589:164): avc: denied { create } for pid=478 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.457901][ T329] usb 4-1: Product: syz [ 27.479483][ T329] usb 4-1: Manufacturer: syz [ 27.484106][ T36] audit: type=1400 audit(1757410221.619:165): avc: denied { setopt } for pid=478 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.488064][ T329] usb 4-1: SerialNumber: syz [ 27.506006][ T36] audit: type=1400 audit(1757410221.619:166): avc: denied { create } for pid=478 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 27.527501][ T329] r8152-cfgselector 4-1: Unknown version 0x0000 [ 27.533624][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.538788][ T329] r8152-cfgselector 4-1: config 0 descriptor?? [ 27.553139][ T36] audit: type=1400 audit(1757410221.689:167): avc: denied { read } for pid=485 comm="syz.1.41" dev="nsfs" ino=4026532363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.574988][ T36] audit: type=1400 audit(1757410221.689:168): avc: denied { open } for pid=485 comm="syz.1.41" path="net:[4026532363]" dev="nsfs" ino=4026532363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.633704][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.693652][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 27.700149][ T64] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 27.708850][ T64] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 27.717505][ T64] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 27.726821][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.736550][ T64] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.746398][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 27.759500][ T64] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 27.768660][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.777364][ T64] usb 1-1: config 0 descriptor?? [ 27.794933][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 27.803266][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 27.812264][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 27.822587][ T10] usb 3-1: config 220 has no interface number 2 [ 27.828890][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 27.842264][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 27.849258][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 27.856554][ T459] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.864115][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 27.872854][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 27.882352][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.890561][ T10] usb 3-1: Product: syz [ 27.894798][ T10] usb 3-1: Manufacturer: syz [ 27.899589][ T10] usb 3-1: SerialNumber: syz [ 27.955996][ T491] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 28.014642][ T459] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 28.022787][ T459] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 28.034345][ T459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 28.045327][ T459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 28.056670][ T459] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.069692][ T459] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.078764][ T459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.087887][ T459] usb 2-1: config 0 descriptor?? [ 28.093160][ T490] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 28.110958][ T10] usb 3-1: selecting invalid altsetting 0 [ 28.117036][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 28.123444][ T10] usb 3-1: No valid video chain found. [ 28.132206][ T10] usb 3-1: USB disconnect, device number 3 [ 28.187503][ T64] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 28.199643][ T64] usb 1-1: USB disconnect, device number 3 [ 28.206296][ T64] usblp0: removed [ 28.502994][ T459] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 28.512044][ T459] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 28.530931][ T459] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 28.569283][ T501] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 28.576689][ T501] rust_binder: Write failure EINVAL in pid:36 [ 28.593452][ T503] capability: warning: `syz.3.47' uses 32-bit capabilities (legacy support in use) [ 28.727751][ T532] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 28.735421][ T532] netlink: 'syz.0.57': attribute type 2 has an invalid length. [ 28.754110][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.762848][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.775200][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 28.779556][ T31] usb 2-1: USB disconnect, device number 3 [ 28.821036][ T541] usb usb8: usbfs: process 541 (syz.1.60) did not claim interface 63 before use [ 29.213672][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.343648][ T31] usb 2-1: device descriptor read/64, error -71 [ 29.583643][ T31] usb 2-1: device descriptor read/64, error -71 [ 29.717261][ T565] syz.0.70: attempt to access beyond end of device [ 29.717261][ T565] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 29.717935][ T566] rust_binder: Write failure EFAULT in pid:48 [ 29.730506][ T565] EXT4-fs (loop0): unable to read superblock [ 29.761472][ T571] loop0: detected capacity change from 0 to 7 [ 29.768501][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.777721][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 29.785704][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.794909][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 29.802851][ T330] loop0: unable to read partition table [ 29.809290][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.818497][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 29.826687][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.833645][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.835930][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 29.851759][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.860951][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 29.869086][ T571] loop0: unable to read partition table [ 29.874911][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.875410][ T571] loop_reread_partitions: partition scan of loop0 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 29.884197][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 29.963825][ T573] Invalid logical block size (7) [ 29.969193][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 29.973664][ T31] usb 2-1: device descriptor read/64, error -71 [ 29.979347][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.994107][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 30.002053][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.011371][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 30.019522][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.028757][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 30.037194][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 30.045119][ T572] loop0: unable to read partition table [ 30.076397][ T577] loop2: detected capacity change from 0 to 7 [ 30.083429][ T577] loop2: unable to read partition table [ 30.089452][ T577] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 30.233623][ T31] usb 2-1: device descriptor read/64, error -71 [ 30.343767][ T31] usb usb2-port1: attempt power cycle [ 30.693633][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.714834][ T31] usb 2-1: device descriptor read/8, error -71 [ 30.844902][ T31] usb 2-1: device descriptor read/8, error -71 [ 30.903841][ T329] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.054683][ T329] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 31.062846][ T329] usb 3-1: config 0 has no interface number 0 [ 31.069038][ T329] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.080035][ T329] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.089944][ T329] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 31.099039][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.106601][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.115366][ T329] usb 3-1: config 0 descriptor?? [ 31.134696][ T31] usb 2-1: device descriptor read/8, error -71 [ 31.264843][ T31] usb 2-1: device descriptor read/8, error -71 [ 31.373725][ T31] usb usb2-port1: unable to enumerate USB device [ 31.625757][ T607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.638860][ T612] loop2: detected capacity change from 0 to 7 [ 31.652257][ T612] loop2: unable to read partition table [ 31.658208][ T612] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 31.674759][ T612] loop2: unable to read partition table [ 32.055914][ T620] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.081880][ T627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.081916][ T627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.137222][ T640] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 32.186688][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.194089][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.201588][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.209075][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.216765][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.224329][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.231021][ T651] overlayfs: missing 'lowerdir' [ 32.236577][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.244781][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.252470][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.260167][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.267996][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.275795][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.283327][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.290838][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.299360][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.306829][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.314290][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.321686][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.321844][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 32.321865][ T36] audit: type=1400 audit(1757410226.459:233): avc: denied { block_suspend } for pid=665 comm="syz.3.102" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.356793][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.364357][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.371827][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.379423][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.386875][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.394097][ T36] audit: type=1400 audit(1757410226.529:234): avc: denied { name_bind } for pid=667 comm="syz.3.103" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.397046][ T668] netlink: 100 bytes leftover after parsing attributes in process `syz.3.103'. [ 32.416185][ T36] audit: type=1400 audit(1757410226.539:235): avc: denied { map } for pid=667 comm="syz.3.103" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.449047][ T36] audit: type=1400 audit(1757410226.539:236): avc: denied { read write } for pid=667 comm="syz.3.103" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.474172][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.481542][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.488962][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.496347][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.503585][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.510811][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.518209][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.525739][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.532981][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.540293][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.547557][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.555446][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.562685][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.569986][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.577492][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.584774][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.592008][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.599287][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.606603][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.614173][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.621545][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.628940][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.636344][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.643678][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.651166][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.658500][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.666010][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.673301][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.680695][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.688279][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.695732][ T649] overlay: filesystem on ./bus not supported as upperdir [ 32.718877][ T36] audit: type=1400 audit(1757410226.859:237): avc: denied { ioctl } for pid=671 comm="syz.0.105" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.743681][ T36] audit: type=1400 audit(1757410226.859:238): avc: denied { write } for pid=671 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.773081][ T36] audit: type=1400 audit(1757410226.909:239): avc: denied { bind } for pid=673 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.858110][ T677] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 32.865142][ T36] audit: type=1400 audit(1757410227.009:240): avc: denied { relabelfrom } for pid=675 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.878292][ T12] syzkaller0: tun_net_xmit 76 [ 32.885202][ T36] audit: type=1400 audit(1757410227.009:241): avc: denied { relabelto } for pid=675 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.890074][ T676] syzkaller0: create flow: hash 2654897614 index 1 [ 32.909431][ T12] syzkaller0: tun_net_xmit 48 [ 32.920423][ T12] syzkaller0: tun_net_xmit 76 [ 32.926009][ T676] syzkaller0: delete flow: hash 2654897614 index 1 [ 32.955676][ T36] audit: type=1400 audit(1757410227.099:242): avc: denied { connect } for pid=679 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.223611][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.373589][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 33.379784][ T45] usb 2-1: config 254 has an invalid interface number: 176 but max is 0 [ 33.388444][ T45] usb 2-1: config 254 contains an unexpected descriptor of type 0x2, skipping [ 33.397361][ T45] usb 2-1: config 254 has no interface number 0 [ 33.403675][ T45] usb 2-1: config 254 interface 176 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 33.413813][ T45] usb 2-1: config 254 interface 176 has no altsetting 0 [ 33.422116][ T45] usb 2-1: New USB device found, idVendor=12d1, idProduct=1d5c, bcdDevice=11.fd [ 33.431230][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.439251][ T45] usb 2-1: Product: syz [ 33.443512][ T45] usb 2-1: Manufacturer: syz [ 33.448157][ T45] usb 2-1: SerialNumber: syz [ 33.453959][ T682] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.597495][ T329] usbhid 3-1:0.1: can't add hid device: -71 [ 33.603702][ T329] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 33.614589][ T329] usb 3-1: USB disconnect, device number 4 [ 33.849192][ T732] overlayfs: failed to resolve './file1': -2 [ 33.871354][ T741] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 33.903615][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 33.912642][ T748] erspan0: default FDB implementation only supports local addresses [ 33.963701][ T329] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.019786][ T750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.114734][ T329] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 34.124721][ T329] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 34.136293][ T329] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 34.145477][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.153466][ T329] usb 3-1: Product: syz [ 34.157652][ T329] usb 3-1: Manufacturer: syz [ 34.162328][ T329] usb 3-1: SerialNumber: syz [ 34.168101][ T329] usb 3-1: config 0 descriptor?? [ 34.173346][ T730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.180718][ T730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.388635][ T730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.395956][ T730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.447618][ T766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 34.460674][ T768] sit0: entered promiscuous mode [ 34.466897][ T768] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 34.474610][ T768] netlink: 1 bytes leftover after parsing attributes in process `syz.0.139'. [ 34.662475][ T782] overlayfs: failed to clone upperpath [ 34.807621][ T329] Error reading MAC address [ 36.025005][ T45] usb 2-1: USB disconnect, device number 8 [ 36.503619][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.552277][ T839] overlayfs: failed to clone upperpath [ 36.654927][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.665998][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.675860][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.688946][ T45] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 36.697990][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.706954][ T45] usb 2-1: config 0 descriptor?? [ 36.717652][ T459] usb 3-1: USB disconnect, device number 5 [ 36.915707][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.090763][ T880] tipc: Started in network mode [ 37.095922][ T880] tipc: Node identity 1, cluster identity 4 [ 37.102384][ T880] tipc: Node number set to 1 [ 37.107567][ T880] tipc: Cannot configure node identity twice [ 37.123814][ T45] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 37.134177][ T887] 9pnet_fd: Insufficient options for proto=fd [ 37.151312][ T45] acrux 0003:1A34:0802.0002: no inputs found [ 37.160513][ T45] acrux 0003:1A34:0802.0002: Failed to enable force feedback support, error: -19 [ 37.318832][ T831] rust_binder: Error while translating object. [ 37.318866][ T831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 37.325485][ T831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:117 [ 37.335570][ T459] usb 2-1: USB disconnect, device number 9 [ 37.661194][ T895] 9pnet_fd: Insufficient options for proto=fd [ 37.677510][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 37.677528][ T36] audit: type=1400 audit(1757410231.819:263): avc: denied { audit_write } for pid=899 comm="syz.0.182" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.848066][ T902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 37.901538][ T903] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 37.918309][ T903] rust_binder: Write failure EINVAL in pid:119 [ 38.068308][ T36] audit: type=1400 audit(1757410232.209:264): avc: denied { create } for pid=904 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.264278][ T36] audit: type=1400 audit(1757410232.409:265): avc: denied { setattr } for pid=925 comm="syz.3.192" name="NETLINK" dev="sockfs" ino=6326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.337976][ T36] audit: type=1326 audit(1757410232.479:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=942 comm="syz.3.198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a9d18ebe9 code=0x0 [ 38.690821][ T946] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 38.698857][ T946] netlink: 17 bytes leftover after parsing attributes in process `syz.1.199'. [ 38.900527][ T953] rust_binder: Error in use_page_slow: ESRCH [ 38.900563][ T953] rust_binder: use_range failure ESRCH [ 38.907233][ T952] rust_binder: Error in use_page_slow: ESRCH [ 38.912970][ T952] rust_binder: use_range failure ESRCH [ 38.919518][ T953] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 38.925321][ T952] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 38.933789][ T953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.942030][ T952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.951767][ T953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:126 [ 38.961655][ T952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:126 [ 38.970848][ T861] Bluetooth: hci0: command 0x1003 tx timeout [ 38.973601][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.992338][ T954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 39.095368][ T961] rust_binder: 958 RLIMIT_NICE not set [ 39.107993][ T45] rust_binder: 957: removing orphan mapping 0:4240 [ 39.138731][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.147986][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.157321][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.166479][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.175804][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.184322][ T36] audit: type=1326 audit(1757410233.319:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=969 comm="syz.3.208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d18ebe9 code=0x0 [ 39.184996][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.216455][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.225912][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.235078][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.244194][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.253276][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.258687][ T36] audit: type=1400 audit(1757410233.399:268): avc: denied { create } for pid=969 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 39.262600][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.293587][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.302880][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.303167][ T36] audit: type=1400 audit(1757410233.439:269): avc: denied { setattr } for pid=972 comm="syz.0.209" name="secretmem" dev="secretmem" ino=6051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.312497][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.344728][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.354359][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.363965][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.373215][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.382493][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.391638][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.401728][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.410819][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.420116][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.429245][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.438475][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.447794][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.457285][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.466765][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.476081][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.485243][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.494683][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.504180][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.513358][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.522660][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.532056][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.541398][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.550722][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.559908][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.569257][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.578379][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.587434][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.596569][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.605859][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.615125][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.624306][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.633500][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.642814][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.652039][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.661213][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.670424][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.679604][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.688818][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.697980][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.707104][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.716209][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.725494][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.734614][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.743724][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.753358][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.762646][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.772009][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.781346][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.790775][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.800033][ T966] 9pnet_fd: p9_fd_create_unix (966): problem connecting socket: ./file0: -111 [ 39.819612][ T36] audit: type=1400 audit(1757410233.959:270): avc: denied { mount } for pid=977 comm="syz.1.211" name="/" dev="ramfs" ino=6089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.820124][ T979] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 39.884530][ T988] rust_binder: Write failure EFAULT in pid:150 [ 40.036093][ T1014] overlayfs: failed to resolve './file1': -2 [ 40.072127][ T36] audit: type=1400 audit(1757410234.209:271): avc: denied { bind } for pid=1022 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.092780][ T1024] netlink: 'syz.3.225': attribute type 4 has an invalid length. [ 40.108089][ T36] audit: type=1400 audit(1757410234.209:272): avc: denied { listen } for pid=1022 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.169095][ T1033] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 40.178790][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.817455][ T1069] syz.0.238 uses obsolete (PF_INET,SOCK_PACKET) [ 40.895573][ T1079] ------------[ cut here ]------------ [ 40.901125][ T1079] WARNING: CPU: 0 PID: 1079 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 40.911162][ T1079] Modules linked in: [ 40.915097][ T1079] CPU: 0 UID: 0 PID: 1079 Comm: syz.1.243 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 40.926575][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.936744][ T1079] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 40.942737][ T1079] Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 4e 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 e0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 40.962642][ T1079] RSP: 0018:ffffc9000f7dfc88 EFLAGS: 00010202 [ 40.968753][ T1079] RAX: 1ffffd1ffff8582a RBX: ffffc9000f86c8e8 RCX: ffffffff816dc9a9 [ 40.976775][ T1079] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc2c150 [ 40.984765][ T1079] RBP: ffffc9000f7dfcf0 R08: ffffe8ffffc2c157 R09: 1ffffd1ffff8582a [ 40.992824][ T1079] R10: dffffc0000000000 R11: fffff91ffff8582b R12: dffffc0000000000 [ 41.000829][ T1079] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc2c150 [ 41.008876][ T1079] FS: 00005555708e3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.017848][ T1079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.024639][ T1079] CR2: 0000200000001008 CR3: 00000001208b4000 CR4: 00000000003526b0 [ 41.032707][ T1079] Call Trace: [ 41.036072][ T1079] [ 41.039004][ T1079] kvm_put_kvm+0x1100/0x12b0 [ 41.043622][ T1079] ? __cfi_kvm_vm_release+0x10/0x10 [ 41.048830][ T1079] kvm_vm_release+0x47/0x70 [ 41.053426][ T1079] __fput+0x1fe/0xa00 [ 41.057443][ T1079] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 41.063020][ T1079] ____fput+0x20/0x30 [ 41.067079][ T1079] task_work_run+0x1e3/0x250 [ 41.071838][ T1079] ? __cfi_task_work_run+0x10/0x10 [ 41.076994][ T1079] ? __kasan_check_write+0x18/0x20 [ 41.082190][ T1079] resume_user_mode_work+0x36/0x50 [ 41.087854][ T1079] syscall_exit_to_user_mode+0x64/0xb0 [ 41.093371][ T1079] do_syscall_64+0x64/0xf0 [ 41.097957][ T1079] ? clear_bhb_loop+0x50/0xa0 [ 41.102741][ T1079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.108671][ T1079] RIP: 0033:0x7f494058ebe9 [ 41.113334][ T1079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.133173][ T1079] RSP: 002b:00007ffd7a55b598 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 41.141626][ T1079] RAX: 0000000000000000 RBX: 0000000000009f81 RCX: 00007f494058ebe9 [ 41.149637][ T1079] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 41.157654][ T1079] RBP: 00007f49407c7da0 R08: 0000000000000001 R09: 0000000c7a55b88f [ 41.165655][ T1079] R10: 0000001b2dd20000 R11: 0000000000000246 R12: 00007f49407c5fac [ 41.173746][ T1079] R13: 00007f49407c5fa0 R14: ffffffffffffffff R15: 00007ffd7a55b6b0 [ 41.181753][ T1079] [ 41.184804][ T1079] ---[ end trace 0000000000000000 ]--- [ 42.243599][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.243752][ T861] Bluetooth: hci0: command 0x1003 tx timeout