last executing test programs: 1m15.133590646s ago: executing program 2 (id=445): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000140)={&(0x7f0000000080)="b7d2a83b4ab022f67ea527f720620b8fe4729cebb86dddb43bd7ad9ea67ca607257fe9cea5e2638d7314efd55ed73491df6ad057c19f79d465753e296c98528403ad0f9d60e775222629679146a52e76d4c0f06dba922676bb32ac073717e9ca5713e24280ab67c820553f03f3883d280a174f21bf4d6d92e247f0355369516f60ec67e8b09b42532be56c87083f16aac98ce96938c2664af385e2cdce5e5ce14cd2e952cbc34ed880b78c30a4d5d6", 0xaf}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 1m14.068655131s ago: executing program 2 (id=455): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, &(0x7f0000000040)='net/psched\x00') mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 1m14.043959573s ago: executing program 2 (id=457): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) write$evdev(r0, &(0x7f00000005c0)=[{{}, 0x11, 0xfff8, 0x815}], 0x18) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2020001) r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) memfd_secret(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read$FUSE(r6, 0x0, 0x88fa0b86) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0b111"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500030000", 0x39}], 0x1) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r11, &(0x7f00000090c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/17, 0x11}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close_range(r1, 0xffffffffffffffff, 0x0) 1m13.8391937s ago: executing program 2 (id=461): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1a) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x2b, 0x1000, 0xffffffff82812029, 0x8, 0x4, 0x8, 0x3ff, 0x0, 0x0, 0x2, 0x4}}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x39800c41, 0x0, 0x0, 0x401, 0x3, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x90, 0x0, 0xfffffffffffffffb, {0x6, 0x1000, 0x6, 0x1, 0x2, 0xe2, {0x2, 0x63, 0x4, 0x0, 0xfffffffd, 0xfffffffffffffd54, 0x1, 0x3, 0x2, 0x4000, 0x5, r7, r8, 0xfffffffe, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2885003, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB="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"]) rmdir(&(0x7f0000000040)='./file1\x00') mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10) ptrace(0x10, r9) ptrace$poke(0x4, r9, &(0x7f0000001040), 0x282d) 1m13.029831414s ago: executing program 2 (id=479): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x4207, r1) ptrace$pokeuser(0x6, r1, 0x1, 0x5) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 1m12.818601151s ago: executing program 2 (id=483): mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x800, 0x0) 1m12.818372271s ago: executing program 32 (id=483): mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x800, 0x0) 54.097146467s ago: executing program 4 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x34}}, 0x40055) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008080}, 0x44000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x41, 0x2, 0x8, 0x8, @local, @local, 0x7, 0x7800, 0xf858, 0xf}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x70}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r5, 0x200, 0xfffffff7, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x62f5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3007}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x33827e1e54666e8e}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf8, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0xf8}}, 0x20040801) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, 0x0, 0x4000800) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendfile(r6, r0, &(0x7f0000000ac0)=0xfd, 0xffffffff) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000b00)='^.+\xa4^\x00', &(0x7f0000000b40)="df03fe214eea4951b2dfc9eff97ef65f790108de81e44b6b30dc8b0a946a25e5980bb55488bde34c117f624d0a0486f0a6dd43be725353b0cda67db9d4b70a8675bcb7fbc09763caa97009c11c232c546d91658a50535f872719ae8dcbe0957f7d5d4e75b71f8425846f4f15317ca62942324e11276827f36936f646cddc59ef", 0x80) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xf285) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xac, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x54b}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x93}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x880}, 0x48c5) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000001140)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e00)={0x2d8, 0x12, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0xf, 0x9a, 0x0, {0x4e23, 0x4e22, [0x3, 0x401, 0x9, 0x1], [0x0, 0x5, 0x4, 0x3], 0x0, [0x4, 0x1]}, 0x6, 0xc91}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "7ff778ea7258586378bddcc6c8b724ede3"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "b0f87de89f0354ebc5216494a9972f45661305248832957d24d418c139f1268488d8ceb62be05bac5df037702963cc8a4bd00e527fe2a4244205066fdeb1ecc8e9cf594559d42bfda813a91a63dc839e101f71"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "ddf2fe2547ffe08d4ff28e73672d5b58de3ce2c80589671a3175c00792394e3a1a67c44baa6e854de32ef19507a765d624a55296d0be63f2e4c6b23627554893f06d86261da0439307f3ffb6514ccfdec8f6805e509de6c42a3a32725bb3bf252ac07fbec8fb6b9a2315e59a842b2d489f0f8a4d83082c003587371481dd656607b0ad60b4e0ce6b5f4712ff3ba8553d1d06720a2f63685cdd24b9a805a1a0215a188981c259d7d5160efdab5d00e2366ccac391d249cf82669d815cfbaa6eeefec20e1732f96f66e8b51f199873a6fd20eb18b9f5ea80043a806d0d55317a4afa6900"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "7cca4d8a227f69e6fcebfd5393b86b41522e2ade892bcbb5f20beccc5106dd24af5133299f8342f3273fdbb954e5a92b30510b1cc6fc44debd4ffc73866a7ceebaf8eb2bcc60d4c5adad803609334a27181e8487fa668633a335c4b57d90ca9b5ddb4a63c675c83ec204b8602c36606a70d3b755f22f4b292e315f56610d3f610678fe303043d69616e3c72b6751ceab239d0fa20cd91b7ab0b9"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "c5854b2ac6bcab8406dae46d52a1f48fbca9fb26c47017bf7db32420870431f23f98bd29241219c77e663e5ca7a72b4d1f434ee5db29"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "2192802f7c1604381f2af71e64a9806511870492c707a4591247930578c15e8832155876839739388b42fa427354732e0528260077429304af0f62c42ea7b559a644b0e929f2327ec94f4d2f499ca21c12"}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8880) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r11, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd3, 0x2e}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40041) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000012c0)={0x8000000000000001, 0x5, 0x1, 0xb88, 0x1, [0x6, 0x3, 0x0, 0xfffffc00]}) r12 = socket$netlink(0x10, 0x3, 0xf) writev(r12, &(0x7f0000001400)=[{&(0x7f0000001300)="d0f76fa4e342736e561b8342173ee5eeb163e1131e567c24947877416cb8558dc4fc0eb9f462c632dff2246a3455d297507cdb4f576c3a3bd3634e30b15f8d7c877f0daf9d7afa19a1a09deae5b6a5040101e1f529cbd7096abe533a6af9ad0d39", 0x61}, {&(0x7f0000001380)="300beadb989769fadc4d1b21409e1c8e16a1f791fb07126fb41964345e73163b986f1cc48d24bb115119bb46c8ed7740cb663f9f3364cf45ad35e422e125b4c0e052bd0e68968b96eceede425dd4532e9f796e", 0x53}], 0x2) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r13, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x800) 54.071358399s ago: executing program 4 (id=761): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) (async) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f72f55791503078303030383030303030303030303030302c80fbb0fe060071b1ad0b5a8b45a3e863a0ae4f77d28dd75abf1ae3c0342966bbafb794b28fd1b669637a711bf625bac662de9c6552700a6fb4155db39089cef2f5412af19c02ddd700381efc5ea34a94805f5b75d947a895b53176e31b03aeb268aaa1cb08483d8aa6f3a294480c63720871b5d37120747615287b062557abb349c9af955c6637cb649eb6216c80446f961e2fb8d5f5134c32794b0d664c04b755602a3599dc806b8486aff7f44536c279b7"]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f72f55791503078303030383030303030303030303030302c80fbb0fe060071b1ad0b5a8b45a3e863a0ae4f77d28dd75abf1ae3c0342966bbafb794b28fd1b669637a711bf625bac662de9c6552700a6fb4155db39089cef2f5412af19c02ddd700381efc5ea34a94805f5b75d947a895b53176e31b03aeb268aaa1cb08483d8aa6f3a294480c63720871b5d37120747615287b062557abb349c9af955c6637cb649eb6216c80446f961e2fb8d5f5134c32794b0d664c04b755602a3599dc806b8486aff7f44536c279b7"]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt(0xffffffffffffffff, 0x90, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002600)={0x2020}, 0x2020) 52.891726724s ago: executing program 4 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x40) ptrace$getregset(0x4205, r3, 0x1, 0x0) syz_clone(0x18139411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) unshare(0x62040200) close_range(r0, 0xffffffffffffffff, 0x0) 52.076776649s ago: executing program 4 (id=781): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x20000000) r1 = syz_clone(0x40000, &(0x7f0000000180)="7c776cb415f12971986598823c04eca3396cc5494115f54a469af3d21bfc61df61f662e86e05d8279f6fcd97b690498b2c0a8f90ceaa6bbfe013735a61d67f06cab057e72eaf3548f99bbb24f6b67d142d44ec4496d290b84c3b0fa490b3f3168c6f3be505e28c59078fd95288cda14b1007a3f3de89254305f5cad67410d84ec843c53b51c6d34140dabce6", 0x8c, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000240)="5aad388fc84350bb02ffd61311e6cfb8fb4bf146d773ec0e90054a1790fb5e07184fb1f88e4de4e655ca6eba5a9a5beded8f76aeaee2e8bd247d656371b843595308544c2d13827a07a6b4568656fd4333a4753e77985de1c6a9bbf16251cb1856b7a523c5c84dd088bf6eec0d7ad0a19dcc5ee883dadd1bfb7e537723353d151f009eb0218bec58208f7b6c3d1720657e2c01c2226732af5802db5acb1299af361d") r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/nf_conntrack\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 51.994134005s ago: executing program 4 (id=782): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x5, 0x1}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)=@x86={0xff, 0x3e, 0xb2, 0x0, 0x7, 0x3, 0x2a, 0xc, 0x27, 0x1, 0x7, 0x0, 0x0, 0x6, 0x5, 0x7, 0x8, 0x19, 0x8, '\x00', 0x7}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 51.81360577s ago: executing program 4 (id=787): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x8, 0x0) poll(&(0x7f0000002980)=[{r2, 0x3001}, {r1, 0x4004}], 0x2, 0x6) ioprio_set$pid(0x1, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 51.747761825s ago: executing program 33 (id=787): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x8, 0x0) poll(&(0x7f0000002980)=[{r2, 0x3001}, {r1, 0x4004}], 0x2, 0x6) ioprio_set$pid(0x1, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 45.370836755s ago: executing program 1 (id=884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000040)) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x881, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.195943448s ago: executing program 1 (id=885): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0001"], 0x20}}, 0x40010) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') read$FUSE(r4, &(0x7f00000043c0)={0x2020}, 0x2020) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x1) execveat$binfmt(r5, 0x0, 0x0, &(0x7f0000000400), 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000780)={{r1}, r6, 0x12, @inherit={0x78, &(0x7f0000000080)={0x1, 0x6, 0xf79, 0x8000000000000000, {0x31, 0xf791, 0x66435af5, 0x6b1, 0x5}, [0x2, 0x8, 0x80, 0x6581, 0x65b, 0xa7]}}, @subvolid}) openat(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x60) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 45.135363253s ago: executing program 1 (id=886): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) unshare(0x22020600) (async) r2 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r5, 0x401, 0x2) (async) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) read$eventfd(r4, &(0x7f0000000340), 0x8) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 45.065814349s ago: executing program 1 (id=887): prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r4 = openat(0xffffffffffffff9c, 0x0, 0x220843, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)=0x0) ptrace$getregs(0xe, r6, 0x7, &(0x7f00000001c0)=""/47) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)="341500001300031868090707000000e5b6490fdd02000000000000001f9401333755aaee7b1d58b9a64411f4bbf462", 0x2f}], 0x1) rename(&(0x7f0000000280)='./file2\x00', &(0x7f0000000340)='./file2\x00') syz_clone(0x18040, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000002000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) getdents64(r7, &(0x7f0000000080)=""/101, 0x1d) getdents(r7, 0x0, 0x3b) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0x7, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 44.941938989s ago: executing program 1 (id=888): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x1f972000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x3, 0x4) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 44.755808074s ago: executing program 1 (id=893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)="e904a3c96798408d316d301ea49255b044576c73ccada0bc524ac3a8bfaee8633814abcaf58fd9aa42", 0x29, r0}, 0x68) 44.636131433s ago: executing program 34 (id=893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)="e904a3c96798408d316d301ea49255b044576c73ccada0bc524ac3a8bfaee8633814abcaf58fd9aa42", 0x29, r0}, 0x68) 41.905266022s ago: executing program 3 (id=938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="4d01000080000000000100e50414090b009200ff03000000005ee400040c1e5fcc2eae7fc0dace95ed5a0765f19f321aa80f0161", 0x34, 0x48080, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) futex_waitv(&(0x7f0000000ec0)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0xffffffffffffffff) r5 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000) msync(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "03ce000000000500", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.29418243s ago: executing program 6 (id=960): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x336, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x89, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x5, 'O'}, @global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) 39.719498246s ago: executing program 0 (id=964): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) io_setup(0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500246c7f540ba"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') unshare(0x20000400) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) listen(r6, 0x9) mount$overlay(0x0, &(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r7) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = syz_open_procfs(r3, &(0x7f0000000140)='net/packet\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup3(r8, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) 39.520644222s ago: executing program 6 (id=965): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) ioctl$RTC_ALM_SET(r2, 0x40187014, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f76d51f", 0x2a}], 0x1}, 0x4b00) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="e33a952de1c98e2a1c5b81d70c61c20278a72c4b430761acabe4e6b6f530affee58fab39e6109299fe513c3087cf9cb5572c12e6d199544685b43fae640bebb8767fbba96a9d84c3ae4566e30ce8cf610bc70825b19d0e655916f3f74cc35091a930f1403fa1751ae00a5ef6ec5f72c57ede831cdf6be8836c9ebae13bd8c9c1d39f0fc6fdbb86459cf5d95c61", 0x8d}, {&(0x7f00000002c0)="1428de705b4aba3082d9d28a3209f713f0987c9e0a5926de2136b6134f173811f8abe7a43decc69b8b870bed1badc5c008aa7e754527ca2558da11a5d6f444029914ce7fa31e27a1cc1c5deac707d84d989ad395d5d3d510bd7fa0d16d12a733b9458e2bbb0dcbd7623017255b1a0caaba0a18c5ecda5de051e909c08cda5a1ba404a432f2d71664b6985490e9cfdc8941f10fac5fe5642e1e06c41c2d4cfb86a9f1615dfd7e7b524881ba775c385dc59c4e7ad4b08d40e36ac05f4cd97db1771863079c680dd37e4dd8d8", 0xcb}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000003c0)="46f6ea9f30fe0422ebdda0f618636419925bc7ee4c7f676af31e6b35def4b9090bc02b064023b961c7693ae38c0a89c79dd0d17fec22751a8010ea5d75eae1e124be3bc82958f53f5bf0ce", 0x4b}, {&(0x7f0000000040)="bd85", 0x2}, {&(0x7f0000004600)="4db40f53f5ecc0f7fc5426f7ecf9fc1f964a5d1ef3c901ff78b6a919b6bd630f4ae995e64aa052f4940b85e1d5e49ab78c7dc9d33c027450d11bd45e5fbbe72fe2fcdd86513b31c63e1b9ba5f032701b54cee8fcc36c5bb1d9be77dde1e6b8c4dc2e16090c75a7410e30bc16a4001f613b1df5c1ab51e55d5f3f27a3c3d48f61de45f6b96155ee19ff5abd04baec1368e1cc473bde97073d627519f02eec70c575e46ebdb5b31c2158dc3ed5b812f3664fba9fba6737e17ed7524db811fb4bff55da6bf2ce6e1fc64e969ecfcfbfd038f8b0746579af72b30550848d946f8913320a013fd2e2469edc26fe9a295c6a3d2896459f8af628492f0a3da0af40bcbce3b2cdbc10dfb755fa15a56cc64f7e105928bd238132d8ef3d7558341d80a521fdf9a14cfd4d09a23ad97fbe5208aa55554d20752d48417ba5788695c0d9937d08cf40da82cdd6d6f8f9a3bf0d88067ba0ffdc497f2778a554b5a57205ceb4e909dbf76b5f232b1273039672aa2b4c348f84c840cbefe284d42617fb80aeffa0e4c93f335c067ce44e8f8a77a34e952ba1e72d42eff44ecadcfd30fe0406fb917d91281e394bc6f26b2838dfd690a80c39e28a6dcb3d9b2735eea18eed24ba6fa91106e129a552df81e57d28098d2f1c327ecefbe47337de8e1450a5df033f5dadc892c7336299ce6e570415f9d498380b2f93f32eed69cfd1c656e51fb931dec710c5284dfe7bce9cf4b989e6a52a5cede2b7f0a7ee7fad6d5d79bffe21176d5dd98f2817a09d0ecd322e613fdeabac6221b302136787ec2f4563465b22d92a4178c23af53e329ff0905a67b97f145ba760c47f35729baff6fab7284f3f3c5430b052d1363f1f74fa7aad916c02ed4b3366faeb356123a4c81c1c4c2f0d3a971d246b12e01ee4768f5a08ecdf1b658c1dae9c7b35d1574e0022eeea328b7e78277e6e7e7e21ba8de578a3203174214f60668eec8a94fda0b0e2061ac68e55843b50ec97e2727eaa57f105458e0d85f58c9ed3b2330f02b11fa98841fd98ee0e6128373051d38c37394b180b91f36b202af504715f3ba0fc44884733026a9a0e1c79ec48a74a0fc1ac0f9b0ef7131f819867cb2d5f2e7d5321e9acca8432a57f3658d4855ec7b4ce440c2d487ecf5a0f1ed13e09d78a53a25e52c0c3d0c9f2deb6646185e5590564122ddf8ca3c56002c087184d311e8762a92e3009a7763cf80e751dd55fedc795c59c667d78ce50957cedd4d4030e2f5ce952afca111124eb44d4b2f8383e045e7d48da6e54da6390e43e99985a229989ef15f0c9c672996e5b5e881f490ca74f47a3e2fb7239071f7803c8eda5f6c60e428aeaa9eee55d2a2b57d1ee0fb6a770a34654b14513c2e4090390b887c4f753d06fec85f48ead6abecbd130b8aff35040aa202c8f93c38ff68f6b27259f9d6934694a1c128c84e9b252133ebc252d0b247c681ec3aa77d3f1a7e7b886427244b04d9e8932b282c9939f48f5d2b10efe389f12b557b44ed8fd0454b9f995a543e294b10c4cbe2d07d8b099726b7158c2fa6368b9986901fd0e4a588f724e29d72b6913ff45d5a3281286af654baced235663b717afd2d229dac566c4c4de9a35f33e5b659f8f3bad6f0c16eb74a11dfc8e18b4efa9bdbe860cf7d7c65fc02a33a3e18f36902e04a508a7798fd68dc189194a7daa48dbce41cf20ddbe92e4bc9e4afecc323bae8e37cfcbd5fe2dc56ac189f01c56abdc3090912542074f335a6f8cbf9383be80aae009741671d66b3b86aed95ccca1591aca185b460701108000732e9453b70e0beb0e640de948df2c83e1d88a7b9133dbe550413e9ed3b9c5deed2a962eac192eb223dd3fc92a04ecca36b5922c96b8a70e6767517b04d5622da7c0e00f4e45c2b0013535a68d85ccdf8efba042ffb8df57fcdc21f8ad0b6d9d4a42966a2332781e77fb92ffda8210d5e7c7770b1365563c8fdeb30e93c8000f0d032e3c4900080982af4bc48b78acde412087da35fa9f597fad15ed76c8447c4f4fdc84b89b9c75ea6e7dbc1f64253d61826e33fbf030c52c20f4aaae5ef06bb74a54252184d3dcb6ecf53cab5a7a813ab07c44008c440a25a49fd90d5c21541438bb2e68cfc77565441d7a455391d8b8672de85e22118f1fa30d70946ff52b9c9ea2223f3bc77529a17a8f13a95f4597562a068dbe2d84efd652b3df0fee6f0ecc817860ee5e063c222f4e547a2a682441dcdc426ffd38b6b495c68e2158bd39233b87bb442266da39970a2bf826a3d7c8ec6fa212d5b8406c5c5a452bef0148d818b3cf84a291aa101ade1dda169119b2605a149a0569c55eb318424dc7c0238550aabd952eeadbd8d386c0a1c738ae20b985f0982d4f0ed769445a31bb8f73f22dd4986201770a1820815fcf8a3edfb70874eeba99abbf42fdf00b483b50a67582b3089f18434bdb8540579b8247ce6e6103f8f3aeaea21cb1b91b468f6ec096161cd43c39b3173c90147a2a59b06cc82864ec2656d46d3c0a7c3b708734b9479dbe1662c719369833e4fe55f80e751a49eafe0d7c979506600c74d047a944638866b51bf6fd4fc4d57f784ad077602b222c55917fef2c7e297f81afe9b727b8c59a5cec5007accc266c32c9a8069695f0dde0d50e3bc12040991a29ec99d26b1ca37daefde31d4d56a43a72afd1d9d253a9e6ab69f2d3e9afed98e2b904bcafe10d73434d29460528de1d2e17fd76b6b2e76265a496512c54d85b23cf6ef88e2f07cbb2492e85437df6ca26104a8b14352d8d78bafe542c11cd8ccc6cd48076212ca666d811a65142d8721b1e22171e8095195fdba821feea190957ab8f4afcaaab5849fc305eeee13c32c825d08e48704b167396b8612d2906dcbea6a8ff494de000889b4042eaf92ae160ade9b6277a99af4628f33a2b43e142eec0af59c9406a6ed1ea33838b430c66ef51825ac0a888f2fa261ca1ef9de2dc9a9fe4b01b598afc1d07e4344af96ed31287a21e54a024bd6e7b6fabba3dbadb27f545a538b82f18a84b38dd3bb054427a6e84f0fc72a962ab33ecba6f0136b328e2bd9d5b4bb49845b2a61402380367c24add45988c237c717b03dedccbb60075ec5021b13d6d2b85cb7ecfe8377fd082c6a637e4fed219a06b899be29dc322ba285922a4c705b12f0a640e6e0a2ea8a35e8586e0d036c7accf9e70596a842639dc41a868c93e2a4749b680f585abbbd09059af04829b4385990b08c7323b6eee5899c3bb1d09ad17eba0d182ae88d566fc866008bd3b9b9a345a8340da04731db0545e39db8338c88973cfbf6b9b7dc4358f1ebacd385e1d808d5034455f52f55e121870dd7cc42bae3d583104180d364b0cadd88045b152f175213ec634de5b4640e9bb13b6878487b108de9e3b10d3366a5fef23b63d953fe13f3e4725258a24b2e8786228c559a882b18fef7a8184a043e8c087a1461735de243d82b9b2517972960b33e90fcd7928d00448fd80a87c82e6118f1e433ac18c9f108251a8bd1c981253887c80178488d7f187d836d18b022c764eaeb01b22dd4ebd5ca31161a71a3568ee447a15d516a3983887b33d3753f85a502ba3cfde9be3d5cde1ce8a3f88e8df0c4e4e8db41f4e85befd627f38e3aef9e9aa8167163fcce2503b55413b7dfc823563a173abdaacc5194d20913fc873dfcef4e21470aa72bad975f32854808bc96625825b4ede7b3171772878c6ec5a89bbf3f05ae4106a8237e1d6b4de4b55fab980ce4c93345f1a68a8948c44fd686455c2fcaf77c2dc4cbfe02ad1838f34a059928827c8c36d824aad15760d7e7390005422eb754a724e72cb152069515e424b84be4efc69281eab55cc3af397c7362ff0578b3d24e20dbf242475ee22bb9f40a7c68e729fc85065c4cc17420c9584fceb27b4043ef8d8273a00198f285d782be6f463c136df86c1c4655c3fedb3c28b6ab5f518b4f26e4f38fd9f8d590535c77bb16f4eae831b549e639530766de6b126efb9164f01ec49e0b78ad85b8876fe9ada8bcc25add711f8dfb3c7c25ecdb8fc0f70121b34174a3f87fdd3e8313c1df93c2ccbf19ff7659445838104850e64a9ab1b6656a6ae6ddf66801289a87892690bdbfbb692190b0d48d33a3f531235541b02a716753a1fdbc545e1a23744e78d8a8522478148e73ca56060a24a01d8b7af08b519f7b2e29da3738926ee500dc580d029ce7b77678001602c162ade87fcd6afc31da7ef528ab0137bdd53daecb674df3d45028149cff85ae04e11df557d3c0670b1dd0f768a4ff0c92a84f8acc245d037b5cde753a9bfa15c78e9e51972fe2a41e674623f7416dfced5f9e7ab9b382e1ee9b93b6ccfe17a21746a94530bb672fbedbe056dfd5c7f2e42c9f663323d7342ed4088c47fb2428c05d1d625afb6fd681ae30a7a225a87cefd2a4c113212e587b5b46c9ffd7cbf51cb428168c1c91bc8aec66dd8341e850c6ae4915cb2375f3ab4dc65abcf5e9e63c082912214d1211ac898e254604e835037c18976d6c8c6dd54dc8f88406d050d55820539caa2fb3094015bbdda65fae0ec6bb0275a13fde7304a682a0a156960e4afaa43fd2065e09450b3583d34e0ab8210e45f564969e423371098e717f511e341a89ce966eca11a91c26273a07bea14ee6b71dea505c9dd3427bd8b015c6e3dbb854dcfadbb1aa90440b368c928f2baba3469d7c0fa936a0420b70cae0a77950c29d80226755301f6785f9145cf9ddd13ab3b1a992911c33e24ca39149e8cc4c7c6e28be641b13bc668c3c498416bea7dfcbd1912773348a0a4cee07e9a7481bfb5b7c7282b9a792403a49d9c0a1856000afd193017c94cca1b0c3cc94ffb795196b74b6b4daf3ca12546625a37f9ec37812cfd9f9d47c89fa9db33131645af0479868547dae2116c26ce0f3e40ed3f919fff76f76dedd08c67ef035de7ff66facf5ad27679538edeb848908a28f3095c42144fd81b1b73ad5bc0a0116f20ff9445397b59f180595e56eb5d2df89848282836276f8833236278ff08d3001e3415c62320e75a1ec09017c461ff8a825d8dc84ace9fd78996216bc0b5c8f63e1c994230408784183b5a57aa681f29e7ca6ff9e04ce163bb55833f4757ec261eafbc692978200adaeed3b4af1a29dec910bc7488275b1df67f2319128266f4b954cf966ebc44545ea8aae019e4bf4c706e696a51eff6471453b590d38617be7f83ea5415b38c2c058852371968bcf891c570b4c9f5beae3befc465a4f8a5e73ccbc25c30e2fa08b82ad21acb36bbe2136ffb15ac986bce8f967e0b244bcf8f0c2fc0fa60c891bf1cb43e659b0e886951e4f756829132b12d30f3f2e3b35502bc0f2461a6e1880a1c014236455de8e69759633a4d1a4d61f2d823a01d347e20536403b4ec89e43d21361ecf8b6929ba21dacb5f6f3208d1c56b33806bd94a79a8f49674784e00f99879a96ba74f4cf23fc15d300d28730ce24639827d4c17e5b2e7d3d63a0c1a2d47cf7ee9e80f169140b177981b84950a4336e376c7fbbfd682dbaa58af7488386e2fb7d7bf62c861ecc7ef36e27c98416d776549490acb1522541855b59c932f256eafdc9eef43ac1c702d0748bc598c5340af3670e90258872a3d3a11d1b9c87f76435a2e5058cea1fa4ad02f63d225b2dcd5c30548b49a23a8c156e8e50d3abd1491df5a0be6d04aa1655d84e3a27aafa1eedfe1edce553aede2de29db20f7c87cf583b8bb835d3036d0256910aa5b0e9064dc2448b184b7f6d5995079dfb94dd8ea461170a900"/4097, 0x1000}, {&(0x7f00000000c0)="b04b031ae6593f0f97af725d6a21714bac02be69cb741c219e864ff319350b1aba63b6", 0x23}, {&(0x7f00000005c0)="3a74f26a2ac506a638506cbaf5793551aa3452ce6ca5e0c516ed86e8f10b50d33d4e2f2a9caa7826daf23f3cfaf5a94ce0d8e30d6c0de966808c4ad2e97549b6b978f5b3cf1319ba73ca0cf1d6015176788e4edb209ecc4a126d0e3e746458fc589e8eb9b78dc3f85c37990cd05978cd157a9ccd2df00c1c6a0a9031f366a050373bba97b8d6fa38e886b997409ecd3d76a2d21c", 0x94}], 0x8}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="7fd66bcf614f71a0bde4e25d1de9b25e5def4a535743a4609c1ad1b234fa3292c91af49d7c28ab77fe3be28e9d2966f1b238d90cc008a7fc326cbbc6bda803c664a6803ad91a1569a962c5ae0f377cac1a9de7113ddbd04249dda251f4a9187b9beb34044acb0192916a02491cf11a3f1b0a98fc18b03bb628b087aeed3d91b3a7080fc797448357f2eca12401187bf03ad47bf08df4736cfeb506d43348b5bd9fab2cfd7b124c0c64794657630f7423bf4b3776424f3222605b1e5f0cf93528", 0xc0}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000740)="79807e8644271c78a1c7a354380dae312855ef83104b5e129528b0e39e46b4e9e167efd9be66f392571b9f5c25af75ef79bd360eaaee071c65e224136786ff751c699af5cffe4e3ead288f7a8d17baa61a48d6a697f3dbd1861c2a395e376da49bd4bd1df36b05a54e93b12f97733721160bffbe9ddd6a027b2055e9666959ae49b3baf8edabf4c3b54895f9b09dd930fd4062c1dfc9af2336acf78be18bf6a4760c2cccc6c1844a4ced607a52c140a82cb4f30ba81517db71620b65e4132b0421e7c9146f2ec96863953d9225c9c7f454bbd42f9d8c23de5b1f27457ef5b77c0876a1199c", 0xe5}], 0x1, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x115}}, @ip_pktinfo={{0x1d, 0x0, 0x8, {r4, @multicast1, @multicast1}}}], 0x58}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000900)="7e477749a827d1a1cf5bf459ca207e8e3070e9189d5e2a1ea851b31ac2a570d6132631a04cf0cb33ae9cf8c927ba312c368076c573d97465f3935eb706cc7020ebb227238aff9315eb2133c108c292389444ef69610a3b24f459ad03be7c48cc99b6510a78c0e348766070fa415b7a65c39326e92f1a1814096a8e68d9a612657fac0ffbc87a5197a5653f65caf5e8e0f1be74551199148954773dbfbf2cda8b89e0447379823875fbb2a5488397371fb469aa77d1855bc1e329d9d82b2e11a5750ed1e364db66f9afffdfd50081ad13d15dfa91a3b10dc06c1b2e413d5ea0ae6d7dbde5e27130707dec6e694d", 0xed}, {&(0x7f0000000a00)="0329100df82d7dcb95a3eb9d79d59b3b4b4890bdb7ade158482f427207c0f74d36330516f4d5244cb41b6858d21178e29ea593a864d5d46d6ddb741475e1057dcf494e6e9f4b65298c6d63ca2294", 0x4e}, {&(0x7f0000003600)="31c15c3ef358fbaa1ab0d759cd70c558f860584be0ef162637804657317276d7dbf8d84ac9fa15e35b4c405ada1ca5f2492b418435f6f1f264688c60247f8dcc49929c0598b40de408b8cd1502358df29666b6151051f82f994011ece61f223f282b18f0e557317cc07de30d53de0a23fd1865898482f712d91ca7c3a4ed21861dc258c1843f54af8f1e9d8d73c30b5512e702e0a43d27d879af030cac7838f55d549f08afddd9872d9f798e2bbe1b012fbe661297653b1992034adbb0df3a331654152edff7923bc36c54010f132e60140f8412738210f5d55221ce26e83ccb2ceb811f6b763ee964efc3af658ddb5f677e6ddcbca28525ae79c03ad7a69dda35396c25d39c85bd38fb97415cc63e82ac13f34d094714d11d6c6afb73bbee0cd042097f1d81be721a914a66d6c0a3e6c0f3963675e7a26697750ee5cbb02fcc23ea77314f69a58eeb2d8f479250b60e430e05767afea8a143bfbf998622213f19baf1b6a8253d1a635b49d37e1fb3662e918c232c0a4b8b2ac33c60562077c0740890256dcdf85882d35e023d09b0b4ac07f273d99849be3df8f843a0d943b7650db07d323ce38d18df79f8f58d6af769b265381c383251c5ec5fa668b647fb45a237e84a0d60eebeda87e112d093a3dd8e259a89a1dbbc159b988213b4883c32f8745f796c3210d5ab53a27b3ab99ac6bd8e322c2ce35918a62c215014fa581d4c60de0c2d1f719318c6950f25aac7ea42319aa39f3129a8d6756ddd9812871269caa12e6190441390732af2c0f22211e636dea46a36dada72635cdeb85e487969586c0be2557edaabebefeb4880791b9289c39779f613f1b65023b87579e7cf9f4df9ce76a8c3521a198c094c7a1aa07206d1a5bf4c759aa9b27a46f5f78e5f06dc561d41eda7d76a1d167cfb12c1ebb58cc61c5ec05cc00f338282cbd6fa46490c8b28e77d51770b0efa792dcbd91d1b23c0ce2a6c7ccd2acb601718cc932282a34a904eb5f2cfa9fab38472da4514ab2cbb6a421f390b669e2bce3356b166364fa9d9de506adab2290c461e0a9a2434d9189da145abbfd8b7ff1ab32f16ee65c53e1006b411f8913458df6b152917835ef8444847b175ddf377744958c11bff70119135dbf596fcd784800cf82696967c3e233e576697345e9a122f8c1e0d9306a155e2539bc99d22c9e9b918c6c6e645140e910704f79be6c2968922b5b288b85d5f1d362e0e89f8adeaf6f726fbc3ec5741e347c62fbc158c48f8594b5caaf2235364316606e510883ae9dbb782f63d513dc0a8841de650e9c6acc836ab63e7db2fc1ecab8a4f56c5d338d919094cbf868ad089c01136a5941c9a6de5930ed1cce60b44cfd716fd4a80cb7ffa25afa6d055dbd9dfb60b0950d4fc324e4da4d19a89629ba20d6969db357fe803b859a92942239c8e62d3f6c9e589d56fa8d4b10b55802e5e8a39d0ac8c84ab98c9539ee176425779fe58379d0f27675bcc4e6ba905a436068bfcbe064708ed364f4099fab26cf1f0912e7eea3909482b1f0af6f5aa564e2c11ead6d9d4ccca52db9cc632ce393c6c41f6bf73dde312351327c552422e029b1cbe30f5e840500df8e3225bfd9146de0583f7d545fc7d0a90c5651bb8d2275b56a3e6084c3a1a6b329289968e893e0cd86941ef4199325521db634934923f833008d63b314625e3c935277f5526d4de62da730e3b4d20a9b956468dfd3293dbda2ac3afe197b40e5799df768b3281de798a90443f775adf010105c3114383b149d321864ce6bd1e04d96aedf949bf5bb141eceba70b792f4cc4e4d111bf75139a70cd6ff6b162f28bcb958035c1fdfc885599e8c55917cd1b6c9e2e2f2b352723f80bbc0fe96c7c06f90ad6ec25de416c2a288d3a9db9536c9eea73d803d7cca3ba3bc50844a46d5ff8239496f0010e04c8eaf18d03e2b8b7a1dad638824a34fd764e9edef20d29b87220099a89df77781035a53f41026b0d69f4b491d886dcdbdc0878e23e2314a10c0389590f38be8fb53df938d85927fe3834de79e12408a9fa322aa9595ff83c66ef72da3c96361e17cb6cc554fcd76b8292879d8b55e3685a885d0532731b6da6ad887044f9c397f0b70ca73ae310b84abd32dabd9987c38913cb2d1b2fddd53f534384bac8a09799bde833151d6882ecb59aafe6f549ab0706c0248125827c0b4b6ea29a7f864a3f05ea0a6496f6005c977c8c7a91d512869f1ab444543d7dc13cf30a090beb322d49dfb84238b920d893933987c7ecabd5065d0c22a072ac16c82c977591399f9983204eddb44c4211037914c54e8b47d5757776389cac0c5683511990fc488d35135dc6464eda78241b25aed08f6b7437177dae2d7751aca764a62083c9180b59c641812a69421f9702aedfa83b49a9668f11c5022b35c3c46a0218b54e66ff696d100ebc8f722001b832a0dcd7b3f44f0cb3ad1662f4bb8edd9018e36a5a666030ce5a833d03e1d2c1665a989f50667ef80447c2a515a341e14bbc19c971f1047954645f7050b8398887d6c33df8a96dd5ee2e59f8e79da96b0ac184c457241f16410d442adfd9c29849a1357559b10eeee682be72ee90e0d323af0d590a5fa3cadf910e23563e83854e378dba54bf54b396c675603c928bc58cdcf8e3782d98c1ad688652ec3791e8d9eb0c882baa6d087ad1b1cf3f18d791393b12c1d6e1e1be3ad08e06b719ab84b37d4fb71f4199f1224732c354d382fa084a8d12fc959cc5511a6780e4f0961b3ca9f84f6cd2461ecf852598c93a432b989fe0b7401293571c14a8bbe3d69e9ba38562ea4cdc4d074c021ce648e4400b53bb7f544fc42af54cf4af816f5eaf426f699fc045366ed8120d7d97de0fe55c1b7693572f05a37730dda0eaa44dd8205b2de122736c242f22aec358acb7a8ab62c36cfa5c0f74da9b432b3164693030089616672db1ad7c1b7480609885874a098d9bf80d4a691a962165cf2b384d13ade048941c93726ff8fac1ecf99591c60a08ff2e52ee7c3ce7abe4dde32848267572d1428f803358e62e8e09cef882008a736b92d36bb05812de68a8d09cb0531db3cce7d45d81fb727f24cb8378569f8fbc883aea4c8a79aa657fece32d661534901279bed19bfad274bbda2dfbb8c3b2b23b32ef0655676dac3a72dada3dbc405eed6cff16880acd55b154c83959efb43381ab7881f0abce9351f65e6c0065ba244bebc887dba7a3796c012e17c25663f232b7cc9ffdb05a3d77bfb77611943bc4b2dc009594b43d3308d6ae68b7db38107b4721dcda343dde3d3678ae70da4c3f9a20efab1c2788b1a51fecf347c049ec0070ce8de17bd69eb183416b47eea5a12deb5e8c426d6159c67b736c1a99d0c7aaba85210dc7d3586a11a4321d199ccd45f7d7bfc46b6b40a4cb7b8d9352e7f9372866ae9675652b596de39191cba2c0e9c444e15a97dbd1515738b16fd3032b0cd6477727608d81a27a0907fea4d61d77ddfa3e0020401fc6bb7f6ff2f3f12d748ba75693486358c7a811bee391aebe3a67dc5c0ed0391f7c798ab16c76f7531fc44ee0d4c3db5b5c686e73be0d6c04eba0ec117313f30156a6c9e06708b048374780654c2dc20bfa51f1c532fe005b429f8a13becc3680d540fafaa1aa331c7bf2ef94edb1c9e5eeebac4c045a609afbc7246fe4273759c5851ab8b9c396cc93eae51aa0691c3733157d9c35b629e9ad46a73c66f4885436909226c7626438f85df10104734a02436ac84b8c75c6b1e91d26a9502f7597b017c94dde80dd09c8a2074b9a5faf97710834acbe9ce8fd6164da132bb1eae68bf2f36bdb9a593db8f70fadfbf1b840a07c9086c51cb44bbf296ab9e61f5b4e6d9b109bcd08add54bc9cc777be8cc24fda9e4c7956766c36f030bdaaf7977f16295a094be6e0519510ed38db521afa2c74d153a058a2ac33af321cfdc47420026e0e1c4124ec9f43fd5ed768a1d7872ed3ad330f69b99c3c1f5191c5f1ea27ee5274daa88e4b03b8e31a5e07a2c7970f2af1b38b7e20820897a09779eba077a3ab625063bb88ee1467349141bb2bb884f23f21b1e73e8e1b75c72c1c144e38939612c40f299a95ca079e5a4edc0310014ed06a4bb03261615f9f386b641a652d8f1d38026c48641f90af901de8e0eb3cd29c539272abf7829b74d2473221155b75efc7b6c0789e96e2ff2bc8f02509c69cd5d3a59803c87291783511b5d4a7fbb13e9aa1f95e35e05454a7781ba77c66012ce2db569d6f3cd238890e3e72870ef7936781a7c619decd6b2a15015a4d15f45263160602eefde95ef2d2490f200f900ff840e08b5369a816b493069c9e47b30e7e069e96b40d23914ee97ca3d3e2e6da9c523e7c90d4e684cac65c2776926f6e6303c37a2eba36a8eb4b0b44bf5e97d6187afaf3528e5d75bde3b791663e3a92ae413a8bc79823285bc270eb3112e19045923cfbc1f2838c1bfee844fdddb2a275f3ef2f5ebfc2b8ca471234106400ee8a84fee1fa209058de0377f27943e853ed7db875f81091e79de2815e8d339e8e17efdbef653630fd1ee8d905a446a35fa323296f03630156c58b01856862cfcf4259cbeb935e41b1987c5655f8eea845f7520e647cd7c2cef9ba7f75228dd2a5facae92739e95d56f23f0927e9a792425f414027ac202c7e9dd523bfb2fc352b002ccb99ee6e6ed43eb1edcd1937d8986c4a1c254755f043b52688cb836808bccb4e816bfb7099eb18fd663ef3ae812343f2d89ab38105943fb26ddb4d9ffc78ba49f4151f4fa76f843d55f561243ffb86611d973701c06a737257d7a3d43c56d3c32dd9cfb4e6fa910daa080a14c014afaf5bd927d14415421dd9102350528d5af43ef2e831ca10b07d0ea9333b65b47a08a570fa81d137c2c9b3ffa624b638b7a906968a6f552339490e39d38f62c0300f2e69faeafd5d09333701a93a69775edcbdbf291b016ba5919e2186a7432a1af28c3d4ce2ed7a1cfc96bb83880bd04863aa62740d7762dcd2ab5ab2051a26487d76e0a9d56e3f9e34501e735f875a091fc9eece9f2f48379dfa3d764fd218c0a830941c8fe6a3f5e48695b8da76634a659852159baaa7bbd0de05218494eb9811ebe0a8dda922f9477fed4dfb31e8a4ebc8f27970ec3fa9411caae131f26f9eb05cd312f89e9a31cd4c8604f124284c66fc6100df2874fd8a0ee62f56d2aa5d6269d1d6e35625d40db17deae0ff6c76ee2becae1e661eebae455fb292beb5911e6e6dbd1eeab56bcbb1be07db117e3f64fc080f47f78f1b8a6b1a2de0b75479f224de2ebd87b0f5ba344f5cc52fa8627d0ae05c8e67194bf17824ef5becdf7b4e0c1c6eebd3dba2b7c5ae959795ddaf09d4866ded3bcb8d94ff000f6bdbe95df0d9a28315e515456e31289e50833216145cdc16eac28d28773a046526af3a7d228edd51cfe5e4d349136290361f14629c83c3e26e317f105c4a8f7451107dc548ca0529d85aa4622b45f092f42a9fb6714915d9f624ab51f27f6984e03d9139e513652295ef8a04dcf0cfa7165d028c5a5a4b4171dcdd4c2f9a55cded999072589c33c70112ddab8645825e2803adf8dede554270de7f233a4ca52c6c14335f5f88df7db3a2a5c1497982ffbf0b790f85237dad547e6ee2c1c112e237d697ef4d0c3309cfb27af173520eee6a378b27a7cbe49315a818beafb24e642ce9cf57be4622c1a0a3b93725019b7541e937c3ba30e44e390c9448a15108e9fb4c1fd6548acf083f150e853184a524b5a4938264976401e8491e6e53a814b7f110c33", 0x1000}, {&(0x7f0000000a80)="7c71437cbb05f88e33eceadfe073ad1b7e8532b9b86717aaa19e3602a06eec9d0b6dfd84e7bb707ce07703168d17fab4e12a13b37770d85f7f5ad2a631d2d51f2eb3835c2dfb210f2b91c3a36b103d3d1f441ee27180f0a771f793f2dbaccee66cb2825d2c1d2c543204440d3f61abaa1df61a8deae799b6716f3139bcfe4cf7732fba3c7b6a3279a906e54b92f1841f25059e35bf6edf45ac4e21e9a296c5846764bfeb03c2f57d614166012feebbe0d022234bff500697155c11494fd8179a2d7f94b8c26602d9d3f538950ad73aaf43137bf8f677c74c42e34077a463217fe0338ee685", 0xe5}, {&(0x7f0000000b80)="8d3fb798b74d26c8a170fbe3088e05bb285ec1a2e85a742c62199993ec892a2f4d9d7a973304c34dad63e2d83bd3874783f2b9e193c03474093bc2ede434c100031bfc10f23eb6527cdf29b65d37ab71729d3699f59bb123e5407b68095b836145888ef40876a0968ddadc55e3a19b686296846b7693fd125a1ea36c1603b61aaad2e9d91ba3e90d0c4fca7462f0c5239a430b2162cb02fd48a3a060b09f46a2e6b4182da0d08fa997d579705ba360cbc7addff9eae428d64983fe3f828f7ad9b7121f4aaf473a7a9b853194aefc68515b3ada6d26b8b2f751e250fd0363a92c7a9597f0d73cbe6cc23a6687ec673154a094396d8a", 0xf5}, {&(0x7f0000000c80)="8a7e3ed80d8d0ff747339ad070f79bfc5528e57d13a211d4f70aa8ae7cd9a9d4592031abfa3eaff4a1ccd6731c6519bd5dbc", 0x32}, {&(0x7f0000000cc0)="e8ad10721b3970131866f067b79f754a8bed3f9ba285361c37cf79579a040778f9454f9fb8dcf9763beba7d66e3012097682febdcde66fc03f12f24169d1624d43dccee15694c208505c1c08d157985adc2fcf544c7665de24ae7c988dd75bd32dad57b9e0d589480841f57a0ad3b22fd36ca59b9e5998385c7fe3285c", 0x7d}, {&(0x7f0000000d40)="88fec6fdb95b4aff76f0be5d1a32a76c7db28c5c8b514a092722481b686670bf7336ecd14a04faf77e2da62c1ee25db1da509a55a0481aced263cfee6b6f3be59d1a1a9baccf53ee2333319c7c76e1f11ee1db5b86dfcc5f0f22893729b3fd46ecd3bc46691d3d67367b036014141d40081f72167f0cd8244869e17989e797fb00d6c451b216264c3400473cf2755d8b7fc18006aab143474ec7aa03e2b095ed12d83023db1a2a9a3eb7b0ade6818a071eefd38f575094479c038c18d15139a10f31aa5c7e6fcfca346b740bdafdbeeb77", 0xd1}], 0x8, &(0x7f0000000ec0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @remote}}}], 0x50}}], 0x4, 0x24000444) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f00000014c0)={'#! ', './file0', [{}, {0x20, '@'}, {}, {0x20, ']-\\\\}%#-&/\xdc]@])'}, {0x20, './binderfs/binder0\x00'}, {0x20, 'team0\x00'}, {}], 0xa, "3ed91f55381266fa266cd2c33f23e323b4415c34fb29c054afdc085c0927f838fe88dbcd6ceb09f82232467a056685af5f76014537d1b03eda2da66524c13e7d75a5eef73522182706b8ac70100994f8a1ab095caaded29c23751283ea6cbed50577ec3ec9a64b797272e292c97daf625b400f8dff72a64fd2c1ce2bfa68c6cc0e8054c49eefc8573a5732daecb618b771e94476fd45f11b9e4167"}, 0xd6) close_range(r0, 0xffffffffffffffff, 0x0) 39.433507089s ago: executing program 6 (id=967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0x5b1781, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) (async) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x2, 0xffffffffffffffff) (async) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000)=0x2000000, 0x4) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) (async) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffff53) (async) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x1e, 0x1, "a8f7ef0a5fc8ea78e43b72524928f3b6146b5972e201217b9feb8b372572d57e21c68e31b1b78ca65224e2a2fe299952c45550a623704db0655f3f5802c7d141", "9750b291d6350f1215dc3f83cf2def770da9f0bf0f5cd71205090c54d4f56c82dfc3bd2db56e4fc92935dcd94ebc341e7247bdca73db39c71ee9a83b8db8807d", "6ebd0e7d473d18afe7bbadc7fbaa5a972ecf5f159926fec61a628af02319d2ba", [0x0, 0x9]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0xa09ab000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/wake_unlock', 0x4280, 0xc) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (async) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000100)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r8, r8, 0x0, 0xd) 39.183656669s ago: executing program 6 (id=968): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r0, 0x22fb5000) pipe2$9p(0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x6a8, 0x28040) ioctl$BLKGETNRZONES(r2, 0x80041285, &(0x7f00000000c0)=0x7) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000020c0)='/dev/ashmem\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000000c0)={0x0, 0xcd7, 0x4}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000004c0)={0x0, "fa361474978c4d2c9f10912085a35ebf"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000014c0)={0x0, 0x5, 0x1, [0x4, 0x3, 0x4, 0x7c8, 0xe], [0x4, 0x7, 0xa, 0x100, 0x8, 0x7, 0xfffffffffffffff9, 0x5, 0x649ff2dc, 0x9, 0x1, 0x7, 0x65, 0x4, 0x7fffffff, 0x5, 0x2, 0x1, 0xe, 0x7fffffff, 0x5, 0x8000, 0x7, 0xf02a, 0x6f, 0x10000, 0x6, 0x1, 0x25, 0x4, 0x5, 0x7ff, 0x4, 0x80000001, 0x6, 0xffffffff, 0x2, 0x0, 0x7, 0x1, 0x400, 0x7fffffffffffffff, 0x2, 0x40, 0x7, 0x8c8e, 0x2, 0x6, 0x8, 0x4, 0x9, 0x7ff, 0xba7, 0x4, 0x2a, 0x5, 0x3, 0x9, 0xa1, 0xdc4000000000, 0xacac, 0x5, 0x8, 0xc0000000, 0x1, 0x4, 0x8, 0xdfa, 0x2, 0x6, 0xc000000000000000, 0x9, 0x1ff, 0x8000000000000000, 0x8, 0x0, 0x3, 0xc9, 0x100000001, 0x28b, 0xba, 0x9, 0xfffffffffffffffc, 0xb, 0x200000000000000, 0x7, 0x7, 0x1f2, 0xfffffffffffffffb, 0xffffffffffffff2c, 0x9, 0x4, 0x8, 0x100, 0xf251, 0x1, 0x1ff, 0x8, 0x2ffa, 0x1, 0x5, 0x80, 0x10000, 0x40, 0x26ae, 0x6, 0x2, 0x4, 0x7, 0xffff, 0x1, 0x4, 0x8000000000000001, 0x7, 0x60000000000000, 0xffffffffffffffc7, 0xe2, 0xbf, 0x93, 0x4, 0xcd]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001900)={0x0, 0x5, {0x124, @usage=0x1, r4, 0x3, 0xa359, 0xa, 0x20, 0xa, 0x0, @struct={0x5, 0xff}, 0x1, 0x3, [0x8004, 0x8, 0x0, 0x1, 0x4, 0x4]}, {0xf, @usage=0x9, r5, 0x1, 0x7fffffffffffffff, 0x62f0, 0x3, 0x3, 0x8, @struct={0x85c, 0x100}, 0x3, 0x7, [0x8, 0x21000, 0x9, 0xffffffffffffffff, 0x1ff, 0x3]}, {0x80000001, @usage=0xc3, r6, 0x7, 0xfff, 0x2dec3d9f, 0xfd, 0x4, 0x2, @struct={0xffff0001, 0x14}, 0x2, 0x9, [0x931, 0xb262, 0x80000000, 0x486e2e0, 0x5, 0xffffffffffffff07]}, {0x1, 0x8, 0xffff}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001d80)="4c009ac105416a598410e65209eaf9a730a0dca3cc2fbde604b3344c0c4b2ea088f83ae68f366d2eeebed33bc506da455eb379f14956a9cbdde47a66faac8b4ba828697bb87fceca905db87eaff90192809a8c619ea4394d4127a85acf6cef8e1d77189ceb71a75562f429074dfe18c391addb6cfea3cbe75e75d20ca768fddf9da82204167e21f1238ea3330fcf993f7abd9a9323d604af8136e5753611d2185f4cd7941e4aaffdd1e1dc47b130e3a23216a00e3539b0ce7c1087", 0xbb}, {&(0x7f0000000040)='u', 0x1}, {&(0x7f0000001e40)="854ff35c69eb95692dbe56cf327076147b3812847a9eafbbc9a97cb021a552b26363f3544a4839da392ba28742b1252989684dfb0f83533ab8724bd7e17fa36b0e85419048d41493f2a753024445dfec5021bf1f017e616b99493344cb9476746f4ea647e11d09de4558ae6f90704348db0dfc07b68e9f3ef644ecb462e1ce87423a0c6f985ac453da6d5be96aa39462abf120066bf87b2b2a8150b88d234f8ed5a11e8c23f9e93afea9d08c037f94957ff7bcd79bcc31f9fa265468aa12f6d222e225", 0xc3}, {&(0x7f0000001f40)="6574cd846eb044e8ab4479cf698952e095cc7ec9c8844a5b102f78150882db688a2dccab6bba82b6e07f9116e06f6178ae919ad98c8a859d6b831ca058997255d1bb1d589af58581f907123851d812dea6ef6b77a2ba56ef41ed03012542e9c9481edf09d153858c550b84d936672f030f8c4c5d0f16fbd6acb85117cb1c182e6f21e5467db15481056f3adf619abae410", 0x91}, {&(0x7f0000002000)="40848d0ed3943961a8f2b4c14b30a19f42bebc77ec96477f13ca68954aca419d21508f1ec9cb155fca3de691aad91dc12c2222ed38caccbb7f1f9a14", 0x3c}], 0x5, &(0x7f00000020c0), 0x0, 0x80d4}, 0x50) 39.155926581s ago: executing program 0 (id=969): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) (async) r2 = socket$igmp(0x2, 0x3, 0x2) getsockname$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (async, rerun: 32) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x0, 0x0, 0x8}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000180)="956950f6ac34f281fcbc09b1bd95e99deb44e092a9fb2f19b4ac2044e8297ec4a326dc0cb163b7f5a063c433", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="5ce60bd4b4da3306478201ea644409e1ede35093f1a2087b932bf2aff33e8f888fc67a5828221e6f261c21b07068653f8760d6165bfceb0b3ba9888aa92c606e20e24c1d965d83a5944332246c75f42f9ec4ad9da7de446a159cba42314f861c287a222e93c64f8022b68a513f1be7557e04847e0b58529622f26e4a332ec5", 0x7f}, {&(0x7f0000000700)="a6e522c5380fac997e85dcabf3b95d115a947b6109d656130fab4ddcfad737bde1b3b25db4543fa48e5dc3a81a4a7e931a2c96a7b7169f1bb86e570ff1ecfb5a8cb1c29c271407164b88463da5caee3929a683e1940c99845d75c8d1d227c4427345aa88a859fee3a1a1d656352d6396d041e420f52ceeb66ae839d280e8df8b42794f0c9791b40bbb24672c211d66ed6b1cb5e57d08df2c44f30157b679b0d523d6132113aff19ca62753b46a27ddc2e41620cbebdcd6e62b75e9cae6ed24487d43a6d9cd56b562f245b3580985619932d707722672fead6a0a99ca04ef8fa06f161e8ddbb553f62cb2d163ac", 0xed}, {&(0x7f0000000340)="76eaaa2459a3f6527010ae185f8aae7127e774d072f6c55ffaa1fe1be13e06a97b7c7549898695cb04c255cb0d83d08e29a995922771db7c094221558b455055c1720d19301e32adf63bb8e8dfe63403bb3de52b7797549e2f912bb121673e30c511bda39685d82efb03a047684ed84690adcfd0a89117e466337ffbbeb3aba672f565a5dce1ecfb5db4934c09f61e42d829692ca2170082f3e0079e4bc9fa9b91e6", 0xa2}], 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="97f7e36957eb17dbbe6460f9dd2eebba70886ba8ac25e5c7a5d2cf2ac56c868643139794fcd0d8f1fecacdeb2fc50064f0190fa6f29f88ff73e3099e000b4d53a1181dd7656c6d6de6b23a786df40098ce4ea3acf1", 0x55}], 0x1, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}], 0x18}}, {{&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x1, 0x2, 0x1, 0x4}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)="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", 0xfa}, {&(0x7f0000000ac0)="c6f6b74781ccd6fa0c876df8d55a87cafee65a1b6af8a56b66ea8eecab5f027c2f67c72e5cb1b6911092939efbd7e4ec9a532ace84006beecb34d2893a3c398a4cb794495e638f50343a49909e3ee33c57355d2f79930091a545ccad", 0x5c}], 0x2, &(0x7f0000000b80)=[@txtime={{0x18, 0x1, 0x3d, 0x100000001}}], 0x18}}, {{&(0x7f0000000bc0)=@generic={0x1f, "c7d0618b31607d480e231909a3bc18d05489db709e3749827bad69b1099cbe224c32ff683f84392cc97db6120a3c94cb8b4576549a48b896e0624a1dfd1160c977ea9809f819fdea606d72cce23deb869e22c28d2f48898576c8bfe07e000f3d13618f90170a5c152406c2bca9a43fe33a6bcb8402c1d7fa5dd910ef3c0d"}, 0x80, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}], 0x5, 0x4004014) (rerun: 32) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) (async) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) (async, rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"387671c3f8532d7d174eddb2c586184d", r1, r1, {0x4, 0x5}, {0xe477, 0x4000}, 0xffffffffffff7fff, [0x0, 0x6, 0x8, 0x1, 0x1, 0x10, 0x1, 0x7fffffff, 0xdca, 0x1ff, 0x100, 0x4, 0x5, 0x1, 0x4, 0x1]}) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket$inet6(0xa, 0x80002, 0x0) (async) socket(0x10, 0x3, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 39.121956554s ago: executing program 0 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x48}}, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/protocols\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r3, r2, 0x0, 0x80000000) 39.063892879s ago: executing program 0 (id=971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x9, 0x16, &(0x7f0000000000)="1ca39817e5fd5e466321362881dd13a95692e269e165", 0x1, 0x1}, {0x4, 0x22, &(0x7f0000000080)="c50b6b1a23251338647011e280e5a1bda5461d291c102d8082d5b855dbb24e215dd5", 0x0, 0x1}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x4c010) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f0000000200)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000a40)={0x0, &(0x7f0000000a00)=[@cpuid={0x14, 0x18, {0x4, 0xff}}], 0x18}) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="9b", 0x1, 0xfffffffffffffffc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) keyctl$describe(0x6, r8, &(0x7f00000010c0)=""/69, 0x45) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000000800030002081000418e00000004fcff", 0x58}], 0x1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0xe, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xf, 0xd, 0xa6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xc, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x0, 0x6, 0x8, 0x40, 0x2}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x9, &(0x7f0000000240)=@string={0x9, 0x3, "37f259b02be97f"}}, {0x5a, &(0x7f0000000280)=@string={0x5a, 0x3, "7bda9293cfbc473431a183369f3b489a9c1a8c370eebc7a000a2d4c1f402a3308dc7c447620eacfdec9215a78662de9c63edf8b59e9fb6b5d4ebe15f6f5c59c98a2618cf0069fde11c0abbdff112fbeb23e861d24cfd302c"}}, {0x2c, &(0x7f0000000300)=@string={0x2c, 0x3, "a3a6274cbc45b3feec349f40a6b5e7963e5115767afbd0d31b45c672354af40633e5b8599d71e2e34d74"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xe8, &(0x7f0000000380)=@string={0xe8, 0x3, "b34df729c8d7c848d9f2db359dc93d9676ec5f4175a275e1dcf0c62edba536e62301c2c54db38d60a05277400a077ccbf562bb54f85ce18fef5b28c41ea3260f4fb759d6e7219d57bcabf2a1999e78ffe51b53f963e4538967f67b5a964c8363bd02eb05bbe7672f3eb4863b1475ee328b8fda194e939245fddc6ac115fb939c9894ee900b5d965505171cef958fa6cd1c49e4f86e8d6ddc1ca87a1c7f8cf8636c27e3bab414b4e042807d035f6917b80c6387ee9ee929f4b3eccf5387bd89f84cd9be0d884e7b6a755ac41e96f50db5940309e5bf18b01f675520564603f9380ab69eabe67c"}}, {0x97, &(0x7f0000000480)=@string={0x97, 0x3, "00cc1c95fa0cfbd99cc0dc3f3669eb866dae641816659efa5a16290076919586196abce8f6c57a026e55fe50dc1c4361d350bee412834f0b949cb2df9b2d03f73a4a6765f4a1fb6860826c412a40660732d54ceee85e82699d82623f2f9d881cefdc4d6603df96a7b2427ab15e24b6ec77557900e8217d7f1ca1e251e0daa8f5f436a9a8286a00d414ce34c2fcbed2f13554ca37f0"}}]}) 38.880455673s ago: executing program 3 (id=975): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e7b3d66642c7266646e6f3dbfc88fc0d1ddeaf805c9a5a326c24f2d056e3169d3adbdfbe93d454af62ac8e2e0ca7d5eb3b6c123c55788b9dcc84296635fbab7ec2a78fca400830ab6844aec676c0f91d2c8fe917401d48443432eb702a109e05e74f5bd7c3324ac6eafaa7b4a7bdabc636c0ea714a551943b2d8cd30b0a8f19df1d3c3d9d1f7fb2c9ae8b787c6d4b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',ignoreqv,k']) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x0, 0x1, 0xffff913a, 0x9, 0x6, 0x56ae}) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socket$inet(0x2, 0x1, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 38.807949779s ago: executing program 3 (id=976): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = syz_io_uring_setup(0x2d4f, &(0x7f0000000080)={0x0, 0x559f, 0x1, 0x0, 0x2e}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x0, 0x1d, 0xc3, 0x0, r1}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 38.806089499s ago: executing program 3 (id=977): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) close(r0) (async) close(r0) 38.735395335s ago: executing program 5 (id=978): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x1, 0x6, 0x4f, 0xb8, 0x8, 0x8, 0x0, 0x10, 0x1, 0x5, 0x0, 0xd}, {0x7, 0x0, 0x3, 0x40, 0xc1, 0x8, 0x3, 0xa0, 0x8, 0x6, 0x6, 0x6, 0x5}, {0x2, 0x6, 0x0, 0xa1, 0x8, 0x9, 0x10, 0xc, 0x1a, 0x9, 0xfc, 0x50, 0x2}], 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mknod(&(0x7f0000001980)='./file0\x00', 0x8, 0x10000) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0x4, 0xb, 0x4, 0x1, 0xc, 0xc9, 0x2, 0x7f, 0x1, 0x5, 0x9}, {0x2000, 0x8000000, 0xf, 0x40, 0x54, 0x5, 0x1, 0x9, 0x6, 0x3, 0xfc, 0x2}, {0xd000, 0xeeee8000, 0x0, 0xbe, 0x9, 0x8, 0x65, 0x9, 0x81, 0x5, 0x4, 0x4}, {0xeeee0000, 0xd000, 0x9, 0x4, 0x0, 0xa3, 0xc, 0xf3, 0x2, 0x1, 0xfd, 0x10}, {0xdddd1000, 0x10000, 0xb, 0xbe, 0x3, 0xff, 0x0, 0x5, 0x2, 0x73, 0x2, 0xe2}, {0x4000, 0xeeee0000, 0x4, 0x6, 0x7, 0x3, 0x4, 0x4, 0x4, 0x0, 0xf9, 0x5}, {0x10000, 0x2000, 0x4, 0x5, 0x10, 0xa, 0x1, 0x80, 0x5, 0x7, 0x5, 0x7f}, {0x5000, 0x1, 0x4, 0x8, 0x6, 0x3, 0x4, 0xf5, 0xfc, 0xd, 0xfa, 0x9}, {0xf000, 0x36}, {0xd000, 0x8}, 0x20000008, 0x0, 0xeeef0000, 0x100040, 0x4, 0x801, 0x1, [0x8, 0xfff, 0x6, 0x3301]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x3, 0x6000, 0x2000, &(0x7f0000fa4000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 38.720918796s ago: executing program 5 (id=979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x60000000}) close_range(r0, 0xffffffffffffffff, 0x0) 38.160227091s ago: executing program 0 (id=980): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x180000d, 0x10, r0, 0xe5f56000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000005c0)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x401) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/tcp6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0x80e289de8c515a6, 0x3}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 36.014552623s ago: executing program 5 (id=981): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x6400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESHEX=r0, @ANYRES8=r2, @ANYRESDEC=0x0]) read$FUSE(r2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 35.721268626s ago: executing program 3 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r3, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}}, 0x4044057) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f00000002c0)={0x2, 0xd}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28044040}, 0x40001c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448e2, &(0x7f0000000100)) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYRES16=r9, @ANYRESOCT=r9, @ANYRES32=r9, @ANYRESOCT=0x0], 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 34.222278175s ago: executing program 0 (id=983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x800, 0x4000) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 33.812405268s ago: executing program 6 (id=984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/217, 0xd9, 0x1, 0xc}, @flat=@weak_handle={0x77682a85, 0x110b}, @fda={0x66646185, 0x4, 0x1, 0x35}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f00000000c0)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b6946432fc21aff55002ce55e854564e7d309f20d222f9220c80500b0d196b17948adf2dcbba03d2f3e0e647c2e0000000000"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/217, 0xd9, 0x1, 0xc}, @flat=@weak_handle={0x77682a85, 0x110b}, @fda={0x66646185, 0x4, 0x1, 0x35}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f00000000c0)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b6946432fc21aff55002ce55e854564e7d309f20d222f9220c80500b0d196b17948adf2dcbba03d2f3e0e647c2e0000000000"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) r3 = dup(r1) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) (async) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x0, r4}) (async) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x0, r4}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r8, 0x0, 0x2) fchdir(r6) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="341888"]}]}, 0x20}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r9, &(0x7f0000000000), 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 31.121319063s ago: executing program 3 (id=985): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000151b6924afbd7000fcdbdf250a0a0000"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 30.366369643s ago: executing program 5 (id=986): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x3a}]}, 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = eventfd2(0x4, 0x80000) (async) r6 = eventfd2(0xfffffffb, 0x80800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r5, 0x6, 0x2, r6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) 30.122291313s ago: executing program 6 (id=987): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) (async, rerun: 64) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x16c2) (rerun: 64) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = dup3(r4, r3, 0x80000) (rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000280)=[@decrefs={0x400c6314}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12.89592925s ago: executing program 5 (id=988): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x341) (async) r1 = syz_io_uring_complete(0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000700)=0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2000, 0x10, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0x0, 0x100000000000000, 0x800, 0x0, 0x20, {0x0, 0x7, 0x2, 0x0, 0x3, 0x45, 0x93, 0xfffffffc, 0x0, 0x4000, 0x0, 0x0, r6, 0x1004, 0x80009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/nf_conntrack\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f00000028c0), 0x1, 0x0) pipe2$9p(&(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$unix(r1, &(0x7f00000029c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000001c0)="52e400492af5e1e58e56fc1c409593405d6e2a98c2d84d5fbb993ba3466624200e5345e000b33b24fb2fe7a761f464b7a6ec03b399ea77f49ca650c88c1837", 0x3f}, {&(0x7f0000000240)="1f7fe59fa547858f9e13", 0xa}, {&(0x7f0000000540)="bc2467d6bfcb3321070c7adf1cfb1dad78a55f798443446178723ac9f174610aba30afa5df81d7a2a7d24238feab03de763ca5de9e2e917c367d6f6aa1350a8f986b9ebd390d67af35b8194ff9e8dcb2b7b4475e02c16daa83efcde34bee321e2e590837019146e82a4d", 0x6a}, {&(0x7f0000000300)="64fd1e995c3f146a710fc168489aa5ce9dc535d6f1191d41cc5fe44d3fb459f3378d27cfe2e51705ec10977368a4c5d362cf26404d5cf7f741d407248f29415eab938d8bdeb5496ff1fec37a19e189b8c3667d2b2b96202f4bdb125c85a96756769f0fff895b06907163ee66c5831fcfc468f26b22eb034e92c4e89288e3fed6352afb9ef16d8a3cd0f66426eb74d3631923efa5cc03cf5becf0fb56df96a6e4812a438e6fa0c4571144e4844c2103c837eff185283f821bf105c92292b5d34c4e30caeab76bdb22b6639636a77cfba35762f1822d80314e0f8a45b3b4cd", 0xde}, {&(0x7f0000000400)="0c44697feed900c4328bd4a475abfe65ba4a4a597c22a10354fa3b64c75e710b110bd75d5f95cc9db7862b6991b4773302fc5b374c69fe4a453c8e75a42b0db4d76ed8afa6eb6c2d", 0x48}, {&(0x7f0000002a00)="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", 0x15a}, {&(0x7f0000000480)="0015ea988fc77cb9fde04661174470d9776de0f8d3dd7c5d0f61ce788c8c9e6ca08da0f1626eb3f4186e7654f5c3daadd126d09b5ae519df", 0x38}, {&(0x7f00000004c0)="ac01568ff447858e0f22e6f29e27527fc70266f4db306ad61a98b6d2cbb5bf31762b2fdfb24fbc267de716a31db6bbdb56a8cece57fd52a790a576ae8b98c3f6688613dcad54bab262cfe5921b32bb8b0d73fec58ed8aafc98d5632a5b34143229858a14f3fc0329aaea", 0x6a}], 0x8, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, r6}}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r9]}}], 0x60, 0x2400c005}, 0x20000000) (async) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000100)={0x0}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1, 0x0) (async) r13 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r13, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) (async) close_range(r12, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x97, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0xfff, 0x5, 0x1, {0x22, 0xb64}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x8, 0xfc}}}}}]}}]}}, 0x0) (async) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x6}, 0x1c) (async) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 12.354217283s ago: executing program 35 (id=983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x800, 0x4000) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.445655395s ago: executing program 36 (id=987): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) (async, rerun: 64) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x16c2) (rerun: 64) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = dup3(r4, r3, 0x80000) (rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000280)=[@decrefs={0x400c6314}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 614.305462ms ago: executing program 37 (id=985): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000151b6924afbd7000fcdbdf250a0a0000"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 0s ago: executing program 5 (id=992): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000080)=0x4) madvise(&(0x7f0000614000/0x3000)=nil, 0x3000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): _var_lib_t:s0 is not valid (left unmapped). [ 33.612608][ T36] audit: type=1400 audit(1755414326.990:823): avc: denied { relabelto } for pid=789 comm="syz.1.115" name="file0" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 33.749567][ T331] rust_binder: 0: removing orphan mapping 0:4224 [ 33.761241][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.791230][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 33.842265][ T9] usb 3-1: device descriptor read/8, error -71 [ 33.901229][ T31] usb 1-1: device descriptor read/64, error -71 [ 33.943103][ T10] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 33.950616][ T10] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 33.959353][ T10] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 33.975131][ T9] usb 3-1: device descriptor read/8, error -71 [ 34.141245][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.215951][ T752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.224501][ T752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.232320][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 34.252296][ T9] usb 3-1: device descriptor read/8, error -71 [ 34.285403][ T10] usb 4-1: USB disconnect, device number 8 [ 34.381240][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.382336][ T9] usb 3-1: device descriptor read/8, error -71 [ 34.501380][ T9] usb usb3-port1: unable to enumerate USB device [ 34.521230][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.761257][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.871379][ T31] usb usb1-port1: attempt power cycle [ 35.051215][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 35.074131][ T804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.074158][ T804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.092465][ T809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=809 comm=syz.2.121 [ 35.125028][ T809] 9pnet_fd: Insufficient options for proto=fd [ 35.191234][ T45] usb 4-1: device descriptor read/64, error -71 [ 35.194276][ T813] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 35.211202][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.242165][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.372288][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.431532][ T45] usb 4-1: device descriptor read/64, error -71 [ 35.611387][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.632406][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.671233][ T356] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.671245][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.769492][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.792012][ T817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 35.811226][ T45] usb 4-1: device descriptor read/64, error -71 [ 35.881712][ T31] usb usb1-port1: unable to enumerate USB device [ 36.061249][ T45] usb 4-1: device descriptor read/64, error -71 [ 36.171337][ T45] usb usb4-port1: attempt power cycle [ 36.415056][ T832] netlink: 'syz.0.129': attribute type 16 has an invalid length. [ 36.531234][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 36.552323][ T45] usb 4-1: device descriptor read/8, error -71 [ 36.682310][ T45] usb 4-1: device descriptor read/8, error -71 [ 36.921213][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 36.952446][ T45] usb 4-1: device descriptor read/8, error -71 [ 37.023636][ T850] rust_binder: Error while translating object. [ 37.023695][ T850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.030018][ T850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 37.092254][ T45] usb 4-1: device descriptor read/8, error -71 [ 37.111398][ T408] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.179208][ T858] rust_binder: 857 RLIMIT_NICE not set [ 37.211328][ T45] usb usb4-port1: unable to enumerate USB device [ 37.282316][ T408] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 37.301360][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.314358][ T866] overlayfs: missing 'lowerdir' [ 37.321219][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.330990][ T408] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 37.356870][ T45] rust_binder: 0: removing orphan mapping 0:4248 [ 37.373827][ T408] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 37.385106][ T408] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 37.393285][ T408] usb 2-1: Manufacturer: syz [ 37.401625][ T408] usb 2-1: config 0 descriptor?? [ 37.561735][ T874] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 37.569135][ T874] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 97) [ 37.569182][ T874] rust_binder: Error while translating object. [ 37.580199][ T874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.586670][ T874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 37.660359][ T66] rust_binder: 0: removing orphan mapping 0:1048 [ 37.732091][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 37.732109][ T36] audit: type=1400 audit(1755414331.110:832): avc: denied { read write } for pid=875 comm="syz.0.144" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.769890][ T36] audit: type=1400 audit(1755414331.110:833): avc: denied { open } for pid=875 comm="syz.0.144" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.800412][ T36] audit: type=1400 audit(1755414331.140:834): avc: denied { ioctl } for pid=875 comm="syz.0.144" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.835518][ T408] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 37.843215][ T408] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 37.855059][ T408] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 37.873786][ T36] audit: type=1400 audit(1755414331.250:835): avc: denied { create } for pid=881 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.902871][ T887] input: syz1 as /devices/virtual/input/input8 [ 37.921203][ T36] audit: type=1400 audit(1755414331.250:836): avc: denied { bind } for pid=881 comm="syz.0.145" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.951868][ T36] audit: type=1400 audit(1755414331.250:837): avc: denied { name_bind } for pid=881 comm="syz.0.145" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 37.972916][ T36] audit: type=1400 audit(1755414331.250:838): avc: denied { node_bind } for pid=881 comm="syz.0.145" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.996821][ T36] audit: type=1326 audit(1755414331.250:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.3.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff79ab8ebe9 code=0x0 [ 37.996950][ T894] SELinux: security_context_str_to_sid () failed with errno=-22 [ 37.999784][ T892] tipc: Started in network mode [ 38.019903][ T36] audit: type=1400 audit(1755414331.320:840): avc: denied { bind } for pid=891 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.052010][ T892] tipc: Node identity 863b9fc7196, cluster identity 4711 [ 38.059174][ T892] tipc: Enabled bearer , priority 0 [ 38.092131][ T408] usb 2-1: USB disconnect, device number 5 [ 38.112566][ T895] tipc: Disabling bearer [ 38.170483][ T897] cgroup: Invalid name [ 38.174917][ T897] FAT-fs (rnullb0): bogus number of reserved sectors [ 38.181668][ T897] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 38.201219][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.292463][ T901] netlink: 'syz.2.152': attribute type 25 has an invalid length. [ 38.361223][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 38.367387][ T10] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 38.376415][ T10] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 38.386309][ T10] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 38.395370][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.541217][ T408] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 38.616880][ T36] audit: type=1400 audit(1755414331.990:841): avc: denied { append } for pid=903 comm="syz.1.153" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.697935][ T10] usb 1-1: string descriptor 0 read error: -71 [ 38.716853][ T10] usb 1-1: USB disconnect, device number 7 [ 39.256115][ T935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=935 comm=syz.0.162 [ 39.366709][ T937] capability: warning: `syz.0.163' uses deprecated v2 capabilities in a way that may be insecure [ 39.377920][ T937] random: crng reseeded on system resumption [ 39.435607][ T937] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 39.666050][ T954] can0: slcan on ptm0. [ 39.732564][ T951] can0 (unregistered): slcan off ptm0. [ 39.758302][ T970] ======================================================= [ 39.758302][ T970] WARNING: The mand mount option has been deprecated and [ 39.758302][ T970] and is ignored by this kernel. Remove the mand [ 39.758302][ T970] option from the mount to silence this warning. [ 39.758302][ T970] ======================================================= [ 39.808952][ T970] binder: Unknown parameter 'L' [ 39.858295][ T982] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 39.883949][ T982] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 39.968400][ T995] 9pnet_fd: Insufficient options for proto=fd [ 40.088315][ T1014] netlink: 180 bytes leftover after parsing attributes in process `syz.3.182'. [ 40.181062][ T1035] netlink: 120 bytes leftover after parsing attributes in process `syz.3.186'. [ 40.209673][ T1038] netlink: 'syz.3.187': attribute type 12 has an invalid length. [ 40.235240][ T1040] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 40.243767][ T1040] rust_binder: Write failure EINVAL in pid:323 [ 40.816670][ T1059] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.193'. [ 40.832056][ T1059] netlink: 280 bytes leftover after parsing attributes in process `syz.0.193'. [ 40.873920][ T1064] rust_binder: Error while translating object. [ 40.873964][ T1064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.880161][ T1064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 41.237082][ T45] rust_binder: 0: removing orphan mapping 0:24 [ 41.491229][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 41.641225][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 41.647561][ T9] usb 3-1: config 8 has an invalid interface number: 204 but max is 1 [ 41.660105][ T9] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 41.668845][ T9] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 41.677566][ T9] usb 3-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 41.687667][ T9] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 41.696554][ T9] usb 3-1: config 8 has no interface number 0 [ 41.702691][ T9] usb 3-1: config 8 interface 204 altsetting 7 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 41.713694][ T9] usb 3-1: config 8 interface 204 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 41.724656][ T9] usb 3-1: config 8 interface 204 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 41.735627][ T9] usb 3-1: config 8 interface 204 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 41.746611][ T9] usb 3-1: config 8 interface 204 altsetting 7 bulk endpoint 0xF has invalid maxpacket 16 [ 41.756558][ T9] usb 3-1: config 8 interface 204 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 41.767352][ T9] usb 3-1: config 8 interface 204 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 41.778138][ T9] usb 3-1: config 8 interface 204 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 41.789234][ T9] usb 3-1: config 8 interface 204 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 41.800431][ T9] usb 3-1: config 8 interface 204 altsetting 7 endpoint 0x6 has invalid maxpacket 2023, setting to 64 [ 41.811541][ T9] usb 3-1: config 8 interface 204 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 41.822322][ T9] usb 3-1: config 8 interface 204 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 41.833266][ T9] usb 3-1: config 8 interface 204 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 41.844016][ T9] usb 3-1: config 8 interface 204 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 15 [ 41.857287][ T9] usb 3-1: config 8 interface 204 has no altsetting 0 [ 41.879457][ T9] usb 3-1: New USB device found, idVendor=0404, idProduct=034c, bcdDevice=f5.17 [ 41.888645][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.896735][ T9] usb 3-1: Product: syz [ 41.901303][ T9] usb 3-1: Manufacturer: syz [ 41.905927][ T9] usb 3-1: SerialNumber: syz [ 41.911691][ T1085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.013442][ T1113] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 42.128690][ T9] usb 3-1: USB disconnect, device number 14 [ 42.170465][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.186645][ T1123] 9pnet_fd: Insufficient options for proto=fd [ 42.192863][ T45] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 42.342297][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 42.353283][ T45] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.366115][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.372786][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 42.381847][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.390464][ T45] usb 2-1: config 0 descriptor?? [ 42.395786][ T1107] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 42.762865][ T1142] 9pnet_fd: p9_fd_create_unix (1142): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 42.807194][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 42.807211][ T36] audit: type=1400 audit(1755414336.180:878): avc: denied { connect } for pid=1144 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.807488][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 42.840512][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.850157][ T45] usb 2-1: USB disconnect, device number 6 [ 43.091240][ T331] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 43.221247][ T331] usb 3-1: device descriptor read/64, error -71 [ 43.457716][ T1161] overlayfs: failed to clone upperpath [ 43.461277][ T331] usb 3-1: device descriptor read/64, error -71 [ 43.528876][ T1168] rust_binder: 1162 RLIMIT_NICE not set [ 43.711277][ T331] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 43.851253][ T331] usb 3-1: device descriptor read/64, error -71 [ 44.091251][ T331] usb 3-1: device descriptor read/64, error -71 [ 44.201327][ T331] usb usb3-port1: attempt power cycle [ 44.231329][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 44.237533][ T356] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.372093][ T36] audit: type=1400 audit(1755414337.740:879): avc: denied { ioctl } for pid=1193 comm="syz.3.241" path="socket:[9177]" dev="sockfs" ino=9177 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.409698][ T1201] can: request_module (can-proto-0) failed. [ 44.440315][ T1205] TCP: TCP_TX_DELAY enabled [ 44.458823][ T36] audit: type=1400 audit(1755414337.830:880): avc: denied { mount } for pid=1197 comm="syz.1.243" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.484216][ T1209] overlayfs: failed to clone upperpath [ 44.541255][ T331] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 44.562332][ T331] usb 3-1: device descriptor read/8, error -71 [ 44.631220][ T408] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.689316][ T1223] 9pnet_fd: Insufficient options for proto=fd [ 44.696579][ T331] usb 3-1: device descriptor read/8, error -71 [ 44.791204][ T408] usb 1-1: Using ep0 maxpacket: 32 [ 44.797773][ T408] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.806162][ T408] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 44.816489][ T408] usb 1-1: config 1 interface 0 altsetting 106 endpoint 0x1 has invalid maxpacket 57152, setting to 1024 [ 44.841210][ T408] usb 1-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 1024 [ 44.861188][ T408] usb 1-1: config 1 interface 0 has no altsetting 0 [ 44.869785][ T408] usb 1-1: string descriptor 0 read error: -22 [ 44.878292][ T408] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 44.901189][ T408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.911403][ T1196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 44.933263][ T1232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 44.951229][ T331] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 44.961190][ T1232] netlink: 'syz.3.253': attribute type 3 has an invalid length. [ 44.982259][ T331] usb 3-1: device descriptor read/8, error -71 [ 45.112252][ T331] usb 3-1: device descriptor read/8, error -71 [ 45.122107][ T1196] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 45.133637][ T408] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 45.152177][ T408] usb 1-1: USB disconnect, device number 8 [ 45.159935][ T408] usblp0: removed [ 45.221809][ T331] usb usb3-port1: unable to enumerate USB device [ 45.247080][ T36] audit: type=1400 audit(1755414338.620:881): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.401508][ T1238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.401535][ T1238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 45.429978][ T36] audit: type=1400 audit(1755414338.800:882): avc: denied { write } for pid=1239 comm="syz.1.257" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.462471][ T36] audit: type=1400 audit(1755414338.800:883): avc: denied { ioctl } for pid=1239 comm="syz.1.257" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.671482][ T1247] /dev/loop0: Can't lookup blockdev [ 45.678768][ T36] audit: type=1400 audit(1755414339.050:884): avc: denied { create } for pid=1249 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 45.745709][ T1255] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 45.753032][ T1255] rust_binder: Failed to allocate buffer. len:18446744073709551024, is_oneway:false [ 45.753057][ T1255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 45.762658][ T1255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:168 [ 45.860730][ T1260] binder: Unknown parameter '18446744073709551615' [ 45.916566][ T1265] rust_binder: Write failure EFAULT in pid:177 [ 45.953106][ T1267] input: syz0 as /devices/virtual/input/input9 [ 46.087654][ T1275] rust_binder: 145: no such ref 3 [ 46.093128][ T1275] rust_binder: 145: no such ref 4294967295 [ 46.108515][ T1275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 46.248620][ T36] audit: type=1400 audit(1755414339.620:885): avc: denied { setcurrent } for pid=1287 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.322409][ T1295] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551611) [ 46.322428][ T1295] rust_binder: Error while translating object. [ 46.337882][ T1295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.344522][ T1295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 46.433406][ T36] audit: type=1400 audit(1755414339.810:886): avc: denied { create } for pid=1305 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.476361][ T1308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.476392][ T1308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.493963][ T1313] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 46.508868][ T1313] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 46.510672][ T36] audit: type=1400 audit(1755414339.880:887): avc: denied { accept } for pid=1314 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.517849][ T1313] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 46.545139][ T1313] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 46.641238][ T331] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.791210][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 46.797513][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 46.809812][ T331] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 46.818872][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.827077][ T331] usb 2-1: Product: syz [ 46.831273][ T331] usb 2-1: Manufacturer: syz [ 46.835877][ T331] usb 2-1: SerialNumber: syz [ 46.840991][ T331] usb 2-1: config 0 descriptor?? [ 46.846928][ T331] hub 2-1:0.0: bad descriptor, ignoring hub [ 46.852956][ T331] hub 2-1:0.0: probe with driver hub failed with error -5 [ 47.076394][ T1326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 47.086405][ T1326] rust_binder: 192: no such ref 3 [ 47.096633][ T1326] rust_binder: 192: no such ref 4294967295 [ 47.104568][ T1326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 47.183924][ T1333] netlink: 140 bytes leftover after parsing attributes in process `syz.0.292'. [ 47.451203][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.581260][ T9] usb 1-1: device descriptor read/64, error -71 [ 47.727166][ T1343] process 'syz.2.295' launched './file1' with NULL argv: empty string added [ 47.737216][ T1343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.737240][ T1343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:174 [ 47.746756][ T1343] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.755894][ T1343] rust_binder: Read failure Err(EFAULT) in pid:174 [ 47.821221][ T9] usb 1-1: device descriptor read/64, error -71 [ 47.978879][ T1350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=1350 comm=syz.2.297 [ 48.002128][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 48.002145][ T36] audit: type=1400 audit(1755414341.380:890): avc: denied { accept } for pid=1349 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.081234][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 48.221284][ T9] usb 1-1: device descriptor read/64, error -71 [ 48.296480][ T36] audit: type=1326 audit(1755414341.670:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1366 comm="syz.2.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f964858ebe9 code=0x0 [ 48.471322][ T9] usb 1-1: device descriptor read/64, error -71 [ 48.581315][ T9] usb usb1-port1: attempt power cycle [ 48.921903][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.952353][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.082206][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.140163][ T36] audit: type=1400 audit(1755414342.510:892): avc: denied { setopt } for pid=1391 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.160442][ T36] audit: type=1400 audit(1755414342.530:893): avc: denied { bind } for pid=1391 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.191998][ T1394] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 49.321239][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.342260][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.394980][ T331] usb 2-1: USB disconnect, device number 7 [ 49.411038][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 49.418528][ T1403] netlink: 2 bytes leftover after parsing attributes in process `syz.2.317'. [ 49.439111][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.450229][ T36] audit: type=1326 audit(1755414342.820:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz.1.319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80edd8ebe9 code=0x0 [ 49.472934][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.479301][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.501272][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.506808][ T36] audit: type=1400 audit(1755414342.850:895): avc: denied { read } for pid=1402 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.510783][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.539250][ T36] audit: type=1326 audit(1755414342.910:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1402 comm="syz.2.317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f964858ebe9 code=0x0 [ 49.548121][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.571755][ T9] usb 1-1: device descriptor read/8, error -71 [ 49.591514][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.601491][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.611387][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.617781][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.630143][ T36] audit: type=1326 audit(1755414343.000:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1419 comm="syz.3.323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff79ab8ebe9 code=0x0 [ 49.652923][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.659409][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.666151][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.673686][ T1409] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.681427][ T9] usb usb1-port1: unable to enumerate USB device [ 50.199169][ T9] rust_binder: 1402: removing orphan mapping 0:24 [ 50.231520][ T36] audit: type=1400 audit(1755414343.610:898): avc: denied { write } for pid=1423 comm="syz.2.324" path="socket:[10154]" dev="sockfs" ino=10154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.263085][ T36] audit: type=1400 audit(1755414343.630:899): avc: denied { write } for pid=1425 comm="syz.0.325" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.130644][ T1450] fuse: Unknown parameter '0x0000000000000003' [ 51.364030][ T9] rust_binder: 1471: removing orphan mapping 0:4216 [ 51.431325][ T356] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.523446][ T1484] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 51.535060][ T1486] netlink: 'syz.1.345': attribute type 4 has an invalid length. [ 51.559193][ T1486] netlink: 'syz.1.345': attribute type 4 has an invalid length. [ 51.613619][ T1488] netlink: 'syz.1.346': attribute type 12 has an invalid length. [ 51.641874][ T1488] input: syz0 as /devices/virtual/input/input12 [ 51.677722][ T1492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 51.693607][ T1492] rust_binder: Write failure EFAULT in pid:235 [ 52.028658][ T1540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 52.127938][ T1548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.251375][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 52.301220][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.401227][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 52.407621][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.418727][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 52.431663][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 52.440706][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.449364][ T9] usb 3-1: config 0 descriptor?? [ 52.461228][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 52.467720][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.478206][ T66] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 52.485768][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.496536][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.505661][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.513718][ T31] usb 1-1: Product: syz [ 52.517920][ T31] usb 1-1: Manufacturer: syz [ 52.522542][ T31] usb 1-1: SerialNumber: syz [ 52.642262][ T66] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 52.651419][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.661059][ T66] usb 2-1: config 0 descriptor?? [ 52.782598][ T31] usb 1-1: 0:2 : does not exist [ 52.794348][ T31] usb 1-1: USB disconnect, device number 13 [ 52.804528][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.865449][ T9] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 53.287719][ T1572] rust_binder: Write failure EINVAL in pid:426 [ 53.289905][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 53.302617][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 53.311960][ T66] usb 2-1: USB disconnect, device number 8 [ 53.323582][ T1585] FAT-fs (rnullb0): bogus number of reserved sectors [ 53.330333][ T1585] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 53.414047][ T1589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.423511][ T1589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.431914][ C0] usb 3-1: input irq status -75 received [ 53.504543][ T1588] kvm_intel: kvm [1586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x41d7 [ 53.514904][ T1591] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 53.516191][ T1588] kvm: kvm [1586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1fd7 [ 53.532933][ T1588] kvm: kvm [1586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x50c2 [ 53.544298][ T1588] kvm: kvm [1586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x7d5b [ 53.555248][ T1588] kvm: kvm [1586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1446 [ 53.563938][ T1588] kvm: kvm [1586]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xb532 [ 53.801431][ T1596] 9pnet_fd: Insufficient options for proto=fd [ 53.851128][ T1610] overlayfs: failed to clone upperpath [ 53.993994][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 53.994013][ T36] audit: type=1400 audit(1755414347.370:910): avc: denied { listen } for pid=1635 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.131200][ T408] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 54.282240][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.293289][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.303081][ T408] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.316337][ T408] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.325508][ T408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.334358][ T408] usb 2-1: config 0 descriptor?? [ 54.417411][ T1660] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 54.429225][ T1660] input: syz0 as /devices/virtual/input/input13 [ 54.607939][ T36] audit: type=1400 audit(1755414347.980:911): avc: denied { create } for pid=1676 comm="syz.3.407" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.639872][ T36] audit: type=1400 audit(1755414348.010:912): avc: denied { unlink } for pid=290 comm="syz-executor" name="file2" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.745872][ T408] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 54.755600][ T408] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 54.768814][ T408] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 54.869810][ T36] audit: type=1400 audit(1755414348.240:913): avc: denied { bind } for pid=1700 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.890121][ T36] audit: type=1400 audit(1755414348.240:914): avc: denied { name_bind } for pid=1700 comm="syz.3.416" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 54.915178][ T36] audit: type=1400 audit(1755414348.240:915): avc: denied { node_bind } for pid=1700 comm="syz.3.416" saddr=ff01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 54.937176][ T36] audit: type=1400 audit(1755414348.300:916): avc: denied { read } for pid=1702 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.988778][ T36] audit: type=1400 audit(1755414348.360:917): avc: denied { ioctl } for pid=1702 comm="syz.3.417" path="socket:[12096]" dev="sockfs" ino=12096 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.016344][ T1615] rust_binder: inc_ref_done called when no active inc_refs [ 55.016373][ T1615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:430 [ 55.025447][ T408] usb 2-1: USB disconnect, device number 9 [ 55.153410][ T9] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 55.166852][ T9] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 55.175758][ T9] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 55.187315][ T9] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 55.194140][ T9] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 55.208894][ T9] usb 3-1: USB disconnect, device number 19 [ 55.345497][ T36] audit: type=1326 audit(1755414348.710:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134538ebe9 code=0x7fc00000 [ 55.361721][ T1714] netlink: 516 bytes leftover after parsing attributes in process `syz.0.421'. [ 55.368966][ T36] audit: type=1326 audit(1755414348.710:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1661 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f134538ebe9 code=0x7fc00000 [ 55.682809][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 55.872139][ T9] usb 3-1: config 1 has an invalid interface number: 146 but max is 0 [ 55.880511][ T9] usb 3-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 55.891128][ T9] usb 3-1: config 1 has no interface number 0 [ 55.897581][ T9] usb 3-1: config 1 interface 146 altsetting 0 endpoint 0x8D has invalid maxpacket 52159, setting to 64 [ 55.910057][ T9] usb 3-1: config 1 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.932333][ T9] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 55.943030][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.951110][ T9] usb 3-1: Product: syz [ 55.955702][ T9] usb 3-1: Manufacturer: syz [ 55.965537][ T9] usb 3-1: SerialNumber: syz [ 55.984323][ T9] usbserial_generic 3-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 55.996083][ T9] usbserial_generic 3-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 56.011621][ T9] usbserial_generic 3-1:1.146: device has no bulk endpoints [ 56.186998][ T9] usb 3-1: USB disconnect, device number 20 [ 56.301229][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 56.463640][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.480618][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.491260][ T31] usb 2-1: Product: syz [ 56.495481][ T31] usb 2-1: Manufacturer: syz [ 56.500064][ T31] usb 2-1: SerialNumber: syz [ 56.852400][ T1775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.922699][ T1780] No source specified [ 57.101236][ T9] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 57.181238][ T408] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 57.252261][ T9] usb 1-1: No LPM exit latency info found, disabling LPM. [ 57.260246][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 57.271124][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.286039][ T9] usb 1-1: string descriptor 0 read error: -22 [ 57.292289][ T9] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 57.301369][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.311475][ T1778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.331188][ T408] usb 3-1: Using ep0 maxpacket: 8 [ 57.337345][ T408] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.348471][ T408] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.358273][ T408] usb 3-1: config 0 interface 0 has no altsetting 0 [ 57.364951][ T408] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 57.374030][ T408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.382798][ T408] usb 3-1: config 0 descriptor?? [ 57.521761][ T1778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.530345][ T1778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.540747][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 57.546821][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 57.555673][ T9] usb 1-1: USB disconnect, device number 14 [ 57.801362][ T408] usbhid 3-1:0.0: can't add hid device: -71 [ 57.811102][ T408] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 57.819581][ T1788] can0: slcan on ttyS3. [ 57.820151][ T408] usb 3-1: USB disconnect, device number 21 [ 57.871661][ T1788] can0 (unregistered): slcan off ttyS3. [ 58.984561][ T1826] sit0: entered promiscuous mode [ 58.990585][ T1826] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 58.998335][ T1826] netlink: 1 bytes leftover after parsing attributes in process `syz.2.457'. [ 59.024215][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 59.024232][ T36] audit: type=1326 audit(1755414352.400:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1829 comm="syz.0.458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f134538ebe9 code=0x0 [ 59.058829][ T408] usb 2-1: USB disconnect, device number 10 [ 59.173569][ T1840] input: syz1 as /devices/virtual/input/input15 [ 59.237892][ T36] audit: type=1400 audit(1755414352.610:925): avc: denied { create } for pid=1839 comm="syz.2.461" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.258612][ T36] audit: type=1400 audit(1755414352.610:926): avc: denied { link } for pid=1839 comm="syz.2.461" name="file1" dev="overlay" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.281270][ T36] audit: type=1400 audit(1755414352.610:927): avc: denied { setattr } for pid=1839 comm="syz.2.461" name="#9" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.431274][ T1855] 9pnet_fd: Insufficient options for proto=fd [ 59.438456][ T1855] 9pnet_fd: Insufficient options for proto=fd [ 59.867275][ T36] audit: type=1400 audit(1755414354.235:928): avc: denied { mount } for pid=1878 comm="syz.0.474" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 59.890031][ T36] audit: type=1400 audit(1755414354.255:929): avc: denied { mounton } for pid=1878 comm="syz.0.474" path="/112/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.917476][ T36] audit: type=1400 audit(1755414354.285:930): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 59.977841][ T1891] rust_binder: Write failure EFAULT in pid:457 [ 60.101664][ T128] bridge_slave_1: left allmulticast mode [ 60.131187][ T128] bridge_slave_1: left promiscuous mode [ 60.137044][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.161761][ T128] bridge_slave_0: left allmulticast mode [ 60.167468][ T128] bridge_slave_0: left promiscuous mode [ 60.181563][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.207415][ T1905] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 60.313652][ T128] tipc: Left network mode [ 60.324233][ T128] veth1_macvtap: left promiscuous mode [ 60.329842][ T128] veth0_vlan: left promiscuous mode [ 60.336588][ T36] audit: type=1400 audit(1755414354.715:931): avc: denied { mounton } for pid=1910 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 60.379867][ T36] audit: type=1400 audit(1755414354.745:932): avc: denied { read } for pid=1898 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.458447][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.465380][ T1925] netlink: 'syz.3.489': attribute type 16 has an invalid length. [ 60.465660][ T408] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 60.475039][ T1925] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.489'. [ 60.483684][ T1910] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.498592][ T1910] bridge_slave_0: entered allmulticast mode [ 60.505917][ T1910] bridge_slave_0: entered promiscuous mode [ 60.513069][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.520198][ T1910] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.527337][ T1910] bridge_slave_1: entered allmulticast mode [ 60.533638][ T1910] bridge_slave_1: entered promiscuous mode [ 60.586701][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.593786][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.601045][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.608138][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.631208][ T408] usb 1-1: device descriptor read/64, error -71 [ 60.639167][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.646912][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.656131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.663223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.673325][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.680372][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.705926][ T1910] veth0_vlan: entered promiscuous mode [ 60.716809][ T1910] veth1_macvtap: entered promiscuous mode [ 60.871264][ T408] usb 1-1: device descriptor read/64, error -71 [ 60.947775][ T1950] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 61.111265][ T408] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 61.140790][ T1985] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 61.148847][ T1985] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 61.157869][ T1985] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 61.166017][ T1985] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 61.187117][ T36] audit: type=1400 audit(1755414355.555:933): avc: denied { mounton } for pid=1986 comm="syz.1.498" path="/117/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 61.211048][ T1987] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 61.222411][ T1987] overlay: filesystem on ./bus not supported as upperdir [ 61.251561][ T408] usb 1-1: device descriptor read/64, error -71 [ 61.471266][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 61.501209][ T408] usb 1-1: device descriptor read/64, error -71 [ 61.611303][ T408] usb usb1-port1: attempt power cycle [ 61.622625][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 61.633589][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.646475][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 61.655558][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.664936][ T31] usb 2-1: config 0 descriptor?? [ 61.670184][ T1987] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.951227][ T408] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 61.972341][ T408] usb 1-1: device descriptor read/8, error -71 [ 62.080372][ T31] wacom 0003:056A:0020.0007: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 62.090666][ T31] wacom 0003:056A:0020.0007: hidraw0: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.1-1/input0 [ 62.103446][ T31] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0020.0007/input/input16 [ 62.116858][ T408] usb 1-1: device descriptor read/8, error -71 [ 62.282108][ T31] usb 2-1: USB disconnect, device number 11 [ 62.361249][ T408] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 62.382313][ T408] usb 1-1: device descriptor read/8, error -71 [ 62.502663][ T2002] capability: warning: `syz.4.504' uses 32-bit capabilities (legacy support in use) [ 62.513596][ T408] usb 1-1: device descriptor read/8, error -71 [ 62.621765][ T408] usb usb1-port1: unable to enumerate USB device [ 62.784894][ T2034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.840047][ T2042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 63.611212][ T66] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 63.635056][ T31] rust_binder: 2033: removing orphan mapping 0:24 [ 63.720555][ T2075] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 63.771250][ T66] usb 1-1: device descriptor read/64, error -71 [ 63.778681][ T2086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:501 [ 64.011206][ T66] usb 1-1: device descriptor read/64, error -71 [ 64.261209][ T66] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 64.401489][ T66] usb 1-1: device descriptor read/64, error -71 [ 64.408448][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 64.408462][ T36] audit: type=1400 audit(1755414358.775:940): avc: denied { read } for pid=2105 comm="syz.4.536" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.543381][ T2113] tipc: Enabling of bearer rejected, media not registered [ 64.641395][ T66] usb 1-1: device descriptor read/64, error -71 [ 64.746079][ T2135] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 64.754400][ T2135] rust_binder: Write failure EINVAL in pid:57 [ 64.771444][ T66] usb usb1-port1: attempt power cycle [ 64.816257][ T2140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.816286][ T2140] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 64.816317][ T36] audit: type=1400 audit(1755414359.185:941): avc: denied { ioctl } for pid=2138 comm="syz.1.547" path="/131/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.826112][ T2140] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:518 [ 64.874477][ T408] rust_binder: 2138: removing orphan mapping 0:24 [ 65.001989][ T36] audit: type=1400 audit(1755414359.375:942): avc: denied { create } for pid=2144 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.023093][ T2150] fuse: Unknown parameter 'rB' [ 65.030437][ T36] audit: type=1400 audit(1755414359.395:943): avc: denied { attach_queue } for pid=2149 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 65.050491][ T36] audit: type=1326 audit(1755414359.405:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.4.550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc041b8ebe9 code=0x0 [ 65.141209][ T66] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 65.162182][ T66] usb 1-1: device descriptor read/8, error -71 [ 65.302636][ T66] usb 1-1: device descriptor read/8, error -71 [ 65.541208][ T66] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 65.562196][ T66] usb 1-1: device descriptor read/8, error -71 [ 65.692209][ T66] usb 1-1: device descriptor read/8, error -71 [ 65.731302][ T36] audit: type=1326 audit(1755414360.095:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2144 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80edd8ebe9 code=0x7fc00000 [ 65.802716][ T66] usb usb1-port1: unable to enumerate USB device [ 65.843882][ T36] audit: type=1326 audit(1755414360.215:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80edd8ebe9 code=0x0 [ 66.293753][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.302351][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.449131][ T36] audit: type=1400 audit(1755414360.815:947): avc: denied { getopt } for pid=2201 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.530324][ T36] audit: type=1400 audit(1755414360.895:948): avc: denied { map } for pid=2209 comm="syz.3.569" path="socket:[15665]" dev="sockfs" ino=15665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.582279][ T2211] overlayfs: failed to clone upperpath [ 66.721212][ T66] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 66.760235][ T36] audit: type=1400 audit(1755414361.125:949): avc: denied { write } for pid=2212 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.860962][ T2219] /dev/sr0: Can't lookup blockdev [ 66.872327][ T66] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 66.880552][ T66] usb 1-1: config 0 has no interface number 0 [ 66.886730][ T66] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 66.897662][ T66] usb 1-1: config 0 interface 214 has no altsetting 0 [ 66.905924][ T66] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 66.915033][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.923053][ T66] usb 1-1: Product: syz [ 66.927212][ T66] usb 1-1: Manufacturer: syz [ 66.931818][ T66] usb 1-1: SerialNumber: syz [ 66.937401][ T66] usb 1-1: config 0 descriptor?? [ 66.942661][ T2187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.152048][ T66] ax88179_178a 1-1:0.214: probe with driver ax88179_178a failed with error -71 [ 67.163300][ T66] usb 1-1: USB disconnect, device number 23 [ 67.449514][ T2229] netlink: 288 bytes leftover after parsing attributes in process `syz.3.577'. [ 67.514232][ T2240] overlayfs: failed to clone upperpath [ 67.631216][ T66] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 67.763561][ T2262] rust_binder: 351: no such ref 2 [ 67.791185][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 67.797321][ T66] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.808449][ T66] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.818347][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 67.825224][ T66] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 67.835513][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.846486][ T66] usb 2-1: config 0 descriptor?? [ 67.911550][ T2278] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 67.936943][ T2281] 9p: Unknown access argument : -22 [ 68.164158][ T2308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 68.164197][ T2308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:73 [ 68.185658][ T2310] binder: Bad value for 'max' [ 68.260480][ T66] ntrig 0003:1B96:0004.0008: unknown main item tag 0x0 [ 68.281217][ T66] ntrig 0003:1B96:0004.0008: unknown main item tag 0x0 [ 68.288352][ T66] ntrig 0003:1B96:0004.0008: item fetching failed at offset 2/5 [ 68.296555][ T66] ntrig 0003:1B96:0004.0008: parse failed [ 68.302381][ T66] ntrig 0003:1B96:0004.0008: probe with driver ntrig failed with error -22 [ 68.565178][ T403] usb 2-1: USB disconnect, device number 12 [ 68.601260][ T66] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.751308][ T66] usb 5-1: Using ep0 maxpacket: 8 [ 68.762835][ T66] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 68.772219][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.780860][ T66] usb 5-1: config 0 descriptor?? [ 68.825956][ T2337] rust_binder: Write failure EFAULT in pid:363 [ 69.061221][ T64] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 69.159831][ T2352] rust_binder: Error while translating object. [ 69.159863][ T2352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 69.166308][ T2352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:562 [ 69.191126][ T66] uclogic 0003:5543:0003.0009: unknown main item tag 0x5 [ 69.194427][ T2352] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 69.200476][ T66] uclogic 0003:5543:0003.0009: item fetching failed at offset 4/5 [ 69.207408][ T64] usb 1-1: device descriptor read/64, error -71 [ 69.232687][ T66] uclogic 0003:5543:0003.0009: parse failed [ 69.239552][ T66] uclogic 0003:5543:0003.0009: probe with driver uclogic failed with error -22 [ 69.395681][ T2363] rust_binder: Error in use_page_slow: ESRCH [ 69.395707][ T2363] rust_binder: use_range failure ESRCH [ 69.401962][ T2363] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 69.407455][ T2363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 69.415325][ T2363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:571 [ 69.441220][ T64] usb 1-1: device descriptor read/64, error -71 [ 69.463117][ T2366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.463143][ T2366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 69.473819][ T2367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.489797][ T2366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.489831][ T2366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 69.513990][ T2372] rust_binder: Got transaction with invalid offset. [ 69.523361][ T2372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.530042][ T2372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581 [ 69.652619][ T2393] 9pnet_fd: Insufficient options for proto=fd [ 69.680631][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 69.680649][ T36] audit: type=1400 audit(1755414364.045:958): avc: denied { map } for pid=2394 comm="syz.3.629" path="socket:[16177]" dev="sockfs" ino=16177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 69.701460][ T64] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 69.732902][ T2397] overlayfs: failed to clone upperpath [ 69.831294][ T66] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 69.851220][ T64] usb 1-1: device descriptor read/64, error -71 [ 69.981193][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 69.987426][ T66] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 69.995749][ T66] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 70.005957][ T66] usb 2-1: config 0 has no interface number 0 [ 70.013653][ T66] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 70.022819][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.030900][ T66] usb 2-1: Product: syz [ 70.035093][ T66] usb 2-1: Manufacturer: syz [ 70.039703][ T66] usb 2-1: SerialNumber: syz [ 70.045038][ T66] usb 2-1: config 0 descriptor?? [ 70.050837][ T66] usb 2-1: unsupported MDLM descriptors [ 70.091216][ T64] usb 1-1: device descriptor read/64, error -71 [ 70.201313][ T64] usb usb1-port1: attempt power cycle [ 70.298727][ T36] audit: type=1400 audit(1755414364.665:959): avc: denied { create } for pid=2375 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 70.322564][ T36] audit: type=1400 audit(1755414364.695:960): avc: denied { connect } for pid=2375 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 70.346243][ T66] usb 2-1: USB disconnect, device number 13 [ 70.406188][ T36] audit: type=1400 audit(1755414364.775:961): avc: denied { mounton } for pid=2427 comm="syz.1.639" path="/proc/595/task" dev="proc" ino=16218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 70.551207][ T64] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 70.585562][ T64] usb 1-1: device descriptor read/8, error -71 [ 70.590498][ T2452] 9pnet_fd: Insufficient options for proto=fd [ 70.624515][ T2459] overlayfs: failed to clone upperpath [ 70.631588][ T2458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2458 comm=syz.3.647 [ 70.678334][ T36] audit: type=1400 audit(1755414365.045:962): avc: denied { ioctl } for pid=2467 comm="syz.3.650" path="socket:[16371]" dev="sockfs" ino=16371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.722307][ T64] usb 1-1: device descriptor read/8, error -71 [ 70.961240][ T64] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 70.982177][ T64] usb 1-1: device descriptor read/8, error -71 [ 71.112248][ T64] usb 1-1: device descriptor read/8, error -71 [ 71.221301][ T64] usb usb1-port1: unable to enumerate USB device [ 71.378684][ T66] usb 5-1: USB disconnect, device number 2 [ 71.421210][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 71.493323][ T2516] rust_binder: Error in use_page_slow: ESRCH [ 71.493342][ T2516] rust_binder: use_range failure ESRCH [ 71.499391][ T2516] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 71.504914][ T2516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 71.513643][ T2516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:95 [ 71.540617][ T36] audit: type=1400 audit(1755414365.905:963): avc: denied { setopt } for pid=2517 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.582342][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.593428][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.605468][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 71.623160][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.640992][ T9] usb 2-1: config 0 descriptor?? [ 71.881238][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.894701][ T36] audit: type=1400 audit(1755414366.265:964): avc: denied { create } for pid=2546 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.915372][ T36] audit: type=1400 audit(1755414366.285:965): avc: denied { write } for pid=2546 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.935540][ T36] audit: type=1400 audit(1755414366.285:966): avc: denied { nlmsg_write } for pid=2546 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.031182][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 72.037656][ T64] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 72.045299][ T64] usb 5-1: can't read configurations, error -61 [ 72.052978][ T9] hid-steam 0003:28DE:1142.000A: collection stack underflow [ 72.060321][ T9] hid-steam 0003:28DE:1142.000A: item 0 0 0 12 parsing failed [ 72.068151][ T9] hid-steam 0003:28DE:1142.000A: steam_probe:parse of hid interface failed [ 72.076841][ T9] hid-steam 0003:28DE:1142.000A: probe with driver hid-steam failed with error -22 [ 72.191208][ T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.272825][ T403] usb 2-1: USB disconnect, device number 14 [ 72.325360][ T36] audit: type=1400 audit(1755414366.695:967): avc: denied { mounton } for pid=2549 comm="syz.3.676" path="/247/file0" dev="tmpfs" ino=1361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.352429][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 72.358997][ T64] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 72.366829][ T64] usb 5-1: can't read configurations, error -61 [ 72.373393][ T64] usb usb5-port1: attempt power cycle [ 72.441226][ T66] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 72.593658][ T66] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.604216][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.612489][ T66] usb 1-1: Product: syz [ 72.616681][ T66] usb 1-1: Manufacturer: syz [ 72.621352][ T66] usb 1-1: SerialNumber: syz [ 72.721226][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.741535][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 72.747960][ T64] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 72.755630][ T64] usb 5-1: can't read configurations, error -61 [ 72.891213][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 72.895334][ T2589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 72.911600][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 72.918187][ T64] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 72.926131][ T64] usb 5-1: can't read configurations, error -61 [ 72.932908][ T64] usb usb5-port1: unable to enumerate USB device [ 73.025710][ T2596] netlink: 44 bytes leftover after parsing attributes in process `syz.1.692'. [ 73.035060][ T2596] netlink: 59 bytes leftover after parsing attributes in process `syz.1.692'. [ 73.044339][ T2596] netlink: 59 bytes leftover after parsing attributes in process `syz.1.692'. [ 73.325979][ T2608] binder: Bad value for 'stats' [ 73.997033][ T2655] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 74.075665][ T2673] overlay: Unknown parameter 'smackfstransmute' [ 74.341247][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 74.491229][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 74.498862][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 74.507261][ T9] usb 2-1: config 1 has no interface number 0 [ 74.513409][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 74.523358][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 74.533377][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 74.541671][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 74.550715][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.558878][ T9] usb 2-1: Product: syz [ 74.563083][ T9] usb 2-1: Manufacturer: syz [ 74.567706][ T9] usb 2-1: SerialNumber: syz [ 74.573332][ T2675] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 74.580515][ T2675] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 74.752856][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 74.752873][ T36] audit: type=1400 audit(1755414369.125:975): avc: denied { mount } for pid=2683 comm="syz.4.718" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 74.781199][ T36] audit: type=1400 audit(1755414369.135:976): avc: denied { search } for pid=2683 comm="syz.4.718" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.803513][ T36] audit: type=1400 audit(1755414369.135:977): avc: denied { read } for pid=2683 comm="syz.4.718" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.825294][ T36] audit: type=1400 audit(1755414369.135:978): avc: denied { open } for pid=2683 comm="syz.4.718" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.846969][ T36] audit: type=1400 audit(1755414369.135:979): avc: denied { write } for pid=2683 comm="syz.4.718" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.907370][ T408] usb 1-1: USB disconnect, device number 28 [ 74.961624][ T36] audit: type=1400 audit(1755414369.335:980): avc: denied { map } for pid=2688 comm="syz.0.720" path="socket:[18955]" dev="sockfs" ino=18955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 75.003908][ T2675] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 75.011145][ T2675] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 75.082416][ T36] audit: type=1400 audit(1755414369.455:981): avc: denied { mount } for pid=2691 comm="syz.0.721" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.419891][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 75.430995][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 75.443567][ T9] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, be:b5:65:6a:1c:9d [ 75.571187][ T408] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 75.581303][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.722262][ T408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.731210][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 75.732207][ T408] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 75.737638][ T45] usb 5-1: too many configurations: 236, using maximum allowed: 8 [ 75.746373][ T408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.755773][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.768245][ T408] usb 1-1: config 0 descriptor?? [ 75.773812][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.796168][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.807636][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.821249][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.832333][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.845885][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.856816][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.870366][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.881292][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.894947][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.905872][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.919501][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.930447][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.943987][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.954916][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.968490][ T45] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.977598][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=180 [ 75.985823][ T45] usb 5-1: SerialNumber: syz [ 75.991260][ T45] usb 5-1: config 0 descriptor?? [ 76.183086][ T408] nintendo 0003:057E:200E.000B: item fetching failed at offset 5/7 [ 76.191355][ T408] nintendo 0003:057E:200E.000B: HID parse failed [ 76.201228][ T408] nintendo 0003:057E:200E.000B: probe - fail = -22 [ 76.207820][ T408] nintendo 0003:057E:200E.000B: probe with driver nintendo failed with error -22 [ 76.225219][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 76.240418][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 76.250263][ T45] usb 5-1: USB disconnect, device number 7 [ 76.388242][ T408] usb 1-1: USB disconnect, device number 29 [ 76.911924][ T36] audit: type=1400 audit(1755414371.285:982): avc: denied { create } for pid=2733 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.115928][ T150] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 77.115973][ T45] usb 2-1: USB disconnect, device number 15 [ 77.124299][ T150] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 77.138124][ T150] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 77.141481][ T45] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 77.146253][ T150] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 77.165239][ T150] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 77.173363][ T150] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 77.181433][ T150] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 77.189624][ T150] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 77.198174][ T150] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 77.206906][ T150] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 77.215473][ T150] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 77.231463][ T45] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 77.243441][ T45] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 77.254593][ T45] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 77.262968][ T45] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 77.275838][ T36] audit: type=1400 audit(1755414371.645:983): avc: denied { sqpoll } for pid=2744 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.341723][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 77.351229][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 77.360595][ T45] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 77.491419][ T2780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2780 comm=syz.4.737 [ 77.508657][ T2780] netlink: 72 bytes leftover after parsing attributes in process `syz.4.737'. [ 77.624033][ T2787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 77.633786][ T2787] netlink: 'syz.3.736': attribute type 3 has an invalid length. [ 77.786905][ T2791] rust_binder: Error while translating object. [ 77.786945][ T2791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 77.793219][ T2791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:150 [ 78.138502][ T36] audit: type=1400 audit(1755414372.505:984): avc: denied { write } for pid=2796 comm="syz.1.742" name="file0" dev="tmpfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.581654][ T2816] netlink: 57 bytes leftover after parsing attributes in process `syz.4.748'. [ 78.799531][ T2833] incfs: Error accessing: workdir=./bus,lowerdir=./file0,upperdir=./file1,. [ 78.808443][ T2833] incfs: mount failed -2 [ 78.957963][ T2858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.967842][ T2858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.985703][ T2858] fuse: Unknown parameter 'max_rWP0x0008000000000000' [ 78.993492][ T2862] fuse: Unknown parameter 'max_rWP0x0008000000000000' [ 79.032955][ T2872] rust_binder: Error while translating object. [ 79.033014][ T2872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 79.039286][ T2872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:708 [ 79.086217][ T2881] overlayfs: failed to clone upperpath [ 79.191216][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.342276][ T45] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 79.351449][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.360079][ T45] usb 5-1: config 0 descriptor?? [ 79.491215][ T403] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 79.567731][ T45] usb 5-1: Cannot read MAC address [ 79.573463][ T45] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 79.585780][ T45] usb 5-1: USB disconnect, device number 8 [ 79.642268][ T403] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.653228][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.664190][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.674050][ T403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 79.687811][ T403] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 79.696886][ T403] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 79.705027][ T403] usb 2-1: Manufacturer: syz [ 79.710275][ T403] usb 2-1: config 0 descriptor?? [ 79.881981][ T2890] netlink: 'syz.3.771': attribute type 4 has an invalid length. [ 79.912496][ T2897] overlayfs: failed to clone upperpath [ 79.932375][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 79.932393][ T36] audit: type=1400 audit(1755414374.311:994): avc: denied { module_load } for pid=2898 comm="syz.3.774" path="/283/bus" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 79.932472][ T2899] Invalid ELF header magic: != ELF [ 80.118359][ T403] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 80.126209][ T403] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 80.138761][ T403] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 80.444708][ T403] usb 2-1: USB disconnect, device number 16 [ 80.955929][ T36] audit: type=1400 audit(1755414375.331:995): avc: denied { mount } for pid=2922 comm="syz.4.781" name="/" dev="pstore" ino=2688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 80.962969][ T2923] 9pnet_fd: Insufficient options for proto=fd [ 81.023805][ T36] audit: type=1400 audit(1755414375.401:996): avc: denied { unmount } for pid=1910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 81.104461][ T2933] 9pnet_fd: Insufficient options for proto=fd [ 81.113780][ T36] audit: type=1400 audit(1755414375.481:997): avc: denied { nlmsg_read } for pid=2930 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.141277][ T36] audit: type=1400 audit(1755414375.511:998): avc: denied { create } for pid=2930 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.212654][ T330] bridge_slave_1: left allmulticast mode [ 81.218352][ T330] bridge_slave_1: left promiscuous mode [ 81.224442][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.232355][ T330] bridge_slave_0: left allmulticast mode [ 81.238153][ T330] bridge_slave_0: left promiscuous mode [ 81.252598][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.369138][ T2940] netlink: 'syz.0.789': attribute type 2 has an invalid length. [ 81.438808][ T36] audit: type=1400 audit(1755414375.811:999): avc: denied { create } for pid=2947 comm="syz.1.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 81.461396][ T330] veth1_macvtap: left promiscuous mode [ 81.466952][ T330] veth0_vlan: left promiscuous mode [ 81.612784][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.619927][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.627330][ T2944] bridge_slave_0: entered allmulticast mode [ 81.633802][ T2944] bridge_slave_0: entered promiscuous mode [ 81.640496][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.647820][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.654992][ T2944] bridge_slave_1: entered allmulticast mode [ 81.661504][ T2944] bridge_slave_1: entered promiscuous mode [ 81.761446][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.768536][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.775866][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.782948][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.828864][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.836275][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.850870][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.857962][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.874902][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.881999][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.924081][ T2944] veth0_vlan: entered promiscuous mode [ 81.942449][ T2944] veth1_macvtap: entered promiscuous mode [ 82.025275][ T2967] syz.1.795 uses obsolete (PF_INET,SOCK_PACKET) [ 82.107990][ T36] audit: type=1400 audit(1755414376.481:1000): avc: denied { map } for pid=2977 comm="syz.5.799" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.163992][ T36] audit: type=1400 audit(1755414376.481:1001): avc: denied { execute } for pid=2977 comm="syz.5.799" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.193298][ T2988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 82.281233][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 82.311372][ T408] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 82.431233][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 82.437502][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.448853][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.458739][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.465475][ T45] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 82.471254][ T408] usb 1-1: Using ep0 maxpacket: 16 [ 82.475215][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.481791][ T408] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.495934][ T45] usb 2-1: config 0 descriptor?? [ 82.497466][ T408] usb 1-1: config 178 has an invalid interface number: 15 but max is 1 [ 82.510919][ T408] usb 1-1: config 178 has an invalid descriptor of length 129, skipping remainder of the config [ 82.521565][ T408] usb 1-1: config 178 has 1 interface, different from the descriptor's value: 2 [ 82.530618][ T408] usb 1-1: config 178 has no interface number 0 [ 82.538687][ T408] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=12.27 [ 82.547840][ T408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.556496][ T408] usb 1-1: Product: syz [ 82.560675][ T408] usb 1-1: Manufacturer: syz [ 82.565363][ T408] usb 1-1: SerialNumber: syz [ 82.601209][ T66] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.751218][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 82.757741][ T66] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.766212][ T66] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.773309][ T2963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.776245][ T66] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.784056][ T2963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.795879][ T66] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.804275][ T408] usb 1-1: Invalid firmware size=27. [ 82.812267][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.817500][ T408] usb 1-1: USB disconnect, device number 30 [ 82.822379][ T66] usb 6-1: Product: syz [ 82.832203][ T66] usb 6-1: Manufacturer: syz [ 82.836950][ T66] usb 6-1: SerialNumber: syz [ 82.902997][ T2967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.911732][ T2967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.929056][ T45] hid-generic 0003:060B:500A.000D: unexpected long global item [ 82.936873][ T45] hid-generic 0003:060B:500A.000D: probe with driver hid-generic failed with error -22 [ 83.051769][ T66] usb 6-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 83.060294][ T66] usb 6-1: found format II with max.bitrate = 256, frame size=6 [ 83.072860][ T66] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 83.087031][ T66] usb 6-1: USB disconnect, device number 2 [ 83.105285][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.122441][ T3009] overlay: Unknown parameter 'dont_measure' [ 83.130666][ T3011] overlay: Unknown parameter 'dont_measure' [ 83.139411][ T408] usb 2-1: USB disconnect, device number 17 [ 83.175291][ T36] audit: type=1400 audit(1755414377.551:1002): avc: denied { create } for pid=3017 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.396960][ T3050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 83.461376][ T3069] overlayfs: failed to clone upperpath [ 83.693281][ T3086] Invalid ELF header type: 3 != 1 [ 83.696152][ T36] audit: type=1400 audit(1755414378.071:1003): avc: denied { module_load } for pid=3081 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 83.726295][ T3086] Invalid ELF header type: 2 != 1 [ 83.773407][ T3094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3094 comm=syz.1.834 [ 83.942981][ T3102] __vm_enough_memory: pid: 3102, comm: syz.1.836, bytes: 18014402804453376 not enough memory for the allocation [ 83.991201][ T408] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 84.051249][ T64] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 84.121429][ T408] usb 6-1: device descriptor read/64, error -71 [ 84.202293][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.213240][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.223024][ T64] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.232760][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.241629][ T64] usb 1-1: config 0 descriptor?? [ 84.251224][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 84.371210][ T408] usb 6-1: device descriptor read/64, error -71 [ 84.402689][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.413604][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 84.425172][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 84.436212][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.450973][ T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 84.460099][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.468147][ T9] usb 2-1: Product: syz [ 84.472360][ T9] usb 2-1: Manufacturer: syz [ 84.476965][ T9] usb 2-1: SerialNumber: syz [ 84.482449][ T9] usb 2-1: config 0 descriptor?? [ 84.487745][ T3107] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 84.496308][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 84.611198][ T408] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.697263][ T3107] rust_binder: Read failure Err(EAGAIN) in pid:754 [ 84.741193][ T408] usb 6-1: device descriptor read/64, error -71 [ 85.001182][ T408] usb 6-1: device descriptor read/64, error -71 [ 85.111411][ T408] usb usb6-port1: attempt power cycle [ 85.168085][ T3140] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 85.207271][ T3150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 85.273063][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 85.273082][ T36] audit: type=1400 audit(1755414379.651:1006): avc: denied { mount } for pid=3160 comm="syz.3.855" name="/" dev="configfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 85.302170][ T36] audit: type=1400 audit(1755414379.681:1007): avc: denied { search } for pid=3160 comm="syz.3.855" name="/" dev="configfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.325580][ T3161] netlink: 'syz.3.855': attribute type 16 has an invalid length. [ 85.360911][ T3167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52527 sclass=netlink_route_socket pid=3167 comm=syz.3.857 [ 85.452119][ T408] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.492277][ T408] usb 6-1: device descriptor read/8, error -71 [ 85.632212][ T408] usb 6-1: device descriptor read/8, error -71 [ 85.851028][ T36] audit: type=1326 audit(1755414380.221:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3189 comm="syz.3.866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff79ab8ebe9 code=0x0 [ 85.881241][ T408] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.922245][ T408] usb 6-1: device descriptor read/8, error -71 [ 86.053918][ T408] usb 6-1: device descriptor read/8, error -71 [ 86.161281][ T408] usb usb6-port1: unable to enumerate USB device [ 86.692470][ T3194] overlayfs: failed to clone upperpath [ 86.771507][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 86.772601][ T3204] bridge0: port 3(veth0_to_bridge) entered blocking state [ 86.787285][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 86.787771][ T3204] bridge0: port 3(veth0_to_bridge) entered disabled state [ 86.800222][ T64] usb 1-1: USB disconnect, device number 31 [ 86.821301][ T3204] veth0_to_bridge: entered allmulticast mode [ 86.830926][ T3204] veth0_to_bridge: entered promiscuous mode [ 86.839345][ T3204] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.851942][ T3204] bridge0: port 3(veth0_to_bridge) entered blocking state [ 86.859097][ T3204] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 86.921253][ T3209] input: syz0 as /devices/virtual/input/input22 [ 87.032179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.033329][ T64] usb 2-1: USB disconnect, device number 18 [ 87.044503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.062331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.074606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.087026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.099261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.111514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.123643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.135909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.148122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.151230][ T408] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.329083][ T3223] rust_binder: 762: no such ref 0 [ 87.337380][ T3223] netlink: 'syz.1.879': attribute type 11 has an invalid length. [ 87.346881][ T408] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 87.359982][ T3223] rust_binder: 762: no such ref 0 [ 87.366282][ T3224] rust_binder: 3221 RLIMIT_NICE not set [ 87.366605][ T408] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 87.385602][ T3223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:762 [ 87.386119][ T408] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 87.440731][ T408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.469623][ T408] usb 6-1: config 0 descriptor?? [ 87.545909][ T3231] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 87.545945][ T3231] rust_binder: Error in use_page_slow: EFAULT [ 87.556773][ T3231] rust_binder: use_range failure EFAULT [ 87.563083][ T3231] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 87.568808][ T3231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 87.577386][ T3231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:769 [ 87.673237][ T36] audit: type=1400 audit(1755414382.041:1009): avc: denied { getattr } for pid=3232 comm="syz.3.883" name="KEY" dev="sockfs" ino=21365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.857405][ T3237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 87.866695][ T3237] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 87.917058][ T408] thrustmaster 0003:044F:B323.000E: hidraw0: USB HID v1.02 Device [HID 044f:b323] on usb-dummy_hcd.5-1/input0 [ 87.937914][ T408] thrustmaster 0003:044F:B323.000E: no inputs found [ 88.045183][ T3242] rust_binder: Write failure EFAULT in pid:778 [ 88.176534][ T408] usb 6-1: USB disconnect, device number 7 [ 88.264072][ T330] bridge_slave_1: left allmulticast mode [ 88.269811][ T330] bridge_slave_1: left promiscuous mode [ 88.277566][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.286526][ T330] bridge_slave_0: left allmulticast mode [ 88.292635][ T330] bridge_slave_0: left promiscuous mode [ 88.298360][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.537443][ T330] veth1_macvtap: left promiscuous mode [ 88.552583][ T36] audit: type=1400 audit(1755414382.921:1010): avc: denied { map } for pid=3261 comm="syz.0.896" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.586025][ T330] veth0_vlan: left promiscuous mode [ 88.925727][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.940446][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.955861][ T3273] bridge_slave_0: entered allmulticast mode [ 88.969858][ T3273] bridge_slave_0: entered promiscuous mode [ 88.983174][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.997892][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.012916][ T3273] bridge_slave_1: entered allmulticast mode [ 89.025254][ T3273] bridge_slave_1: entered promiscuous mode [ 89.197260][ T3282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3282 comm=syz.5.900 [ 89.229452][ T3283] rust_binder: Write failure EFAULT in pid:25 [ 89.348363][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.361574][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.383782][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.390916][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.410512][ T3273] veth0_vlan: entered promiscuous mode [ 89.449562][ T3273] veth1_macvtap: entered promiscuous mode [ 89.461671][ T3295] tmpfs: Unknown parameter 'noinode32' [ 89.548969][ T3302] rust_binder: 2: no such ref 0 [ 89.563804][ T3302] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 89.591040][ T3302] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 89.591067][ T3302] rust_binder: Error while translating object. [ 89.608181][ T3302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.614773][ T3302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 89.700881][ T3311] 8021q: VLANs not supported on ip_vti0 [ 89.720176][ T36] audit: type=1400 audit(1755414383.981:1011): avc: denied { map } for pid=3303 comm="syz.0.906" path="socket:[22944]" dev="sockfs" ino=22944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.771714][ T3311] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 89.801193][ T36] audit: type=1400 audit(1755414384.021:1012): avc: denied { map } for pid=3307 comm="syz.6.908" path="socket:[22959]" dev="sockfs" ino=22959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.855913][ T3320] tipc: Started in network mode [ 89.881103][ T3320] tipc: Node identity 96cd7d95a3a3, cluster identity 4711 [ 89.909830][ T36] audit: type=1400 audit(1755414384.021:1013): avc: denied { read } for pid=3307 comm="syz.6.908" path="socket:[22959]" dev="sockfs" ino=22959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.934223][ T3320] tipc: Enabled bearer , priority 0 [ 89.962439][ T3315] tipc: Resetting bearer [ 89.999623][ T3315] tipc: Disabling bearer [ 90.138234][ T3332] netlink: 'syz.5.915': attribute type 1 has an invalid length. [ 90.150282][ T3332] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 90.186219][ T3336] /dev/loop0: Can't lookup blockdev [ 90.196974][ T36] audit: type=1400 audit(1755414384.571:1014): avc: denied { watch watch_reads } for pid=3335 comm="syz.3.917" path="/353/file0" dev="tmpfs" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.544973][ T36] audit: type=1400 audit(1755414384.921:1015): avc: denied { audit_write } for pid=3362 comm="syz.0.927" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.581214][ T36] audit: type=1107 audit(1755414384.921:1016): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='bl&@J9X6K uKU;mW,1hk/ \i¯h*Y` [ 90.581214][ T36] lKx*¯ZN?"fXeͧM' [ 90.992215][ T3385] netlink: 'syz.3.934': attribute type 27 has an invalid length. [ 91.497387][ T3408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.941'. [ 91.507660][ T3408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 91.507691][ T3408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:56 [ 91.528730][ T3410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.652249][ T3418] can0: slcan on ttyS3. [ 91.668770][ T3417] tipc: Started in network mode [ 91.674967][ T3417] tipc: Node identity 5e7ec631e6cb, cluster identity 4711 [ 91.686767][ T3417] tipc: Enabled bearer , priority 0 [ 91.736979][ T3417] tipc: Resetting bearer [ 91.763624][ T3418] can0 (unregistered): slcan off ttyS3. [ 91.770423][ T3417] tipc: Disabling bearer [ 91.919781][ T3422] fuse: Unknown parameter 'VEţKL2S[Qͼ`@5Vu9aOԶ4W] [ 91.919781][ T3422] Gmo$m:F)c~c)Jy&qUB娸09$mVWFf`yTB돉ۊ)GCֳcR-Ag/KK' [ 92.022122][ T3429] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x3882db6c) [ 92.030950][ T3429] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 92.039838][ T3429] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.041221][ C1] net_ratelimit: 18799 callbacks suppressed [ 92.041236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.048226][ T3429] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 92.054098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.086140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.098399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.110661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.122948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.135242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.147449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.159726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.171893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.183662][ T3433] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 92.195913][ T3433] kvm: pic: level sensitive irq not supported [ 92.196029][ T3433] kvm: pic: non byte read [ 92.217789][ T3433] kvm: pic: level sensitive irq not supported [ 92.217853][ T3433] kvm: pic: non byte read [ 92.229254][ T3433] kvm: pic: level sensitive irq not supported [ 92.229347][ T3433] kvm: pic: non byte read [ 92.335338][ T3443] rust_binder: Write failure EFAULT in pid:504 [ 92.469157][ T36] audit: type=1400 audit(1755414386.841:1017): avc: denied { load_policy } for pid=3452 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.496124][ T3454] SELinux: failed to load policy [ 92.501997][ T3454] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 92.536064][ T3454] netlink: 'syz.0.954': attribute type 2 has an invalid length. [ 92.574983][ T3462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.957'. [ 92.705675][ T3473] FAT-fs (rnullb0): invalid media value (0x3f) [ 92.712575][ T3473] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 92.824770][ T3479] netlink: 556 bytes leftover after parsing attributes in process `syz.0.963'. [ 92.961237][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 93.133615][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 93.144958][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.155237][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 93.164971][ T408] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 93.172737][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.186289][ T9] usb 7-1: config 0 descriptor?? [ 93.404695][ T9] wacom 0003:056A:0336.000F: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.6-1/input0 [ 93.488203][ T9] usb 7-1: USB disconnect, device number 2 [ 93.842306][ T408] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.859714][ T408] usb 1-1: no configurations [ 93.869555][ T408] usb 1-1: can't read configurations, error -22 [ 93.876251][ T3497] raw_sendmsg: syz.0.969 forgot to set AF_INET. Fix it! [ 94.287098][ T3525] rust_binder: Write failure EFAULT in pid:84 [ 96.084576][ C1] sched: DL replenish lagged too much [ 96.179461][ T36] audit: type=1400 audit(1755414390.491:1018): avc: denied { write } for pid=3529 comm="syz.0.980" name="tcp6" dev="proc" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.051173][ C0] net_ratelimit: 59201 callbacks suppressed [ 97.051197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 97.051439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.057261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 97.069276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.081179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 97.093161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.105183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 97.117357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.129060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 97.141235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.736551][ T3537] fuse: Bad value for 'user_id' [ 102.061156][ C0] net_ratelimit: 89154 callbacks suppressed [ 102.061179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 102.061295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.067318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 102.079501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.091177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 102.103175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.115035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 102.126988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.139001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 102.151168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.207491][ T36] audit: type=1400 audit(1755414396.371:1019): avc: granted { setsecparam } for pid=3535 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 102.302863][ T3537] fuse: Bad value for 'user_id' [ 102.337348][ T36] audit: type=1400 audit(1755414396.371:1020): avc: denied { mounton } for pid=3535 comm="syz.6.984" path="mnt:[4026532344]" dev="nsfs" ino=4026532344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.447488][ T3541] netlink: 'syz.0.983': attribute type 4 has an invalid length. [ 107.071200][ C0] net_ratelimit: 84887 callbacks suppressed [ 107.071224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 107.071284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.077268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 107.089536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.101207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 107.113202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.125076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 107.137068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.149073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 107.161322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.961402][ T3542] netlink: 'syz.0.983': attribute type 4 has an invalid length. [ 112.081175][ C0] net_ratelimit: 86597 callbacks suppressed [ 112.081199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 112.081264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.087359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 112.099434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.111347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 112.123426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.135213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 112.147472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.159189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 112.171177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.091162][ C0] net_ratelimit: 89074 callbacks suppressed [ 117.091186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 117.091195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.091271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.097273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 117.109446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.121225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 117.133117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.145106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 117.157073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.168966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 122.101195][ C0] net_ratelimit: 84005 callbacks suppressed [ 122.101219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 122.101293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.107374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 122.119481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.131272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 122.143435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.155159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 122.167137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.179016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 122.190967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.111174][ C0] net_ratelimit: 90105 callbacks suppressed [ 127.111198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 127.111231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.117234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 127.129250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.141152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 127.153114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.165110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 127.177281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.188959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 127.200976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.121160][ C1] net_ratelimit: 89146 callbacks suppressed [ 132.121183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.121247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 132.127197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.139191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 132.151399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.163112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 132.175118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.187021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 132.199066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.210947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 137.131170][ C0] net_ratelimit: 88410 callbacks suppressed [ 137.131194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 137.131263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.137226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 137.149346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.161268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 137.173326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.185206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 137.197304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.209064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 137.221268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.141147][ C1] net_ratelimit: 95612 callbacks suppressed [ 142.141170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.141231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 142.147232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.159140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 142.171259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.183100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 142.195089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.206981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 142.219240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.230835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 147.151144][ C1] net_ratelimit: 121520 callbacks suppressed [ 147.151168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.151181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 147.151255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 147.157242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.169345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 147.181411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.193321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 147.205204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.217150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 147.229062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.161187][ C0] net_ratelimit: 130331 callbacks suppressed [ 152.161209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 152.161374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.167313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 152.179319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.191259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 152.203193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.215191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 152.227316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.239059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 152.251042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.723600][ T36] audit: type=1400 audit(1755414447.101:1021): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1544]" dev="pipefs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.171165][ C0] net_ratelimit: 132980 callbacks suppressed [ 157.171187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 157.171194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.171390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.177286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 157.189300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.201177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 157.213044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.225044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 157.237140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.248978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 162.181160][ C0] net_ratelimit: 137416 callbacks suppressed [ 162.181182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 162.181222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.187281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 162.199476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.211194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 162.223282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.235043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 162.247044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.258910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:06:b9:02:f5:dd, vlan:0) [ 162.270852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)