last executing test programs: 3m49.589108945s ago: executing program 3 (id=1529): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') write$FUSE_IOCTL(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x80881, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000040)) r5 = eventfd2(0x8001, 0x800) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r5, 0x2}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 3m49.588355225s ago: executing program 3 (id=1530): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r1, 0x2d82f000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000300)='./file0\x00', 0x28) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000140)=0x1d08, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) copy_file_range(r7, 0x0, r7, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x6, 0x80000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x2, 0xffff1000, 0x1000, &(0x7f00005db000/0x1000)=nil, 0x4695, r8}) recvfrom$inet(r2, &(0x7f0000000180)=""/158, 0x9e, 0x20, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m49.560868727s ago: executing program 3 (id=1532): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m49.516307281s ago: executing program 3 (id=1534): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) socket$inet_tcp(0x2, 0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x285}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) listen(r1, 0x8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ftruncate(r4, 0x309c000000000) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000000)={0x73, "cd6195146a3c771dd80ca84ef7e54f82081fb18c7457c3efffbea947b7503bfd01366489c4ec73d09d61ae4d0042858c94491cb9f32a16be870101f5f5b4d417"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KDENABIO(r6, 0x4b36) 3m49.269121491s ago: executing program 3 (id=1547): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) readv(r0, &(0x7f00000011c0), 0x10000000000000f7) 3m49.182770468s ago: executing program 3 (id=1550): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x4, 0x2000000000006, 0x804, 0x15, 0xe, 0x120000, 0x102, 0xfffffdffffffffff, 0x1007, 0x1, 0x2, 0x0, 0x109, 0x408000000000008, 0x3], 0xdddd0000, 0x141200}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4) sendmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0a08000000000100"}, 0x10}}, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05022dbd7000fedbdb25010000000000000002410000001000137564703a5379050c01ae394b8bca941d8a457a32"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) 3m26.825753557s ago: executing program 32 (id=1550): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x4, 0x2000000000006, 0x804, 0x15, 0xe, 0x120000, 0x102, 0xfffffdffffffffff, 0x1007, 0x1, 0x2, 0x0, 0x109, 0x408000000000008, 0x3], 0xdddd0000, 0x141200}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4) sendmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0a08000000000100"}, 0x10}}, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05022dbd7000fedbdb25010000000000000002410000001000137564703a5379050c01ae394b8bca941d8a457a32"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) 1m51.565407864s ago: executing program 4 (id=2782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x1774000000) (async) r1 = socket$pptp(0x18, 0x1, 0x2) prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) (async) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) (async) close(0x4) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m51.485479381s ago: executing program 4 (id=2784): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r2, 0x8008550e, &(0x7f0000000180)={0x7, "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"}) fcntl$dupfd(r0, 0x406, r0) r3 = socket(0x18, 0xa, 0x2) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010002b6fc71fbee0c522a0c00000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r8, 0x3a, 0x1, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x5c, 0x0, &(0x7f00000014c0)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/37, 0x25, 0x0, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/4096, 0x1000, 0x1, 0x20}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x9286f9ce86a82d0b}, @register_looper, @exit_looper], 0x0, 0x0, 0x0}) 1m51.48503697s ago: executing program 4 (id=2785): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m51.453695043s ago: executing program 4 (id=2786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) modify_ldt$write2(0x11, &(0x7f0000000640)={0x7ec935bf, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xffffe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0xc7, 0x7c, 0x66, 0x40, 0x8e38, 0x74d6, 0xd66c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xf1, 0x40, 0x81, [{{0x9, 0x4, 0x2b, 0xd9, 0x0, 0x8, 0x1, 0x50, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) fsopen(&(0x7f0000000080)='bpf\x00', 0x1) (async, rerun: 32) r13 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.431534665s ago: executing program 4 (id=2787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0002001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000005c0), 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) close_range(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x403) r5 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f00000003c0)={[{0xf, 0x3, 0x97, 0x10, 0xf9, 0x2, 0xe, 0xb, 0x5, 0x25, 0x5, 0x3, 0x3}, {0x100000, 0x4, 0x4, 0x6, 0x5, 0x46, 0x45, 0x6, 0x2, 0x9, 0x4a, 0xc, 0x5}, {0x9, 0x8001, 0x3, 0x2, 0x7, 0x3, 0xd, 0x5, 0x7, 0x8, 0x5, 0xb, 0x88}], 0xffff0636}) ptrace$setregset(0x4205, r5, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x1c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}], 0x6f, 0x0, &(0x7f00000000c0)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755ca89a9b969df1710c27eaf63a48a7b76bebc9d3d0c19d2795dfc40bdd4082359e1479d59a8"}) r8 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'xfrm0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r10, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r4, 0x2f, 0x0, 0xf2, 0xff, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0xb61dc4a9c1013760, 0x8, 0x5, 0x6}}) 1m50.582121963s ago: executing program 4 (id=2817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={r0, 0x0, 0x8, 0x9}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000600)={r3, 0x1, 0x100000000, 0x4000}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x1, 0x401, 0x200}, 0x10) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xb, 0x8, 0x8, @dev={0xfe, 0x80, '\x00', 0x18}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7, 0x3, 0xfffffff2}}) bind$packet(r5, &(0x7f0000000540)={0x11, 0x1c, r9, 0x1, 0x0, 0x6, @random="dd61650fa952"}, 0x14) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000400)={{r8, 0x1ff, 0x8, 0x2, 0x0, 0x9, 0xfffffffffffffffb, 0xff, 0xdb0, 0xa23, 0x7, 0x200, 0x9, 0x4, 0x7ce2b1d6}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080089064803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) (async) syz_usb_control_io$hid(r11, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0x5, {0x5, 0x1, "d0d8c9"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_procfs(r1, &(0x7f00000001c0)='smaps_rollup\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m23.406959363s ago: executing program 33 (id=2817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={r0, 0x0, 0x8, 0x9}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000600)={r3, 0x1, 0x100000000, 0x4000}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x1, 0x401, 0x200}, 0x10) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xb, 0x8, 0x8, @dev={0xfe, 0x80, '\x00', 0x18}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7, 0x3, 0xfffffff2}}) bind$packet(r5, &(0x7f0000000540)={0x11, 0x1c, r9, 0x1, 0x0, 0x6, @random="dd61650fa952"}, 0x14) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000400)={{r8, 0x1ff, 0x8, 0x2, 0x0, 0x9, 0xfffffffffffffffb, 0xff, 0xdb0, 0xa23, 0x7, 0x200, 0x9, 0x4, 0x7ce2b1d6}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080089064803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) (async) syz_usb_control_io$hid(r11, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0x5, {0x5, 0x1, "d0d8c9"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_procfs(r1, &(0x7f00000001c0)='smaps_rollup\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m6.577126374s ago: executing program 2 (id=3317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) unshare(0x2000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 1m6.576207614s ago: executing program 2 (id=3318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000200)={0xe1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m6.50713077s ago: executing program 2 (id=3319): ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x30, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000180)={0x5, {{0x2, 0x4e22, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x210) sendfile(r1, r0, 0x0, 0x7ffff000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 1m6.49480229s ago: executing program 2 (id=3320): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x40408c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) prctl$PR_SET_MM(0x23, 0xb, &(0x7f000014b000/0x2000)=nil) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x68a00, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x11, r1, 0x8ee47000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x1a98c3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000059b000/0x2000)=nil, &(0x7f000073a000/0x3000)=nil, 0x2000, 0x7}) 1m6.433874116s ago: executing program 2 (id=3321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) close_range(r2, r0, 0x0) 1m6.258265869s ago: executing program 2 (id=3322): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x4, &(0x7f0000000080)="3e77478a", 0x9e, 0x0, &(0x7f00000000c0)="ecc79a8bfa2a48bc76c71bf17bd763e593151aee432c75d0ae6217ee8f90719fbc6144148b5aa9b12f8178643feea0f01f0bf94152505279c4aaa9164b880eec380f97ddd4206d471fb6d40f765d8ea78c535d0a1ba40550ee7168eaa4fc2e2834a8958177803142b45c8e5349e8207562586344ff2662cd1a777c9a7feaed209913c1b75770fbc1a2aff6043a524abe523fc6b85375d594a014a3486d60"}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x165d81, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd6) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x40000000}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e23, @local}}) 1m6.221894713s ago: executing program 34 (id=3322): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x4, &(0x7f0000000080)="3e77478a", 0x9e, 0x0, &(0x7f00000000c0)="ecc79a8bfa2a48bc76c71bf17bd763e593151aee432c75d0ae6217ee8f90719fbc6144148b5aa9b12f8178643feea0f01f0bf94152505279c4aaa9164b880eec380f97ddd4206d471fb6d40f765d8ea78c535d0a1ba40550ee7168eaa4fc2e2834a8958177803142b45c8e5349e8207562586344ff2662cd1a777c9a7feaed209913c1b75770fbc1a2aff6043a524abe523fc6b85375d594a014a3486d60"}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x165d81, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd6) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x40000000}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e23, @local}}) 3.658281744s ago: executing program 0 (id=4200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.642398516s ago: executing program 0 (id=4201): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000740)=0x5, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)={0x0, 0x100, 0x2d}, 0xfffffffffffffff5) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = eventfd2(0x0, 0x80801) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) sendto(r4, &(0x7f0000000980)="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", 0xf80, 0x4000000, &(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x2, 0x1, 0x1c}, @fd}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005240)={@local, 0x6a}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8, 0x39}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x2d) ioprio_set$uid(0x3, 0x0, 0x0) write$eventfd(r2, &(0x7f0000000080)=0x101, 0x8) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r10, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x0, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r5, &(0x7f0000000500)="a1e3bdaf15b51634e3f5e22d878bac4e5b1682c0a5d4088ea43beb8e1c6cb8b63a5d31fda30684e060a545feb95a0637aebfe12cc4ae5393db8ab20c30b66050533e4724ddcbae692b71510087f9aeefe0100d43b7303d082bff47bbee538bfa7b9a01bb3229bb58542dfa8f65cfc670ea97dc2e1a8edd4fcd54866583efb61cf569d30674b02449ba4b79537e", 0x8d, 0x8, 0x0, 0x3}]) syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 3.529601715s ago: executing program 0 (id=4202): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0xa4ec, 0x9, 0x8, 0x36}, {0x3, 0x5, 0x1, 0x3}, {0x3, 0x1, 0x0, 0x8}]}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x100) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000001c0)={{r3}, 0x3, 0x3, 0x2ee7}) 3.525969845s ago: executing program 0 (id=4203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{}]}) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x2}) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x5e33c1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010001000000000000000200000a200000000c0a01030000000000000000010000080980010073797a3100000000140000001100010000000000000000000500000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4c804) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r7, 0xaea3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x80) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc597, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.525448415s ago: executing program 0 (id=4204): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = socket(0x1, 0x2, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000001cc0)={{0x12, 0x1, 0x250, 0x5c, 0x24, 0x1c, 0x40, 0xb57, 0x5942, 0x387a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xcc, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xdf, 0x4, 0x0, 0x3, 0x1, 0x2, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x1}}]}}]}}]}}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r2, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x3, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x47}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x50}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x24004011) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x3, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x47}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x50}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x24004011) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x3003, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0x4, 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) tee(r5, r3, 0x3, 0x3) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x20000) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x20000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) unshare(0x40400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000140)={{0x8001, 0xfc73}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000140)={{0x8001, 0xfc73}, 0x100, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x1a) (async) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x1a) close_range(r4, 0xffffffffffffffff, 0x0) 1.498065189s ago: executing program 6 (id=4241): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000150001c0"]) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', '', [{0x20, '\xc0z\xa6\xd3\xdb\b\xeb\xa7\x80\xc8\xaf\xb4\xfc\b\t\x13!_\xdes\xdf\"\xce\x80\xfd\x03\x8b?Pl\x1ag\x10%\xb1=\xde\x88$\xb5\xf6j\xd2r\\\xb7\xc5x\xc0Y\x02\xc9N?\x92)o\xe8\xc2\xa1\xd8q\xaaA\x91\xc3H\x8d\x84\x93\xa0\x8b\x18H\b\x00\v\xbaa\x160\xc6#\xdf\xe4\tu\xc1@\x18\x95d\xc3\xa4\xd73<\x18\xb6\xdb\x99d\xd1\xc3\x1e%\x1fr\xd2\xf5\x8b\x1dU\x17\xb6\'\xf8\xd9\xed\xe0\x87\x91\xe5_\xed\xd9\xf6\xaf\x1e\a\xba\x88\xb6\xae^L\xa82<\xf4}\xe0\t\xd7w,\xaas\x17\x962\xcec,\xa3\xea\xb1\xc7B/8\xd3@\xcc\xda\x11\x00\x00\x00\x00v\xe6`\xd28k\x0fsf\xb4\x9dWM\x00\x00\x00\x00\x00\x00\x00\xdf\x1a\xfc\x97H\x15w\xcf\xbe\x9es\xc5\xf3\xf0\x93c\x9cRk\xc84\xcf\x10\x8c\x85\x12[\xb9'}]}, 0xdf) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clock_adjtime(0x8fd7fd18bd254f93, &(0x7f0000000080)={0x6, 0x400, 0x9, 0x5, 0x3, 0x8, 0x7, 0x101, 0x3f4, 0x3, 0x7ff, 0xd, 0x1, 0x2, 0x1, 0xfffffffffffffff7, 0x3, 0x3, 0x7fffffffffffffff, 0x6, 0x3, 0xfffffffffffffffd, 0x8000, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.437711334s ago: executing program 6 (id=4242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000001940)) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb7}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0xff, 0xa7, 0x5, 0x81}, {0x10000, 0x100000, 0xa, 0x6, 0x8, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xd000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x83}, {0xf000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x21, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.437356424s ago: executing program 6 (id=4243): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1.436294294s ago: executing program 6 (id=4244): r0 = memfd_create(&(0x7f0000000400)='@}#{+\x00', 0x453da9468f33add0) r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000440)={0x1, 0x9, [{0xffffffffffffffff, 0x0, 0xfffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x8000, 0x8000}, {0xffffffffffffffff, 0x0, 0x100000000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x8000, 0x4000}, {r0, 0x0, 0x1000000, 0xffffffffffffd000}, {r0, 0x0, 0x10000, 0x10000}]}) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000002c0), &(0x7f0000000300)=ANY=[@ANYBLOB="00fbd1059c446fe74782cf72e8d505fb17d409bad9be08c05c1621a776dfe82d178a02aa6d30227763efc895018ac5521e46650549b94502f49b23243878f4ae77cb71df91f736c137e6a18eb6113fff4f570032cdc196058571ce6c56cd75cd29e4d3df5620341d50934c9cfc594b42a25d8449214a07e3e62c4fe81379b42272042b6bf4290cce635910a21c3aed7d87fef5791e1d2ce7c5f50bb59fcfa6aac3b6f4496d98875a590c254c65d2a586ae1a07d3c393993caca54df163168c26b2d8d179481a3cf9bc680aca76c4aa7e23"], 0xd1, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000140)={r6, 0x1, r5, 0x100000}) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x20000023896) renameat(r8, &(0x7f0000000080)='./file0\x00', r10, &(0x7f0000000540)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket(0x80000000000000a, 0x2, 0x0) bind$tipc(r11, &(0x7f0000001280)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, r7) r12 = creat(&(0x7f0000000100)='./file0\x00', 0x58) r13 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) r14 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r14, 0x0, 0x45c, 0x5) ppoll(&(0x7f00000001c0)=[{r1, 0x488}, {r2, 0x7148}, {r3, 0x52a2}, {r4, 0x5580}, {r12, 0x8400}, {r13, 0x14}, {r14, 0x4008}, {0xffffffffffffffff, 0x6}], 0x8, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1.158907427s ago: executing program 5 (id=4246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb8) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) 1.097865082s ago: executing program 5 (id=4247): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000100)='./file1\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@xino_off}, {@verity_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x2b, 0x9, 0x20a082, 0x5, 0x10, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x1}}, 0x50) 1.097130842s ago: executing program 5 (id=4248): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r1, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, 0x1c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) sendto$inet6(r1, 0x0, 0x0, 0x80, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r0, 0xc8baa000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x2f, 0x0, 0x4, 0x1, 0x0, 0x6, 0x65}, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)) r9 = syz_clone(0xa5102000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r9, r6, 0x7, r7, &(0x7f0000000180)={r8, r7, 0xfffffffc}) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r10, &(0x7f0000000480)=[{&(0x7f0000000840)=""/189, 0xbd}], 0x1, 0xfffffffe, 0x4, 0x1) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x48) r11 = creat(&(0x7f0000000300)='./file0\x00', 0x1fd) fsconfig$FSCONFIG_SET_FD(r11, 0x5, 0x0, 0x0, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x4, 0x0, 0x1}}, 0x50) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r12, 0x40247007, &(0x7f0000000040)={0x11, 0x9, 0x100, 0x9, 0x102, 0x10004, 0x6, 0x66, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) 945.222874ms ago: executing program 5 (id=4249): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) write$vga_arbiter(r0, 0x0, 0xff35) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd7000000000000700000014"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) 593.062632ms ago: executing program 6 (id=4250): ftruncate(0xffffffffffffffff, 0x398a0bdb) (async) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x606, 0x0, 0x4}]}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 469.830593ms ago: executing program 0 (id=4251): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x49, 0xffff, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8, 0x20, 0x93, 0xfff}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x28}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0xffffffffffffff6a) 467.073953ms ago: executing program 1 (id=4252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='-5'], 0x9) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 437.934115ms ago: executing program 1 (id=4253): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x70}, 0x80) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000480)=0x800, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r5, @ANYBLOB="010027bd0000fcdbdf2518"], 0x1c0}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="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"/653], 0x288}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2e8a00, 0x0) preadv2(r7, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@hyper}) 407.835417ms ago: executing program 1 (id=4254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="dc0300001a0001002abd7000fbdbdf250a00fc003a2a5e247b00000010000380", @ANYBLOB="e9b966a13c30"], 0x3dc}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x22e7c000) 325.693504ms ago: executing program 1 (id=4255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2c00, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6a, 0x3, 0x3e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8, 0x8, 0x40, 0x2}}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @multicast1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 325.018934ms ago: executing program 1 (id=4256): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) timer_create(0x4, &(0x7f0000000140)={0x0, 0x12, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ddb0e6a10112373403e4eb941438d321eb3896f31a2fe888bc992f85ef775c9029dad1cabc38c5caeae97a258ad3", 0x2e}, {&(0x7f0000000200)="d74dc3dfdb8b705537ef7a045238a736ee8f750120eac67b90ad80fe1b7c50906fcff60d8750098c1fe8d0513dd3790d7c9c68b5a17c964a0b121381d96b39606d89447f75aaa6cc620a01be0e9149f0f25d494fada6e7b91e7bd524af9e2d7be05e21f0", 0x64}, {&(0x7f0000000300)="c68c6f658febee9c32c94c0368869088f59b1b01ba95117a65e2a7ff21c604afbde311a173b60e08d39e257bc21d9e190476c668411cb54e66ef8e1d74f7266b0fdcd9b29297232773ae9355f0e86f328dba65ed8ec96c4527b0cd2c08c264381cd419", 0x63}, {&(0x7f0000000280)="81e270f9302c0fa054e4eb0990c2624031f4", 0x12}, {&(0x7f0000000380)="c3aae13a5dbccfc78f57df0612844ed95bc48b77f89752870a6a9d57af891179ec56d0d0ba094955821ef2", 0x2b}], 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f00000000c0)={0x10000, 0xe, 0xa14, 0x72d, 0x8, 0x8}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, 0xfffffffffffffffd) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)={0x0, 0x16, 0x101, 0x70bd25, 0x25dfdbff, "", [@nested={0x0, 0x142, 0x0, 0x1, [@generic="0703dadabaa9088ba0cb9339e0a39a07ee34b08316810a03bdb848ce86a3af32", @typed={0x0, 0x132, 0x0, 0x0, @ipv4=@empty}, @typed={0x0, 0xa2, 0x0, 0x0, @fd}, @generic="77107ef9dc9a88a29ad3ef34c8ab48c287c0bd5d5416205d56c197c91ad454d18c4c1869a1ed6aa82908f84bc2c7bc7ee5f1aa738edad05cd4abf44c63475607eb01440fc88e5cc33992dc3d04b64e33f2033bd3e82935fd9627c7abad9a258df4df9e24b9683ba4cd4563dc961482cb9ed2ae9198868ac6633721205669ed", @generic="e3854e388bf1b18d7d322fb9381db885d80976c80aff4b60199d07889f528c1ddc7697d864b14cc4b32a774f2952ae4cda2a0c8d7d3d9e14d6a310c3f5275bc3d243a213d0bbb2d65f17d22568d2878387ad181f89019939cde4a0e7a50c4bb1b70c79f0e38e770564510c4dadb9599ff1fa13af2e308b57a6fc65de4351546e94cbf54b745894cfb3f29333fdd6c533427e8b3938baa2ef67dd27762387cb93e39f12aa20b715f368d62dabecf495c17c4b24d472c24f095cbd73a8028ef7f7"]}, @typed={0x0, 0xd0, 0x0, 0x0, @u64=0x3}, @typed={0x0, 0x6, 0x0, 0x0, @uid=r2}, @nested={0x0, 0x8a, 0x0, 0x1, [@typed={0x0, 0x88, 0x0, 0x0, @fd=r0}, @typed={0x0, 0x5a, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @typed={0x0, 0x102, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @typed={0x0, 0x147, 0x0, 0x0, @pid=r4}, @nested={0x0, 0xf}]}, @generic="b75ffd88825cf9b85e602b3c3bdb784b34bf1340500fbbedfb75f24c89915bce7149d0bfe8bf85d1a5bf01f77882d0221df5078a0fef552c4b6a1234612cd9a5ccf99d"]}}, {&(0x7f0000002200)={0x0, 0x36, 0x628, 0x70bd26, 0x25dfdbfb, "", [@nested={0x0, 0x101, 0x0, 0x1, [@nested={0x0, 0x8d}]}, @nested={0x0, 0x94, 0x0, 0x1, [@nested={0x0, 0x150}, @typed={0x0, 0x109, 0x0, 0x0, @binary="9f1a8b1398f43f5f6b08f9684cf9e8e6cdcca1f6f52b0f11f4fe03326316711f2008192cbd17c58fada9da26232a3fe3952cc42153c03bbdba200cf0b4ab7e924de0922ee4568a21c972dfc1f70eed123ec15c9307c567841d8130e134260b614330d76333dd6af060dbb2b4830e7473d056af40bdce65ae904e7973fa6c198dded7247332dd474ec82125bb8370a9e8d2648968e9bb178619b68fd735abf85ad06a0f0efe18cabc3788d2208cb2c8e91fa40d8c2d406b6025f4820e8b1fc592f25a820413d0557885af80d94d458a91064dd0edbcf11b95face9e93b482da772bf72ebce4c69718"}, @generic="2cea054a6773de4ce605b01d0363572bc1b70a78938d8416259a83492ac8f8a0077cfac6a7eae90c0bff16961c252dec536729a5b65a98d6bb3188f362cc4738a5f5d68bcaf51f7ed401408887738dda93db488fe402b6e10f2e9e902acbe9c1335edf8bf418e10d684db19ffae6af18eeee69bc717432e639adbb7e681c3b33bf7ad9906b1d86e80fd388f3bf0e4772ced2de2170fd3076c15047842a3dce28556f57305ac9b44a12bd557f0f14cc79ee0477dc1fbbb19e43f6203ee6d3a8a8c02510f69654735e53b8bc9ca1eed486e7ec3967579718517821f1a32ba56fc9a24a332566c190edd2"]}, @generic="5440897a6b73d859a7101ab9a52c31fe597fd3605b47bf60f9098b5a4c0c17a345f6cdb5646989a02cf368606f0ced371613c65efdf136c3", @nested={0x0, 0x110, 0x0, 0x1, [@nested={0x0, 0x64}, @typed={0x0, 0xb, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x0, 0x18}, @nested={0x0, 0xac}, @generic="d40c709654f528603f3c6cb9ce10586edf65d8765f532432ebca3a4e5a19aa89b77b0b0428e09b618a399e68988931ef6f5f3372aabf9eeb8a15ec4805984f109df4674b12c41e2efc2241aa1611e0b56ce0b2b7c26ca973e891baea8d18adad17b82d2f769e9ab8e96dc7782f761909f5d0df55d9450413bab31423bff6a3dcf3c47646ec459de2342605577f15959c"]}, @generic="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", @generic="78c905f073209ef47d967f136c0ae1b4cb248a61e25d437b64cd49c8464c3b0ac35cc000778e7f95da985dc481f219cf5f2eb32d8069a8785d49390ef6c1cbe13e71100af583655ec683f5224d19efa5476b5b83c29d4ade4efccf16e0ced2748f9eb96ab37a77bdc415524c38d7635ccb1c330eb3e7d172957c4111928312244941bb68c652b028301f88", @typed={0x0, 0xd, 0x0, 0x0, @uid=r2}, @generic="6786ff1e098086157ebd633f45679a936dc1ec45eba82d15e71d798903597371c652a440c2a359d819f5a6ece56179046cf054dbfc33c382760d4b920eaa1e5984066dcd046147f9674a88e360a4d634d241e4231f72ee699eeb2fc451787f3c5db7581afe67099ba71a093fc86f3541e100e5f5a329a0768eb53cdc2499a7fdcae8e3f04691365a2a99c75c426883a1bf776fa7f28e16444a740a03008ce63550b3fd05cfc26cfd5b9c869ddf09d035471b4d7086548627c0835e4d3b833bb41e0b77d8a86d9d87598243a8e25b2d0cb91cd620be846f8e5e0ec926b66da116fe", @nested={0x0, 0xb8, 0x0, 0x1, [@typed={0x0, 0x6d, 0x0, 0x0, @fd=r3}, @nested, @generic="e60056db44187c266fc87b3d1c1db6804f160cb704f8cbe1953b29b4c541b6b1af272773a63386eb70c62221f4bafb11c3f86aefd0f92a454ad2914e3e12cdc67c9966fb7a997581e0091d0745cd2505678ef9fbc80d56108402236668d8f3c734564fa0742e53386f58329b0592ef04c16014866cc85fb0a11a2edc4d7288f6e7d008c601c78413bef0126348b3", @generic="40ca9b0c615a833d30a0c9cf508221c0ef5a05121082dbd6c95723182dcac5b8b8457dddfcdf5cad11213de3a6f37aa4570271ba4665ef7f4296d9ba06b118ec27cc0cef2e9638d015dcd7984c040469f76c8da7a98671762c0e84e2cac68935e591a0189d1c6d1a7834c200f2f60c79e770741e1b4b049626705c1faf2f50dde3d06cbb12ebf1b50d81e6f197957345656858f0db5b27adb26f3767ad13", @generic="6939052946ab35b2828ae7476a2441e3807e18dc3c19e387b4b2a6d552e58acf988aaf987bdd08e0272688cc"]}, @typed={0x0, 0x14e}]}}], 0x0, 0x0, 0xfffffffffffffec1, 0x94}, 0x8084) listen(r0, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 324.369114ms ago: executing program 1 (id=4257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x1a000, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$inet6(0xa, 0x802, 0x88) (async) r7 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r8, 0x3000006, 0x13, r6, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r8, 0x3000006, 0x13, r6, 0x0) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000440)=[@wrmsr={0x1e, 0x20, {0xb01, 0x1}}, @code={0xa, 0x6d, {"b92c090000b809000000ba000000000f3045de6cfc0042d0d00f01c2660f38829f0050000066baf80cb88021628def66bafc0ced66baf80cb894904282ef66bafc0cb8ed000000ef2e0f702500000000d50f01350000010043c1fe21"}}, @rdmsr={0x32, 0x18, {0xa43}}, @wr_crn={0x46, 0x20, {0xd1ff0419381dd8a0, 0x3}}, @uexit={0x0, 0x18, 0x7}, @wrmsr={0x1e, 0x20, {0x89b, 0x400}}, @rdmsr={0x32, 0x18, {0x2a7}}, @rdmsr={0x32, 0x18, {0xe2a}}, @rdmsr={0x32, 0x18, {0xc1}}, @cpuid={0x14, 0x18}, @rdmsr={0x32, 0x18, {0x2f6}}, @uexit={0x0, 0x18, 0x8001}, @wrmsr={0x1e, 0x20, {0xb88, 0x98b}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x14, 0x18, {0x40, 0x1629}}, @wr_crn={0x46, 0x20, {0x2, 0xffffffffffffd2ce}}, @uexit={0x0, 0x18, 0x4}, @wrmsr={0x1e, 0x20, {0xa48, 0x80000001}}, @rdmsr={0x32, 0x18, {0x2c0}}, @rdmsr={0x32, 0x18, {0x20}}, @rdmsr={0x32, 0x18, {0x2b0}}, @wr_crn={0x46, 0x20, {0x8, 0xfff}}, @wr_crn={0x46, 0x20, {0x0, 0x1}}, @rdmsr={0x32, 0x18, {0xa4d}}, @rdmsr={0x32, 0x18, {0x400000b4}}, @wr_crn={0x46, 0x20, {0x2, 0x3}}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0xb6b}}, @wrmsr={0x1e, 0x20, {0xbda, 0x43e}}, @cpuid={0x14, 0x18, {0x804, 0x1e6}}, @uexit={0x0, 0x18, 0xe}], 0x38d}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r8, 0x1000001, 0x110, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000080)={0x29, 0x1, 0x80}) close_range(r0, 0xffffffffffffffff, 0x0) 96.408833ms ago: executing program 5 (id=4258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 53.951436ms ago: executing program 6 (id=4259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x3000) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x922, 0x200, {0x0, 0x2710}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x1, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x2403}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x802, 0x0) 0s ago: executing program 5 (id=4260): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r1, &(0x7f0000000380), 0x1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x20) mount_setattr(r4, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000080)={0x100074, 0x70, 0x100000}, 0x20) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) kernel console output (not intermixed with test programs): _SET_CONTEXT_MGR already set [ 199.272939][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.280293][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.286040][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.292623][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.299241][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.305761][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.311996][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.318850][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.324930][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.331775][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.338048][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.344431][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.351205][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.357592][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.364003][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.370866][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.377137][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.383505][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.389933][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 199.390348][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.401716][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.408233][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.414623][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.421408][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.427846][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.434166][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.441020][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.447242][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.447264][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.453837][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.460196][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 199.473401][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.488704][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.494852][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.495015][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.501735][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.515996][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.522167][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.529172][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.535216][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.535340][ T9] usb 3-1: config 0 descriptor?? [ 199.541818][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.557061][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.559489][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.566363][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.572609][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.583787][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.606814][ T36] audit: type=1400 audit(2000000038.859:2950): avc: denied { nlmsg_read } for pid=8242 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 199.671412][ T8250] 9pnet_fd: Insufficient options for proto=fd [ 199.826663][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 199.832691][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 199.842205][ T9] usb 3-1: USB disconnect, device number 24 [ 200.469606][ T8283] cgroup: Need name or subsystem set [ 200.475005][ T36] audit: type=1400 audit(2000000039.713:2951): avc: denied { remount } for pid=8281 comm="syz.0.2658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 200.570595][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 200.571458][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.741731][ T8309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.751301][ T8310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=8310 comm=syz.0.2666 [ 200.794371][ T8310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8310 comm=syz.0.2666 [ 200.814396][ T8310] netlink: 'syz.0.2666': attribute type 27 has an invalid length. [ 200.855273][ T8314] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 200.862443][ T8314] rust_binder: Write failure EINVAL in pid:57 [ 200.886240][ T8316] kvm: user requested TSC rate below hardware speed [ 201.015827][ T8321] overlayfs: failed to clone upperpath [ 201.020319][ T36] audit: type=1400 audit(2000000040.263:2952): avc: denied { append } for pid=8322 comm="syz.0.2670" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.181311][ T8328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 201.204832][ T7381] rust_binder: 8327: removing orphan mapping 0:24 [ 201.249586][ T8350] rust_binder: Error while translating object. [ 201.249626][ T8350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.260550][ T7381] rust_binder: 0: removing orphan mapping 24:1112 [ 201.280352][ T8350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 201.302905][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'. [ 201.351644][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2675'. [ 201.589415][ T8360] rust_binder: Error while translating object. [ 201.589450][ T8360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.603899][ T8360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 201.833114][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 201.885990][ T36] audit: type=1326 audit(2000000041.133:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.1.2688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x0 [ 201.963903][ T1233] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 201.988857][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 202.115649][ T1233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.125392][ T1233] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.135063][ T1233] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.149230][ T1233] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 202.158341][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 202.166594][ T1233] usb 1-1: Product: syz [ 202.170757][ T1233] usb 1-1: Manufacturer: syz [ 202.175391][ T1233] usb 1-1: SerialNumber: syz [ 202.382206][ T1233] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 202.583068][ T36] audit: type=1400 audit(2000000041.824:2954): avc: denied { read write } for pid=8369 comm="syz.0.2686" name="lp0" dev="devtmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 202.584452][ T1233] usb 1-1: USB disconnect, device number 31 [ 202.606906][ T36] audit: type=1400 audit(2000000041.824:2955): avc: denied { open } for pid=8369 comm="syz.0.2686" path="/dev/usb/lp0" dev="devtmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 202.616536][ T1233] usblp0: removed [ 202.640293][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 202.643443][ T8298] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 202.646428][ T8300] Bluetooth: hci0: command 0x1003 tx timeout [ 217.909209][ T8382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2690'. [ 218.111455][ T8382] netlink: 'syz.1.2690': attribute type 11 has an invalid length. [ 218.159400][ T36] audit: type=1400 audit(2000000057.412:2956): avc: denied { accept } for pid=8406 comm="syz.1.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.174227][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2701'. [ 218.245660][ T1233] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 218.261567][ T8429] 9pnet_fd: Insufficient options for proto=fd [ 218.331249][ T8437] fuse: Unknown parameter 'grou' [ 218.337980][ T8437] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2711'. [ 218.406722][ T1233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64 [ 218.417706][ T1233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.435105][ T1233] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 218.444228][ T1233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.453687][ T1233] usb 1-1: config 0 descriptor?? [ 218.459172][ T8392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.871398][ T1233] acrux 0003:1A34:0802.0007: hidraw0: USB HID v0.fe Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 218.885493][ T1233] acrux 0003:1A34:0802.0007: no inputs found [ 218.891729][ T1233] acrux 0003:1A34:0802.0007: Failed to enable force feedback support, error: -19 [ 219.068996][ T8392] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2695'. [ 219.078788][ T9] usb 1-1: USB disconnect, device number 32 [ 219.372320][ T8473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 219.372359][ T8473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:257 [ 219.379034][ T36] audit: type=1400 audit(2000000058.632:2957): avc: denied { map } for pid=8474 comm="syz.1.2725" path="socket:[32249]" dev="sockfs" ino=32249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 219.476956][ T8477] fuse: Bad value for 'fd' [ 219.721920][ T8489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 219.721959][ T8489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:93 [ 219.977789][ T8494] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2731'. [ 219.997629][ T8494] overlayfs: failed to clone upperpath [ 220.029341][ T8498] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 220.046923][ T8498] 9pnet_fd: Insufficient options for proto=fd [ 220.172259][ T8524] incfs: Can't find or create .index dir in ./bus [ 220.178785][ T36] audit: type=1400 audit(2000000059.423:2958): avc: denied { mounton } for pid=8523 comm="syz.4.2740" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 220.200794][ T8524] incfs: mount failed -1 [ 220.206326][ T8524] incfs: Can't find or create .index dir in ./bus [ 220.212814][ T8524] incfs: mount failed -1 [ 220.612692][ T8568] overlayfs: failed to clone upperpath [ 220.734385][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 220.919904][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 220.947570][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 220.959899][ T9] usb 1-1: config 179 has no interface number 0 [ 220.978484][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 220.989812][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 221.006946][ T8590] overlayfs: failed to clone upperpath [ 221.008035][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 221.024841][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 221.034950][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 221.048298][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 221.057528][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.066988][ T8556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.074958][ T9] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 221.276265][ T1233] usb 1-1: USB disconnect, device number 33 [ 221.793876][ T1233] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 221.806263][ T36] audit: type=1400 audit(2000000061.063:2959): avc: denied { add_name } for pid=8600 comm="syz.0.2764" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.847096][ T36] audit: type=1400 audit(2000000061.083:2960): avc: denied { create } for pid=8600 comm="syz.0.2764" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.868790][ T36] audit: type=1400 audit(2000000061.083:2961): avc: denied { associate } for pid=8600 comm="syz.0.2764" name=".pending_reads" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 221.898864][ T36] audit: type=1400 audit(2000000061.083:2962): avc: denied { append } for pid=8600 comm="syz.0.2764" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.923048][ T36] audit: type=1400 audit(2000000061.083:2963): avc: denied { write } for pid=8600 comm="syz.0.2764" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.973804][ T1233] usb 3-1: Using ep0 maxpacket: 16 [ 221.980020][ T1233] usb 3-1: config 0 has no interfaces? [ 221.986021][ T1233] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.003526][ T1233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.016990][ T1233] usb 3-1: config 0 descriptor?? [ 222.133713][ T7381] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 222.164193][ T8629] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 222.173590][ T36] audit: type=1400 audit(2000000061.424:2964): avc: denied { relabelto } for pid=8628 comm="syz.1.2776" name="rnullb0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 222.200553][ T36] audit: type=1400 audit(2000000061.464:2965): avc: denied { associate } for pid=8628 comm="syz.1.2776" name="rnullb0" dev="tmpfs" ino=505 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 222.229651][ T1233] usb 3-1: USB disconnect, device number 25 [ 222.303760][ T7381] usb 1-1: Using ep0 maxpacket: 8 [ 222.314624][ T7381] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 222.343456][ T7381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.364369][ T7381] usb 1-1: config 0 descriptor?? [ 222.572892][ T7381] usbhid 1-1:0.0: can't add hid device: -71 [ 222.595768][ T7381] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 222.606091][ T7381] usb 1-1: USB disconnect, device number 34 [ 223.064991][ T8728] tipc: Started in network mode [ 223.069936][ T8728] tipc: Node identity ac14140f, cluster identity 4711 [ 223.087903][ T8728] tipc: New replicast peer: 255.255.255.255 [ 223.111287][ T8728] tipc: Enabled bearer , priority 10 [ 223.383266][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 223.513145][ T7800] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 223.583141][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 223.592410][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.608880][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 6.00 [ 223.622972][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.641931][ T9] usb 1-1: config 0 descriptor?? [ 223.675061][ T7800] usb 3-1: config 7 has an invalid interface number: 41 but max is 0 [ 223.683342][ T7800] usb 3-1: config 7 has an invalid interface number: 232 but max is 0 [ 223.691555][ T7800] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 223.700603][ T7800] usb 3-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 223.709737][ T7800] usb 3-1: config 7 has no interface number 0 [ 223.716068][ T7800] usb 3-1: config 7 has no interface number 1 [ 223.722224][ T7800] usb 3-1: config 7 interface 41 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 223.733352][ T7800] usb 3-1: config 7 interface 41 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 223.744421][ T7800] usb 3-1: config 7 interface 41 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 223.757743][ T7800] usb 3-1: too many endpoints for config 7 interface 232 altsetting 82: 133, using maximum allowed: 30 [ 223.768925][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has a duplicate endpoint with address 0xB, skipping [ 223.779820][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has a duplicate endpoint with address 0xB, skipping [ 223.790659][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has a duplicate endpoint with address 0xB, skipping [ 223.801502][ T7800] usb 3-1: config 7 interface 232 altsetting 82 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 223.812507][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has an invalid descriptor for endpoint zero, skipping [ 223.828424][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has a duplicate endpoint with address 0xD, skipping [ 223.839479][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has an invalid descriptor for endpoint zero, skipping [ 223.851675][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has an invalid descriptor for endpoint zero, skipping [ 223.865041][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has a duplicate endpoint with address 0x6, skipping [ 223.876524][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 223.882699][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.890848][ T7800] usb 3-1: config 7 interface 232 altsetting 82 has 14 endpoint descriptors, different from the interface descriptor's value: 133 [ 223.906061][ T9] usb 1-1: USB disconnect, device number 35 [ 223.913930][ T7800] usb 3-1: config 7 interface 41 has no altsetting 0 [ 223.921064][ T7800] usb 3-1: config 7 interface 232 has no altsetting 0 [ 223.929898][ T7800] usb 3-1: New USB device found, idVendor=2013, idProduct=025f, bcdDevice=9d.47 [ 223.939318][ T7800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.947413][ T7800] usb 3-1: Product: 䰗 [ 223.951606][ T7800] usb 3-1: Manufacturer: 箞ꮩ杻胫懿㥤㢻苚트ꭳ陋漃凟城뺅폊爐㝩䭩ꗜ縯㿙ǰ貺塥裆ᲁ魘扳猵둠㖛搛㎘㔒闍뒂鿜朿ף㪚殌懨푢ၵꕀ場ᬦ삢̨ෞ鷉⬋ﻱ쇰纊眗螓 [ 223.972779][ T7800] usb 3-1: SerialNumber: 靝溳꬟흏흍⤪䛈눶⡢ꐏ쑇확Ꚉꆋ෵짭ᆖ歧뢷釄놹佽뭽裳욕풘⫠ᳫ䉊谥眐둟훚쑎ꈞ颍ḥ甞宁鍍ᛣᩝﶥ껢㊙礫ᇖ䜝⃝ꑥ땵箑褯懴떄컞䘊躇쎂፤縹ㇷ㈢鶏ℿ█夘잒禽､랰撿䅷ị뗁뤼爝ᰄ㈄먮㘉ḃ铗덭ꆄ吲輢ඤ儴悢⶷ [ 223.992052][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 223.992073][ T36] audit: type=1400 audit(2000000063.234:2971): avc: denied { setattr } for pid=8774 comm="syz.1.2823" name="XDP" dev="sockfs" ino=33710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.222797][ T7381] tipc: Node number set to 2886997007 [ 224.227271][ T7800] usb 3-1: USB disconnect, device number 26 [ 224.265261][ T8800] incfs: Can't find or create .index dir in ./bus [ 224.282709][ T8800] incfs: mount failed -1 [ 224.293201][ T8800] incfs: Can't find or create .index dir in ./bus [ 224.299807][ T8800] incfs: mount failed -1 [ 224.435910][ T36] audit: type=1400 audit(2000000063.695:2972): avc: denied { audit_read } for pid=8815 comm="syz.1.2835" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.459363][ T8816] 9pnet_fd: Insufficient options for proto=fd [ 224.521618][ T8819] overlay: filesystem on ./bus is read-only [ 224.780607][ T36] audit: type=1400 audit(2000000064.035:2973): avc: denied { read append } for pid=8834 comm="syz.2.2841" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.802862][ T8835] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 224.805603][ T36] audit: type=1400 audit(2000000064.035:2974): avc: denied { open } for pid=8834 comm="syz.2.2841" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.891067][ T8840] SELinux: security_context_str_to_sid () failed with errno=-22 [ 224.922318][ T7800] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 225.078155][ T8851] futex_wake_op: syz.1.2847 tries to shift op by 144; fix this program [ 225.094882][ T7800] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 225.104072][ T7800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.112144][ T7800] usb 1-1: Product: syz [ 225.117569][ T36] audit: type=1400 audit(2000000064.375:2975): avc: denied { append } for pid=8854 comm="syz.1.2849" name="rnullb0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 225.143750][ T7800] usb 1-1: Manufacturer: syz [ 225.148550][ T7800] usb 1-1: SerialNumber: syz [ 225.154322][ T36] audit: type=1400 audit(2000000064.375:2976): avc: denied { ioctl } for pid=8854 comm="syz.1.2849" path="/dev/rnullb0" dev="tmpfs" ino=505 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 225.712507][ T7800] rtl8150 1-1:1.0: couldn't reset the device [ 225.718748][ T7800] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 225.728587][ T7800] usb 1-1: USB disconnect, device number 36 [ 225.994208][ T8906] rust_binder: Error while translating object. [ 225.994251][ T8906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 226.000519][ T8906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:334 [ 226.021960][ T8908] bridge0: entered allmulticast mode [ 226.272295][ T8939] rust_binder: Error while translating object. [ 226.272330][ T8939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 226.281630][ T8939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:116 [ 226.311627][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 226.311985][ T7381] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 226.483102][ T7381] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 226.493997][ T7381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.504953][ T7381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.514736][ T7381] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 226.528578][ T7381] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 226.538634][ T7381] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 226.546748][ T7381] usb 3-1: Manufacturer: syz [ 226.552109][ T7381] usb 3-1: config 0 descriptor?? [ 226.958566][ T8916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.967208][ T8916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.978571][ T7381] usbhid 3-1:0.0: can't add hid device: -71 [ 226.984580][ T7381] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.994688][ T7381] usb 3-1: USB disconnect, device number 27 [ 227.781938][ T7800] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 227.911961][ T7800] usb 3-1: device descriptor read/64, error -71 [ 228.152006][ T7800] usb 3-1: device descriptor read/64, error -71 [ 228.293743][ T8991] /dev/loop0: Can't lookup blockdev [ 228.310105][ T8996] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 228.391986][ T7800] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 228.521980][ T7800] usb 3-1: device descriptor read/64, error -71 [ 228.761994][ T7800] usb 3-1: device descriptor read/64, error -71 [ 228.875702][ T7800] usb usb3-port1: attempt power cycle [ 228.985479][ T9024] futex_wake_op: syz.1.2909 tries to shift op by -1; fix this program [ 229.068316][ T9034] 9pnet_fd: Insufficient options for proto=fd [ 229.182535][ T36] audit: type=1326 audit(2000000324.441:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2917" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd25298ebe9 code=0x0 [ 229.242138][ T7800] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 229.272958][ T7800] usb 3-1: device descriptor read/8, error -71 [ 229.413088][ T7800] usb 3-1: device descriptor read/8, error -71 [ 229.462159][ T9051] overlayfs: failed to clone upperpath [ 229.651969][ T7800] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 229.673323][ T7800] usb 3-1: device descriptor read/8, error -71 [ 229.802994][ T7800] usb 3-1: device descriptor read/8, error -71 [ 229.912092][ T7800] usb usb3-port1: unable to enumerate USB device [ 230.088637][ T9067] 9pnet_fd: Insufficient options for proto=fd [ 230.851963][ T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 231.003119][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 231.011540][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 231.019844][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 231.029008][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 231.040049][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.050043][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 231.064880][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 231.074218][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.082420][ T9] usb 3-1: Product: syz [ 231.086836][ T9] usb 3-1: Manufacturer: syz [ 231.091584][ T9] usb 3-1: SerialNumber: syz [ 231.097284][ T9] usb 3-1: config 0 descriptor?? [ 231.103773][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 231.109837][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 231.412038][ T9] usb 3-1: USB disconnect, device number 32 [ 232.049297][ T9130] input: syz1 as /devices/virtual/input/input13 [ 232.102074][ T9138] /dev/rnullb0: Can't open blockdev [ 232.132258][ T36] audit: type=1326 audit(2000000327.391:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.1.2953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x0 [ 233.751954][ T7800] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 233.835506][ T9208] tipc: Enabling of bearer rejected, already enabled [ 233.843454][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 233.852552][ T9208] tipc: Disabling bearer [ 233.870657][ T36] audit: type=1400 audit(2000000329.121:2979): avc: denied { setattr } for pid=9209 comm="syz.1.2976" path="/dev/rnullb0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 233.897088][ T36] audit: type=1400 audit(2000000329.131:2980): avc: denied { map } for pid=9209 comm="syz.1.2976" path="socket:[34773]" dev="sockfs" ino=34773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.921215][ T36] audit: type=1400 audit(2000000329.131:2981): avc: denied { read } for pid=9209 comm="syz.1.2976" path="socket:[34773]" dev="sockfs" ino=34773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.953143][ T7800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.963303][ T7800] usb 3-1: config 0 has no interfaces? [ 233.970227][ T7800] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 233.979310][ T7800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 233.987689][ T7800] usb 3-1: Product: syz [ 233.991864][ T7800] usb 3-1: Manufacturer: syz [ 233.996534][ T7800] usb 3-1: SerialNumber: syz [ 234.005000][ T7800] usb 3-1: config 0 descriptor?? [ 234.263812][ T9182] rust_binder: Error while translating object. [ 234.263840][ T9182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.270041][ T9182] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 234.279509][ T9182] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:401 [ 234.291711][ T7800] usb 3-1: USB disconnect, device number 33 [ 234.339909][ T9234] fuse: Bad value for 'user_id' [ 234.344878][ T9234] fuse: Bad value for 'user_id' [ 234.807136][ T7381] rust_binder: 9181: removing orphan mapping 0:24 [ 250.714064][ T9258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3507366080 (224471429120 ns) > initial count (25249277504 ns). Using initial count to start timer. [ 250.732706][ T9258] kvm: Disabled LAPIC found during irq injection [ 250.752512][ T9261] overlayfs: failed to clone upperpath [ 250.791524][ T9270] 9pnet: Could not find request transport: [ 250.799860][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.807791][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.815276][ T9263] bridge_slave_0: entered allmulticast mode [ 250.821692][ T9263] bridge_slave_0: entered promiscuous mode [ 250.828993][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.836313][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.843703][ T9263] bridge_slave_1: entered allmulticast mode [ 250.850134][ T9263] bridge_slave_1: entered promiscuous mode [ 250.919047][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.926158][ T9263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.933498][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.940547][ T9263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.967875][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.976207][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.990061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.997166][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.005803][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.012886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.045243][ T9263] veth0_vlan: entered promiscuous mode [ 251.060332][ T9263] veth1_macvtap: entered promiscuous mode [ 251.117280][ T9280] syzkaller0: refused to change device tx_queue_len [ 251.175734][ T9281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 251.185367][ T9283] overlayfs: missing 'lowerdir' [ 251.217063][ T1233] rust_binder: 9279: removing orphan mapping 0:24 [ 251.235021][ T9288] /dev/rnullb0: Can't open blockdev [ 251.241525][ T9290] fuseblk: Bad value for 'source' [ 251.259747][ T36] audit: type=1400 audit(2000000346.511:2982): avc: denied { write } for pid=9293 comm="syz.5.2998" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.334479][ T9305] fuse: Unknown parameter 'fdy0x0000000000000006' [ 251.351960][ T9294] netlink: 'syz.5.2998': attribute type 11 has an invalid length. [ 251.449739][ T9316] 9pnet_fd: Insufficient options for proto=fd [ 251.563739][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.579688][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.612051][ T9328] sit0: entered promiscuous mode [ 251.618257][ T9328] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3009'. [ 251.627786][ T9328] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 251.634895][ T9328] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967292 [ 251.642937][ T9328] rust_binder: 418: no such ref 3 [ 251.678260][ T9329] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 251.811956][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 251.905130][ T9331] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3010'. [ 251.937426][ T9338] 9pnet_fd: Insufficient options for proto=fd [ 251.955535][ T36] audit: type=1400 audit(2000000347.211:2983): avc: denied { execute } for pid=9339 comm="syz.1.3013" name="file1" dev="ramfs" ino=36290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 251.977568][ T36] audit: type=1400 audit(2000000347.211:2984): avc: denied { execute_no_trans } for pid=9339 comm="syz.1.3013" path="/file1" dev="ramfs" ino=36290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 252.003038][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 252.016565][ T10] usb 6-1: no configurations [ 252.021584][ T10] usb 6-1: can't read configurations, error -22 [ 252.646608][ T36] audit: type=1400 audit(2000000347.901:2985): avc: denied { ioctl } for pid=9362 comm="syz.2.3023" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.320082][ T36] audit: type=1400 audit(2000000348.571:2986): avc: denied { lock } for pid=9427 comm="syz.1.3045" path="socket:[36426]" dev="sockfs" ino=36426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.431926][ T1233] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 253.459226][ T36] audit: type=1400 audit(2000000348.711:2987): avc: denied { mount } for pid=9434 comm="syz.1.3047" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 253.581917][ T1233] usb 3-1: Using ep0 maxpacket: 8 [ 253.590688][ T9443] overlayfs: failed to clone upperpath [ 253.604331][ T1233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.622300][ T1233] usb 3-1: config 1 interface 1 has no altsetting 1 [ 253.640668][ T1233] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.664962][ T1233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.690479][ T1233] usb 3-1: Product: syz [ 253.699685][ T1233] usb 3-1: Manufacturer: syz [ 253.715068][ T1233] usb 3-1: SerialNumber: syz [ 253.771921][ T7800] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 253.931935][ T7800] usb 6-1: Using ep0 maxpacket: 32 [ 253.938934][ T7800] usb 6-1: unable to get BOS descriptor or descriptor too short [ 253.948777][ T7800] usb 6-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 253.958797][ T7800] usb 6-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.961150][ T9412] incfs: mount failed -22 [ 253.971906][ T7800] usb 6-1: config 1 interface 0 has no altsetting 0 [ 253.985947][ T7800] usb 6-1: string descriptor 0 read error: -22 [ 253.986887][ T1233] usb 3-1: selecting invalid altsetting 1 [ 253.992257][ T7800] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.002257][ T1233] cdc_ncm 3-1:1.0: bind() failure [ 254.007098][ T7800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.014096][ T1233] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 254.027227][ T1233] cdc_ncm 3-1:1.1: bind() failure [ 254.028099][ T9439] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 254.039577][ T9439] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 254.057418][ T1233] usb 3-1: USB disconnect, device number 34 [ 254.114864][ T9466] netlink: 'syz.1.3058': attribute type 46 has an invalid length. [ 254.250836][ T7800] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 254.264062][ T7800] usb 6-1: USB disconnect, device number 4 [ 254.275507][ T7800] usblp0: removed [ 254.725467][ T9471] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3060'. [ 254.772017][ T7800] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 254.822787][ T9475] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 254.832163][ T9475] kvm: pic: level sensitive irq not supported [ 254.832271][ T9475] kvm: pic: non byte read [ 254.843103][ T9475] kvm: pic: level sensitive irq not supported [ 254.843163][ T9475] kvm: pic: non byte read [ 254.853974][ T9475] kvm: pic: level sensitive irq not supported [ 254.854070][ T9475] kvm: pic: non byte read [ 254.865095][ T9475] kvm: pic: level sensitive irq not supported [ 254.865144][ T9475] kvm: pic: non byte read [ 254.875908][ T9475] kvm: pic: level sensitive irq not supported [ 254.875959][ T9475] kvm: pic: non byte read [ 254.883621][ T9478] rust_binder: 19: no such ref 0 [ 254.886908][ T9475] kvm: pic: level sensitive irq not supported [ 254.891735][ T9475] kvm: pic: non byte read [ 254.933344][ T7800] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 254.944808][ T7800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.955772][ T7800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.965573][ T7800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.979382][ T7800] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 254.988470][ T7800] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 254.996603][ T7800] usb 3-1: Manufacturer: syz [ 255.007963][ T7800] usb 3-1: config 0 descriptor?? [ 255.010134][ T36] audit: type=1326 audit(2000000606.260:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.5.3063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2e158ebe9 code=0x0 [ 255.416828][ T7800] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 255.424347][ T7800] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 255.434592][ T7800] appleir 0003:05AC:8243.0008: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 255.616828][ T7381] usb 3-1: USB disconnect, device number 35 [ 255.820707][ T36] audit: type=1400 audit(2000000607.070:2989): avc: denied { accept } for pid=9515 comm="syz.2.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.822315][ T9516] rust_binder: Read failure Err(EAGAIN) in pid:447 [ 255.870126][ T9518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 255.889788][ T36] audit: type=1400 audit(2000000607.140:2990): avc: denied { relabelto } for pid=9519 comm="syz.5.3074" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 256.142270][ T7381] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.313372][ T7381] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 256.322769][ T7381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.333063][ T7381] usb 6-1: config 0 descriptor?? [ 256.554007][ T9520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.563621][ T9520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.632551][ T7381] usb 6-1: Cannot read MAC address [ 256.637772][ T7381] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 256.651306][ T7381] usb 6-1: USB disconnect, device number 5 [ 256.665969][ T36] audit: type=1400 audit(2000000607.920:2991): avc: denied { unlink } for pid=9263 comm="syz-executor" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 257.238411][ T36] audit: type=1400 audit(2000000608.490:2992): avc: denied { execute_no_trans } for pid=9592 comm="syz.0.3097" path="/95/file0" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 257.340261][ T36] audit: type=1326 audit(2000000608.590:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.1.3104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x0 [ 257.837176][ T9629] /dev/loop0: Can't lookup blockdev [ 257.843887][ T9629] fuseblk: Unknown parameter 'group_id00000000000000000000' [ 259.134239][ T9652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457 [ 259.162547][ T9655] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 259.179635][ T9655] rust_binder: 459: no such ref 2 [ 259.223588][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.230645][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.238132][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.245458][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.252497][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.259535][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.266845][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.273897][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.281825][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.285282][ T9662] rust_binder: Write failure EFAULT in pid:54 [ 259.289392][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 259.355105][ T36] audit: type=1400 audit(2000000610.610:2994): avc: denied { execute } for pid=9665 comm="syz.2.3118" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.378608][ T9680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.394059][ T9680] rust_binder: Error while translating object. [ 259.400659][ T9680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.407255][ T9680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 259.487834][ T9693] binder: Unknown parameter 'dirsmʙbs2s5UJޏle2*ibrX@vy$p6A' [ 259.540951][ T9697] /dev/rnullb0: Can't open blockdev [ 259.735724][ T9718] tipc: Trying to set illegal importance in message [ 259.821236][ T9729] overlay: ./file0 is not a directory [ 259.821946][ T1233] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 259.937253][ T9743] fuse: Unknown parameter 'ode' [ 259.961940][ T1233] usb 3-1: device descriptor read/64, error -71 [ 259.991769][ T9755] overlayfs: failed to clone upperpath [ 260.212045][ T1233] usb 3-1: device descriptor read/64, error -71 [ 260.451991][ T1233] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 260.581985][ T1233] usb 3-1: device descriptor read/64, error -71 [ 260.646955][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3156'. [ 260.782343][ T9788] netlink: 'syz.5.3159': attribute type 27 has an invalid length. [ 260.802026][ T9791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.810743][ T9791] rust_binder: Error in use_page_slow: ESRCH [ 260.810760][ T9791] rust_binder: use_range failure ESRCH [ 260.816864][ T9792] rust_binder: Error in use_page_slow: ESRCH [ 260.822418][ T9791] rust_binder: Failed to allocate buffer. len:240, is_oneway:true [ 260.822471][ T1233] usb 3-1: device descriptor read/64, error -71 [ 260.828442][ T9791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 260.836304][ T9792] rust_binder: use_range failure ESRCH [ 260.843191][ T9791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:67 [ 260.852041][ T9792] rust_binder: Failed to allocate buffer. len:240, is_oneway:true [ 260.866568][ T9792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 260.874755][ T9792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:67 [ 260.952326][ T1233] usb usb3-port1: attempt power cycle [ 260.997727][ T9815] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3169'. [ 261.006328][ T36] audit: type=1400 audit(2000000612.250:2995): avc: denied { nlmsg_read } for pid=9814 comm="syz.1.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 261.036638][ T36] audit: type=1400 audit(2000000612.290:2996): avc: denied { listen } for pid=9818 comm="syz.5.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.256028][ T9854] bridge0: entered allmulticast mode [ 261.294845][ T36] audit: type=1400 audit(2000000612.550:2997): avc: denied { ioctl } for pid=9864 comm="syz.0.3185" path="socket:[38973]" dev="sockfs" ino=38973 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 261.320361][ T1233] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 261.331999][ T7800] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 261.343245][ T1233] usb 3-1: device descriptor read/8, error -71 [ 261.473069][ T1233] usb 3-1: device descriptor read/8, error -71 [ 261.494128][ T7800] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 261.505193][ T7800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.515073][ T7800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 261.528076][ T7800] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 261.537328][ T7800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.546119][ T7800] usb 6-1: config 0 descriptor?? [ 261.712015][ T1233] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 261.733040][ T1233] usb 3-1: device descriptor read/8, error -71 [ 261.863051][ T1233] usb 3-1: device descriptor read/8, error -71 [ 261.954318][ T7800] holtek_kbd 0003:04D9:A055.0009: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0 [ 261.972508][ T1233] usb usb3-port1: unable to enumerate USB device [ 262.153579][ T9831] random: crng reseeded on system resumption [ 262.177541][ T9831] rust_binder: 77: no such ref 4294967293 [ 262.184300][ T1233] usb 6-1: USB disconnect, device number 6 [ 262.383978][ T9919] netlink: 'syz.1.3204': attribute type 4 has an invalid length. [ 262.407263][ T9921] netlink: 'syz.1.3204': attribute type 4 has an invalid length. [ 262.602659][ T36] audit: type=1400 audit(2000000613.860:2998): avc: denied { setopt } for pid=9927 comm="syz.2.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 262.624294][ T36] audit: type=1400 audit(2000000613.870:2999): avc: denied { write } for pid=9927 comm="syz.2.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 262.643179][ T9936] overlayfs: failed to clone upperpath [ 262.657349][ T9938] rust_binder: 479: no such ref 0 [ 262.703190][ T36] audit: type=1400 audit(2000000613.960:3000): avc: denied { bind } for pid=9940 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.753850][ T9944] rust_binder: Failed copying into alloc: EFAULT [ 262.753878][ T9944] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 262.762274][ T9944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.770599][ T9944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:79 [ 262.892479][ T9956] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 262.906774][ T9956] rust_binder: Error while translating object. [ 262.920804][ T9956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 262.927128][ T9956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 262.981918][ T36] audit: type=1400 audit(2000000614.230:3001): avc: denied { ioctl } for pid=9967 comm="syz.2.3221" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.034290][ T9975] overlayfs: failed to resolve './bus': -2 [ 263.062160][ T9982] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.3226'. [ 263.062525][ T36] audit: type=1400 audit(2000000614.310:3002): avc: denied { append } for pid=9981 comm="syz.2.3226" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 263.082403][ T9982] /dev/rnullb0: Can't open blockdev [ 263.172286][ T9992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.252046][T10000] binder: Unknown parameter 'context' [ 263.300934][T10006] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 263.310003][T10006] rust_binder: Write failure EINVAL in pid:503 [ 263.442017][ T330] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 263.527767][T10018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 263.527800][T10018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:513 [ 263.601921][ T330] usb 6-1: Using ep0 maxpacket: 16 [ 263.632981][ T330] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 263.641730][ T330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.666702][ T330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.683336][ T330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.695516][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.706603][T10032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.707167][ T330] usb 6-1: Product: syz [ 263.718031][ T330] usb 6-1: Manufacturer: syz [ 263.722974][ T330] usb 6-1: SerialNumber: syz [ 263.772264][T10041] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 263.772295][T10041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 263.780501][T10041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:524 [ 264.131004][ T330] usb 6-1: 0:2 : does not exist [ 264.952691][ T330] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 264.971682][ T330] usb 6-1: USB disconnect, device number 7 [ 264.990888][T10091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.993257][T10091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:528 [ 265.134531][ T36] audit: type=1326 audit(2000000616.390:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.1.3265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd25298ebe9 code=0x0 [ 265.214335][T10113] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3268'. [ 265.244361][T10115] overlayfs: failed to clone upperpath [ 265.247659][T10113] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 265.257171][T10113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:545 [ 265.258132][T10115] overlayfs: failed to clone upperpath [ 265.480421][T10119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59457 sclass=netlink_route_socket pid=10119 comm=syz.5.3270 [ 265.480429][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59457 sclass=netlink_route_socket pid=10118 comm=syz.5.3270 [ 265.480466][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10118 comm=syz.5.3270 [ 265.493463][T10119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10119 comm=syz.5.3270 [ 265.506636][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=10118 comm=syz.5.3270 [ 265.519593][T10119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=10119 comm=syz.5.3270 [ 265.584199][T10126] rust_binder: Error while translating object. [ 265.584253][T10126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 265.590627][T10126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:108 [ 265.940452][ T36] audit: type=1400 audit(2000000617.190:3004): avc: denied { unmount } for pid=9263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 266.002947][T10169] overlayfs: failed to clone upperpath [ 266.029056][T10173] random: crng reseeded on system resumption [ 266.052378][T10173] random: crng reseeded on system resumption [ 266.100270][T10179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.153736][ T36] audit: type=1400 audit(2000000617.410:3005): avc: denied { unlink } for pid=10178 comm="syz.5.3291" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 266.351945][ T1233] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 266.502713][ T1233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 266.510795][ T1233] usb 3-1: not running at top speed; connect to a high speed hub [ 266.519287][ T1233] usb 3-1: config 9 has an invalid interface number: 49 but max is 0 [ 266.527409][ T1233] usb 3-1: config 9 has no interface number 0 [ 266.533545][ T1233] usb 3-1: config 9 interface 49 has no altsetting 0 [ 266.541696][ T1233] usb 3-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 266.550790][ T1233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.558813][ T1233] usb 3-1: Product: syz [ 266.563006][ T1233] usb 3-1: Manufacturer: syz [ 266.567610][ T1233] usb 3-1: SerialNumber: syz [ 266.766163][T10205] netlink: 'syz.1.3301': attribute type 16 has an invalid length. [ 266.774486][T10206] netlink: 'syz.1.3301': attribute type 16 has an invalid length. [ 266.782845][T10205] netlink: 'syz.1.3301': attribute type 3 has an invalid length. [ 266.787269][ T1233] usb-storage 3-1:9.49: USB Mass Storage device detected [ 266.790774][T10205] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.3301'. [ 266.802167][T10206] netlink: 'syz.1.3301': attribute type 3 has an invalid length. [ 266.814875][T10206] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.3301'. [ 266.824507][ T1233] usb-storage 3-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 266.874434][ T1233] usb 3-1: USB disconnect, device number 40 [ 266.901925][T10220] >: renamed from veth0_vlan (while UP) [ 266.973404][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3309'. [ 267.034663][T10233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3309'. [ 267.077508][T10234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.328119][T10246] rust_binder: Read failure Err(EAGAIN) in pid:556 [ 267.456057][T10260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.465207][T10260] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 267.471848][T10260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 267.480053][T10260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:569 [ 267.664792][ T12] bridge_slave_1: left allmulticast mode [ 267.679667][ T12] bridge_slave_1: left promiscuous mode [ 267.685653][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.693439][ T12] bridge_slave_0: left allmulticast mode [ 267.699213][ T12] bridge_slave_0: left promiscuous mode [ 267.705110][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.738474][ T12] bridge0 (unregistering): left allmulticast mode [ 267.839923][ T12] veth1_macvtap: left promiscuous mode [ 267.845592][ T12] veth0_vlan: left promiscuous mode [ 267.895517][T10274] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=12379 sclass=netlink_tcpdiag_socket pid=10274 comm=syz.1.3325 [ 267.974371][T10282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3328'. [ 268.028675][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.035787][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.042917][T10281] bridge_slave_0: entered allmulticast mode [ 268.049159][T10281] bridge_slave_0: entered promiscuous mode [ 268.055730][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.056242][T10295] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3331'. [ 268.063297][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.072109][T10295] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3331'. [ 268.079318][T10281] bridge_slave_1: entered allmulticast mode [ 268.087858][T10295] netlink: 'syz.1.3331': attribute type 6 has an invalid length. [ 268.094359][T10281] bridge_slave_1: entered promiscuous mode [ 268.106335][T10295] netlink: 'syz.1.3331': attribute type 5 has an invalid length. [ 268.115079][T10295] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3331'. [ 268.192640][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 268.206825][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.213927][T10281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.221222][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.228304][T10281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.253076][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.260351][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.269946][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.277035][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.288979][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.296034][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.318412][T10281] veth0_vlan: entered promiscuous mode [ 268.330396][T10281] veth1_macvtap: entered promiscuous mode [ 268.345112][ T45] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.356016][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.368138][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.378325][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.392670][ T45] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 268.401712][ T45] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 268.412120][ T45] usb 6-1: Manufacturer: syz [ 268.426429][ T45] usb 6-1: config 0 descriptor?? [ 268.513562][T10316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 268.528212][T10318] rust_binder: Error while translating object. [ 268.537363][T10318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.543599][T10318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 268.568246][T10320] 9pnet_fd: Insufficient options for proto=fd [ 268.590833][T10321] 9pnet_fd: Insufficient options for proto=fd [ 268.732442][ T36] audit: type=1400 audit(2000000619.990:3006): avc: denied { execute } for pid=10339 comm="syz.6.3343" path="/dev/rnullb0" dev="devtmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 268.833227][ T45] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 268.840475][ T45] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 268.848840][ T45] appleir 0003:05AC:8243.000A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 268.872545][ T36] audit: type=1400 audit(2000000620.130:3007): avc: denied { create } for pid=10349 comm="syz.1.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 269.022292][ T415] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 269.092658][ T45] usb 6-1: USB disconnect, device number 8 [ 269.183684][ T415] usb 7-1: config index 0 descriptor too short (expected 1572, got 36) [ 269.192037][ T415] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 269.200111][ T415] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 269.209321][ T415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.219169][ T415] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.232392][ T415] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 269.241466][ T415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.250557][ T415] usb 7-1: config 0 descriptor?? [ 269.383078][T10354] devpts: called with bogus options [ 269.403167][T10358] net_ratelimit: 22 callbacks suppressed [ 269.403181][T10358] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 269.475245][ T415] usbhid 7-1:0.0: can't add hid device: -71 [ 269.492166][ T415] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 269.507631][ T415] usb 7-1: USB disconnect, device number 2 [ 269.690389][T10382] __vm_enough_memory: pid: 10382, comm: syz.6.3357, bytes: 18014402804453376 not enough memory for the allocation [ 269.730199][T10387] rust_binder: Error while translating object. [ 269.730236][T10387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.736455][T10387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 269.928041][T10397] rust_binder: Error while translating object. [ 269.937158][T10397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.943352][T10397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 269.979818][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3366'. [ 269.998443][T10401] bridge_slave_1: left allmulticast mode [ 270.004121][T10401] bridge_slave_1: left promiscuous mode [ 270.009862][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.017457][T10401] bridge_slave_0: left allmulticast mode [ 270.023256][T10401] bridge_slave_0: left promiscuous mode [ 270.031984][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.229095][T10429] rust_binder: Failed copying into alloc: EFAULT [ 270.229120][T10429] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 270.235758][T10429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 270.246037][T10429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70 [ 270.387545][T10442] netlink: 'syz.1.3380': attribute type 12 has an invalid length. [ 270.420134][ T36] audit: type=1326 audit(2000000621.670:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10441 comm="syz.1.3380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x0 [ 270.834350][T10471] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3391'. [ 270.877231][T10476] rust_binder: Write failure EFAULT in pid:75 [ 270.983000][T10492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10492 comm=syz.5.3398 [ 271.014858][ T36] audit: type=1400 audit(2000000622.270:3009): avc: denied { setopt } for pid=10498 comm="syz.6.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.092055][ T36] audit: type=1326 audit(2000000622.340:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.5.3404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2e158ebe9 code=0x0 [ 271.132126][ T36] audit: type=1400 audit(2000000622.380:3011): avc: denied { lock } for pid=10481 comm="syz.0.3395" path="socket:[41466]" dev="sockfs" ino=41466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.178245][ T36] audit: type=1400 audit(2000000622.430:3012): avc: denied { remount } for pid=10512 comm="syz.6.3405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 271.198572][ T36] audit: type=1400 audit(2000000622.430:3013): avc: denied { mounton } for pid=10512 comm="syz.6.3405" path="/31/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 271.711933][ T415] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 271.861927][ T415] usb 7-1: Using ep0 maxpacket: 16 [ 271.868142][ T415] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.879053][ T415] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 271.890131][ T415] usb 7-1: config 1 interface 0 has no altsetting 0 [ 271.898104][ T415] usb 7-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.40 [ 271.907972][ T415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.916034][ T415] usb 7-1: Product: ╻迎埛껑磋ჰ彈䌾Ⓚ䘉ﰃ✌桲ꯗ噘绊磭䆵衫ꎍꍕᣑ蘒爛ᅂ業彐鳈崙啴ꏗ恃뿓᮰凲ࣉ혠珯㾢㇐䘆瀷y䩋䠬錽箾设ƥ㍜饋辕倝侧瀑╻穡쎼㕢솕邺笞騭퐬칠牉᷃䪆禭椰쇑裙癆賣ꭰ툵隅 [ 271.942044][ T415] usb 7-1: Manufacturer: ᰊ [ 271.946675][ T415] usb 7-1: SerialNumber: 衼췮Ჿ쨸텪產꩒덑澲ﳳ쎢ሺꥶ䫯┎풮화㖪뭉鉱衁᲌ㆣ [ 272.368330][ T415] usbhid 7-1:1.0: can't add hid device: -71 [ 272.381185][ T415] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 272.390813][T10578] __nla_validate_parse: 1 callbacks suppressed [ 272.390832][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3424'. [ 272.401360][ T415] usb 7-1: USB disconnect, device number 3 [ 272.543848][T10580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.544935][T10580] rust_binder: Error while translating object. [ 272.561637][T10580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 272.571146][T10580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:195 [ 272.703645][T10587] rust_binder: Error while translating object. [ 272.721961][T10587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 272.728429][T10587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 273.131947][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 273.292963][ T10] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 273.301159][ T10] usb 7-1: config 1 has no interface number 0 [ 273.307297][ T10] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 273.318496][ T10] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 273.327587][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.335598][ T10] usb 7-1: Product: syz [ 273.339770][ T10] usb 7-1: Manufacturer: syz [ 273.344656][ T10] usb 7-1: SerialNumber: syz [ 273.351753][T10592] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 273.618507][T10617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.629069][T10619] rust_binder: Error while translating object. [ 273.635867][T10619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 273.642271][T10619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213 [ 274.002029][ T415] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 274.183106][ T415] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 274.201927][ T415] usb 6-1: config 1 has no interface number 1 [ 274.208051][ T415] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 274.220853][ T415] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 124, changing to 4 [ 274.231959][ T415] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 274.244670][ T415] usb 6-1: string descriptor 0 read error: -22 [ 274.250919][ T415] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.260009][ T415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.269820][ T415] usb 6-1: low speed audio streaming not supported [ 274.470357][T10645] rust_binder: Error while translating object. [ 274.470384][T10645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 274.476685][T10645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:228 [ 274.486557][ T330] usb 6-1: USB disconnect, device number 9 [ 275.087218][T10678] rust_binder: 234: no such ref 1 [ 275.159491][T10679] /dev/rnullb0: Can't lookup blockdev [ 275.441962][ T330] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 275.592969][ T330] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 275.602108][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.610709][ T330] usb 6-1: config 0 descriptor?? [ 275.891099][ T415] usb 7-1: USB disconnect, device number 4 [ 276.217806][T10692] rust_binder: inc_ref_done called when no active inc_refs [ 276.231925][ T415] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 276.413058][ T415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.418587][ T330] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 276.422922][ T415] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.433581][ T330] asix 6-1:0.0: probe with driver asix failed with error -71 [ 276.447883][ T415] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 276.455498][ T330] usb 6-1: USB disconnect, device number 10 [ 276.464737][ T415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.479105][ T415] usb 7-1: config 0 descriptor?? [ 276.722123][T10723] overlayfs: failed to clone upperpath [ 276.740270][T10725] overlayfs: failed to clone upperpath [ 276.758242][T10727] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3480'. [ 276.838391][ T36] audit: type=1326 audit(2000000628.090:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.0.3485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f246f98ebe9 code=0x0 [ 276.893099][ T415] logitech 0003:046D:C29C.000B: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0 [ 276.970442][T10756] rust_binder: Write failure EFAULT in pid:242 [ 277.092872][ T415] logitech 0003:046D:C29C.000B: no inputs found [ 277.117220][ T415] usb 7-1: USB disconnect, device number 5 [ 277.204816][T10777] input: syz1 as /devices/virtual/input/input14 [ 277.212595][T10777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.731917][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 277.826033][ T36] audit: type=1400 audit(2000000629.080:3015): avc: denied { mount } for pid=10813 comm="syz.1.3507" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 277.881958][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 277.888635][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 277.910057][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.918306][ T330] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 277.930290][ T10] usb 6-1: config 0 descriptor?? [ 277.971282][T10819] cgroup: Name too long [ 278.072879][ T330] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 278.081248][ T330] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 278.089373][ T330] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 278.098307][ T330] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 278.109209][ T330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 278.119005][ T330] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 278.133338][ T330] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 278.142507][ T330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.150725][ T330] usb 7-1: Product: syz [ 278.154956][ T330] usb 7-1: Manufacturer: syz [ 278.159587][ T330] usb 7-1: SerialNumber: syz [ 278.165271][ T330] usb 7-1: config 0 descriptor?? [ 278.171054][ T330] hub 7-1:0.0: bad descriptor, ignoring hub [ 278.177003][ T330] hub 7-1:0.0: probe with driver hub failed with error -5 [ 278.325912][ T36] audit: type=1400 audit(2000000629.580:3016): avc: denied { nlmsg_tty_audit } for pid=10837 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 278.482047][ T7381] usb 7-1: USB disconnect, device number 6 [ 278.552935][T10795] fuse: Unknown parameter '0x00000000000000080x0000000000000008' [ 278.816988][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3531'. [ 278.923041][T10893] fuse: Unknown parameter '0x00000000000000040x0000000000000007' [ 279.033331][T10906] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3539'. [ 279.235891][T10913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 279.235924][T10913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:130 [ 279.331209][ T36] audit: type=1400 audit(2000000630.580:3017): avc: denied { accept } for pid=10915 comm="syz.6.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 279.585265][T10931] rust_binder: Error while translating object. [ 279.585310][T10931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.591608][T10932] rust_binder: Error while translating object. [ 279.601120][T10931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 279.607383][T10932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.616752][T10932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 279.639762][T10941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 279.991960][ T330] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 280.011357][ T36] audit: type=1401 audit(2000000631.270:3018): op=fscreate invalid_context=CFA7AE [ 280.033039][T10962] futex_wake_op: syz.1.3561 tries to shift op by 32; fix this program [ 280.151898][ T330] usb 7-1: Using ep0 maxpacket: 32 [ 280.158781][ T330] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.168564][ T330] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 280.178367][ T330] usb 7-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.191265][ T330] usb 7-1: config 1 interface 0 has no altsetting 0 [ 280.199360][ T330] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.208479][ T330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.216536][ T330] usb 7-1: Product: syz [ 280.220753][ T330] usb 7-1: Manufacturer: syz [ 280.225422][ T330] usb 7-1: SerialNumber: syz [ 280.232003][T10947] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 280.239753][T10947] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 280.314846][ T36] audit: type=1400 audit(2000000631.570:3019): avc: denied { setattr } for pid=10977 comm="syz.0.3568" name="NETLINK" dev="sockfs" ino=44054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.454317][ T330] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 280.466070][ T330] usb 7-1: USB disconnect, device number 7 [ 280.609663][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 280.620532][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 280.630813][ T10] usb 6-1: USB disconnect, device number 11 [ 280.636929][T10993] /dev/rnullb0: Can't lookup blockdev [ 280.981920][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.054326][ T36] audit: type=1400 audit(2000000632.310:3020): avc: denied { unmount } for pid=10281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.133261][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.144245][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.154173][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.167083][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.176136][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.185504][ T10] usb 6-1: config 0 descriptor?? [ 281.592466][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.600967][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.610364][ T10] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 281.620853][ T10] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 281.811029][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.819524][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.284836][ C1] plantronics 0003:047F:FFFF.000C: hid_field_extract() called with n (132) > 32! (swapper/1) [ 282.496868][ T330] usb 6-1: USB disconnect, device number 12 [ 290.099920][T11014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.107511][T11014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 290.122717][T11014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 290.140135][T11020] rust_binder: Failed copying into alloc: EFAULT [ 290.160647][T11020] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 290.167352][T11020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 290.176701][T11020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:158 [ 290.201399][T11014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.251720][T11052] overlayfs: failed to clone lowerpath [ 290.270998][T11055] 9pnet_fd: Insufficient options for proto=fd [ 290.315130][T11060] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 290.452873][T11068] veth1: entered allmulticast mode [ 290.458722][T11068] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 290.467052][T11068] overlayfs: missing 'lowerdir' [ 290.474974][T11067] veth1: left allmulticast mode [ 290.514181][T11074] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 290.514210][T11074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 290.522371][T11074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:175 [ 290.589005][ T8008] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.783093][ T330] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 290.801830][ T36] audit: type=1326 audit(2000000642.050:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.825463][ T36] audit: type=1326 audit(2000000642.050:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.849014][ T36] audit: type=1326 audit(2000000642.060:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.872534][ T36] audit: type=1326 audit(2000000642.060:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.896061][ T36] audit: type=1326 audit(2000000642.060:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.919588][ T36] audit: type=1326 audit(2000000642.060:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.943200][ T36] audit: type=1326 audit(2000000642.060:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.966734][ T36] audit: type=1326 audit(2000000642.060:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.971914][ T330] usb 7-1: Using ep0 maxpacket: 16 [ 290.990226][ T36] audit: type=1326 audit(2000000642.060:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 290.997016][ T330] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 291.018818][ T36] audit: type=1326 audit(2000000642.060:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.1.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ff00000 [ 291.027020][ T330] usb 7-1: config 0 has no interface number 0 [ 291.067938][ T330] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 291.078173][ T330] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.088174][ T330] usb 7-1: config 0 interface 41 has no altsetting 0 [ 291.098625][ T330] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 291.107758][ T330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.116041][ T330] usb 7-1: Product: syz [ 291.120393][ T330] usb 7-1: Manufacturer: syz [ 291.125204][ T330] usb 7-1: SerialNumber: syz [ 291.130589][ T330] usb 7-1: config 0 descriptor?? [ 291.135881][T11076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 291.143076][T11076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 291.207309][T11116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3610'. [ 291.217581][T11116] overlayfs: missing 'lowerdir' [ 291.350969][T11076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 291.358265][T11076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 291.785535][ T330] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 291.800534][ T330] usb 7-1: USB disconnect, device number 8 [ 292.314194][T11146] rust_binder: Write failure EINVAL in pid:179 [ 292.576626][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'. [ 292.616700][T11177] netlink: 'syz.0.3633': attribute type 3 has an invalid length. [ 292.624562][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 292.630596][ T8300] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 292.800739][T11198] tmpfs: Unknown parameter 'hugehse' [ 293.484615][T11214] 9pnet_fd: Insufficient options for proto=fd [ 293.529096][T11223] 9pnet_fd: Insufficient options for proto=fd [ 293.672287][T11231] vlan0: entered promiscuous mode [ 293.677522][T11231] vlan0: entered allmulticast mode [ 293.682805][T11231] veth0_vlan: entered allmulticast mode [ 293.689635][T11231] syz.5.3649 (11231): /proc/11229/oom_adj is deprecated, please use /proc/11229/oom_score_adj instead. [ 293.701713][T11231] overlayfs: failed to resolve './file1': -2 [ 293.945155][T11247] __vm_enough_memory: pid: 11247, comm: syz.6.3654, bytes: 21200428609536 not enough memory for the allocation [ 293.972976][T11251] rust_binder: Error while translating object. [ 293.972982][T11252] rust_binder: Error while translating object. [ 293.973005][T11251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 293.979218][T11252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 293.985738][T11251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 293.995205][T11252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 294.591975][ T330] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 294.742962][ T330] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 294.753884][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.764958][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.775060][ T330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 294.789716][ T330] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 294.803022][ T330] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 294.821923][ T330] usb 6-1: Manufacturer: syz [ 294.830079][ T330] usb 6-1: config 0 descriptor?? [ 294.887753][T11286] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 294.958509][T11298] 9pnet_fd: Insufficient options for proto=fd [ 294.987670][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3673'. [ 294.996623][T11302] bridge_slave_1: left allmulticast mode [ 295.002455][T11302] bridge_slave_1: left promiscuous mode [ 295.008089][T11302] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.015910][T11302] bridge_slave_0: left allmulticast mode [ 295.021566][T11302] bridge_slave_0: left promiscuous mode [ 295.027352][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.111929][ T7381] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 295.262023][ T7381] usb 7-1: Using ep0 maxpacket: 32 [ 295.282734][ T7381] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.292937][ T7381] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.301939][ T7381] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.316373][ T7381] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.325511][ T7381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.333585][ T7381] usb 7-1: Product: syz [ 295.337811][ T7381] usb 7-1: Manufacturer: syz [ 295.342491][ T7381] usb 7-1: SerialNumber: syz [ 295.358250][ T7381] cdc_ncm 7-1:1.0: skipping garbage [ 295.368160][ T7381] cdc_ncm 7-1:1.0: skipping garbage [ 295.373432][ T7381] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 295.381663][ T7381] cdc_ncm 7-1:1.0: bind() failure [ 295.449699][ T330] usbhid 6-1:0.0: can't add hid device: -71 [ 295.455817][ T330] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 295.470206][ T330] usb 6-1: USB disconnect, device number 13 [ 295.566283][ T7800] usb 7-1: USB disconnect, device number 9 [ 295.908262][T11336] overlayfs: failed to resolve './file0': -2 [ 296.461252][T11350] $: renamed from bridge_slave_0 (while UP) [ 296.504128][T11357] incfs: Options parsing error. -22 [ 296.509479][T11357] incfs: mount failed -22 [ 296.930824][T11366] rust_binder: 224: no such ref 0 [ 296.937036][T11366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.998196][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 296.998215][ T36] audit: type=1326 audit(2000000648.250:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.6.3696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc98d8ebe9 code=0x0 [ 297.134971][T11393] $: renamed from bridge_slave_0 (while UP) [ 297.333592][T11403] rust_binder: Write failure EFAULT in pid:308 [ 297.333850][T11403] netlink: 'syz.5.3703': attribute type 33 has an invalid length. [ 297.348060][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3703'. [ 297.413244][T11421] pim6reg1: entered promiscuous mode [ 297.418580][T11421] pim6reg1: entered allmulticast mode [ 297.497934][T11435] /dev/nullb0: Can't lookup blockdev [ 297.516210][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3713'. [ 297.528029][T11435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.529029][T11435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 297.541889][T11435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:320 [ 297.552296][T11435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.561661][T11435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 297.596654][T11446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.607769][T11446] rust_binder: 322: no such ref 0 [ 297.619725][T11446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322 [ 297.620208][T11446] rust_binder: Got transaction with invalid offset. [ 297.631467][T11446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.638395][T11446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322 [ 297.652922][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3720'. [ 297.708193][T11457] tipc: Started in network mode [ 297.715366][T11457] tipc: Node identity 72572ddc4255, cluster identity 4711 [ 297.722771][T11457] tipc: Enabled bearer , priority 0 [ 297.733823][T11456] tipc: Resetting bearer [ 297.750666][T11456] tipc: Disabling bearer [ 306.367851][T11481] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 306.651927][ T7381] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 306.812926][ T7381] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 306.823819][ T7381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.834848][ T7381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.844750][ T7381] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 306.858501][ T7381] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 306.867598][ T7381] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 306.875925][ T7381] usb 6-1: Manufacturer: syz [ 306.881229][ T7381] usb 6-1: config 0 descriptor?? [ 307.016209][T11533] overlayfs: failed to clone upperpath [ 307.023209][T11533] overlayfs: failed to clone upperpath [ 307.045035][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 307.054065][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 307.063841][T11537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3751'. [ 307.073521][T11537] >: left promiscuous mode [ 307.170408][T11543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11543 comm=syz.0.3754 [ 307.183368][T11543] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 307.288314][ T7381] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 307.295734][ T7381] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 307.304164][ T7381] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 307.494445][ T7381] usb 6-1: USB disconnect, device number 14 [ 307.977599][T11572] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 307.988298][ T36] audit: type=1400 audit(2000000666.245:3104): avc: denied { relabelto } for pid=11571 comm="syz.1.3764" name="file0" dev="tmpfs" ino=2988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 308.018681][ T36] audit: type=1400 audit(2000000666.245:3105): avc: denied { associate } for pid=11571 comm="syz.1.3764" name="file0" dev="tmpfs" ino=2988 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 308.073778][T11575] overlayfs: missing 'lowerdir' [ 308.455176][T11593] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 308.643704][T11606] 9pnet: Could not find request transport: f [ 308.993985][ T36] audit: type=1400 audit(2000000667.255:3106): avc: denied { setattr } for pid=11641 comm="syz.0.3788" name="NETLINK" dev="sockfs" ino=45463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.211907][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 309.339933][ T36] audit: type=1400 audit(2000000667.595:3107): avc: denied { map } for pid=11663 comm="syz.1.3797" path="socket:[46200]" dev="sockfs" ino=46200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 309.381923][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 309.390397][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.407583][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.417744][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 309.426979][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.436014][ T9] usb 6-1: config 0 descriptor?? [ 309.483281][T11694] @: renamed from vlan0 (while UP) [ 309.845035][ T9] magicmouse 0003:05AC:0324.000E: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.5-1/input0 [ 310.043663][T11644] rust_binder: Error while translating object. [ 310.043702][T11644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 310.050034][T11644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:340 [ 310.059779][ T415] usb 6-1: USB disconnect, device number 15 [ 310.327055][T11742] netlink: 'syz.1.3812': attribute type 27 has an invalid length. [ 310.494248][T11744] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.3813'. [ 310.593755][ T36] audit: type=1400 audit(2000000668.855:3108): avc: denied { bind } for pid=11758 comm="syz.5.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 310.594432][T11759] rust_binder: Error while translating object. [ 310.620779][T11759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 310.627460][T11759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:342 [ 310.651978][T11762] rust_binder: Error while translating object. [ 310.661221][T11762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 310.667468][T11762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:344 [ 310.688779][T11764] rust_binder: Error while translating object. [ 310.698029][T11764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 310.704259][T11764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:346 [ 310.725843][T11766] pipefs: Unknown parameter 'Aknw' [ 311.097104][ T36] audit: type=1326 audit(2000000669.355:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.1.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ffc0000 [ 311.121409][ T36] audit: type=1326 audit(2000000669.355:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.1.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ffc0000 [ 311.146810][ T36] audit: type=1326 audit(2000000669.355:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.1.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ffc0000 [ 311.170748][ T36] audit: type=1326 audit(2000000669.355:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.1.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25298ebe9 code=0x7ffc0000 [ 311.199596][ T36] audit: type=1326 audit(2000000669.375:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.1.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd25298ebe9 code=0x7ffc0000 [ 311.237365][T11795] overlayfs: failed to clone upperpath [ 311.309259][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3834'. [ 311.338961][T11811] 9pnet_fd: Insufficient options for proto=fd [ 311.378799][T11822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11822 comm=syz.6.3840 [ 311.392428][T11822] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3840'. [ 311.429640][T11828] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 311.551007][T11813] rust_binder: Read failure Err(EFAULT) in pid:359 [ 311.664611][T11835] rust_binder: Failed copying into alloc: EFAULT [ 311.664656][T11835] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 311.671178][T11835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 311.679639][T11835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:363 [ 311.959009][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3846'. [ 311.990155][T11845] tmpfs: Unknown parameter './file0' [ 312.001456][T11850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3850'. [ 312.132041][T11874] overlayfs: failed to clone lowerpath [ 312.139367][T11874] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 312.293895][T11891] 9pnet_fd: Insufficient options for proto=fd [ 312.642548][T11916] fuse: Bad value for 'fd' [ 313.065859][T11934] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3877'. [ 313.148622][T11957] /dev/loop0: Can't lookup blockdev [ 313.178415][T11961] overlay: ./bus is not a directory [ 313.183836][T11963] overlay: ./bus is not a directory [ 313.283486][T11998] netlink: 'syz.6.3900': attribute type 64 has an invalid length. [ 313.296993][T11998] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3900'. [ 313.420333][T12012] 9pnet_fd: p9_fd_create_unix (12012): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 313.530514][T12030] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 313.558244][T12032] can0: slcan on ttyS3. [ 313.581566][ T36] kauditd_printk_skb: 516 callbacks suppressed [ 313.581584][ T36] audit: type=1400 audit(2000000671.835:3630): avc: denied { setcheckreqprot } for pid=12031 comm="syz.5.3911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 313.756655][T12033] can0 (unregistered): slcan off ttyS3. [ 313.809882][ T36] audit: type=1400 audit(2000000672.065:3631): avc: granted { setsecparam } for pid=12061 comm="syz.5.3916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 314.143183][T12116] overlayfs: failed to clone upperpath [ 314.231922][T12138] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 314.239047][T12138] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 314.239067][T12138] rust_binder: Error while translating object. [ 314.249827][T12138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 314.256941][T12138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 314.267047][T12138] rust_binder: Write failure EINVAL in pid:433 [ 314.292428][T12140] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3935'. [ 315.282634][T12204] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 315.292748][ T36] audit: type=1400 audit(2000000673.555:3632): avc: denied { relabelto } for pid=12203 comm="syz.6.3954" name="file0" dev="tmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 315.319687][ T36] audit: type=1400 audit(2000000673.555:3633): avc: denied { associate } for pid=12203 comm="syz.6.3954" name="file0" dev="tmpfs" ino=729 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0" [ 315.358590][T12212] netlink: 679 bytes leftover after parsing attributes in process `syz.6.3956'. [ 315.968363][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.975435][T12240] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.982636][T12240] bridge_slave_0: entered allmulticast mode [ 315.993189][T12240] bridge_slave_0: entered promiscuous mode [ 315.999708][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.007009][T12240] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.014198][T12240] bridge_slave_1: entered allmulticast mode [ 316.020694][T12240] bridge_slave_1: entered promiscuous mode [ 316.088977][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.096068][T12240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.103368][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.110403][T12240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.144513][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.152592][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.163386][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.170457][ T8008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.179452][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.186599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.217232][T12240] veth0_vlan: entered promiscuous mode [ 316.228833][T12240] veth1_macvtap: entered promiscuous mode [ 316.249038][ T36] audit: type=1400 audit(2000000674.505:3634): avc: denied { mounton } for pid=12240 comm="syz-executor" path="/root/syzkaller.t2pR74/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 316.278106][ T36] audit: type=1400 audit(2000000674.535:3635): avc: denied { mounton } for pid=12240 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 316.303177][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 316.377054][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3967'. [ 316.415290][ T12] tipc: Left network mode [ 316.420216][ T12] veth1_macvtap: left promiscuous mode [ 316.453008][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.463349][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 316.472328][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.487597][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 316.496740][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.504790][ T10] usb 6-1: Product: syz [ 316.513857][ T10] usb 6-1: Manufacturer: syz [ 316.518469][ T10] usb 6-1: SerialNumber: syz [ 316.525265][ T10] usb 6-1: config 0 descriptor?? [ 316.554829][T12275] fuseblk: Bad value for 'fd' [ 316.735566][ T415] usb 6-1: USB disconnect, device number 16 [ 317.385023][T12298] rust_binder: Write failure EINVAL in pid:492 [ 317.439848][T12304] rust_binder: Error while translating object. [ 317.446256][T12304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 317.452538][T12304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 317.462611][T12305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 317.496908][T12311] overlayfs: workdir and upperdir must reside under the same mount [ 317.634587][T12321] netlink: 'syz.5.3996': attribute type 46 has an invalid length. [ 317.643765][T12321] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3996'. [ 318.434209][T12337] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.629151][T12350] overlayfs: failed to clone upperpath [ 318.629234][T12349] overlayfs: failed to clone upperpath [ 318.791916][ T415] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 318.822183][T12375] tmpfs: Bad value for 'huge' [ 318.920159][T12380] overlay: filesystem on ./bus not supported as upperdir [ 318.927430][T12380] overlay: filesystem on ./bus not supported as upperdir [ 318.934951][T12380] overlay: filesystem on ./bus not supported as upperdir [ 318.942952][T12380] overlay: filesystem on ./bus not supported as upperdir [ 318.942960][ T415] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.959844][T12380] overlay: filesystem on ./bus not supported as upperdir [ 318.962044][ T415] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.977492][ T415] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.992317][ T415] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 319.006013][ T415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 319.014445][ T415] usb 6-1: Product: syz [ 319.018713][ T415] usb 6-1: Manufacturer: syz [ 319.023368][ T415] usb 6-1: SerialNumber: syz [ 319.231076][ T415] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 319.523449][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4025'. [ 319.562556][ T36] audit: type=1326 audit(2000000677.825:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12401 comm="syz.0.4027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f246f98ebe9 code=0x0 [ 319.757318][T12400] rust_binder: Read failure Err(EFAULT) in pid:13 [ 319.770189][T12408] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 319.784008][T12408] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 320.652385][T12441] rust_binder: Write failure EFAULT in pid:21 [ 320.683210][T12445] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4044'. [ 320.746216][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4045'. [ 320.793123][T12458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12458 comm=syz.1.4049 [ 321.011606][T12483] IPv6: Can't replace route, no match found [ 321.011604][T12482] /dev/loop0: Can't lookup blockdev [ 321.048047][T12488] overlayfs: failed to clone upperpath [ 321.131948][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 321.271937][ T45] usb 2-1: device descriptor read/64, error -71 [ 321.511930][ T45] usb 2-1: device descriptor read/64, error -71 [ 321.592803][ T415] usb 6-1: USB disconnect, device number 17 [ 321.600380][ T415] usblp0: removed [ 321.760552][T12541] rust_binder: Got transaction with invalid offset. [ 321.760655][T12541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 321.767473][T12541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 321.767656][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 321.811046][T12548] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 321.905542][T12579] rust_binder: 12555 RLIMIT_NICE not set [ 321.908702][T12556] cgroup: fork rejected by pids controller in /syz5 [ 321.931905][ T45] usb 2-1: device descriptor read/64, error -71 [ 322.181930][ T45] usb 2-1: device descriptor read/64, error -71 [ 322.215146][T12628] netlink: 999 bytes leftover after parsing attributes in process `syz.6.4088'. [ 322.226647][T12628] netlink: 999 bytes leftover after parsing attributes in process `syz.6.4088'. [ 322.264880][T12639] overlayfs: failed to clone upperpath [ 322.279432][T12639] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000005' [ 322.301950][ T45] usb usb2-port1: attempt power cycle [ 322.323920][T12646] overlayfs: failed to clone lowerpath [ 322.393926][ T9] rust_binder: 12554: removing orphan mapping 0:24 [ 322.414638][T12659] random: crng reseeded on system resumption [ 322.651918][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 322.673020][ T45] usb 2-1: device descriptor read/8, error -71 [ 322.802999][ T45] usb 2-1: device descriptor read/8, error -71 [ 323.041918][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 323.062873][ T45] usb 2-1: device descriptor read/8, error -71 [ 323.192921][ T45] usb 2-1: device descriptor read/8, error -71 [ 323.302369][ T45] usb usb2-port1: unable to enumerate USB device [ 323.918070][T12710] overlay: filesystem on ./bus not supported as upperdir [ 324.002394][T12717] rust_binder: Error while translating object. [ 324.002453][T12717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 324.008689][T12717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:43 [ 324.078769][T12722] overlayfs: failed to resolve './file1': -2 [ 324.114288][T12722] overlayfs: failed to resolve './file1': -2 [ 324.127087][T12722] overlayfs: failed to resolve './file1': -2 [ 324.179474][ T36] audit: type=1400 audit(2000000683.435:3637): avc: denied { create } for pid=12724 comm="syz.0.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 324.181255][T12725] 9pnet_fd: Insufficient options for proto=fd [ 324.298587][T12742] fuse: Unknown parameter 'fd-0x0000000000000006' [ 324.671082][T12751] overlayfs: failed to clone upperpath [ 324.843917][ T36] audit: type=1400 audit(2000000684.105:3638): avc: denied { remount } for pid=12753 comm="syz.1.4125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 325.281749][T12785] rtc_cmos 00:00: Alarms can be up to one day in the future [ 325.496685][ T36] audit: type=1400 audit(2000000684.755:3639): avc: denied { read } for pid=12791 comm="syz.5.4139" path="socket:[49068]" dev="sockfs" ino=49068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 325.768089][T12798] /dev/loop0: Can't lookup blockdev [ 326.341220][ T36] audit: type=1400 audit(2000000685.595:3640): avc: denied { connect } for pid=12811 comm="syz.5.4146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 326.371904][ T10] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 326.471293][ T36] audit: type=1400 audit(2000000685.725:3641): avc: denied { setopt } for pid=12811 comm="syz.5.4146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 326.511897][ T10] usb 2-1: device descriptor read/64, error -71 [ 326.583540][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4152'. [ 326.593416][T12830] 9pnet_fd: Insufficient options for proto=fd [ 326.676873][T12840] tipc: Enabling of bearer rejected, media not registered [ 326.702120][ T36] audit: type=1400 audit(2000000685.965:3642): avc: denied { append } for pid=12847 comm="syz.5.4159" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 326.761915][ T10] usb 2-1: device descriptor read/64, error -71 [ 327.001908][ T10] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 327.131920][ T10] usb 2-1: device descriptor read/64, error -71 [ 327.371941][ T10] usb 2-1: device descriptor read/64, error -71 [ 327.471903][ T330] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 327.482032][ T10] usb usb2-port1: attempt power cycle [ 327.621896][ T330] usb 6-1: Using ep0 maxpacket: 16 [ 327.628213][ T330] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 327.636962][ T330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.647109][ T330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.657351][ T330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.666558][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.674649][ T330] usb 6-1: Product: syz [ 327.678818][ T330] usb 6-1: Manufacturer: syz [ 327.683434][ T330] usb 6-1: SerialNumber: syz [ 327.821921][ T10] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 327.842970][ T10] usb 2-1: device descriptor read/8, error -71 [ 327.973000][ T10] usb 2-1: device descriptor read/8, error -71 [ 328.089911][ T330] usb 6-1: 0:2 : does not exist [ 328.211893][ T10] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 328.232807][ T10] usb 2-1: device descriptor read/8, error -71 [ 328.363090][ T10] usb 2-1: device descriptor read/8, error -71 [ 328.413650][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.423017][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.432193][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.441414][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.450642][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.459771][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.468910][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.478132][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 328.482041][ T10] usb usb2-port1: unable to enumerate USB device [ 328.487259][T12875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4167'. [ 329.310237][T12911] input: syz1 as /devices/virtual/input/input18 [ 329.374318][T12919] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 329.388750][ T36] audit: type=1400 audit(2000000688.645:3643): avc: denied { read } for pid=12920 comm="syz.1.4183" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.390465][T12919] overlayfs: missing 'lowerdir' [ 329.441901][ T36] audit: type=1400 audit(2000000688.645:3644): avc: denied { open } for pid=12920 comm="syz.1.4183" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.466707][ T36] audit: type=1400 audit(2000000688.645:3645): avc: denied { ioctl } for pid=12920 comm="syz.1.4183" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.751906][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 329.901902][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 329.907987][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 329.916324][ T10] usb 2-1: config 179 has no interface number 0 [ 329.922638][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 329.933713][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 329.945031][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 23, changing to 8 [ 329.956380][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 329.967812][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.981088][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 329.990159][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.999069][T12927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.424161][ T10] usb 2-1: USB disconnect, device number 18 [ 330.430132][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 330.430173][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 330.503123][T12980] overlayfs: missing 'lowerdir' [ 331.046475][T13000] 9pnet_fd: Insufficient options for proto=fd [ 331.083670][ T330] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 331.097635][ T330] usb 6-1: USB disconnect, device number 18 [ 331.106477][T13004] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 331.108556][T11497] udevd[11497]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 331.150408][ T36] audit: type=1400 audit(2000000690.405:3646): avc: denied { create } for pid=13001 comm="syz.1.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 331.269347][ T36] audit: type=1400 audit(2000000690.525:3647): avc: denied { setattr } for pid=13028 comm="syz.6.4222" name="/" dev="configfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.378716][T13032] rust_binder: 649: no such ref 4294967292 [ 331.571952][ T330] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 331.595425][T13060] rust_binder: Fixups oob 164 166 363 196 [ 331.595456][T13060] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 331.607895][T13060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.625012][T13060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:657 [ 331.755530][ T330] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 331.784440][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.785019][T13062] fuse: Unknown parameter '' [ 331.820070][ T330] usb 2-1: Product: syz [ 331.827723][ T330] usb 2-1: Manufacturer: syz [ 331.843684][ T330] usb 2-1: SerialNumber: syz [ 331.857090][ T330] usb 2-1: config 0 descriptor?? [ 332.590390][T13096] overlayfs: failed to clone upperpath [ 333.069659][ T330] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 333.079738][ T330] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 333.090215][ T330] asix 2-1:0.0: probe with driver asix failed with error -71 [ 333.099151][ T330] usb 2-1: USB disconnect, device number 19 [ 333.583212][T13120] PM: Enabling pm_trace changes system date and time during resume. [ 333.583212][T13120] PM: Correct system time has to be restored manually after resume. [ 333.613178][T13125] __nla_validate_parse: 28 callbacks suppressed [ 333.613198][T13125] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4253'. [ 333.641257][T13127] netlink: 'syz.1.4254': attribute type 3 has an invalid length. [ 333.649049][T13127] netlink: 944 bytes leftover after parsing attributes in process `syz.1.4254'. [ 333.658547][T13127] __vm_enough_memory: pid: 13127, comm: syz.1.4254, bytes: 18014402804453376 not enough memory for the allocation [ 333.957893][ T36] audit: type=1400 audit(2000000693.215:3648): avc: denied { append } for pid=13139 comm="syz.5.4258" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 334.021640][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.021672][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.022835][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 334.041158][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.041187][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.055398][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.055428][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.059126][T13154] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0 [ 334.069340][T13154] rust_binder: Error while translating object. [ 334.077181][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.083550][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.089082][T13154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.096455][T13154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:695 [ 334.106994][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.117050][T13156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 334.124618][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.130246][T13159] tmpfs: Bad value for 'huge' [ 334.145172][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.145201][T13149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.061997][ T8300] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 336.061997][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 350.942006][ T37] INFO: task syz.4.2817:8754 blocked for more than 122 seconds. [ 350.949662][ T37] Not tainted syzkaller #0 [ 350.954662][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.963367][ T37] task:syz.4.2817 state:D stack:0 pid:8754 tgid:8753 ppid:6187 flags:0x00004004 [ 350.973558][ T37] Call Trace: [ 350.976847][ T37] [ 350.979791][ T37] __schedule+0x1322/0x1df0 [ 350.984354][ T37] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 350.989398][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 350.995414][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 350.995462][ T36] audit: type=1400 audit(2000000710.255:3649): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[436]" dev="pipefs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 351.001239][ T37] schedule+0xc6/0x240 [ 351.028148][ T37] super_lock+0x150/0x300 [ 351.032531][ T37] ? user_get_super+0x350/0x350 [ 351.037423][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 351.043202][ T37] ? __kasan_check_write+0x18/0x20 [ 351.048346][ T37] iterate_supers+0x8a/0x560 [ 351.053198][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 351.058417][ T37] ? security_quotactl+0x3b/0xf0 [ 351.063554][ T37] __se_sys_quotactl+0x308/0x7d0 [ 351.068519][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 351.073742][ T37] ? __kasan_check_write+0x18/0x20 [ 351.078881][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 351.084431][ T37] ? __kasan_check_read+0x15/0x20 [ 351.089491][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 351.095791][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 351.100668][ T37] x64_sys_call+0x2818/0x2ee0 [ 351.105561][ T37] do_syscall_64+0x58/0xf0 [ 351.110002][ T37] ? clear_bhb_loop+0x50/0xa0 [ 351.114925][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.120838][ T37] RIP: 0033:0x7f3a3a38ebe9 [ 351.125499][ T37] RSP: 002b:00007f3a3b1b3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 351.141885][ T37] RAX: ffffffffffffffda RBX: 00007f3a3a5b5fa0 RCX: 00007f3a3a38ebe9 [ 351.170574][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 351.178640][ T37] RBP: 00007f3a3a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.186659][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.194682][ T37] R13: 00007f3a3a5b6038 R14: 00007f3a3a5b5fa0 R15: 00007ffc9fb60c48 [ 351.202712][ T37] [ 351.220814][ T37] NMI backtrace for cpu 1 [ 351.220834][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 351.220866][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.220881][ T37] Call Trace: [ 351.220889][ T37] [ 351.220899][ T37] __dump_stack+0x21/0x30 [ 351.220934][ T37] dump_stack_lvl+0x10c/0x190 [ 351.220964][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 351.220998][ T37] dump_stack+0x19/0x20 [ 351.221026][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 351.221055][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 351.221084][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 351.221113][ T37] ? sched_show_task+0x379/0x560 [ 351.221142][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 351.221168][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.221198][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.221228][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 351.221258][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 351.221288][ T37] watchdog+0xd8f/0xed0 [ 351.221328][ T37] ? __cfi_watchdog+0x10/0x10 [ 351.221358][ T37] ? __kasan_check_read+0x15/0x20 [ 351.221391][ T37] ? __kthread_parkme+0x138/0x180 [ 351.221413][ T37] ? schedule+0xc6/0x240 [ 351.221445][ T37] kthread+0x2c7/0x370 [ 351.221467][ T37] ? __cfi_watchdog+0x10/0x10 [ 351.221498][ T37] ? __cfi_kthread+0x10/0x10 [ 351.221521][ T37] ret_from_fork+0x67/0xa0 [ 351.221553][ T37] ? __cfi_kthread+0x10/0x10 [ 351.221577][ T37] ret_from_fork_asm+0x1a/0x30 [ 351.221613][ T37] [ 351.221623][ T37] Sending NMI from CPU 1 to CPUs 0: [ 351.380744][ C0] NMI backtrace for cpu 0 [ 351.380759][ C0] CPU: 0 UID: 0 PID: 13133 Comm: syz.1.4256 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 351.380781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.380791][ C0] RIP: 0010:__rcu_read_lock+0x9/0x60 [ 351.380817][ C0] Code: 5d c0 9a ff e9 e5 fb ff ff 0f 1f 84 00 00 00 00 00 b8 16 ec 06 ae 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 53 <65> 48 8b 1c 25 00 eb 04 00 48 81 c3 c4 04 00 00 48 89 d8 48 c1 e8 [ 351.380831][ C0] RSP: 0018:ffffc9000185f868 EFLAGS: 00000246 [ 351.380845][ C0] RAX: 0000000000000200 RBX: 0000000000000000 RCX: ffff888116618000 [ 351.380857][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.380866][ C0] RBP: ffffc9000185f870 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 351.380890][ C0] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: ffff888132add220 [ 351.380901][ C0] R13: ffffea0005024640 R14: 000000000000079f R15: dffffc0000000000 [ 351.380912][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 351.380924][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.380935][ C0] CR2: 00005567fa6c3048 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 351.380948][ C0] Call Trace: [ 351.380954][ C0] [ 351.380961][ C0] vfree+0x2a0/0x580 [ 351.380980][ C0] ? __cfi_vfree+0x10/0x10 [ 351.380999][ C0] ? __cfi_kcov_close+0x10/0x10 [ 351.381018][ C0] kcov_close+0x2c/0x70 [ 351.381036][ C0] __fput+0x1fb/0xa00 [ 351.381060][ C0] ? call_rcu+0x14/0x20 [ 351.381073][ C0] ____fput+0x20/0x30 [ 351.381089][ C0] task_work_run+0x1e3/0x250 [ 351.381108][ C0] ? __cfi_task_work_run+0x10/0x10 [ 351.381125][ C0] ? free_nsproxy+0x223/0x290 [ 351.381145][ C0] do_exit+0x9bc/0x2630 [ 351.381163][ C0] ? __sched_text_start+0x10/0x10 [ 351.381185][ C0] ? __cfi_do_exit+0x10/0x10 [ 351.381202][ C0] ? __kasan_check_write+0x18/0x20 [ 351.381223][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 351.381242][ C0] ? __kasan_check_read+0x15/0x20 [ 351.381262][ C0] ? cgroup_update_frozen+0x160/0x990 [ 351.381277][ C0] do_group_exit+0x22a/0x300 [ 351.381295][ C0] ? cgroup_leave_frozen+0x16c/0x2b0 [ 351.381310][ C0] get_signal+0x139d/0x14f0 [ 351.381331][ C0] arch_do_signal_or_restart+0x96/0x720 [ 351.381353][ C0] ? common_nsleep+0x93/0xb0 [ 351.381366][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 351.381388][ C0] ? __se_sys_clock_nanosleep+0x300/0x390 [ 351.381410][ C0] ? __kasan_check_read+0x15/0x20 [ 351.381430][ C0] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 351.381467][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 351.381484][ C0] do_syscall_64+0x64/0xf0 [ 351.381504][ C0] ? clear_bhb_loop+0x50/0xa0 [ 351.381521][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.381536][ C0] RIP: 0033:0x7f5705fc14a5 [ 351.381549][ C0] Code: Unable to access opcode bytes at 0x7f5705fc147b. [ 351.381558][ C0] RSP: 002b:00007f5706e58f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 351.381573][ C0] RAX: fffffffffffffdfc RBX: 00007f57061b5fa0 RCX: 00007f5705fc14a5 [ 351.381585][ C0] RDX: 00007f5706e58fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.381595][ C0] RBP: 00007f5706011e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.381605][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 351.381615][ C0] R13: 00007f57061b6038 R14: 00007f57061b5fa0 R15: 00007ffd646a8bb8 [ 351.381629][ C0] [ 351.845031][ T12] bridge_slave_1: left allmulticast mode [ 351.850730][ T12] bridge_slave_1: left promiscuous mode [ 351.856652][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.864460][ T12] $: left allmulticast mode [ 351.869404][ T12] $: left promiscuous mode [ 351.874421][ T12] bridge0: port 1($) entered disabled state [ 351.881425][ T12] bridge_slave_1: left allmulticast mode [ 351.887193][ T12] bridge_slave_1: left promiscuous mode [ 351.892873][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.900396][ T12] bridge_slave_0: left allmulticast mode [ 351.906149][ T12] bridge_slave_0: left promiscuous mode [ 351.911773][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.948117][ T12] bridge0 (unregistering): left allmulticast mode [ 352.095363][ T12] veth1_macvtap: left promiscuous mode [ 352.100869][ T12] veth0_vlan: left promiscuous mode [ 352.106523][ T12] veth1_macvtap: left promiscuous mode [ 352.112069][ T12] veth0_vlan: left promiscuous mode [ 352.593220][ T12] bridge_slave_1: left allmulticast mode [ 352.598969][ T12] bridge_slave_1: left promiscuous mode [ 352.604640][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.612292][ T12] bridge_slave_0: left allmulticast mode [ 352.617940][ T12] bridge_slave_0: left promiscuous mode [ 352.623596][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.744858][ T12] tipc: Left network mode [ 352.750626][ T12] veth1_macvtap: left promiscuous mode [ 352.756201][ T12] veth0_vlan: left promiscuous mode [ 352.761742][ T12] veth1_macvtap: left promiscuous mode