last executing test programs: 1m45.167989244s ago: executing program 0 (id=69): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) copy_file_range(r1, 0x0, r1, 0x0, 0xfffffffffffffffe, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x863) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) 1m44.819819249s ago: executing program 0 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'wg0\x00', {0x2, 0x0, @local}}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') r6 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r7, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x5) fchdir(r8) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0x20002078) syz_fuse_handle_req(r5, &(0x7f0000000240)="26b2a8dd3bb50b8ceb62f430e5885746b5fd58b5a47a2bf28b373c8660a05cf8181b4b7a61b8ce127e9a2c0e92dea9379d5ca6b58c15037915bb4319621bdbead01cade5fc0535760d2286578af05881b83e2c2007508ed17ff1e44b5f91fd57e1077aaaf77b6741f58c4e426bb9b1ac269ddb81ba7c1d6ee457f1bb8ceb4e8a69db85ebb1df95fec7f3b5bd95dd726c920792e9a54f1641d5578f4367df0d583f76f962383980e8c6a1c123a70212d089e9b35900b052f0ee59eed7cf1e133398f5f5bd78d5c9820ee007f32894a57377a97af57c6d6dd108231b10a94c67f18552a65b870b7a9afcdfb72b57b81b1e424f739df21dfeebfaca906901b2626cfa482aabcc62b510255ee5010b4c1b260471011275c7f242659df63a8de398c2b0dfa67422e519853a439752898451f9f02defd4ae71ecc8aadd28d21a339d35cb425e109a5452d01d1ca2fc9cd2572a1252582d4b179876cc489b1b3fe4767d0356c29e6e0b891991f1dd5acc3c3e35f9d0048ed0e28b9771295729aeb5a1e262ec2fcbb545c3e24799bc424924294928312b42be902842083b4d7383ed289b307b66c8568277b3c17fea747ee49b750d83dd7ea1f18a5eae198451bd2968f823e03a4656cbbb154145465ddc7bcdd0c7b1d07366c0a4090e4023fd98d0f77d3949d7788bf0b31c52c7704bbfd681c4691d16ef610708ad2ae5af88301c5b0451ae9f292f16aa44230e53874a432be156fc74c9690983928aff88c8d817c86913fdc8425cf2cc43297e89321dfbbba3f4f1b8bcb602a17f1f5918c0657a9e0230f2722f2aca5f2f931c8c91dca589c02a711db5b7ca36f3a49282c4ec3b447ddcbb2f94e257a384d8c17980a3962b2c7b5c0b661899fd1451ce783dfb29355650454b65479ef40a319e37e90757ec3e3e08a2bbe0b9bed99d8bb31e5d240ffa66d5162748f30635658f92d864dc6ee1d95d9b6e19e554f6a4a5cb4a067b3c7d7d882ed4f908337febfd5cf00a6fd68e95fe62f5c374399f6d3201d3482a0637ac4d9d8253fbbf6bfdc3feb9db0a3d8a85cb337dc7a1328973e20bb82bcc2ec03a637f4f29e1efcf4fec09568a42ece4ee0508a0da8206989d12e522a65e76c4d64bbaec9f328b927391f2b15c7e8b3f138ef345afcac4d566448f327f84ed41f69b4d40c8309d9d5ed6846f788198e151a48f654d29b659f923858d443e118409541cea176cda5c518a938d10086148efdecda55cd4990922cffc06633c59db0c21d12e4b311e3858e82001c24c2225844019f9d633679ee75a70521da58cb8809c193c0f3389dcf540884ff0b44f224cbe03623ee16ad37e00abd1bdda5972379bfb097aa2ffe5e881ff988644b1364d8117feb6859fa4a942260aa6ac51387bc4c9173b8656813929744af772742e69d78f5b127b3ec8a64a3781a603a56e05eb948a003e54f3095e56899dc6413c4317e12141b3409ee8d33dc77ff33b10c5294c5e6b969848dee384c19e732f3e75a6bf21ad433c99d3978f8a8254fcc589eb067e3663e6179cd7904e080048565f0d8aae47d0dec7830d5eb48cd386ea8ff0cebf7bf86eda674cabd0d06f2068817d1d85f39bff655bda536ca5d9727545b8202a982818c388ab0219021fdf4dcdc5de8731edb03e9170a8867b614e5317f76f44c33563fabb73eb4cf8a766b6299e52d00646262e6e7704748a35322cdd7c52e6bae2654295f7804f68e807d5ce420213a278b751b360bffbc1bb9a027b98e65e9dab8fd143e02c2e6192eb8f411d80aad0fa5ff40ced48d26e076cda037ffed74f19b1a35839239b5d14e57fcba05aad705435f998d5a85c05d944bfc472ecda2974332b9b44c448365682d00e271f0fd2a436057adfb7b8eca4abdb8c1329121d6dae395dd1506a95c0de8191bd69cd1f68ec5af9a88fbb1a37c082b9df5cb390379f2db48c63e9f779b875ef9891a84181900bec4d6f512e4633f6b43b6abcb87e2e72f74d8cb0ea3019860339fdcff45dfe7e0817de819eef61d6e91b05a6b8ce8b0e1416e0210813429ff7a75cbd6e7a8f5c1e41012f8b092c6f0b45896a3de1a278b80104157dec7e210aab22aebb54ec881291fee48bc1c413f6a0704e45c1b00f39d4618147e4e11f429592bc92044a772bb33349d3ee4b6c2c5a5a8fdd5ad65434943c3987be2ab99807e23db8b9ec30a3030be076b7871c1bc7a9d4506f3a1e7b986d2ea1b60f9240db71a360c919dc6dc24f6af5878efd95d83f5a9529266f2fef29af2b60d214b21b6e3b8e5b3555849453f66e3b2fe46c2547690b745cf6b850312d825c73049a9a009d66d0d58801f254e2dc32897d9f3bf6fc3fd9ca6fef5d0f0dc55e85a99d735d1800f418010986d80f04e7f5a37109b73432db749b569966e781e646c0e373c94d7797960e1b73cb6cf58ffed290c567d7b5dc54f7a9c911d19fab72aded28cb7c063c46fd530b6ea9efef61c4da2bd5bad7d317743314ab01046b0f92d9d428a13bf5ff427fe25bdce29637f916b2da55f2f5ff05ea17002bf139a5740b7f2b60d6048844cc3909c76eb9ea0735ebed9c201efb8228245373c97d8c565e1ddb4c4d07c1ee7e3a942eea3cb88b2b263a0e4eef9b5cbc99f0b1fde017d01b15820f55f51d325c77c298b6973ad694b1f3bd5440fe8e8ea72fb10b53bbfb84c7d2b7be416df5cb60ad3607c71b387687752a119afb71cdc53b8a395e0398a5be4ac9a175df444ea715fbb2703911bcc6867a85ae2d76d25af06ed0e3688660dad6d69c1f356d43e655811e4169ff9f3f275a8417c44a9b7f5cc3e6ae05ed6a226da85946e84144191b4018d2a226e957e583fb34af3d4bdfbb59da087565fdd7faca17d652208c129549f16541f8addf7be170c6041459600364f025362ea0726f48cf82521d47eb478c341da8b0ba94e96942787d4046d04e86b3ecdbf4b3579aa8f00ca70e132609df358d9183f6cf6b200dfd16fac3e0bcdb13cc5bfb20bde3cc139967c70fefe3c39f484c442b75a5606a2b4952c799b04957e151d3dd76eeac764170a1929a88a668926fd6c22e9c2327f85fe88d388f4eed175a5c13e82bd6f42a7669341d2f3012c75c9871e419e0f3c7e50e347856415b8584eb2d2a0214d5bb03b10a26505ea9ffc7d5aca844e24af916eebe7513d8dd9145049aa0dd8e2a5a9fc53cef6239f56f2ba429601ead8223b5d89e5326e09f9d7c409a466fe5781435b9c324efc040cface76eb40b2da68b71a8baf2f916303726256c772cf27806d5208724cdf9f4eef7c7f3084a25242479fbe759bde637a7cb96d98510f0a68876d04cb47a3e7614b0b51f8812727b0881da22bf270d4a44206a581e71a7150c4096dc1fbd9e724ac572adfa13d6c2129e51df101bd5fd45bc57c356d67b65f270168bd0601e0241e887becb130fcb72c398c6e50d5123f5e8cef49d7ae92ae8e7de2221677a8aa6a285824ef679c68f87330224ce2c11299878adf4f46ed510fa4286f6110dd9965c189c21e85654d44992593ad75bb264fa4c9c7f600224b8eee14e6bac1aa0f9c9bc8c10caee2826cc6d8a787a9b98f908d062732ac0226268047fb44fd950d8ae380620c1f594a68a0813b492bfa3a8560dc1458ba84ddbf9b58f0f7317589a36c66493d1b1093c50719fe4e7b3a7f9dc61e961b0a36b0d65bd14029ad5b9dacdb4edbf090c2455c6c1af080e5447ec7aad8d1a532a48ce280decb70918738b3dcd49d3ffe16e1a2099f7e083aec3a97866e51d43e2581530e53d269c4ff2a6f576ecadc018f4e233b6e7da57130bdd369bdf5973031b7280d7bfcfc443dfb578de9d60be87e741e3aabedffd7b46e6a1c342661b0a122d579623e6e86e745e6ec3ee53545e9a1f63c1db363f68ee2a693a8f8bcd5f97c575db2ce1e03fee213bbd7a38a288fb83a07b1adeb99932fa55dda4b7e6be199f8f008abaa88c63f59179b47c541d8707709c7cd5f5aa5ed5c4dc63093596b09858952e64133cbe6b7d02b60528d6a263c9b72aa3e751a99e9fd1664121fc0ba9018d61011edd23d29d05c2080e33c721e503113be23973351a68fb5da582205a0e89e69fc84e24f3d4e8629847f9b6ba77e2ffe6ce394f99b1a94576c677e7433aa8bdc4d9779cbb706c6e2f426806d111173ffb0cd4f7be3ccffcfc9e66a16ab2806b6118ce28bc935624f1cbef0c9c4da396e6dc0e87ff20d0fd0e07d49327d8c0c97c7d70c50b584fbe563cde1cb17f36a73ebbe6b331b6321ac5ceba510a35ee913c5542a9d7b12805a29a99d25a5d3bc13a330435d6f0305bf522cc71e261c39d82584440d47fd82b9b31ad4ea0d2922558e6bab6fb6d3f6da9eb2a2e82c7fc2191e2ce41baee61fd4b5f896bf92bb1cf06c0c5a1b9b81a8216084c8e90451823d6be884a735a2be130304a22d8168c06db9cb6d62ba30079ecc831952f2564b760153311226d2188bc523928aa63223e785e6cf67a01962eed4195d5b06f06f272fe27d38660153c1727cfb438b5d98da5778070791c5ace1fd3ae756c8f261ad9d1c6aec5722a8e0609c3bb672c628879b65fbba3692070781c13bd34a93a5b9fff4f9ac4cd6aa3fdf076eeb4c0cfa14d2a41193e723d6d013995f34c97bd5d438eae8ca9a8a2dfdadec39c84c11cc9e9506020e072908178a6b60c53321c0b857d12b9adb58d90197c090e558d20a29bfd9f2ae297c23f47a544daa537f5780ec75b1824be5c92c20785499143252dd2f6d1f8aaf47deccbabf74ee0d55793b046aee7dc763353249f03cf2f0c60f6dd6ff082a051ffe2c8ef4ae9b1d8a046af67ffab68a4587ccd0a503906cca13aac0b7309d5fed12abd5303d2803f928651b51dd8747db79c56c3e3f89e6799a9dac3a7c57257c6575e133379b6c616dbab839b530e7ede62dc529acf5a6fa061fd1244fbc82d6e883388291ecaf1130151c8da538f8bccb9b871d2ce3417a9212ad94fe94c6e13e06975d8ba285d7e937ac4c6fd89aae06db06940670463d6b86a18856cc978a49f7e407f2e4f042d7ee1b7791cb33697824c68b2535af6c803e7940512da61b39c98ed1030e615569c200bc3ab833156187c25c1f659dcde3434f47a8cce56d821617c58907f80d5628214a0a8aad3fa2087647d52ac1c9692c6b57b85d70cd12875f110e631f3a9e34f21afc401797d9a13753deabb43fef92d691efb19a7120167f838d283fc5f2f1d7b4c2ef736fb1c8a47befcfd320f98461756d6908f00cea4a252733db78b6f67620e1a209e39f788a8360b8f42ccf1776259c6f70ef7ca2b0ee8caf4bf27017730236669eab62ada6db1d381ec2f8c60bebf555425bab9fa4d46823d3b0a1b1f51add64961aa2a073929116f02ea230bfb354019e47800415edeacf72a7daf8930c64adff306aba841fbe75bb18da73441721c86d3a70f9e6025e7fc95516703372fcae04421b08d0edbc5f1b6b6a3c66225011dc19f575111180e8d173922c2e28123347036b3ff2418dd529c49beb2e335801a3a5473c73d71d084c8271c10d86f283a659deaa57fff6673519645e0ee4c915cc3b8c440584fe222b1bc0cc0888142b9753ad409ed41ca16a92a3126ee73f7237523c6c781959fd255c5c0dff4ff324dc3e2246da77281809ead68df57e4ae6c1f8001e6d292e8e42f897b59770ec26b508ac5d57b47ee9696f9d40ceb39f9653a14737ede3f3213147381417d9633d30cc1107dde46e5ead6e4e4dec617202e10b9093e3bb2dfd785dd96a6a64f44bef7465552dc2e391c978c7ac1ce2b8f774d7b3934d15fc6d96eb3de6f0e9402a8538c6081712e5affa5b67b4153217b38f3248b2565c804226f4a31688d5fafacfe2e4fc191791c7164cfa33a474f4a9cd90fb5f37f5268e1801a2a762b00e8b7b2bda1db7a90ccc74ccc0fb015eb49a6ed0236d8b6b0e67bcaeeb750a499cfc3b2dc34e9024ea9bf00e5f0013a15509992979b50617dc14aeb0bac46c6961eca1e96ab2b45d342bc68e88b765a79d73f1eec58167e8ea4752981fd898f1ce528e9ba947723bd4d2ce228b6e5787227697d52f2bd0d4ecbebf5c6164f5819313060579ebb3ddb3c6423adb999975427c2d3da65b3cf52849c75464b46ede138be670742b175474222a47755f8006d4752b6c271643aa622f8439903abe53595792e7856a6e5a5e1b309fa139c2e64e927620c87aec8f36b9509c1d5cdee296bdde21d2cc54e7738070d93552d9ecd799325fe6fae9f3d7046ef1459d401922e3da284b7f6ef67ae196f274f6ce94887bb5ec25c0101618d6118b4cf47e0dfcb8dc89e8f44b47ba19c326db51a75a5b790620a2e460110dbc0f923a7d3825e4ac1d04597c0693fd05d93aabe907b47b1581f915de89c16580ae484f864e583b43ddc0991d716e401f60b6f62ebd52178a9e0adfbecc706dfffe8eee93f67ba2c9da4515bdfffd764741527ec04c3503da653271f2051ddad922ae38cae98c9a2eba5f8470d2551d2224add25a32b9c4d573f69ed15445d2b72ab20d1cd07c2d897dd7c97edab293db9f217a5eee5de9ad08da2f734e617b9f5268a3b91336237f5e9738a65f4adde4279eea09ce40e577b97eb5c67772e4ebee5a33afc7de28c70d97a514cdcd95908d26ad62800900a7cb9dcb88955b5401ccd4d965d00ebf0da48bf43cd2f5b61331894f523685b17beb253c3f50db89e11e664d6427a2551b5bfb2cbbfbf1e8240909d5eef23ccfa23d185391713d1205078be21e99063ff6316c06cd77969dda4d7f3350d4f2f29a23f12e14788fd60cbe4c3c00685a5e42b861597fd3b70c5e0e4d9f02355b754bf353fa2bd5dc0225080c26eb39be11a5b3cfe5264f39399167ab55ae7286f09c1d7fd0fc69bc9c7fca34867b5bf11c43612d3e010d2918a0d9b620549402f2c56e9cf3aa53b7614337f0867fe08170ffb272c5d340f237cdca3e023d2e65b250acf4f265ab8794a5388c5358d7e1cccbf82d99dd1aeba50f3363b9c3b6ac43542334bde8cf2ffd29da1d516bb5d950938f410829e2e37684916e1eac5c2ea1352e7cf6d0bc19bf16bf4ee61e44cd339fadcdf18126c46c0aba43c927510f3b876b32f606bfd2f657254e9715f8151099da8897c287ec1eb9077c72a0a31171f5e2672c16d3907caf659a73a15ec1bbdf240cf5796c22a99933999dd36ab3c354736b45b990e1631be048cad72829f782504ccff0cfc2e1eb5fb3e52e9fa4c3a39ec9ae7ef7b4b9e7e9a721a3f6addace5ca68d525ab9dc0d26b05333dd638bba4e40ec0a716b29172fc84a26c046dcdd0a744af3a7da0eb295a6b0d2a4e45bd6222464cae11bdb5a6c02f8ebb9c8846ca03175d4cab8b9c9531ae686029cc740c296feee12fda2cfb130808a3fd435c13bfca388ab530b8c4b546c4fc9af86596daec4569b5e82c8fd452731e27f9dffdc5713562b99fde6b59948a46f2a44ed0e539469040bb04a54fdf390f589c6491f1057b3d44573838dd2a1271ef8ccec3796012d2debeddb9dd0e252bf622f2671d6940f1c89b3ae38b4fcaa37103d96f4504c5654e603b80f710dc575bfdf2f4fa01741ab79057c15b627cd03e7dc24aab3ee312dd1d7e96731c28e24df9b051fa5972615858f07572d07f6a6f947fecf8acb05d220b68a4962b0bb9e2bb6341b97b0bfb18dc92764ceca8f723592c02104a020dfb9ff06bebc81ea80c68a1fa6175ab4042abd3305c1a17b72ba5491dc812def91672873fdd98632871ed0387e00a80c173b9e8c75e185149d32a9945e2f9707301c96337cd1c44cc13a9f38dc23720558c31c4cf6ff72559794c04af4deccbeddb04f267308e220963bf64d0aa830af54a91ae3ae0eb1aa3d48dde97ddd0916e3c16f4d90ef3e66f06f8c4c3d4fcfe41094708f49ac8d4e7150a74d9378a75018dba062fd1ec331776aafdb64e5e1732ab0f0ce0bd8985ec4b1374a6245b6d714a1c02ababcdc1fe22481a6ad3276662d4c9adf65e9d275afa6d57d6c3bcc6ab68234f4a1dade56c852c86c0bb4f427387bc9ea23e7361b7f518039af614141a12499b9602f95e2a969c7f31cf1056fe3b1954ecaa3db219f546a28e954964268be0296ea2765a8194d88b14869d388996d645f34511d63a602d92e795a0b29773052ce44b008556b6a0fb418a9233ed13edf3bda3db479211d00c16d40ee6321241d884fffeb3c1e2c01707c7aa387778779a241699ef4bd5d7cb8e40986539d0778cc242e98f17e630a09d62155b469ef5dba920d2ef80686c8f9eaf1965b42935d6dc470de7fbe0f5083a4b6ced2fa06b255fc35c3325bcc57ae3ef95ef58edb0b45bbff699de88afa565ab9f98b1c98255dfd6bd3eb18af00b94cbe5f94421b2828b0583c91e7cecd4754003ad8f46a206da99e75056705f9cccc481b591d4c33d96b21acbbdb4e70dfd9b6a2fccaa6a0af7f97fca9da759e62a6fb222341cbab0c808d320ff13a5989ce707aabd7f7c569b3e22e0c91613c483c136fb5b94ff7bdc1f51cbb9f5c46e4b62a19cca73057b78d1f3f8a9b0e2a20b8b8d9f2e8d0459df86c18353fbb3cb6e8b804e28dee571349e16b5df662cdedf1aa5a44eea00b778bc79c16138d85fab98c15ad9f2b83eebdb9432634280768397d2895c10012da8c6659e02295cfa52d6d06ef1e6ed0546d46c676048e5a455261659c83492d355eee56596e520962467fa8b3ae99cea9547d99a6d6b674682363c0dd5c8bd5c63d3bc2d45a94fb4e090ca27028b29a61c53d96ade29f1c60cffb5053b494dd2d7c7ccffc7006e16eb2bdcb360a1e0a3fa1f380616d0298e315808db7ae9ad16b6c4bb7dece5c2c4ba52d514f7fdc9b00e66302d1b6c6a7b5b58adb313e0cec67448238f66f69dd480d304a9831833a1b94f8109c0d2f85e646077bbaf140f9c7e72301d8e452f13711be18bdb48e2f0031c38da789a9e4161b7f0a6da09075414aaf9984ab7f141647c532e3b2530f3fd8a93b4218ecbbff44c4a58cdde1f9d89eb60ebe8033dc10116cbc09d4903bfd0830ef8b0d33572ce61bc028133be720544872e4a205fed6b005e8ed240ceb6e9efdd313b6eb0aed6bdcd335cb1765f2d7ed7f1819e0c04a8989183abcaa3677c35c33d95b139ed63f9f67e51386206ee2a3ad54bd4312b1178ece5a5a76eac9534faf2bb8c7b5105811a34a110553c63f1b9168ec5758e39d1f1baa4fd3e8dec73026c08ddf1568fa04b1a36a98055b6912f4faa0741e0bb5f063dfab6e6a8605b997affc69369980188967e4655c954d31b3ebea8dff5face904366191f0695fd3ccdc5e82c5982243e16a895f8aaf9d63d37ee1d323b296862ad265760a392378bc2ae5d7b75039b77aec33aa00c134f554ca9e5fd162296e915ccd359976e7ce4099bcaa5494c8eb6fa4da2a2e245920762f3639fa4fd4eb0e5e167a5f2111bfa669576ff3e0711a4ad78d2f8477363b03e6a13cd5b479817a62614ef613ac2b03a340114909c7b21ee93adf74c2ee2d4c666f1ab8bc43368e7643f3ea8da5a919b1e3078875228d2b519387ac49b7b9990d7dc229fb9ff0d551d3dfbeb843c8b2782f50cf8c575dec6836259a160a9a047165791d1e759c74ea65f4f9da990fc0e789bcd4ddf716442864788be6f2c5b607b6ddc7f9575b4e8375eea50e98cd9320fe736114e03aa0a2c1430d5cb507b29b388ace6ab58393513724607102a0458a458998e94d71b758df51ed4ecb6c6f2b94c31fb480745fbc6f6dc595c9558161fa14462779952982adb70d70a9f9a734fcbde17652e1a91422f93a6ff7d6c80fc92a5005bedf58aefe9bbba9d0ab3441e86b863bb5a3fdfd2a9c6f6d10717d2cd35d3c2a892f0e58545b1794d9aae993d72c215a6673bbe38976cc7d03cda84999c637aec8036ea1a23b143ed6288dcbc7d1ee487b1b6a4f6e8ef63b378acd4ff888bf95d86336907939c29695b2e0cc58efab49056f88a9027cad6d724e635f94f45f4cbddd8188608663ec7e46547e2aac7dec6cc5609e9f5f41ef26a1f16ecf6bfe200b0a955f98d9a4d41a2a268f8857670e33fbd4f076aa11c49cebd8306a4de3c86f7726fde93c7fc984079ae60e63854ee9a14162c749d7e308530c6b84cb5cafdd09ec3411cc0302c77d316beff973e3108ddb9b249e206d5476d605b7b24603ca344c2263bda8d7d3db55b9e2fcdce69be9b1ce24f8c4df129cd62a299fcbbff3309031973b5da452654c0b8ca4cf65891a8bdb8dedd20f631a34964e3bb0fa45c618861da79b259d79ecde8394061c99c661851c016c35ee8c91d52bbbc25f52b5e2f77ef2f63c764b717e8cce4d291742d5a7ef7f5d7ec1a96620eda1f962fb2448c388873f8b8abea4d27a5da092833c43c57c4b14099597f83785a31190798826f4264ba8f998cfbf7f20f9678e10e05c793f5781f8accca245d047d3be6c10541b2610c02c6e916d3db9776c6964e4519cf2e30708c954ef2492d3418c552dd9b5db4320dab8be6ac3394cb4b3fb1b9d5222c6ca9bd06aae2fef510e541db1209cde21fae56507020e80862d0b875d958346c42ebb781955ab337be61a68534281100247904b81b86aed49544c2452ecffaf6cc116f9d3c7362fc2cc390ab2ad29928b6e8bf90a4f21442fb213dbeeea4b8f481792fc6579b608e3a9c4fbe2755010d7ab3cd122de7a40a1f7780350a31d83ee5006ade36854cbc8e8c648259b29f2f7042719ab4d4d4d1f0c5fe6b717d23a5504335922f84ea8b20c78a5f1ddf6009089ea221353c01963fb8cabd3d795831c86d084660fa7f7d08f3ff15780c5b301ee27ab8d98fb358b90e92de4c96687c37e327ac1f0f23208c41a36e67cc22356df854f2dc309c110cfae51c5cc69051d22477caa1d2a2f276ccfbe907b263bd79ad4c5f6ea2687466f325ff2b1a736fff687c14d477c4c744e9c82be5b8ebfb69db2b312ff540ec8cadfcba9b609cae7e54ff347ed3d2649f9214600870ecba27f98943b4fb72f93b5ecb6d64dc1c7b2e8c2f2cf1006e39a237c5818014df9281feb6e522f6cb2d5ca35aeada09a58d5a6bdc9a75cf81a1c51faa8a3824a58d192a27be9fee5098b2e71d0d3f12917d50667415e418b790e0942260f4d2589c57aa1bd36017bd2bece963f0776f9f76cc66876c3f88f8bdbc35e329ecb56887948fd2c05d49c664509a682c6ff60350070bfd111be86ad2eee8c0d76b851fdb75f08e11fa47b5fd29b57568abbf91d3760652d475558bce2a1393688c9e2b4ae06cb072c294e1396b58db00b09ba8dbdc047a1684cca6e5b04cb52a40dd7b7f72c55292e7af0f3b8dda380d45b4e71c6cf57179247923750551ffd955f815cfbc29dfe5e0b2689eafdf44ce362b9c5864e4003326b2f183df7d39de7632bf3b2a85dca04cda08d10a5bad9ed9b481227e39804c3fd52d8a8f03288e13eb09c9075e23f82123a416e58864d95a321a719f88c8633201eb7d5c429348dfd83b476510f71808f95ab3b11d521004acc6d9168771736ec0a5f7c73ca78a46787c19299a79b453e49317353d6bee5b", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m42.771578919s ago: executing program 0 (id=86): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000480)={0x1, 0x7fff, {0x57, 0x3, 0x81, {0x8, 0xe2}, {0x5, 0x607}, @const={0x3, {0x401, 0x3, 0x3, 0x8000}}}, {0x55, 0x3, 0x9d8b, {0x6, 0xc}, {0xb0, 0xfff7}, @ramp={0xef, 0x50a1, {0xffff, 0x0, 0x4, 0x9}}}}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 1m42.7120991s ago: executing program 0 (id=87): pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988ca", 0xe}], 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x824) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r2, &(0x7f00000001c0)='./file0/file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x0) close(r0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x1, 0x7fffffff}}, @code={0x1, 0x4e, {"3e0f005787b96a090000b845000000ba000000000f3066b826000f00d80f01cb66b8ad008ee80fb59b5aed00006765400f01c9f4c4620937700f0f01f8"}}, @uexit={0x0, 0x18, 0xccff}, @cpuid={0x2, 0x18, {0x5, 0xc9}}, @cpuid={0x2, 0x18, {0x8, 0x65}}, @cpuid={0x2, 0x18, {0x5d}}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @code={0x1, 0x4d, {"66ba2000b800000000ef8f2978d794ba000000008f2978c2f56767670f01cb673e460f013366bad004b002eef4460f795a0167450f01dfc402d945ff"}}, @cpuid={0x2, 0x18, {0x1, 0x8}}, @cpuid={0x2, 0x18, {0x7fffffff}}], 0x1a3}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x994, 0x0, 0x6}]}) sendfile(r0, r0, 0x0, 0x7ffff000) 1m42.595828392s ago: executing program 0 (id=88): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0xf, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0xa, 0x4, "e3393045"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000700)={0x40, 0x9, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000a80)={0x40, 0x10, 0x4, "6ccc780e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 1m42.567055532s ago: executing program 0 (id=91): socketpair(0x28, 0x0, 0x0, &(0x7f0000000140)) (async) mount(&(0x7f0000000080)=@filename='./cgroup\x00', 0x0, 0x0, 0x2011001, 0x0) (async) mount$fuse(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x1000020, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x40087543, 0x200000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x20000000000000}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x924, 0x0, 0xffffffffffff8001}, {0x93f, 0x0, 0x6}, {0x954, 0x0, 0x5}, {0x189, 0x0, 0xfea4}, {0xc001001f, 0x0, 0x1}, {0x8e8, 0x0, 0x7f}, {0xb50, 0x0, 0x7}]}) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x3) 1m42.460928324s ago: executing program 32 (id=91): socketpair(0x28, 0x0, 0x0, &(0x7f0000000140)) (async) mount(&(0x7f0000000080)=@filename='./cgroup\x00', 0x0, 0x0, 0x2011001, 0x0) (async) mount$fuse(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x1000020, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x40087543, 0x200000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x20000000000000}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x924, 0x0, 0xffffffffffff8001}, {0x93f, 0x0, 0x6}, {0x954, 0x0, 0x5}, {0x189, 0x0, 0xfea4}, {0xc001001f, 0x0, 0x1}, {0x8e8, 0x0, 0x7f}, {0xb50, 0x0, 0x7}]}) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x3) 47.407186593s ago: executing program 2 (id=1036): pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r0, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r0, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000004fcff", 0x58}], 0x1) r3 = syz_usb_connect$cdc_ncm(0x6, 0x7f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x7, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "a7"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xd, 0x9}, {0x6, 0x24, 0x1a, 0x8001, 0x25}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x17}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x3, 0x9, 0xc0}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x5, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x220, 0x9, 0x5, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x2}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xe8, 0x80, 0x0, 0x20, 0x6}, 0x133, &(0x7f0000000180)={0x5, 0xf, 0x133, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0xca, 0x1, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "92e6372c2ab2d072a1fe9d96296a269b"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa7, 0x81, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xc, 0x0, 0x7}, @generic={0xf4, 0x10, 0x3, "9373cbc1f730f50780b9f53f4d3fdeba362284fa1d94a675979c21cb976e92419b6e0c35377d8c35a6502caab12ca26076c5d5ea3ed6899c3c99e43771423fa13ac8cb33f934c712304f7418767d1a19d04e52a4087c61fc79a9decec0e171949c11668f6962b1be51885402be50ab34519f42c78bde246bb92c1b07c666624d9f3a51610b84555dd181adaa7bec7b862af8ce81cb887ce4e70291400318c12bd409472b0169ddfa0ac7c2eefa244c887c1ffb46af624806529d3655b22239cb98938e4f7a0f5098461c6ab7b7faa3b89312d621bc8bca2887fcc94577c96dc18a8d3a42b8e91cb1905eec91b62080ea5b"}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41b}}, {0x8a, &(0x7f00000003c0)=@string={0x8a, 0x3, "7b7e601e938a6f14044e4e0c15b8ff792930094f22ef1bda8590b22b1ab4e619f6df8256ed11b91e58baae35c62f06fcf339abee68cfe501502744bec136766b7a825bb81cc4fb523ed62dfab888a761ddeb3a931831349b33be0699e91fd7eb5be907c130db19225590ed0a3f40fe65750fa641cca1ea0720e40c8a96e6918bf169146a0a55c479"}}, {0xd3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, {0x25, &(0x7f0000000580)=@string={0x25, 0x3, "33160a278bfcf59264b30e1aa21516389bc7c1f85360143fea3662a1db62c9fde3a2e7"}}]}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) fgetxattr(r4, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1550) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x21c080, 0x0) futimesat(r5, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0xea60}}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) syz_usb_disconnect(r3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) ioctl$BLKRRPART(r1, 0x125f, 0x0) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000040)='syscall\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) fstat(r1, &(0x7f0000000000)) 46.732188843s ago: executing program 2 (id=1059): mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/162) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x438, 0x350, 0x240, 0x10010000, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0xfa3686305f6cf8d4, r0, 0xfffbc000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x76) fcntl$setpipe(r3, 0x407, 0xffffffff80000000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000400)={&(0x7f000087a000/0x4000)=nil, 0x4000}) 46.717170523s ago: executing program 2 (id=1060): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 46.667858394s ago: executing program 2 (id=1061): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000000bc0)=0x54) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "015204f089b96478db1d8a5f756509e977fb1a03"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0x80}}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000b40)={0x144, 0x0, &(0x7f0000000940)=[@acquire, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/208, 0xd0, 0x1, 0x23}, @flat=@handle={0x73682a85, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/43, 0x2b, 0x0, 0x17}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x1, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000011c0)=""/4096, 0x1000, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000006c0)={0x0, 0x20, 0x48}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f00000007c0)={@fda={0x66646185, 0x1, 0x0, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/188, 0xbc, 0x1, 0xe}, @fda={0x66646185, 0x4, 0x2, 0x2b}}, &(0x7f0000000840)={0x0, 0x20, 0x48}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x1101, 0x4}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000900)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x3}, @enter_looper, @enter_looper], 0x63, 0x0, &(0x7f0000000ac0)="28a2e13401ade1c9c07d32a6fc71763455f1bf22028cb9fbdd6bd92dc3991734feca6a3459fccf7c1c0b6708a784d003ffa9774053c63307a6c9c9455032bb49b2bda389166f204c1ddea7599dda82d675aaea5664fa1aba352bd7ee6f789cc3d89c41"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') accept4$unix(r5, &(0x7f0000000280)=@abs, &(0x7f0000000140)=0x6e, 0x80800) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) chdir(&(0x7f0000001180)='./bus\x00') open(&(0x7f0000000040)='./bus\x00', 0x1, 0x76) close_range(r4, 0xffffffffffffffff, 0x0) 46.667351994s ago: executing program 2 (id=1062): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x4, 0x0, 0x2}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fstat(r2, &(0x7f0000000d40)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 46.651174064s ago: executing program 2 (id=1063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x200448c4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) userfaultfd(0x100001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 46.615635725s ago: executing program 33 (id=1063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x200448c4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) userfaultfd(0x100001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 7.589714178s ago: executing program 3 (id=1854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414330000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000fc79000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000200000028bd7000000000000200040000000000000000006800120067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e65726963290000000000000000000000000000000000000000000000000000e000000080"], 0x200}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r2, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0x7, &(0x7f0000000000)={0x9, 0x100}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x2, 0x84a, 0xe08, 0x8) sendfile(r2, r2, 0x0, 0x7ffff000) 7.519965999s ago: executing program 3 (id=1855): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x5b) 7.046750236s ago: executing program 3 (id=1859): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002140)={0xaa, 0x104}) read(r0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0xff, 0x9, "d728f7d31233"}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@enter_looper, @release={0x40046306, 0x3}], 0x61, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002140)={0xaa, 0x104}) (async) read(r0, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0xff, 0x9, "d728f7d31233"}}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@enter_looper, @release={0x40046306, 0x3}], 0x61, 0x0, 0x0}) (async) 7.035043746s ago: executing program 3 (id=1860): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x1b}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r2, &(0x7f0000000040)=""/141, 0x8d) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) madvise(&(0x7f00009bc000/0x3000)=nil, 0x3000, 0x4) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r4, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) getpid() (async) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406b1d01014000010203010902928003010400060904000000010100000a2401f7ff0702010209240303000303030b0524050601090401000001020000090401010101020000072401800802100c240201080100068d300000090501090004ffc803072501820405000904020000010200000904020101010200000b240201060108013a388207240101c000000905820950"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) fchdir(r5) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r2, r2, 0x0, 0x7ffff000) 6.969983448s ago: executing program 3 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='environ\x00') mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async, rerun: 32) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) (rerun: 32) 6.935306008s ago: executing program 3 (id=1862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000080)={0x10000018}) set_robust_list(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)={0x1000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2]) socket$inet6(0xa, 0x3, 0x3a) shutdown(r2, 0x1) dup3(r4, r8, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r10 = inotify_init1(0x800) sync_file_range(r10, 0xfffffffffffff800, 0x10004, 0x5) getsockopt$sock_int(r9, 0x1, 0xc, 0x0, &(0x7f0000000040)) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x11) mremap(&(0x7f00002c4000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000755000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.905360698s ago: executing program 34 (id=1862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000080)={0x10000018}) set_robust_list(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)={0x1000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2]) socket$inet6(0xa, 0x3, 0x3a) shutdown(r2, 0x1) dup3(r4, r8, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r10 = inotify_init1(0x800) sync_file_range(r10, 0xfffffffffffff800, 0x10004, 0x5) getsockopt$sock_int(r9, 0x1, 0xc, 0x0, &(0x7f0000000040)) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x11) mremap(&(0x7f00002c4000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000755000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.299869791s ago: executing program 5 (id=1944): ioprio_set$uid(0x3, 0x0, 0x2004) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r3, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000580)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x515002, 0x79) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[], 0x20}], 0x1}, 0x40) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r10, &(0x7f0000000600)=ANY=[@ANYBLOB="25030f003fff94", @ANYRES16], 0xffdd) ioctl$BLKROSET(r9, 0x125d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x99b33000) 1.207932832s ago: executing program 5 (id=1948): r0 = memfd_secret(0x80000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0xc0329000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r1 = socket$xdp(0x2c, 0x3, 0x0) fadvise64(r1, 0xffffffff00000000, 0xf2d, 0x4) memfd_secret(0x80000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0xc0329000) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async) socket$xdp(0x2c, 0x3, 0x0) (async) fadvise64(r1, 0xffffffff00000000, 0xf2d, 0x4) (async) 1.202451922s ago: executing program 5 (id=1949): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x3, 0x4) 1.128017413s ago: executing program 5 (id=1951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}}, 0x4000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x4000, 0x80, 0x1a}, 0x18) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.088795553s ago: executing program 1 (id=1954): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9) r1 = getpgid(0x0) kcmp(r1, 0x0, 0x6, r0, r0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/udp\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x0, 0x3, 0x7, 0x6, r2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2e8, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "82a2bc8040d871cb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5e426bf557f53cdf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "61a8aaac3a16b0bf"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="35f1f76e933e161cd907a144d895cc5c75393ce57d2fe2a3acbab06f479e120d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="097330548cb8e36c2a464ebc8608abf90b4cc6477ea333d8536f20ab4fa48b37"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7de7}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="303c5c785ee2e6c9848c5370d4e62c94"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1e5298b217f996f9"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d35e9bd1fd9d1fcb86491b412b1ca96145675dbe753c820944243902512601ab"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d2e3abb4f48d39f899c33c56760dc924"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ca916f52245fa568ea2c470bf92cb145a67735948c852c2f6d81544ef3e84a74"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a6942eef560ccca"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4862d2185af981d0dd909c52221d01de99247c3ac2f41cb076f16c325116f2fe"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2550ddcad0adb164"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2f7}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "39df753459cd1b27"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="99009f8ac48b0d509b3353e4e759547d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a7f5f74a841e817f07b96b29fa8f666b9aa44591302d818b422eab5d5274c59b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f51d4aa0b4690b7b4749de9862c25f4816537403154c8d3f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c5c4c746bf0e38ef"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0505e07a7ade63a11d1669b32277eafb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="34032be768b332e3e44789e8574b41a0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1d1c}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9fe9fe5f498011eedebd1775f61a7905b246302cc8cdd89917de8c2da3bd9f45"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="83508c0a614229e46b1486463123224b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d7ed287c79d628d82bf4f079297f65e4712a95939e751bdf"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="129fa239007095196a7579a725992a23d88da12b575ef660"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0b289fba9ca2f1ab"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f11b807ba66d7c2c877dee97cfb81ec4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5304339e25f2203d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c3582d120ff4731"}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x24044855}, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, r7, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dbc9fa159db742067c771949deebc78add3b66c71bda4054"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b5e424075984f547b7967938ae0df2394c5e309b632fdfa"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70783ffd6918a8edba1411748c23556cbf56d44ccf100bf0"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "50423e27076950c3c1adfb61b3b61c625862e97860076b51"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "69d5e84d0ab4c2a67a4d620b647683b4ff3c765dee9c20dc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000940)=0xe8) mount$incfs(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1403080, &(0x7f0000000980)={[{@readahead={'readahead', 0x3d, 0x5}}, {@rlog_pages={'rlog_pages', 0x3d, 0x4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x03\x03\x03\x03\x03\x03'}}, {@euid_gt={'euid>', r8}}, {@obj_type}]}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r3) sendto$inet6(r3, &(0x7f0000000a00)="9f83272c3ecfb2b997c728b1db2413cd6b34551628ba4bae377d79599fbec9455583490ab130d6c5c7c21cbda4ba36a0faaed9bd38832b77f9eee7922582b43f3c447528a810bef49c0e3d985639790540490f3dfb4baf1d9343151e7e188ecd9c725c9e208a5939ee790d3da61a3a433cec9a72028cb430f1c19f7533efc19b4b977efe8880af78818f58ae2093ba5bedac6f167a2e2f7237f7a98438a2b3f3160bcc7190a33d37002945699e1c2f1feec5bf9870f4733da01df3cd150dc7049c3be796fca63cb6733cb53412e78165eabcf0a3efbe3c8bcd2724b67ad6ce2527873a15285c115412118e", 0xeb, 0x4001, &(0x7f0000000b00)={0xa, 0x4e24, 0x200, @loopback, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000b40)={0x1fe, 0x0, 0x3bd76269d9a52e10, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000b80), &(0x7f0000000bc0), 0x2, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0xc30482a195239dfb}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x70, 0x0, 0x2, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x2}, [@nested={0x5c, 0x137, 0x0, 0x1, [@generic="6e5035b2ef4344180126b44c1946e6238a17f12adc0de0f68eec64596e646dd7d60726f1363ca0a3583a3d0bb263b93a1562343fed0e3a453c4fbe3f72f9d44d59ddf243f18ef66e2573be901cbe30a15b49ac55498ad5ea"]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000050) r11 = dup2(r9, r0) ioctl$INCFS_IOC_CREATE_FILE(r10, 0xc058671e, &(0x7f0000001100)={{'\x00', 0x1}, {0xfffffffffffffff4}, 0x8, 0x0, 0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)="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", 0x138, 0x0, &(0x7f0000000f00)={0x2, 0x1b5, {0x1, 0xc, 0xbd, "7ff9aae3f9752ef657d8fe4a42e86983c0aed936430bd32da15e912ea7639a6d39a7c93be43c923f42e57e77ea61bb3feed5e63f48ca8811a96ff1ab8cf4302bec1594548673f2cf23d08a1d09b753d05438c6df5294c0e02e111b31c7c42f21b94866ae04bb45b817623e3db62de8f223b05fc2c1b698f02ce99dfaf13b69a037bb9e5b6ff9aa27757fc87ba62d1ec1324e20bfaddd25bb3e8a11f91c475cb6105d4fc77d29e4088faeb9a5657b92f0683202a37908183839365f11f1", 0xeb, "37243f7c5b3b72abf2e015cb4e91cb3696cae7b64d409bb648ccffe1c370af13a2dec4ec7824ec100f73cf33fe4d70e0f4459775e179842aadad1f55d45e9a7de6b21301437313fd337d46b43a46bed51f8f0446da50a00a0a7ab8a36c80c723a825c8fa7041444a73b8b2c498f5e5fe5838a56405a3f714075da0c23320ee7ca19f6f3b954a58d954f683aa7f3e5f4ef160bc91fde0727ac0487f16d294508b01e4e9a7e279d84cd52c8019683396cfe96045b193f3d67d7295b2b4b869abc21275052098f746248b1b8af8bbb4f20833a3c51ecd9c8564eda1bc3c5bf91f256b97ef15eb52d3deb33fac"}, 0xe, "e4261e4dae6e2b581df2fc2f45a6"}, 0x1cf}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r11, 0x111, 0x5, 0x7, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001180), 0x480000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) exit(0xb4b) 987.978356ms ago: executing program 5 (id=1955): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0xfc, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xe1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x5be7ec5276c3993d, 0x8, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x4, 0x5, 0x20, 0x7}, 0x24, &(0x7f00000001c0)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x10000, 0xf00, 0x800, [0xffc000, 0xff3f30, 0xc0c0, 0xffff0f]}, @ptm_cap={0x3}]}, 0x9, [{0x5, &(0x7f0000000240)=@string={0x5, 0x3, "585bc9"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x429}}, {0x98, &(0x7f0000000380)=@string={0x98, 0x3, "72297b9d47605059f51d578ba80aaaddfe3c9b78767dfae15cfe166a1b9eef1e6ca1a522e709c631fde80c98861d0306f24a2f01dbedf01b65896dbb08e8cd09ce470b1d1c87c2273fa22ec54b6e4318ab651b2ce56ce1b84e0bde37760c7fa771a2b2229fa9c308fffa16ec8f4ffe266717ff01922c231122cd222a077f82c011c7c95e19d91f49b9a6902bd5587629ba9345921f28"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x843}}, {0xe1, &(0x7f0000000580)=@string={0xe1, 0x3, "d9cebf6e910f0cb75425a96800556eb3c1625be5eb3db5509d6797cbd442818a7bebb5f628b8a0442b3a6b23b5cd85e3c2b58be1a4023573a6d320a6d95df2cfb03068eddb17303b6990478d5e35c24c60a765aef3bde320712a99dc776bc8c03651cdc4846887520ebf92ed36e99ce52651e8efc76a4efe8c85c1088c151b5ef11cdd51636e7bab5d0f616cd53d29aefbba2285e1a41afad2de3f265ae6c146c28678dd1c92354ecb3110924c7ee7b66a2dcb5ddc96f4f07ef6063949d0f50381d50eaf343027c51f17454fe72bcdf6d100a051a656dd64a62afe0df7283c"}}, {0x1d, &(0x7f00000004c0)=@string={0x1d, 0x3, "148fd07ad49d49d8aee4e27890e9f7f86d6ceb559d040294cbe3f3"}}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x2}) 816.081438ms ago: executing program 4 (id=1959): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040), &(0x7f0000000080)={'U-', 0x3}, 0x16, 0x1) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e}, @release], 0x0, 0x0, 0x0}) 815.258818ms ago: executing program 4 (id=1960): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x127641, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000001740)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @loopback}, 0x4, 0x0, 0x0, 0x0, 0x384a, &(0x7f0000001700)='veth1_to_bridge\x00', 0x0, 0x8, 0x3}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x40, 0x0, 0xd0060) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x3e80) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000020301"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000180)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x2}) recvmmsg(r3, &(0x7f0000001680)=[{{&(0x7f0000000100)=@rc, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000500)=""/11, 0xb}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x7, &(0x7f00000015c0)=""/160, 0xa0}, 0x7}], 0x1, 0x1, &(0x7f00000016c0)={0x0, 0x989680}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 749.386489ms ago: executing program 4 (id=1961): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x803, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x2, 0x1, 0x5, 0x10, 0x3}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2004c404}, 0x20000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@dead_binder_done, @exit_looper], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x803, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x2, 0x1, 0x5, 0x10, 0x3}, 0x20) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8041, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2004c404}, 0x20000000) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@dead_binder_done, @exit_looper], 0x0, 0x0, 0x0}) (async) 610.000091ms ago: executing program 4 (id=1969): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000040000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff000000000000f8ff0000000000000000000a000000000000000000000080400000000000000000080000001000000000000101000000000008001f000300"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x40, 0x80, 0xe125, 0x8000, {{0xe, 0x4, 0x3, 0x12, 0x38, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@rr={0x7, 0xb, 0x33, [@multicast1, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x77, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102]}, @ra={0x94, 0x4}]}}}}}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x3, 0x69, @local, @empty, 0x8, 0x20, 0x2, 0x80000001}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="e0000001000000000000000000000000000004d42b000000fe8000000000000000000000000000bb840e00000000000029060000000000000300000000000000090000000000000009000000000000000008000000000000ffffffffffffff7fc4f4ffffffffffff72040000000000000300000000000000090000000000000000000000000000000100000002000000000000002abd700001350000020003fdb00000000000000008000b0005000000ac000700ff020000000000000000000000000001000000000000000000000000000000004e2400074e2200080a00002016000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="e3120000000000000e00000000000000ff01000000000000090000000000000000080000000000000400000000000000060000000000000009000000000000005b7700000000000007000000000000000900000000000000385500000000000009000000b46b6e000001010000000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x10080}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="02020f050600000029bd05000000000000001000000004d2000004d300"/48], 0x30}}, 0x80) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1100, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0x0) r12 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r12, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}}], 0x1, 0x20000860) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x34050, 0xffffffffffffffff, 0x7fa8c000) 600.739361ms ago: executing program 4 (id=1971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000080)=r3) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x7405e000) 517.231212ms ago: executing program 4 (id=1975): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x8000, 0x0) r2 = socket(0x2, 0x1, 0x0) listen(r2, 0x0) shutdown(r2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) accept4$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x28}, 0x800, 0x0, 0xff, 0x0, 0x0, 0xffff}, 0x20) ioctl$TIOCMSET(r1, 0x5418, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 477.658523ms ago: executing program 5 (id=1977): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x5c9f43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x2, 0x0, 0x10000, 0x3, 0x4002004c4, 0x1000, 0xffffffffffffffff, 0x53b8, 0x0, 0x0, 0x3, 0x200, 0x3, 0x8d], 0xeeee8000, 0x2011c0}) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x10, 0x0) read(r3, &(0x7f0000000240)=""/2, 0x2) r4 = epoll_create(0x3) r5 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x19}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000300)={'bridge0\x00', 0x8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) close_range(r0, r3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r9 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r9, 0xffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fcntl$addseals(r9, 0x409, 0x0) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x1000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000000)=0x7) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x80) write$binfmt_elf32(r11, &(0x7f0000000500)=ANY=[], 0x58) r12 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYRES32=r6], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) 422.731344ms ago: executing program 6 (id=1981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRESOCT]) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000080)) 420.299784ms ago: executing program 6 (id=1982): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x32, 0xa01, 0x70bd25, 0xfffffffe, {0x1e}}, 0x14}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') lseek(r2, 0x40008, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88800) mount_setattr(r2, &(0x7f0000000040)='./file0\x00', 0x8800, &(0x7f00000000c0)={0x2, 0x80, 0x40000, {r3}}, 0x20) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 396.631474ms ago: executing program 6 (id=1983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x8008ae9d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee", 0x36, 0x1, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x406f413, 0x9) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67, 0x0, 0xee01}, {0x20}, {0x0, 0x63c}, 0xc6, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x32}, 0xa, @in6=@private0, 0x0, 0x2}}, 0xe8) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x11, r4, 0x2f09a000) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0213716c02"], 0x10}}, 0x4004800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x6) renameat2(r7, &(0x7f0000000000)='./file0\x00', r8, &(0x7f0000000140)='./file1\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000340)=0x2d8, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 380.932264ms ago: executing program 6 (id=1984): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x50050, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d2996e297aa49342abf6f74ffabca8ce0d52bc5db26f96ffbbde821c31cebebed695fd271a29a1b6982c5c00ed0e7002fdc53eceff5544010c4beaeb5f48eef5c7588a96c866d873853fc988a301a7588f1d3e77a9fadccaaf2a7a323a5ac166fbe1fe766857c564f859821bbeaf7f5e19499b328b783cabfbe87de2abbd807fc2b1ef2700e94e0a071ad931875a4a9e2", @ANYRES64]) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, 0xffffffffffffffff) stat(0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000054) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x105500, 0x0) 323.969905ms ago: executing program 6 (id=1985): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x805b8000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) setuid(0xee01) unshare(0x28000600) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000000a01"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) 222.555576ms ago: executing program 1 (id=1986): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r1, 0x33, &(0x7f0000000000)={0x11, 0x4, 0x2}, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x5, 0x5, 0x801, 0x70bd2b, 0x25dfdbfb, {0x5, 0x0, 0xa}, [@nested={0xce, 0x12f, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @fd=r2}, @generic="64b9d903b4288dd85e0bd3365b2b0401b136bf51c40efa493e67e68307fb817fc0bc623217fadc976eab7a7f135ba7f5666864a7c356b35720c6331604e0a02c63874fcfa858d935510218a29d118061dd7812359ec700a2e167ef07bbcf3eec7280ef26f8ce23c367b2ec87e3d2fb718ee055c2d845b02aadcf35b3084ff83c85ab897cbcc2127878dbe95de412ae640809f4a036a320825ff41c8d1e78c8e74c7744a0b0b2c381657ba2252354f6f5c7c684eb59c6400668d4acc23776e5274bd5"]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x5e7d) 212.864247ms ago: executing program 6 (id=1987): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f00000002c0)=""/159, 0x9f}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1}, 0xffffffffffffffd1) splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x800, 0x5) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000080)={0x80000002}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000080)={0x80000002}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendfile(r2, r2, 0x0, 0x5e7d) 163.504308ms ago: executing program 1 (id=1988): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r1, r2) bind$tipc(r0, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = accept$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x29, 0x4, 0x2) r8 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000002340)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r5]) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r7, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r13, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000100)={0x101fd, 0x1, 0xeeee8000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bind$tipc(r11, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0xffffffffffffff24) 112.574358ms ago: executing program 1 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async, rerun: 64) setuid(0xee01) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x40010, r0, 0xb2a99000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) open(0x0, 0x14927e, 0x0) (async, rerun: 32) clock_getres(0xfffffffffffffff4, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001500010329bd7000000000f40b"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x4000800) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000080)) 100.149178ms ago: executing program 1 (id=1990): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @exit_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd, @fd, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1991): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) kernel console output (not intermixed with test programs): , idProduct=6007, bcdDevice= 0.00 [ 43.383298][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.392325][ T9] usb 2-1: config 0 descriptor?? [ 43.803462][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 43.809839][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 43.818906][ T9] usb 2-1: USB disconnect, device number 7 [ 44.147118][ T9] usb 5-1: USB disconnect, device number 3 [ 44.164773][ T858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.165282][ T858] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 44.171863][ T858] rust_binder: Error while translating object. [ 44.180808][ T858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.187043][ T858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 44.275580][ T865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.326771][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.329025][ T869] netlink: 68 bytes leftover after parsing attributes in process `syz.4.182'. [ 44.447944][ T877] rust_binder: Error while translating object. [ 44.447996][ T877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 44.454403][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:113 [ 44.508926][ T888] rust_binder: Write failure EFAULT in pid:122 [ 45.956319][ T677] usbhid 4-1:0.0: can't add hid device: -71 [ 45.976972][ T677] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 45.986206][ T677] usb 4-1: USB disconnect, device number 2 [ 45.995700][ T897] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 46.082878][ T902] rust_binder: Write failure EFAULT in pid:135 [ 46.257658][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 46.257678][ T36] audit: type=1400 audit(1750580306.970:388): avc: denied { append } for pid=910 comm="syz.2.195" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.294151][ T36] audit: type=1400 audit(1750580306.970:389): avc: denied { open } for pid=910 comm="syz.2.195" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.319549][ T36] audit: type=1400 audit(1750580307.020:390): avc: denied { create } for pid=910 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.353717][ T677] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 46.363700][ T529] Bluetooth: hci0: command 0x1003 tx timeout [ 46.364166][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.407707][ T36] audit: type=1400 audit(1750580307.120:391): avc: denied { read } for pid=919 comm="syz.4.198" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.432221][ T36] audit: type=1400 audit(1750580307.120:392): avc: denied { open } for pid=919 comm="syz.4.198" path="/27/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.459288][ T36] audit: type=1400 audit(1750580307.170:393): avc: denied { ioctl } for pid=919 comm="syz.4.198" path="/27/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.459603][ T920] rust_binder: Write failure EFAULT in pid:86 [ 46.502907][ T923] rust_binder: Write failure EINVAL in pid:89 [ 46.513787][ T924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.516883][ T677] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 46.516966][ T925] rust_binder: Write failure EINVAL in pid:89 [ 46.523824][ T677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.557996][ T677] usb 4-1: config 0 descriptor?? [ 46.569866][ T36] audit: type=1400 audit(1750580307.280:394): avc: denied { bind } for pid=926 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.607097][ T931] rust_binder: Write failure EINVAL in pid:97 [ 46.607891][ T36] audit: type=1400 audit(1750580307.320:395): avc: denied { mount } for pid=930 comm="syz.4.201" name="/" dev="ramfs" ino=8666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.636302][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.645196][ T931] rust_binder: Read failure Err(EAGAIN) in pid:97 [ 46.773168][ T677] usb 4-1: Cannot read MAC address [ 46.786024][ T9] usb 3-1: device descriptor read/64, error -71 [ 46.792403][ T677] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 46.804426][ T36] audit: type=1400 audit(1750580307.500:396): avc: denied { shutdown } for pid=939 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.825640][ T677] usb 4-1: USB disconnect, device number 3 [ 46.929705][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.930310][ T952] rust_binder: Read failure Err(EAGAIN) in pid:109 [ 47.023805][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.273816][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.351435][ T961] overlayfs: cannot append lower layer [ 47.403772][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.565814][ T36] audit: type=1400 audit(1750580308.280:397): avc: denied { write } for pid=960 comm="syz.3.208" name="/" dev="incremental-fs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.653719][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.763872][ T9] usb usb3-port1: attempt power cycle [ 47.804364][ T677] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 47.832565][ T972] overlay: filesystem on ./bus not supported as upperdir [ 47.840713][ T971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.892744][ T981] netlink: 56 bytes leftover after parsing attributes in process `syz.4.215'. [ 47.902608][ T981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 47.914424][ T981] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953766][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.969512][ T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160 [ 47.970228][ T677] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.990000][ T677] usb 4-1: too many configurations: 117, using maximum allowed: 8 [ 48.003300][ T677] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 48.011194][ T677] usb 4-1: can't read configurations, error -71 [ 48.058608][ T987] 9p: Unknown access argument : -22 [ 48.103686][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 48.113729][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 48.120122][ T63] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 48.133011][ T63] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 48.147082][ T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.156438][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.162689][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.170805][ T63] usb 2-1: SerialNumber: syz [ 48.181007][ T966] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 48.188791][ T63] usb 2-1: bad CDC descriptors [ 48.253300][ T996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.253797][ T996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.260492][ T996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 48.284791][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.392282][ T63] usb 2-1: USB disconnect, device number 8 [ 48.444308][ T1002] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 48.533715][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.565101][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.640143][ T1007] netlink: 'syz.3.225': attribute type 4 has an invalid length. [ 48.697419][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.738419][ T1021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 48.738794][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.739273][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.748163][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.754855][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.760688][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.768806][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.780292][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.780798][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.793694][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.796316][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.800482][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.807182][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.820006][ T9] usb usb3-port1: unable to enumerate USB device [ 48.834457][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.834488][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.838209][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.841229][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.848115][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.861433][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.862223][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.870209][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.882000][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.888482][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.895039][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.895321][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.901445][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.908229][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.922630][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.930971][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.940788][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.942294][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.949332][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 48.955823][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.966890][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.973465][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 48.986414][ T1026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.001022][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.007946][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.007981][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.008005][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.008028][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.008051][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.024785][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.053604][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.054840][ T1028] netlink: 'syz.1.232': attribute type 4 has an invalid length. [ 49.060258][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.075542][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.081929][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.092803][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.099317][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.105867][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.112183][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.118772][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.126364][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.132798][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.139428][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.145961][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.152206][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.158848][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.165360][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.171810][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.178417][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.185014][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.191313][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.197892][ T1021] rust_binder: Write failure EINVAL in pid:165 [ 49.204469][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.210775][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.217128][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.223371][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 49.265195][ T1042] rust_binder: Write failure EFAULT in pid:174 [ 49.339547][ T1046] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 49.346737][ T1046] rust_binder: Error in use_page_slow: EBUSY [ 49.359007][ T1046] rust_binder: use_range failure EBUSY [ 49.369086][ T1046] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 49.386659][ T1046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 49.395584][ T1046] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 49.398063][ T1062] input: syz0 as /devices/virtual/input/input6 [ 49.410200][ T1046] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:141 [ 49.513899][ T306] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.540606][ T1068] binder: Bad value for 'max' [ 49.573690][ T305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.591857][ T1072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 49.673721][ T306] usb 5-1: Using ep0 maxpacket: 16 [ 49.689979][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 49.701395][ T306] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 49.711375][ T306] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.725204][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.734413][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.742522][ T306] usb 5-1: SerialNumber: syz [ 49.747381][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 49.754517][ T1032] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 49.758270][ T1084] capability: warning: `syz.1.249' uses 32-bit capabilities (legacy support in use) [ 49.763086][ T305] usb 4-1: config 1 has an invalid interface number: 140 but max is 2 [ 49.780482][ T305] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 49.789282][ T305] usb 4-1: config 1 has an invalid interface number: 36 but max is 2 [ 49.797447][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.807619][ T305] usb 4-1: config 1 has no interface number 0 [ 49.813803][ T305] usb 4-1: config 1 has no interface number 1 [ 49.820217][ T305] usb 4-1: config 1 interface 140 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 49.831175][ T305] usb 4-1: config 1 interface 140 altsetting 5 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 49.842423][ T305] usb 4-1: config 1 interface 140 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 16 [ 49.852526][ T305] usb 4-1: config 1 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 49.863570][ T305] usb 4-1: config 1 interface 140 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 49.874628][ T305] usb 4-1: config 1 interface 140 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 49.885579][ T305] usb 4-1: config 1 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 49.896616][ T305] usb 4-1: config 1 interface 2 altsetting 152 has a duplicate endpoint with address 0xC, skipping [ 49.907487][ T305] usb 4-1: config 1 interface 2 altsetting 152 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 49.918530][ T305] usb 4-1: config 1 interface 36 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 49.931625][ T305] usb 4-1: config 1 interface 140 has no altsetting 0 [ 49.938460][ T305] usb 4-1: config 1 interface 2 has no altsetting 0 [ 49.945106][ T305] usb 4-1: config 1 interface 36 has no altsetting 0 [ 49.953204][ T305] usb 4-1: Dual-Role OTG device on HNP port [ 49.959458][ T305] usb 4-1: New USB device found, idVendor=19d2, idProduct=0254, bcdDevice=58.ca [ 49.968676][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.976947][ T306] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 49.989716][ T306] usb 5-1: USB disconnect, device number 4 [ 49.996017][ T305] usb 4-1: Product: syz [ 50.000486][ T305] usb 4-1: Manufacturer: syz [ 50.006296][ T305] usb 4-1: SerialNumber: syz [ 50.013244][ T1058] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 50.222501][ T1058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:188 [ 50.229221][ T305] usb 4-1: USB disconnect, device number 6 [ 50.360124][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 50.560606][ T1119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.562768][ T1119] rust_binder: Error in use_page_slow: ESRCH [ 50.569834][ T1119] rust_binder: use_range failure ESRCH [ 50.576404][ T1119] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 50.582460][ T1119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.590867][ T1119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:172 [ 50.717276][ T1125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160 [ 50.993721][ T305] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 51.063695][ T306] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 51.133741][ T305] usb 4-1: device descriptor read/64, error -71 [ 51.213678][ T306] usb 3-1: Invalid ep0 maxpacket: 16 [ 51.318544][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 51.318562][ T36] audit: type=1400 audit(1750580312.030:474): avc: denied { shutdown } for pid=1138 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.346084][ T306] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 51.403737][ T305] usb 4-1: device descriptor read/64, error -71 [ 51.503690][ T306] usb 3-1: Invalid ep0 maxpacket: 16 [ 51.511724][ T306] usb usb3-port1: attempt power cycle [ 51.513097][ T1141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.627492][ T1146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.635976][ T36] audit: type=1400 audit(1750580312.350:475): avc: denied { setopt } for pid=1145 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.663740][ T305] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 51.823738][ T305] usb 4-1: device descriptor read/64, error -71 [ 51.853713][ T306] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 51.884016][ T306] usb 3-1: Invalid ep0 maxpacket: 16 [ 52.013742][ T306] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 52.034101][ T306] usb 3-1: Invalid ep0 maxpacket: 16 [ 52.039553][ T306] usb usb3-port1: unable to enumerate USB device [ 52.063729][ T305] usb 4-1: device descriptor read/64, error -71 [ 52.173768][ T305] usb usb4-port1: attempt power cycle [ 52.501274][ T36] audit: type=1400 audit(1750580313.210:476): avc: denied { create } for pid=1180 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 52.523686][ T305] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 52.531877][ T1179] kvm: pic: non byte write [ 52.544782][ T305] usb 4-1: device descriptor read/8, error -71 [ 52.613929][ T36] audit: type=1400 audit(1750580313.330:477): avc: denied { create } for pid=1192 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 52.635279][ T1193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:210 [ 52.649678][ T36] audit: type=1400 audit(1750580313.360:478): avc: denied { setopt } for pid=1194 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.684802][ T305] usb 4-1: device descriptor read/8, error -71 [ 52.923768][ T305] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 52.944809][ T305] usb 4-1: device descriptor read/8, error -71 [ 52.963745][ T306] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.074974][ T305] usb 4-1: device descriptor read/8, error -71 [ 53.113679][ T306] usb 5-1: Using ep0 maxpacket: 16 [ 53.120243][ T306] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 53.129035][ T306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.139215][ T306] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.148928][ T306] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 53.159803][ T306] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 53.174560][ T306] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.183798][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.192030][ T306] usb 5-1: Product: syz [ 53.196291][ T305] usb usb4-port1: unable to enumerate USB device [ 53.203090][ T306] usb 5-1: Manufacturer: syz [ 53.207917][ T306] usb 5-1: SerialNumber: syz [ 53.423656][ T306] usb 5-1: USB disconnect, device number 5 [ 53.594325][ T620] udevd[620]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.630227][ T1211] netlink: 'syz.1.290': attribute type 29 has an invalid length. [ 53.770327][ T1213] rust_binder: Write failure EINVAL in pid:192 [ 53.816228][ T36] audit: type=1400 audit(1750580314.530:479): avc: denied { map } for pid=1221 comm="syz.3.294" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.847030][ T36] audit: type=1400 audit(1750580314.530:480): avc: denied { read write } for pid=1221 comm="syz.3.294" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.864578][ T1225] binder: Unknown parameter '00000000000000000000' [ 53.887232][ T1227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 53.952676][ T1233] syz.3.298 uses obsolete (PF_INET,SOCK_PACKET) [ 54.073031][ T36] audit: type=1400 audit(1750580314.780:481): avc: denied { accept } for pid=1238 comm="syz.3.300" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.143931][ T1243] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 54.153540][ T1243] binder: Bad value for 'stats' [ 54.252324][ T1258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1258 comm=syz.1.306 [ 54.262790][ T1261] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 54.274965][ T1261] rust_binder: Write failure EINVAL in pid:182 [ 54.294199][ T1258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 54.636378][ T1264] cgroup: fork rejected by pids controller in /syz2 [ 54.907651][ T1324] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 160, size: 18446744073709551126) [ 54.907678][ T1324] rust_binder: Error while translating object. [ 54.937266][ T1324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.946247][ T1324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 55.016060][ T36] audit: type=1400 audit(1750580315.730:482): avc: denied { create } for pid=1330 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.054921][ T1334] netlink: 'syz.4.315': attribute type 29 has an invalid length. [ 55.193829][ T1353] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 55.276958][ T36] audit: type=1400 audit(1750580315.990:483): avc: denied { mount } for pid=1357 comm="syz.1.321" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.299506][ T1358] overlayfs: failed to clone lowerpath [ 55.323698][ T305] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.461784][ T1369] rust_binder: Write failure EINVAL in pid:222 [ 55.484574][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 55.485799][ T1374] binder: Unknown parameter 'hash' [ 55.492169][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.513012][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.522440][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.530491][ T305] usb 5-1: Product: syz [ 55.534750][ T305] usb 5-1: Manufacturer: syz [ 55.539363][ T305] usb 5-1: SerialNumber: syz [ 55.547406][ T305] cdc_ncm 5-1:1.0: skipping garbage [ 55.552695][ T305] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 55.560251][ T305] cdc_ncm 5-1:1.0: bind() failure [ 55.652397][ T1382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 55.654030][ T1382] rust_binder: Read failure Err(EFAULT) in pid:227 [ 55.829347][ T1390] binder: Unknown parameter 's(J&uHWQ2 }' [ 55.864873][ T1392] fuse: Bad value for 'fd' [ 56.043335][ T306] usb 5-1: USB disconnect, device number 6 [ 56.188348][ T1405] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 56.273693][ T305] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 56.446068][ T305] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.455491][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.463676][ T305] usb 3-1: Product: syz [ 56.467864][ T305] usb 3-1: Manufacturer: syz [ 56.472689][ T305] usb 3-1: SerialNumber: syz [ 56.479568][ T1414] tipc: Started in network mode [ 56.484999][ T1414] tipc: Node identity e0000001, cluster identity 4711 [ 56.494868][ T1414] tipc: Enabling of bearer rejected, failed to enable media [ 56.667554][ T1422] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.686441][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 56.686459][ T36] audit: type=1400 audit(1750580317.400:489): avc: denied { setopt } for pid=1429 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.701330][ T1432] binder: Unknown parameter 'cntt' [ 56.729664][ T36] audit: type=1400 audit(1750580317.440:490): avc: denied { unmount } for pid=1433 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.819704][ T1454] netlink: 'syz.3.352': attribute type 29 has an invalid length. [ 56.835083][ T36] audit: type=1400 audit(1750580317.550:491): avc: denied { read } for pid=1455 comm="syz.4.353" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.863885][ T1458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.863919][ T1458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.870461][ T1458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.877041][ T36] audit: type=1400 audit(1750580317.550:492): avc: denied { open } for pid=1455 comm="syz.4.353" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.906846][ T1458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.906875][ T1458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.913353][ T1458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.951041][ T1462] rust_binder: Write failure EFAULT in pid:251 [ 57.199031][ T1479] cgroup: fork rejected by pids controller in /syz4 [ 57.623282][ T36] audit: type=1326 audit(1750580318.330:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1518 comm="syz.3.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x0 [ 57.688310][ T1525] overlayfs: failed to clone upperpath [ 57.707168][ T36] audit: type=1400 audit(1750580318.420:494): avc: denied { lock } for pid=1526 comm="syz.1.368" path="socket:[11675]" dev="sockfs" ino=11675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 57.707762][ T1527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 57.734301][ T1528] @: renamed from vlan0 (while UP) [ 58.039776][ T1535] netlink: 'syz.4.371': attribute type 29 has an invalid length. [ 58.284246][ T305] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.433690][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 58.440074][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.451899][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.461490][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.469583][ T305] usb 5-1: Product: syz [ 58.473934][ T305] usb 5-1: Manufacturer: syz [ 58.480308][ T305] usb 5-1: SerialNumber: syz [ 58.488200][ T305] cdc_ncm 5-1:1.0: skipping garbage [ 58.493563][ T305] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 58.501735][ T305] cdc_ncm 5-1:1.0: bind() failure [ 58.536354][ T1548] fuse: Bad value for 'fd' [ 58.718966][ T677] usb 5-1: USB disconnect, device number 7 [ 58.800200][ T1550] netlink: 37 bytes leftover after parsing attributes in process `syz.1.377'. [ 59.050326][ T305] usb 3-1: USB disconnect, device number 14 [ 59.302941][ T36] audit: type=1400 audit(1750580320.010:495): avc: denied { shutdown } for pid=1575 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.403980][ T305] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 59.555034][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.566284][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.576644][ T305] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 59.586005][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.595355][ T305] usb 3-1: config 0 descriptor?? [ 59.797206][ T36] audit: type=1400 audit(1750580320.510:496): avc: denied { read } for pid=1589 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.019871][ T1556] overlay: ./file0 is not a directory [ 60.029319][ T305] usbhid 3-1:0.0: can't add hid device: -71 [ 60.035392][ T305] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 60.044352][ T305] usb 3-1: USB disconnect, device number 15 [ 60.529584][ T1609] 9pnet_fd: Insufficient options for proto=fd [ 60.657915][ T36] audit: type=1400 audit(1750580321.370:497): avc: denied { wake_alarm } for pid=1627 comm="syz.1.406" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.725031][ T36] audit: type=1400 audit(1750580321.440:498): avc: denied { mounton } for pid=1638 comm="syz.4.410" path="/proc/314/task" dev="proc" ino=12591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.823719][ T305] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 60.973685][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 60.980527][ T305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34011, setting to 1024 [ 60.991836][ T306] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 60.999381][ T305] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.012956][ T305] usb 3-1: string descriptor 0 read error: -22 [ 61.019291][ T305] usb 3-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.40 [ 61.028416][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.037918][ T1613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.163686][ T306] usb 5-1: device descriptor read/64, error -71 [ 61.245698][ T1613] rust_binder: Write failure EINVAL in pid:271 [ 61.246187][ T1613] rust_binder: Write failure EINVAL in pid:271 [ 61.246580][ T1642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.268073][ T1642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.277731][ T305] usbhid 3-1:1.0: can't add hid device: -71 [ 61.283937][ T305] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 61.293183][ T305] usb 3-1: USB disconnect, device number 16 [ 61.413728][ T306] usb 5-1: device descriptor read/64, error -71 [ 61.653691][ T306] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 61.784058][ T306] usb 5-1: device descriptor read/64, error -71 [ 61.825632][ T1654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.415'. [ 61.843729][ T1654] binder: Unknown parameter 'defcontext01777777777777777777777' [ 61.952260][ T1656] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.952281][ T1656] rust_binder: Read failure Err(EFAULT) in pid:276 [ 62.023699][ T306] usb 5-1: device descriptor read/64, error -71 [ 62.057609][ T1658] binder: Bad value for 'stats' [ 62.057865][ T1659] binder: Bad value for 'stats' [ 62.143808][ T306] usb usb5-port1: attempt power cycle [ 62.323696][ T305] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 62.453724][ T305] usb 3-1: device descriptor read/64, error -71 [ 62.483708][ T306] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 62.504719][ T306] usb 5-1: device descriptor read/8, error -71 [ 62.594707][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 62.594727][ T36] audit: type=1400 audit(1750580323.310:500): avc: denied { write } for pid=1667 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.634917][ T306] usb 5-1: device descriptor read/8, error -71 [ 62.675549][ T1672] netlink: 'syz.3.423': attribute type 29 has an invalid length. [ 62.693754][ T305] usb 3-1: device descriptor read/64, error -71 [ 62.873906][ T306] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 62.895277][ T306] usb 5-1: device descriptor read/8, error -71 [ 62.933781][ T305] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 63.024859][ T306] usb 5-1: device descriptor read/8, error -71 [ 63.063870][ T305] usb 3-1: device descriptor read/64, error -71 [ 63.133867][ T306] usb usb5-port1: unable to enumerate USB device [ 63.186358][ T1676] @: renamed from vlan0 (while UP) [ 63.194939][ T1676] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 63.268857][ T36] audit: type=1400 audit(1750580323.980:501): avc: denied { mounton } for pid=1681 comm="syz.1.428" path="/132/file0" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 63.303698][ T305] usb 3-1: device descriptor read/64, error -71 [ 63.331920][ T1696] netlink: 5 bytes leftover after parsing attributes in process `syz.1.433'. [ 63.398683][ T1700] netlink: 'syz.1.435': attribute type 29 has an invalid length. [ 63.423873][ T305] usb usb3-port1: attempt power cycle [ 63.763685][ T305] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 63.781251][ T1704] rust_binder: Error while translating object. [ 63.781280][ T1704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.787586][ T1704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 63.797991][ T305] usb 3-1: device descriptor read/8, error -71 [ 63.873344][ T36] audit: type=1400 audit(1750580324.580:502): avc: denied { getopt } for pid=1712 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.947003][ T305] usb 3-1: device descriptor read/8, error -71 [ 63.986386][ T36] audit: type=1400 audit(1750580324.700:503): avc: denied { mounton } for pid=1725 comm="syz.4.443" path="/95/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 64.020424][ T36] audit: type=1400 audit(1750580324.730:504): avc: denied { unmount } for pid=590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.175863][ T575] bridge_slave_1: left allmulticast mode [ 64.181833][ T575] bridge_slave_1: left promiscuous mode [ 64.187824][ T575] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.195352][ T305] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 64.203539][ T575] bridge_slave_0: left allmulticast mode [ 64.209349][ T575] bridge_slave_0: left promiscuous mode [ 64.215593][ T575] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.236581][ T305] usb 3-1: device descriptor read/8, error -71 [ 64.349488][ T1838] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.356924][ T1838] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.366952][ T1838] bridge_slave_0: entered allmulticast mode [ 64.373566][ T1838] bridge_slave_0: entered promiscuous mode [ 64.381061][ T575] veth1_macvtap: left promiscuous mode [ 64.384818][ T305] usb 3-1: device descriptor read/8, error -71 [ 64.386686][ T575] veth0_vlan: left promiscuous mode [ 64.434253][ T1838] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.441330][ T1838] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.448636][ T1838] bridge_slave_1: entered allmulticast mode [ 64.455206][ T1838] bridge_slave_1: entered promiscuous mode [ 64.493572][ T1843] netlink: 'syz.1.449': attribute type 29 has an invalid length. [ 64.495481][ T305] usb usb3-port1: unable to enumerate USB device [ 64.549714][ T1838] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.556853][ T1838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.564221][ T1838] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.571270][ T1838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.594315][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.601761][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.611916][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.619005][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.634911][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.641998][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.663455][ T1838] veth0_vlan: entered promiscuous mode [ 64.676206][ T1838] veth1_macvtap: entered promiscuous mode [ 64.695323][ T36] audit: type=1400 audit(1750580325.410:505): avc: denied { mount } for pid=1838 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.029052][ T1853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 65.081831][ T1865] overlayfs: failed to clone upperpath [ 65.125310][ T1873] netlink: 'syz.2.461': attribute type 29 has an invalid length. [ 65.170013][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 65.462647][ T36] audit: type=1400 audit(2000000000.400:506): avc: denied { sqpoll } for pid=1886 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.503723][ T1098] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 65.653699][ T1098] usb 3-1: Using ep0 maxpacket: 16 [ 65.660383][ T1098] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.672530][ T1098] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.682309][ T1098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.690705][ T1098] usb 3-1: Product: syz [ 65.695131][ T1098] usb 3-1: Manufacturer: syz [ 65.700546][ T1098] usb 3-1: SerialNumber: syz [ 65.708282][ T1098] cdc_ncm 3-1:1.0: skipping garbage [ 65.714394][ T1098] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 65.722572][ T1098] cdc_ncm 3-1:1.0: bind() failure [ 65.813202][ T1902] binder: Unknown parameter 'context' [ 65.910425][ T63] usb 3-1: USB disconnect, device number 21 [ 65.945339][ T1904] tipc: Started in network mode [ 65.950356][ T1904] tipc: Node identity 00000040000000000000000000000001, cluster identity 4711 [ 65.959438][ T1904] tipc: Enabling of bearer rejected, failed to enable media [ 65.994942][ T36] audit: type=1400 audit(2000000000.940:507): avc: denied { bind } for pid=1903 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.039972][ T1906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 66.062332][ T1908] rust_binder: Write failure EINVAL in pid:20 [ 66.091818][ T36] audit: type=1400 audit(2000000001.030:508): avc: denied { relabelfrom } for pid=1909 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.119705][ T36] audit: type=1400 audit(2000000001.030:509): avc: denied { relabelto } for pid=1909 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.270582][ T1916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 66.342079][ T1920] overlayfs: failed to clone upperpath [ 66.431539][ T1922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 66.503699][ T63] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 66.531299][ T1925] tipc: Started in network mode [ 66.536373][ T1925] tipc: Node identity 00000040000000000000000000000001, cluster identity 4711 [ 66.545534][ T1925] tipc: Enabling of bearer rejected, failed to enable media [ 66.630785][ T1929] fuse: Bad value for 'fd' [ 66.664753][ T63] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.678468][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.690179][ T1938] netlink: 'syz.2.484': attribute type 4 has an invalid length. [ 66.690464][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 66.708381][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.721379][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.733276][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.742012][ T63] usb 5-1: config 0 descriptor?? [ 66.787584][ T1942] netlink: 'syz.2.486': attribute type 29 has an invalid length. [ 66.914913][ T1953] tipc: Started in network mode [ 66.920605][ T1953] tipc: Node identity 00000040000000000000000000000001, cluster identity 4711 [ 66.930678][ T1953] tipc: Enabling of bearer rejected, failed to enable media [ 67.004697][ T1955] fuse: Bad value for 'fd' [ 67.150286][ T63] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 67.160401][ T63] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 67.169283][ T63] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 67.570870][ T1982] tipc: Enabling of bearer rejected, failed to enable media [ 67.630328][ T1984] fuse: Bad value for 'rootmode' [ 67.652471][ T1986] netlink: 'syz.3.501': attribute type 29 has an invalid length. [ 68.184366][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 68.184385][ T36] audit: type=1400 audit(2000000003.130:511): avc: denied { setopt } for pid=1987 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.210153][ T36] audit: type=1400 audit(2000000003.150:512): avc: denied { create } for pid=1987 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 68.703153][ T1997] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 68.780745][ T2012] fuse: Unknown parameter 'f0x0000000000000003' [ 68.789321][ T2012] overlayfs: failed to clone upperpath [ 68.805954][ T2014] netlink: 'syz.1.511': attribute type 29 has an invalid length. [ 68.862236][ T2026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2026 comm=syz.3.516 [ 68.896040][ T2030] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 68.905029][ T2030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 69.006703][ T2046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.006747][ T2046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 69.244243][ T63] usb 5-1: USB disconnect, device number 12 [ 69.673750][ T63] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 69.714078][ T2077] tipc: Enabling of bearer rejected, failed to enable media [ 69.798249][ T36] audit: type=1400 audit(2000000004.740:513): avc: denied { getopt } for pid=2087 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.833720][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 69.840080][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.851258][ T63] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 69.860389][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.869363][ T63] usb 5-1: config 0 descriptor?? [ 70.105992][ T2090] netlink: 'syz.1.541': attribute type 29 has an invalid length. [ 70.277919][ T63] hid-generic 0003:04D8:00DD.0003: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 70.446151][ T2095] netlink: 168 bytes leftover after parsing attributes in process `syz.2.543'. [ 70.476810][ T2099] tipc: Enabling of bearer rejected, failed to enable media [ 70.538439][ T2102] process 'syz.2.546' launched './file2' with NULL argv: empty string added [ 70.547914][ T36] audit: type=1400 audit(2000000005.490:514): avc: denied { execute_no_trans } for pid=2101 comm="syz.2.546" path="/94/file2" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.565002][ T31] usb 5-1: USB disconnect, device number 13 [ 70.664939][ T2110] overlayfs: failed to resolve './file1/file0': -2 [ 70.714499][ T2122] tipc: Enabling of bearer rejected, failed to enable media [ 70.768144][ T2124] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 70.839658][ T36] audit: type=1400 audit(2000000005.780:515): avc: denied { setopt } for pid=2125 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.175385][ T36] audit: type=1400 audit(2000000006.120:516): avc: denied { create } for pid=2138 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.197941][ T36] audit: type=1400 audit(2000000006.120:517): avc: denied { bind } for pid=2138 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.218686][ T36] audit: type=1400 audit(2000000006.120:518): avc: denied { setopt } for pid=2138 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.239352][ T36] audit: type=1400 audit(2000000006.120:519): avc: denied { write } for pid=2138 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.259958][ T36] audit: type=1400 audit(2000000006.120:520): avc: denied { ioctl } for pid=2138 comm="syz.4.562" path="socket:[13984]" dev="sockfs" ino=13984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.311138][ T2143] tipc: Enabling of bearer rejected, failed to enable media [ 71.394045][ T2153] overlayfs: failed to clone upperpath [ 71.469240][ T2156] binder: Unknown parameter '' [ 71.543238][ T2167] netlink: 'syz.2.571': attribute type 29 has an invalid length. [ 71.551312][ T2168] tipc: Enabling of bearer rejected, failed to enable media [ 71.717852][ T2174] binder: Unknown parameter 'measure' [ 72.139895][ T2183] tipc: Enabled bearer , priority 10 [ 72.171028][ T2187] netlink: 5 bytes leftover after parsing attributes in process `syz.2.579'. [ 72.180346][ T2187] 0{X: renamed from gretap0 (while UP) [ 72.192109][ T2187] 0{X: entered allmulticast mode [ 72.200627][ T2187] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 72.267737][ T2191] tipc: Enabling of bearer rejected, failed to enable media [ 72.490751][ T2208] netlink: 'syz.1.585': attribute type 29 has an invalid length. [ 72.599623][ T2224] tipc: Enabling of bearer rejected, failed to enable media [ 72.762530][ T2247] netlink: 'syz.1.595': attribute type 29 has an invalid length. [ 72.808380][ T2261] tipc: Enabling of bearer rejected, already enabled [ 72.947426][ T2285] netlink: 'syz.2.608': attribute type 29 has an invalid length. [ 73.076825][ T2295] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 73.076886][ T2295] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.085371][ T2295] rust_binder: Read failure Err(EFAULT) in pid:89 [ 73.253689][ T63] tipc: Node number set to 65 [ 73.478752][ T2317] netlink: 'syz.1.618': attribute type 29 has an invalid length. [ 73.499513][ T2319] tipc: Enabling of bearer rejected, failed to enable media [ 73.618143][ T2326] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 73.675419][ T2329] rust_binder: Error while translating object. [ 73.675450][ T2329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.681781][ T2329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 73.705863][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 73.705883][ T36] audit: type=1400 audit(2000000008.650:572): avc: denied { create } for pid=2330 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 73.797843][ T36] audit: type=1400 audit(2000000008.740:573): avc: denied { ioctl } for pid=2336 comm="syz.3.627" path="socket:[15654]" dev="sockfs" ino=15654 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.824257][ T2337] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.873932][ T36] audit: type=1400 audit(2000000008.820:574): avc: denied { create } for pid=2342 comm="syz.3.629" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.912265][ T2347] netlink: 'syz.3.630': attribute type 29 has an invalid length. [ 73.921868][ T2350] tipc: Enabling of bearer rejected, failed to enable media [ 74.085374][ T2376] netlink: 'syz.1.641': attribute type 29 has an invalid length. [ 74.108819][ T2379] tipc: Enabling of bearer rejected, failed to enable media [ 74.273766][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 74.433777][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 74.440989][ T31] usb 5-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 74.453928][ T2391] overlayfs: failed to clone upperpath [ 74.488821][ T36] audit: type=1400 audit(2000000009.400:575): avc: denied { watch watch_reads } for pid=2388 comm="syz.3.647" path="/188" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.512043][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.525201][ T31] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 74.534750][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.548509][ T31] usb 5-1: config 0 descriptor?? [ 74.559121][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 74.746292][ T36] audit: type=1400 audit(2000000009.690:576): avc: denied { accept } for pid=2392 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.817229][ T2398] netlink: 'syz.2.650': attribute type 29 has an invalid length. [ 74.817873][ T2371] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 74.848870][ T2369] mmap: syz.4.639 (2369): VmData 29470720 exceed data ulimit 3411. Update limits or use boot option ignore_rlimit_data. [ 74.900444][ T2400] tipc: Enabling of bearer rejected, already enabled [ 74.958500][ T63] usb 5-1: USB disconnect, device number 14 [ 75.022182][ T2403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 75.311478][ T2426] netlink: 'syz.2.659': attribute type 29 has an invalid length. [ 75.343800][ T2429] overlayfs: failed to clone upperpath [ 75.365820][ T2434] tipc: Enabling of bearer rejected, failed to enable media [ 75.403695][ T63] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 75.565095][ T63] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 75.575999][ T63] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.588931][ T36] audit: type=1326 audit(2000000010.520:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2394 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8e929 code=0x7fc00000 [ 75.612211][ T2458] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 75.612243][ T63] usb 5-1: config 1 interface 0 has no altsetting 0 [ 75.628793][ T63] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40 [ 75.637951][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.646198][ T63] usb 5-1: Product: 캰괚踍똔冟핾砷珐დⰿ䂃䂫袢䯻ᦕ얏䨾㶦ꕗ藗駵癢䜗瓊젹秭䘉⸐䶩ಣ㡶涿娏䨯闿綄檫莝▷⪈꯫걜ߑ൉㴛䥫▄蠩兆챏〬⼋㱑ꩨ흛◐턒ъ郚困菐⍘뫖㐟錓皻ᓅ燮룵䍉䖴혐컧遪䄹籥ꅐƑ+ᖁ豈⼸ீꔚậ➠ꭴꔟ㬶 [ 75.676642][ T63] usb 5-1: Manufacturer: ࠖ [ 75.681819][ T63] usb 5-1: SerialNumber: ј [ 75.687565][ T2406] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.694947][ T2406] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.904020][ T2406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.912668][ T2406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.922143][ T2406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.930823][ T2406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.943000][ T63] usbhid 5-1:1.0: can't add hid device: -71 [ 75.949037][ T63] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 75.957993][ T63] usb 5-1: USB disconnect, device number 15 [ 75.991796][ T2468] tipc: Enabling of bearer rejected, failed to enable media [ 76.011705][ T36] audit: type=1400 audit(2000000010.950:578): avc: denied { write } for pid=2469 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.032243][ T2470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 76.107974][ T36] audit: type=1326 audit(2000000011.050:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2481 comm="syz.3.681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd19278e929 code=0x0 [ 76.459350][ T2520] tipc: Enabling of bearer rejected, failed to enable media [ 76.513552][ T36] audit: type=1326 audit(2000000011.450:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.4.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe55798e929 code=0x0 [ 76.538060][ T36] audit: type=1326 audit(2000000011.450:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.4.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe55798e929 code=0x0 [ 76.629882][ T2531] raw_sendmsg: syz.4.688 forgot to set AF_INET. Fix it! [ 76.664106][ T2538] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 76.672777][ T2538] rust_binder: Write failure EINVAL in pid:141 [ 77.391344][ T2587] mmap: syz.4.710 (2587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.413007][ T2587] rust_binder: Write failure EFAULT in pid:159 [ 77.677445][ T2601] binder: Unknown parameter 'processor : 0 [ 77.677445][ T2601] vendor_id : GenuineIntel [ 77.677445][ T2601] cpu family : 6 [ 77.677445][ T2601] model : 79 [ 77.677445][ T2601] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 77.677445][ T2601] stepping : 0 [ 77.677445][ T2601] microcode : 0xffffffff [ 77.677445][ T2601] cpu MHz : 2199.998 [ 77.677445][ T2601] cache size : 56320 KB [ 77.677445][ T2601] physical id : 0 [ 77.677445][ T2601] siblings : 2 [ 77.677445][ T2601] core id : 0 [ 77.677445][ T2601] cpu cores : 1 [ 77.677445][ T2601] apicid : 0 [ 77.677445][ T2601] initial apicid : 0 [ 77.677445][ T2601] fpu : yes [ 77.677445][ T2601] fpu_exception : yes [ 77.677445][ T2601] cpuid level : 13 [ 77.677445][ T2601] wp : yes [ 77.677445][ T2601] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 77.677445][ T2601] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 77.711848][ T2603] overlayfs: failed to clone upperpath [ 78.069359][ T2632] overlay: Unknown parameter 'uid<00000000000000000000' [ 78.133652][ T63] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 78.285037][ T63] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.296794][ T63] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.307810][ T63] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.319098][ T63] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 78.328303][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.337287][ T2611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 78.549130][ T63] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 78.557305][ T63] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input9 [ 78.569943][ T2661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2661 comm=syz.3.740 [ 78.571671][ T63] usb 5-1: USB disconnect, device number 16 [ 78.582479][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 78.598619][ T2662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2662 comm=syz.3.740 [ 78.829921][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 78.829942][ T36] audit: type=1400 audit(2000000013.770:590): avc: denied { create } for pid=2683 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.961679][ T36] audit: type=1400 audit(2000000013.900:591): avc: denied { create } for pid=2700 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.993757][ T36] audit: type=1400 audit(2000000013.940:592): avc: denied { getopt } for pid=2700 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.030146][ T36] audit: type=1400 audit(2000000013.970:593): avc: denied { ioctl } for pid=2700 comm="syz.3.754" path="socket:[16495]" dev="sockfs" ino=16495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.232147][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 79.533715][ T63] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 79.683724][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 79.689935][ T63] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 79.698224][ T63] usb 5-1: config 0 has no interface number 0 [ 79.704397][ T63] usb 5-1: config 0 interface 196 has no altsetting 0 [ 79.712606][ T63] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 79.721706][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.730152][ T63] usb 5-1: Product: syz [ 79.734755][ T63] usb 5-1: Manufacturer: syz [ 79.739909][ T63] usb 5-1: SerialNumber: syz [ 79.747199][ T63] usb 5-1: config 0 descriptor?? [ 79.753368][ T63] ipheth 5-1:0.196: Unable to find alternate settings interface [ 79.958034][ T305] usb 5-1: USB disconnect, device number 17 [ 80.158536][ T36] audit: type=1326 audit(2000000015.100:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 80.182024][ T36] audit: type=1326 audit(2000000015.100:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 80.205619][ T36] audit: type=1326 audit(2000000015.120:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 80.229116][ T36] audit: type=1326 audit(2000000015.120:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 80.252876][ T36] audit: type=1326 audit(2000000015.120:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 80.284782][ T36] audit: type=1326 audit(2000000015.230:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2782 comm="syz.3.781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd19278e929 code=0x0 [ 80.607255][ T2794] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 80.637554][ T2798] binder: Bad value for 'max' [ 80.679312][ T2803] overlayfs: failed to clone upperpath [ 80.753943][ T2818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2818 comm=syz.2.795 [ 80.840749][ T2821] overlayfs: failed to clone lowerpath [ 80.847212][ T2821] overlayfs: failed to clone upperpath [ 81.834239][ T2866] overlayfs: failed to clone upperpath [ 81.912167][ T2878] netlink: 88 bytes leftover after parsing attributes in process `syz.1.819'. [ 82.319712][ T2892] bridge0: port 3(bond_slave_1) entered blocking state [ 82.326774][ T2892] bridge0: port 3(bond_slave_1) entered disabled state [ 82.333872][ T2892] bond_slave_1: entered allmulticast mode [ 82.339983][ T2892] bond_slave_1: entered promiscuous mode [ 82.406062][ T2901] fuse: Bad value for 'group_id' [ 82.412030][ T2901] fuse: Bad value for 'group_id' [ 82.443080][ T2907] netlink: 88 bytes leftover after parsing attributes in process `syz.2.829'. [ 82.482387][ T2911] sock: sock_set_timeout: `syz.2.831' (pid 2911) tries to set negative timeout [ 82.990962][ T2940] netlink: 88 bytes leftover after parsing attributes in process `syz.3.841'. [ 83.025712][ T2942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 83.805386][ T2974] netlink: 88 bytes leftover after parsing attributes in process `syz.4.851'. [ 83.906646][ T36] kauditd_printk_skb: 5736 callbacks suppressed [ 83.906666][ T36] audit: type=1400 audit(2000000018.850:6336): avc: denied { search } for pid=2999 comm="syz.2.863" name="/" dev="configfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.936001][ T36] audit: type=1400 audit(2000000018.850:6337): avc: denied { read } for pid=2999 comm="syz.2.863" name="/" dev="configfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.958275][ T36] audit: type=1400 audit(2000000018.850:6338): avc: denied { open } for pid=2999 comm="syz.2.863" path="/" dev="configfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.987399][ T3008] overlayfs: failed to resolve './bus': -2 [ 84.064107][ T36] audit: type=1400 audit(2000000019.010:6339): avc: denied { create } for pid=3019 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.064302][ T3020] can: request_module (can-proto-3) failed. [ 84.114335][ T3025] overlayfs: failed to clone upperpath [ 85.153645][ T36] audit: type=1326 audit(2000000020.090:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3073 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87feb8e929 code=0x7ffc0000 [ 85.177114][ T36] audit: type=1326 audit(2000000020.100:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3073 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87feb8e929 code=0x7ffc0000 [ 85.200822][ T36] audit: type=1326 audit(2000000020.100:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3073 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f87feb8e929 code=0x7ffc0000 [ 85.224290][ T36] audit: type=1326 audit(2000000020.100:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3073 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87feb8e929 code=0x7ffc0000 [ 85.247925][ T36] audit: type=1326 audit(2000000020.100:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3073 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87feb8e929 code=0x7ffc0000 [ 85.271395][ T36] audit: type=1326 audit(2000000020.100:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3073 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87feb8e929 code=0x7ffc0000 [ 85.789333][ T3133] overlayfs: failed to clone upperpath [ 85.883760][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.883793][ T529] Bluetooth: hci0: command 0x1003 tx timeout [ 86.609303][ T3188] syz.3.934 (3188): attempted to duplicate a private mapping with mremap. This is not supported. [ 86.631227][ T3190] netlink: 'syz.3.935': attribute type 4 has an invalid length. [ 86.638993][ T3190] netlink: 'syz.3.935': attribute type 7 has an invalid length. [ 86.647251][ T3190] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.935'. [ 86.844728][ T3219] fuse: Unknown parameter 'r00000000000' [ 86.873787][ T3223] overlayfs: failed to clone upperpath [ 86.903222][ T3229] 9pnet_fd: Insufficient options for proto=fd [ 86.943466][ T3241] tipc: Enabling of bearer rejected, failed to enable media [ 87.779670][ T3313] binder: Bad value for 'stats' [ 87.798603][ T3315] overlay: Unknown parameter 'subj_user' [ 87.848497][ T3319] 9pnet_fd: Insufficient options for proto=fd [ 87.913586][ T3324] binfmt_misc: register: failed to install interpreter file ./file0 [ 88.006015][ T3345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3345 comm=syz.2.991 [ 88.193672][ T305] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 88.275458][ T3371] fuse: Unknown parameter '' [ 88.344217][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 88.350042][ T3384] overlayfs: failed to clone upperpath [ 88.356922][ T305] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 88.366038][ T305] usb 5-1: config 0 has no interface number 0 [ 88.372268][ T305] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 88.383701][ T305] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 88.395427][ T305] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 88.404632][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.412741][ T305] usb 5-1: Product: syz [ 88.420480][ T305] usb 5-1: Manufacturer: syz [ 88.425170][ T305] usb 5-1: SerialNumber: syz [ 88.431736][ T305] usb 5-1: config 0 descriptor?? [ 88.437116][ T3334] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 88.446933][ T3334] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 88.506742][ T3390] tipc: Enabling of bearer rejected, failed to enable media [ 88.607943][ T3398] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=279 sclass=netlink_audit_socket pid=3398 comm=syz.1.1010 [ 88.655015][ T3334] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 88.662324][ T3334] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.272046][ T305] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 89.282389][ T305] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 89.292976][ T305] asix 5-1:0.251: probe with driver asix failed with error -71 [ 89.302078][ T305] usb 5-1: USB disconnect, device number 18 [ 89.400981][ T46] tipc: Subscription rejected, illegal request [ 89.435860][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 89.435881][ T36] audit: type=1400 audit(2000000034.375:6370): avc: denied { ioctl } for pid=3450 comm="syz.3.1029" path="socket:[19712]" dev="sockfs" ino=19712 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.714272][ T36] audit: type=1400 audit(2000000034.655:6371): avc: denied { getopt } for pid=3485 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.898780][ T36] audit: type=1400 audit(2000000034.835:6372): avc: denied { setopt } for pid=3506 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.963376][ T3521] 9pnet_fd: Insufficient options for proto=fd [ 90.087738][ T3536] /dev/loop0: Can't lookup blockdev [ 90.546219][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.553369][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.560910][ T3552] bridge_slave_0: entered allmulticast mode [ 90.567306][ T3552] bridge_slave_0: entered promiscuous mode [ 90.573967][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.581131][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.588301][ T3552] bridge_slave_1: entered allmulticast mode [ 90.594652][ T3552] bridge_slave_1: entered promiscuous mode [ 90.604932][ T46] bridge_slave_1: left allmulticast mode [ 90.610687][ T46] bridge_slave_1: left promiscuous mode [ 90.616406][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.624270][ T46] bridge_slave_0: left allmulticast mode [ 90.630013][ T46] bridge_slave_0: left promiscuous mode [ 90.635674][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.732789][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.739898][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.747236][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.754324][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.763367][ T46] tipc: Disabling bearer [ 90.768623][ T46] tipc: Left network mode [ 90.775755][ T46] veth1_macvtap: left promiscuous mode [ 90.781325][ T46] veth0_vlan: left promiscuous mode [ 90.840660][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.848575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.859088][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.866235][ T575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.884430][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.891514][ T575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.929199][ T3552] veth0_vlan: entered promiscuous mode [ 90.943296][ T3552] veth1_macvtap: entered promiscuous mode [ 90.987866][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 91.144825][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.155954][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.165863][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.178897][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.188297][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.202906][ T10] usb 5-1: config 0 descriptor?? [ 91.563909][ T305] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 91.611500][ T10] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 91.620850][ T10] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 91.713668][ T305] usb 6-1: Using ep0 maxpacket: 32 [ 91.720201][ T305] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.732267][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 91.744704][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.755911][ T305] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 91.765023][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.773978][ T305] usb 6-1: config 0 descriptor?? [ 91.779288][ T3582] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 91.787646][ T305] hub 6-1:0.0: USB hub found [ 91.988817][ T305] hub 6-1:0.0: 2 ports detected [ 92.417606][ T3594] overlayfs: failed to clone upperpath [ 92.999573][ T3606] exfat: Unknown parameter 'workdir' [ 93.694313][ T10] usb 5-1: USB disconnect, device number 19 [ 93.717753][ T36] audit: type=1326 audit(2000000038.655:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 93.741453][ T36] audit: type=1326 audit(2000000038.655:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 93.765005][ T36] audit: type=1326 audit(2000000038.655:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 93.788645][ T36] audit: type=1326 audit(2000000038.655:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 93.799145][ T3582] rust_binder: Write failure EINVAL in pid:17 [ 93.819641][ T9] usb 6-1: USB disconnect, device number 2 [ 93.820607][ T305] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 93.838857][ T36] audit: type=1326 audit(2000000038.655:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 93.844492][ T305] usb 6-1-port2: connect-debounce failed [ 93.862564][ T36] audit: type=1326 audit(2000000038.655:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.3.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 94.373301][ T3642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.373808][ T3642] rust_binder: Error while translating object. [ 94.380446][ T3642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.386974][ T3642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 94.720776][ T36] kauditd_printk_skb: 1532 callbacks suppressed [ 94.720796][ T36] audit: type=1400 audit(2000000039.655:7911): avc: denied { append } for pid=3658 comm="syz.5.1100" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.859421][ T3689] tipc: New replicast peer: 255.255.255.255 [ 94.865600][ T3689] tipc: Enabled bearer , priority 10 [ 95.093684][ T305] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.172760][ T36] audit: type=1400 audit(2000000040.105:7912): avc: denied { create } for pid=3735 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.221147][ T3741] netlink: 'syz.4.1126': attribute type 4 has an invalid length. [ 95.254517][ T36] audit: type=1400 audit(2000000040.195:7913): avc: denied { map } for pid=3742 comm="syz.4.1127" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.279079][ T305] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.293329][ T305] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.302116][ T305] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 95.311314][ T305] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.320454][ T305] usb 6-1: config 1 has no interface number 1 [ 95.326662][ T305] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 95.341174][ T305] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.350292][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.358391][ T305] usb 6-1: Product: syz [ 95.362571][ T305] usb 6-1: Manufacturer: syz [ 95.367209][ T305] usb 6-1: SerialNumber: syz [ 95.472459][ T3750] vcan0: entered allmulticast mode [ 95.575276][ T3687] rust_binder: Error while translating object. [ 95.575301][ T3687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.581594][ T3687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 95.595775][ T305] usb 6-1: found format II with max.bitrate = 8, frame size=9 [ 95.612620][ T305] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 95.625295][ T305] usb 6-1: USB disconnect, device number 3 [ 95.804229][ T2976] udevd[2976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.983682][ T9] tipc: Node number set to 65 [ 96.270763][ T36] audit: type=1400 audit(2000000041.205:7914): avc: denied { create } for pid=3786 comm="syz.5.1142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 96.297853][ T36] audit: type=1400 audit(2000000041.225:7915): avc: denied { write } for pid=3786 comm="syz.5.1142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 96.319222][ T36] audit: type=1400 audit(2000000041.225:7916): avc: denied { read } for pid=3786 comm="syz.5.1142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 96.599107][ T3838] SELinux: Context system_u:object_r:modules_conf_t:s0 is not valid (left unmapped). [ 96.613648][ T36] audit: type=1400 audit(2000000041.545:7917): avc: denied { relabelto } for pid=3837 comm="syz.1.1158" name="rnullb0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 96.615066][ T3838] IPv6: syztnl1: Disabled Multicast RS [ 96.661030][ T36] audit: type=1400 audit(2000000041.545:7918): avc: denied { associate } for pid=3837 comm="syz.1.1158" name="rnullb0" dev="tmpfs" ino=333 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_conf_t:s0" [ 96.689948][ T36] audit: type=1400 audit(2000000041.595:7919): avc: denied { read } for pid=3837 comm="syz.1.1158" path="/dev/rnullb0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 96.693827][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 96.731266][ T36] audit: type=1400 audit(2000000041.665:7920): avc: denied { lock } for pid=3844 comm="syz.3.1161" path="socket:[21723]" dev="sockfs" ino=21723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.873642][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 96.884370][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.913654][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.928031][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.937150][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.948314][ T9] usb 5-1: config 0 descriptor?? [ 97.284635][ T3859] overlay: Unknown parameter 'mounts' [ 97.358427][ T9] microsoft 0003:045E:07DA.0005: unexpected long global item [ 97.370619][ T9] microsoft 0003:045E:07DA.0005: parse failed [ 97.386037][ T9] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 97.411856][ T3871] overlay: Unknown parameter 'subj_user' [ 97.559608][ T3808] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 97.570375][ T1098] usb 5-1: USB disconnect, device number 20 [ 98.169250][ T3896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'. [ 98.188551][ T3899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.197114][ T3899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.433676][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 98.563687][ T9] usb 5-1: device descriptor read/64, error -71 [ 98.803660][ T9] usb 5-1: device descriptor read/64, error -71 [ 98.870721][ T3924] fuse: Bad value for 'fd' [ 99.043664][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 99.193660][ T9] usb 5-1: device descriptor read/64, error -71 [ 99.433660][ T9] usb 5-1: device descriptor read/64, error -71 [ 99.543829][ T9] usb usb5-port1: attempt power cycle [ 99.913667][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 99.934724][ T9] usb 5-1: device descriptor read/8, error -71 [ 100.027103][ T3980] fuse: Bad value for 'fd' [ 100.032531][ T3980] 9pnet_fd: Insufficient options for proto=fd [ 100.064684][ T9] usb 5-1: device descriptor read/8, error -71 [ 100.303667][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 100.344681][ T9] usb 5-1: device descriptor read/8, error -71 [ 100.474661][ T9] usb 5-1: device descriptor read/8, error -71 [ 100.584535][ T9] usb usb5-port1: unable to enumerate USB device [ 100.634158][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 100.634177][ T36] audit: type=1400 audit(2000000045.575:7930): avc: denied { map } for pid=4002 comm="syz.5.1215" path="socket:[21908]" dev="sockfs" ino=21908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 100.686632][ T36] audit: type=1400 audit(2000000045.605:7931): avc: denied { accept } for pid=4002 comm="syz.5.1215" path="socket:[21908]" dev="sockfs" ino=21908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 100.733668][ T36] audit: type=1400 audit(2000000045.605:7932): avc: denied { map } for pid=4002 comm="syz.5.1215" path="pipe:[21909]" dev="pipefs" ino=21909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.778789][ T36] audit: type=1400 audit(2000000045.605:7933): avc: denied { execute } for pid=4002 comm="syz.5.1215" path="pipe:[21909]" dev="pipefs" ino=21909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.830229][ T4012] incfs: Options parsing error. -22 [ 100.843906][ T4012] incfs: mount failed -22 [ 100.854160][ T4012] 9pnet_fd: Insufficient options for proto=fd [ 100.924728][ T36] audit: type=1400 audit(2000000045.865:7934): avc: denied { execmod } for pid=4013 comm="syz.5.1221" path="/dev/rnullb0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.924889][ T4014] syz.5.1221 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.054523][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 101.100476][ T36] audit: type=1400 audit(2000000046.035:7935): avc: denied { map } for pid=4022 comm="syz.1.1222" path="/dev/rnullb0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 101.154289][ T36] audit: type=1400 audit(2000000046.095:7936): avc: denied { append } for pid=4024 comm="syz.1.1223" name="rnullb0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 101.228041][ T4032] input: syz1 as /devices/virtual/input/input12 [ 101.707109][ T4053] overlayfs: failed to clone upperpath [ 101.733681][ T305] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 101.883867][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 101.889462][ T305] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 101.898064][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.908219][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 101.918020][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.928208][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 101.938033][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.948176][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 101.958007][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.968161][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 101.978037][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.988251][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 101.998045][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.008197][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 102.017957][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.028119][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 102.037991][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.048158][ T305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 102.058811][ T305] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 102.067932][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.075968][ T305] usb 5-1: Product: syz [ 102.080266][ T305] usb 5-1: Manufacturer: syz [ 102.084902][ T305] usb 5-1: SerialNumber: syz [ 102.090258][ T305] usb 5-1: config 0 descriptor?? [ 102.424506][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.431806][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.582376][ T4092] tipc: Started in network mode [ 102.591461][ T4092] tipc: Node identity 4, cluster identity 4711 [ 102.597846][ T4092] tipc: Node number set to 4 [ 102.604020][ T4090] tipc: Enabling of bearer rejected, failed to enable media [ 103.005539][ T4149] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 103.019135][ T4149] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 103.110549][ T4160] fuse: Bad value for 'user_id' [ 103.116029][ T4160] fuse: Bad value for 'user_id' [ 103.121651][ T4160] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 103.132061][ T4160] overlayfs: missing 'lowerdir' [ 103.180675][ T4167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 103.833846][ T36] audit: type=1400 audit(2000000048.775:7937): avc: denied { create } for pid=4184 comm="syz.5.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 103.928003][ T4192] tipc: New replicast peer: 255.255.255.255 [ 103.934300][ T4192] tipc: Enabled bearer , priority 10 [ 104.018158][ T36] audit: type=1326 audit(2000000048.955:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4204 comm="syz.1.1286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8e929 code=0x0 [ 104.397903][ T4211] overlayfs: failed to clone upperpath [ 104.501528][ T1098] usb 5-1: USB disconnect, device number 25 [ 104.568038][ T36] audit: type=1400 audit(2000000049.505:7939): avc: denied { bind } for pid=4234 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.970358][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 105.045274][ T4262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1306'. [ 105.496672][ T4281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 105.496700][ T4281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:347 [ 105.506282][ T4281] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 105.520259][ T4281] rust_binder: Read failure Err(EFAULT) in pid:347 [ 105.655058][ T4299] netlink: 'syz.5.1320': attribute type 12 has an invalid length. [ 105.670877][ T4299] overlayfs: failed to clone upperpath [ 105.915102][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 105.915121][ T36] audit: type=1400 audit(2000000050.855:7946): avc: denied { getopt } for pid=4332 comm="syz.1.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.964770][ T4335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'. [ 106.404322][ T4357] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1342'. [ 106.414577][ T4358] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1342'. [ 106.533739][ T677] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 106.574938][ T4373] overlayfs: failed to clone upperpath [ 106.582576][ T36] audit: type=1400 audit(2000000051.515:7947): avc: denied { bpf } for pid=4372 comm="syz.1.1348" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.710219][ T677] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 106.725026][ T677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.734609][ T677] usb 5-1: config 0 descriptor?? [ 106.736669][ T4388] overlayfs: failed to clone upperpath [ 107.294302][ T4401] tipc: Enabling of bearer rejected, already enabled [ 107.342131][ T4355] input: syz0 as /devices/virtual/input/input13 [ 107.384968][ T4416] overlay: Unknown parameter 'measure' [ 107.405622][ T36] audit: type=1400 audit(2000000052.345:7948): avc: denied { ioctl } for pid=4354 comm="syz.4.1341" path="net:[4026532304]" dev="nsfs" ino=4026532304 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.931707][ T4443] batadv_slave_0: entered promiscuous mode [ 107.939823][ T4442] batadv_slave_0: left promiscuous mode [ 108.204848][ T36] audit: type=1400 audit(2000000053.145:7949): avc: denied { create } for pid=4488 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.224466][ T36] audit: type=1400 audit(2000000053.145:7950): avc: denied { mounton } for pid=4488 comm="syz.3.1388" path="/418/file0" dev="tmpfs" ino=2264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.306650][ T36] audit: type=1400 audit(2000000053.245:7951): avc: denied { shutdown } for pid=4501 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.395916][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1398'. [ 108.405775][ T4520] cgroup: Bad value for 'name' [ 108.487908][ T36] audit: type=1400 audit(2000000053.425:7952): avc: denied { write } for pid=4540 comm="syz.1.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 109.121229][ T36] audit: type=1400 audit(2000000054.055:7953): avc: denied { create } for pid=4550 comm="syz.3.1410" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.124045][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 109.142137][ T36] audit: type=1400 audit(2000000054.055:7954): avc: denied { mounton } for pid=4550 comm="syz.3.1410" path="/423/file0" dev="tmpfs" ino=2291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.174297][ T36] audit: type=1400 audit(2000000054.105:7955): avc: denied { unlink } for pid=292 comm="syz-executor" name="file0" dev="tmpfs" ino=2291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.234970][ T4557] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1413'. [ 109.337894][ T677] usbhid 5-1:0.0: can't add hid device: -71 [ 109.353339][ T677] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 109.364151][ T677] usb 5-1: USB disconnect, device number 26 [ 109.426351][ T4577] wg2: entered promiscuous mode [ 109.431451][ T4577] wg2: entered allmulticast mode [ 109.517640][ T4585] binder: Bad value for 'stats' [ 109.536169][ T4587] rust_binder: Write failure EFAULT in pid:378 [ 109.536717][ T4588] rust_binder: Write failure EFAULT in pid:378 [ 110.343678][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 110.504924][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.515265][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.525373][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.535829][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.544930][ T10] usb 5-1: SerialNumber: syz [ 110.756294][ T10] usb 5-1: 0:2 : does not exist [ 110.769912][ T10] usb 5-1: USB disconnect, device number 27 [ 110.934090][ T4566] udevd[4566]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.644034][ T4704] fuse: Unknown parameter '+VSd' [ 111.721411][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 111.721644][ T36] audit: type=1400 audit(2000000056.655:7961): avc: denied { execute } for pid=4731 comm="syz.1.1477" path="/447/bus" dev="tmpfs" ino=2425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.442536][ T4785] fuse: Bad value for 'group_id' [ 112.447860][ T4785] fuse: Bad value for 'group_id' [ 112.677846][ T4800] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1502'. [ 112.687194][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 112.716673][ T4802] sock: sock_timestamping_bind_phc: sock not bind to device [ 112.745001][ T36] audit: type=1400 audit(2000000057.685:7962): avc: denied { write } for pid=4803 comm="syz.5.1504" path="socket:[24414]" dev="sockfs" ino=24414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.389625][ T4859] netlink: 'syz.1.1523': attribute type 12 has an invalid length. [ 113.464868][ T36] audit: type=1400 audit(2000000058.405:7963): avc: denied { name_bind } for pid=4863 comm="syz.1.1525" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.567434][ T4872] tc_dump_action: action bad kind [ 114.068733][ T4906] erspan0: entered promiscuous mode [ 114.517101][ T4955] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1559'. [ 114.820894][ T36] audit: type=1400 audit(2000000059.755:7964): avc: denied { link } for pid=4964 comm="syz.1.1563" name="file1" dev="tmpfs" ino=2543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.826422][ T4966] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.852090][ T4966] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.994494][ T36] audit: type=1400 audit(2000000059.935:7965): avc: denied { execute_no_trans } for pid=4989 comm="syz.1.1570" path="/475/file1" dev="tmpfs" ino=2583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.166363][ T5007] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.213648][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 115.386066][ T10] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 115.395264][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.403301][ T10] usb 5-1: Product: syz [ 115.408025][ T10] usb 5-1: Manufacturer: syz [ 115.412671][ T10] usb 5-1: SerialNumber: syz [ 115.423682][ T10] usb 5-1: config 0 descriptor?? [ 115.598978][ T36] audit: type=1400 audit(2000000060.535:7966): avc: denied { listen } for pid=5024 comm="syz.1.1581" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.896478][ T5058] overlayfs: failed to clone upperpath [ 115.929821][ T36] audit: type=1326 audit(2000000060.865:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5064 comm="syz.5.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70c5b8e929 code=0x0 [ 116.235521][ T4988] veth0_vlan: mtu less than device minimum [ 116.242722][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 116.255732][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 116.267169][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 116.279409][ T10] usb 5-1: USB disconnect, device number 28 [ 116.771745][ T36] audit: type=1400 audit(2000000061.705:7968): avc: denied { lock } for pid=5096 comm="syz.4.1606" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.883776][ T5112] overlayfs: failed to resolve './file1/file0': -2 [ 117.083282][ T36] audit: type=1400 audit(2000000062.015:7969): avc: denied { write } for pid=5141 comm="syz.4.1622" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 117.107330][ T5144] netlink: 'syz.4.1622': attribute type 4 has an invalid length. [ 117.115120][ T5144] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1622'. [ 117.283979][ T5178] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 117.523722][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 117.673641][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 117.680015][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 117.689120][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.697847][ T10] usb 5-1: config 0 descriptor?? [ 117.703974][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 117.904522][ T10] usb 5-1: Detected FT232A [ 117.909515][ T5195] netlink: 'syz.3.1641': attribute type 30 has an invalid length. [ 117.909993][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.983761][ T5212] tipc: Can't bind to reserved service type 0 [ 118.499281][ T36] audit: type=1326 audit(2000000063.435:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.523057][ T36] audit: type=1326 audit(2000000063.435:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.538587][ T5229] fuse: Bad value for 'group_id' [ 118.546852][ T36] audit: type=1326 audit(2000000063.455:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.559424][ T5229] fuse: Bad value for 'group_id' [ 118.575483][ T36] audit: type=1326 audit(2000000063.455:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.603645][ T36] audit: type=1326 audit(2000000063.455:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.628700][ T36] audit: type=1326 audit(2000000063.455:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.652447][ T36] audit: type=1326 audit(2000000063.455:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.676083][ T36] audit: type=1326 audit(2000000063.455:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd19278e929 code=0x7ffc0000 [ 118.736586][ T306] usb 5-1: USB disconnect, device number 29 [ 118.745796][ T306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 118.755674][ T306] ftdi_sio 5-1:0.0: device disconnected [ 118.855483][ T5253] bridge0: port 3(@) entered blocking state [ 118.861466][ T5253] bridge0: port 3(@) entered disabled state [ 118.867695][ T5253] @: entered allmulticast mode [ 118.872487][ T5253] veth0_vlan: entered allmulticast mode [ 118.879275][ T5253] @: entered promiscuous mode [ 118.884565][ T5253] bridge0: port 3(@) entered blocking state [ 118.890484][ T5253] bridge0: port 3(@) entered forwarding state [ 118.989762][ T5259] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 119.079142][ T5267] rust_binder: Write failure EFAULT in pid:461 [ 119.127200][ T5270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1667'. [ 119.226489][ T5276] overlayfs: failed to clone upperpath [ 119.246172][ T5279] wg2: entered promiscuous mode [ 119.251081][ T5279] wg2: entered allmulticast mode [ 119.476709][ T5319] SELinux: Context system_u:object_r:tape_device_t:s0 is not valid (left unmapped). [ 119.652771][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1687'. [ 119.863650][ T305] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 120.014802][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.025047][ T305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.035676][ T305] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.046370][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.055214][ T305] usb 5-1: Product: syz [ 120.059407][ T305] usb 5-1: Manufacturer: syz [ 120.064054][ T305] usb 5-1: SerialNumber: syz [ 120.270891][ T305] usb 5-1: 0:2 : does not exist [ 120.278716][ T305] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 120.289895][ T305] usb 5-1: USB disconnect, device number 30 [ 120.454025][ T4566] udevd[4566]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.653981][ T5402] futex_wake_op: syz.1.1713 tries to shift op by 32; fix this program [ 121.368489][ T5441] overlayfs: failed to clone upperpath [ 122.123207][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 122.123226][ T36] audit: type=1400 audit(2000000067.055:8028): avc: denied { map } for pid=5476 comm="syz.1.1737" path="socket:[26592]" dev="sockfs" ino=26592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.015148][ T5490] netlink: 'syz.3.1741': attribute type 12 has an invalid length. [ 123.024342][ T5490] overlayfs: failed to clone upperpath [ 123.030699][ T5490] netlink: 'syz.3.1741': attribute type 1 has an invalid length. [ 123.057112][ T5500] fuse: Bad value for 'fd' [ 123.058173][ T5501] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 123.616965][ T5518] overlayfs: failed to clone upperpath [ 124.229458][ T36] audit: type=1400 audit(2000000325.167:8029): avc: denied { shutdown } for pid=5557 comm="syz.3.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.523288][ T36] audit: type=1326 audit(2000000325.457:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.5.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c5b8e929 code=0x7ffc0000 [ 124.580570][ T36] audit: type=1326 audit(2000000325.457:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.5.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c5b8e929 code=0x7ffc0000 [ 124.619272][ T36] audit: type=1326 audit(2000000325.457:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.5.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f70c5b8e929 code=0x7ffc0000 [ 124.643660][ T36] audit: type=1326 audit(2000000325.457:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.5.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c5b8e929 code=0x7ffc0000 [ 124.667325][ T36] audit: type=1326 audit(2000000325.457:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.5.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70c5b8e929 code=0x7ffc0000 [ 124.691354][ T36] audit: type=1326 audit(2000000325.457:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.5.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c5b8e929 code=0x7ffc0000 [ 124.715006][ T36] audit: type=1326 audit(2000000325.457:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.5.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c5b8e929 code=0x7ffc0000 [ 124.903025][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1784'. [ 125.256098][ T36] audit: type=1326 audit(2000000326.197:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8e929 code=0x7fc00000 [ 125.478170][ T5643] overlay: Unknown parameter 'hash' [ 125.691737][ T5668] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1804'. [ 125.928361][ T5692] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 126.276728][ T5696] netlink: 'syz.1.1812': attribute type 4 has an invalid length. [ 126.577978][ T5741] overlayfs: failed to clone upperpath [ 127.120018][ T5748] netlink: 'syz.5.1830': attribute type 1 has an invalid length. [ 128.004896][ T5775] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 129.228411][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 129.481530][ T5823] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1854'. [ 130.165253][ T46] bond_slave_1: left allmulticast mode [ 130.170787][ T46] bond_slave_1: left promiscuous mode [ 130.176571][ T46] bridge0: port 3(bond_slave_1) entered disabled state [ 130.184498][ T46] bridge_slave_1: left allmulticast mode [ 130.190238][ T46] bridge_slave_1: left promiscuous mode [ 130.196335][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.212112][ T46] bridge_slave_0: left allmulticast mode [ 130.224902][ T46] bridge_slave_0: left promiscuous mode [ 130.230622][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.437310][ T46] tipc: Disabling bearer [ 130.442679][ T46] tipc: Left network mode [ 130.455955][ T46] veth1_macvtap: left promiscuous mode [ 130.462024][ T46] veth0_vlan: left promiscuous mode [ 130.558427][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.582994][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.595711][ T5857] bridge_slave_0: entered allmulticast mode [ 130.611170][ T5857] bridge_slave_0: entered promiscuous mode [ 130.618466][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.625809][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.632947][ T5857] bridge_slave_1: entered allmulticast mode [ 130.639651][ T5857] bridge_slave_1: entered promiscuous mode [ 130.708107][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.715274][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.722539][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.729596][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.751559][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.759643][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.769711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.776850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.789640][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.796840][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.820629][ T5857] veth0_vlan: entered promiscuous mode [ 130.832185][ T5857] veth1_macvtap: entered promiscuous mode [ 130.919331][ T5896] rust_binder: Write failure EINVAL in pid:4 [ 130.933680][ T10] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 131.094796][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.103189][ T10] usb 5-1: config 179 has no interface number 0 [ 131.109749][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 131.120988][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 131.130966][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 131.142296][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 131.153512][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.166868][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.174439][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 131.183504][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.193679][ T5885] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.202725][ T10] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 131.214306][ T10] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 131.313730][ T9] usb 7-1: device descriptor read/64, error -71 [ 131.389979][ T5919] fuse: Bad value for 'user_id' [ 131.395292][ T5919] fuse: Bad value for 'user_id' [ 131.404311][ T5919] : renamed from xfrm0 (while UP) [ 131.411734][ T10] usb 5-1: USB disconnect, device number 31 [ 131.553695][ T9] usb 7-1: device descriptor read/64, error -71 [ 131.793654][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 131.923691][ T9] usb 7-1: device descriptor read/64, error -71 [ 132.163701][ T9] usb 7-1: device descriptor read/64, error -71 [ 132.274264][ T9] usb usb7-port1: attempt power cycle [ 132.370852][ T5995] 9pnet_fd: Insufficient options for proto=fd [ 132.377196][ T5994] 9pnet_fd: Insufficient options for proto=fd [ 132.613678][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 132.634794][ T9] usb 7-1: device descriptor read/8, error -71 [ 132.765090][ T9] usb 7-1: device descriptor read/8, error -71 [ 133.003699][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 133.024859][ T9] usb 7-1: device descriptor read/8, error -71 [ 133.154695][ T9] usb 7-1: device descriptor read/8, error -71 [ 133.263779][ T9] usb usb7-port1: unable to enumerate USB device [ 133.969290][ T6008] netlink: 'syz.1.1912': attribute type 12 has an invalid length. [ 134.061535][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 134.061554][ T36] audit: type=1400 audit(2000000334.997:8043): avc: denied { read } for pid=6017 comm="syz.1.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.252823][ T36] audit: type=1326 audit(2000000335.187:8044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.1.1922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8e929 code=0x0 [ 134.289022][ T36] audit: type=1400 audit(2000000335.187:8045): avc: denied { unmount } for pid=1838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.323005][ T36] audit: type=1400 audit(2000000335.257:8046): avc: denied { ioctl } for pid=6034 comm="syz.4.1923" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.348016][ T10] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 134.368120][ T36] audit: type=1400 audit(2000000335.297:8047): avc: denied { connect } for pid=6034 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.403708][ T36] audit: type=1400 audit(2000000335.297:8048): avc: denied { write } for pid=6034 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.408701][ T6040] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 134.484199][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'. [ 134.511865][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.520230][ T10] usb 7-1: config 179 has no interface number 0 [ 134.526550][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 134.544022][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 134.560362][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 134.573668][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 134.593648][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.613642][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.625221][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.642999][ T6002] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 134.654021][ T6047] overlayfs: overlapping lowerdir path [ 134.660286][ T10] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 134.671147][ T10] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 134.679577][ T6047] 9pnet_fd: Insufficient options for proto=fd [ 134.729415][ T6049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6049 comm=syz.5.1928 [ 134.743006][ T6049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=6049 comm=syz.5.1928 [ 134.764454][ T6049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6049 comm=syz.5.1928 [ 134.857512][ T36] audit: type=1326 audit(2000000335.797:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz.5.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70c5b8e929 code=0x0 [ 134.905676][ T306] usb 7-1: USB disconnect, device number 6 [ 135.023691][ T1098] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 135.204675][ T1098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.225802][ T1098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.245851][ T1098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.275539][ T1098] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.293659][ T1098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.312763][ T1098] usb 5-1: config 0 descriptor?? [ 135.377281][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.384989][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.392163][ T6075] bridge_slave_0: entered allmulticast mode [ 135.399032][ T6075] bridge_slave_0: entered promiscuous mode [ 135.405760][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.412821][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.419957][ T6075] bridge_slave_1: entered allmulticast mode [ 135.426593][ T6075] bridge_slave_1: entered promiscuous mode [ 135.449878][ T36] audit: type=1400 audit(2000000336.387:8050): avc: denied { map } for pid=6079 comm="syz.6.1935" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.526767][ T1098] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 135.536156][ T1098] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 135.539230][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.551010][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.558347][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.565401][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.574278][ T1098] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 135.625263][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.637972][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.646306][ T6089] netlink: 'syz.6.1938': attribute type 30 has an invalid length. [ 135.660024][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.667229][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.685119][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.692219][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.728919][ T6075] veth0_vlan: entered promiscuous mode [ 135.742083][ T6075] veth1_macvtap: entered promiscuous mode [ 135.794192][ T10] usb 5-1: USB disconnect, device number 32 [ 135.829730][ T6119] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1934'. [ 135.839378][ T6119] binder: Unknown parameter '[7L~p8po\pyۉIIk8su? /;VBUpF|xbmU~^ϛ7ba|g}5۵}~ [ 135.839378][ T6119] e/' [ 135.875445][ T6117] kvm: emulating exchange as write [ 135.942369][ T6134] binder: Bad value for 'stats' [ 135.948520][ T6135] binder: Bad value for 'stats' [ 135.982484][ T6140] input: syz1 as /devices/virtual/input/input15 [ 136.004256][ T36] audit: type=1400 audit(2000000336.937:8051): avc: denied { setattr } for pid=6142 comm="syz.1.1954" name="PPPOL2TP" dev="sockfs" ino=28807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.043566][ T6146] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1956'. [ 136.171345][ T36] audit: type=1326 audit(2000000337.107:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.4.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55798e929 code=0x7ffc0000 [ 136.171505][ T6155] binder: Unknown parameter 'context' [ 136.212912][ T6157] rust_binder: Write failure EINVAL in pid:571 [ 136.232207][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'. [ 136.377264][ T6177] overlayfs: failed to clone upperpath [ 136.437712][ T6193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.438040][ T6193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:582 [ 136.644117][ T6228] tc_dump_action: action bad kind [ 137.027183][ T6251] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 137.027183][ T6251] attempt to add with overflow [ 137.044143][ T6251] ------------[ cut here ]------------ [ 137.049656][ T6251] kernel BUG at rust/helpers/bug.c:7! [ 137.055535][ T6251] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 137.062523][ T6251] CPU: 1 UID: 0 PID: 6251 Comm: syz.1.1991 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 137.075993][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.086061][ T6251] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 137.091383][ T6251] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 78 00 65 17 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 32 c4 2c 9b 90 90 90 90 90 90 90 90 90 [ 137.111001][ T6251] RSP: 0018:ffffc900041af3f0 EFLAGS: 00010246 [ 137.117077][ T6251] RAX: 000000000000008c RBX: 1ffff92000835e80 RCX: 234a071b87fedd00 [ 137.125066][ T6251] RDX: ffffc90014e38000 RSI: 0000000000003ea4 RDI: 0000000000003ea5 [ 137.133074][ T6251] RBP: ffffc900041af3f0 R08: ffffc900041af0e7 R09: 1ffff92000835e1c [ 137.141081][ T6251] R10: dffffc0000000000 R11: fffff52000835e1d R12: 0000000000000000 [ 137.149067][ T6251] R13: dffffc0000000000 R14: ffffc900041af420 R15: ffffc900041af450 [ 137.157057][ T6251] FS: 00007fb8a8a276c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 137.166005][ T6251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.172695][ T6251] CR2: 0000200000000040 CR3: 00000001219f0000 CR4: 00000000003526b0 [ 137.180690][ T6251] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.188673][ T6251] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.196658][ T6251] Call Trace: [ 137.199943][ T6251] [ 137.202881][ T6251] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 137.210360][ T6251] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 137.218360][ T6251] ? kernel_text_address+0xa9/0xe0 [ 137.223490][ T6251] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 137.237062][ T6251] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 137.243245][ T6251] ? arch_stack_walk+0x10b/0x170 [ 137.248234][ T6251] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 137.255501][ T6251] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 137.263513][ T6251] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 137.273419][ T6251] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 137.284029][ T6251] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 137.296320][ T6251] ? mas_wr_store_type+0x8eb/0x1ad0 [ 137.301539][ T6251] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 137.314334][ T6251] ? mas_preallocate+0x56e/0xc60 [ 137.319287][ T6251] ? __cfi_mas_preallocate+0x10/0x10 [ 137.324582][ T6251] ? kasan_save_alloc_info+0x40/0x50 [ 137.329893][ T6251] ? __asan_memset+0x39/0x50 [ 137.334509][ T6251] mmap_region+0x1371/0x1bd0 [ 137.339114][ T6251] ? __cfi_mmap_region+0x10/0x10 [ 137.344063][ T6251] ? __futex_queue+0x19a/0x340 [ 137.348859][ T6251] ? __kasan_check_read+0x15/0x20 [ 137.353900][ T6251] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 137.360172][ T6251] ? file_mmap_ok+0x147/0x1a0 [ 137.364877][ T6251] do_mmap+0xb6d/0x13c0 [ 137.369078][ T6251] ? __cfi_do_mmap+0x10/0x10 [ 137.373705][ T6251] ? down_write_killable+0xe9/0x2d0 [ 137.378925][ T6251] ? __cfi_down_write_killable+0x10/0x10 [ 137.384582][ T6251] vm_mmap_pgoff+0x38f/0x4e0 [ 137.389200][ T6251] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 137.394323][ T6251] ? __fget_files+0x2c5/0x340 [ 137.399053][ T6251] ksys_mmap_pgoff+0x166/0x1e0 [ 137.403874][ T6251] __x64_sys_mmap+0x121/0x140 [ 137.408611][ T6251] x64_sys_call+0x13bf/0x2ee0 [ 137.413510][ T6251] do_syscall_64+0x58/0xf0 [ 137.417975][ T6251] ? clear_bhb_loop+0x35/0x90 [ 137.422673][ T6251] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.428592][ T6251] RIP: 0033:0x7fb8a7b8e929 [ 137.433027][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.452745][ T6251] RSP: 002b:00007fb8a8a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 137.461170][ T6251] RAX: ffffffffffffffda RBX: 00007fb8a7db5fa0 RCX: 00007fb8a7b8e929 [ 137.469150][ T6251] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000fff000 [ 137.477142][ T6251] RBP: 00007fb8a7c10b39 R08: 0000000000000003 R09: 000000004d75d000 [ 137.485134][ T6251] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 137.493111][ T6251] R13: 0000000000000000 R14: 00007fb8a7db5fa0 R15: 00007fff49fce538 [ 137.501092][ T6251] [ 137.504123][ T6251] Modules linked in: [ 137.508451][ T6251] ---[ end trace 0000000000000000 ]--- [ 137.514113][ T6251] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 137.519501][ T6251] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 78 00 65 17 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 32 c4 2c 9b 90 90 90 90 90 90 90 90 90 [ 137.539342][ T6251] RSP: 0018:ffffc900041af3f0 EFLAGS: 00010246 [ 137.545503][ T6251] RAX: 000000000000008c RBX: 1ffff92000835e80 RCX: 234a071b87fedd00 [ 137.553718][ T6251] RDX: ffffc90014e38000 RSI: 0000000000003ea4 RDI: 0000000000003ea5 [ 137.561776][ T6251] RBP: ffffc900041af3f0 R08: ffffc900041af0e7 R09: 1ffff92000835e1c [ 137.569859][ T6251] R10: dffffc0000000000 R11: fffff52000835e1d R12: 0000000000000000 [ 137.577896][ T6251] R13: dffffc0000000000 R14: ffffc900041af420 R15: ffffc900041af450 [ 137.585929][ T6251] FS: 00007fb8a8a276c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 137.594912][ T6251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.601512][ T6251] CR2: 0000200000000040 CR3: 00000001219f0000 CR4: 00000000003526b0 [ 137.609549][ T6251] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.617680][ T6251] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.625734][ T6251] Kernel panic - not syncing: Fatal exception [ 137.631977][ T6251] Kernel Offset: disabled [ 137.636305][ T6251] Rebooting in 86400 seconds..