last executing test programs: 4m31.902037033s ago: executing program 2 (id=262): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000140)=""/16, 0x10}) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208080, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x3, 0x3a) close_range(r1, 0xffffffffffffffff, 0x0) 4m31.888718964s ago: executing program 2 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 4m31.855675784s ago: executing program 2 (id=264): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000001100000000000000000000000000000200"], &(0x7f0000000bc0)=0x2a) 4m31.785175235s ago: executing program 2 (id=265): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x1a8c) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x8000021, 0x800000000004}, &(0x7f0000bbdffc)) sigaltstack(&(0x7f0000000200)={0x0, 0x80000002}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r0}) sendmmsg$unix(r1, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c2", 0x14}], 0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x2}, 0x1c) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$sock_int(r5, 0x1, 0x44, &(0x7f0000001600), 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x400c620e, 0xfffffffffffffffe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 4m30.958618817s ago: executing program 2 (id=276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) setsockopt$inet6_tcp_int(r1, 0x6, 0x1a, &(0x7f0000000000)=0x928, 0x4) personality(0x5400004) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 4m30.950981458s ago: executing program 2 (id=277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x51, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a3695"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x50, 0x0, &(0x7f0000000440)="c410687af45c2c88d140855b60ff0ae19139acbe886e09540e73a8da59f0f884601ebbc9ecc0d68b87cf9a14b0974281981642e61e4b7c75d3b4f86c68e0d90761343f3e7960c926da42f34cdeec3c3b"}) 4m15.908064206s ago: executing program 32 (id=277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x51, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a3695"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x50, 0x0, &(0x7f0000000440)="c410687af45c2c88d140855b60ff0ae19139acbe886e09540e73a8da59f0f884601ebbc9ecc0d68b87cf9a14b0974281981642e61e4b7c75d3b4f86c68e0d90761343f3e7960c926da42f34cdeec3c3b"}) 3m20.860103831s ago: executing program 1 (id=1463): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r0) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "94c873bf02c6e1bb77afc5cdbd6e63788a83ce49227d949c435a5018cc5d1f5e4483500d2dfc3cace0cda47d7337612fd37dd59e2b8dbc9aee32d37b184e7c15", 0x2f}, 0x48, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r0, r3) r4 = add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)={0x2, 0x0, @auto=[0x1b, 0x22, 0x23, 0x2e]}, 0xc, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000380)={r4, 0x65, 0x63}, &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, &(0x7f0000000440)="efdee1fcefec93de2b148eac8937bd63d9ca91e959317235eaca5e7559d2da49c19850fde1ad7330b288b744525dc082c94362546a0e757c3c1e310709a023b10c90cde401cf70a30c70086e10013ebb0e31893b719cfc62581cf3cbfb86ddfedcbb3315c2", &(0x7f00000004c0)=""/99) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) (async) r5 = add_key(&(0x7f0000000540)='pkcs7_test\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="bcd2", 0x2, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000600)=""/240, 0xf0) (async) keyctl$update(0x2, r4, &(0x7f0000000700)="f655e30a3f70db8cb86d32280886426eb1886bb06d3d751630b50d195a8e2773ca7b5de5c09c4a0cea459d2ae589ad5973cd129bd1691642887398f26884704ca7ae82e71522b2a98fb52237edb4540eb2e1e43fe9c24b875172260d7d658b45c4c9", 0x62) (async) exit(0x58011acd) r6 = add_key$fscrypt_provisioning(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)={0x2, 0x0, @auto=[0x34]}, 0x9, r0) r7 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r3, 0x0) (async) keyctl$revoke(0x3, r5) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2001, 0x0) (async) keyctl$update(0x2, r0, &(0x7f0000000900)="98d3ab20432f04d8af3ada6087963cc093b07fa6af0b86d0a983cc12f0ac13a62b1a65e70e3a5530f7eba5", 0x2b) (async) keyctl$reject(0x13, r7, 0x100, 0x8000000000000001, r2) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000940)={r3, 0x8f, 0x42}, &(0x7f0000000980)={'enc=', 'oaep', ' hash=', {'michael_mic\x00'}}, &(0x7f0000000a00)="1cbe5e7dea28642827b34943ee579b33cc413fa0384c10daa7b301a3700c7ba3954aa73814c4675b54d1b751ad08c159d5aabf94f5ef562702ec8466c13129acde6fa1d9d7f51e036ac0a3238228af1c38dbc45b43b5a66c646a4ea8970905d0c352f8f666f68fca44849e04f6bffeedd6238cc7ba1c180c6a496b57b4e3c585f6e32f9e0aea08fd85a3d479351601", &(0x7f0000000ac0)="c7fe843f6861f55f38e50732804c79be6f525f8d7e5041765ad94cdb192cb8c0ffae763c8468c0890e6c0903046365957975a239c27a9950ba597186812b007c885d") (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b40)='syz1\x00', 0x200002, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000b80)={0x4, 0x0, [{0x5, 0x4, 0x1, 0x0, @irqchip={0x70, 0x4}}, {0x9, 0x1, 0x0, 0x0, @sint={0x5, 0x2}}, {0x7bd43673, 0x3, 0x0, 0x0, @msi={0xd, 0x0, 0x5afea8cf, 0x7}}, {0xa1e, 0x4, 0x1, 0x0, @adapter={0x8, 0x4, 0x2, 0x424c, 0x1}}]}) (async) openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x2040, 0x88) keyctl$link(0x8, r5, r3) (async) r11 = getpgrp(0xffffffffffffffff) syz_open_procfs(r11, &(0x7f0000000cc0)='net/sco\x00') (async) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) (async) dup(r9) 3m20.841453522s ago: executing program 1 (id=1465): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="fdea10dbd8780857c7858c00e36a78d91f007ae2acbd711f8a5570d32072aa56dfba23c514f4457e18f053394bde51ba9f3bc617c78fb4fc42f11ddfb5c6b5969c036ceb5ee7", 0x46}, {&(0x7f0000000100)}], 0x2, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0x800}}], 0x18}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3c89}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="0b1e8d36770873d5beceea10d1aa0b6c306b2ee410bd39480dd9e61bfe274d3e44a209cddc526a2d30f02f0033edddf998e4f4aa49495607db06ce8ced41f67f6107123819a71d98beeeb06710b1a1ca828fde2b7df28e31193537e4b6fc", 0x5e}, {&(0x7f0000000300)="7beafc28fb7aa5a9c3675c73496ca34adb5ae5f5174e3108aae94da0cce3c1c4006cbcf3ed3b4bc777c66501ac3a006d416988b9e8f2ee4b6ca3a5e27b86b7a3eea8fe2a284a4794acaec3e459", 0x4d}], 0x2, &(0x7f0000000640)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}, @hopopts={{0x20, 0x29, 0x36, {0x2a, 0x0, '\x00', [@ra={0x5, 0x2, 0x2}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0xaa, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0xd0}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x40}}, {{&(0x7f00000019c0)={0xa, 0x4e22, 0xa, @mcast2, 0xfffffffe}, 0x1c, 0x0}}], 0x4, 0x4000) 3m20.831451222s ago: executing program 1 (id=1466): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40220, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) getpeername$inet(r6, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_usb_connect$uac1(0x1, 0xb7, &(0x7f0000000000)=ANY=[@ANYBLOB="1201eb00000000106b1d01014000010203010902c7fd03010000000904000000010100000a24010000000201020d24060000030000000000000808240800000000500c2402000000000000000000132406000606000027000900000000000000000924030000000005003124080500"], 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9d2}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x166}]}, 0x34}}, 0x20008081) r9 = socket(0x1e, 0x2, 0x0) sendmsg$netlink(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="10000000190000e718b2ef809b644b25b6cae8814ca31254a2d10c2b8f376948d79efea030e1a4a7a21c44a325fe47a28f3fc483e082ede32dac57ac9df1d3fd44d07ab8274a86067d539ab57b1b913f91d6433b23115929cf6695e9ab3339db27ff69550f3b7313a4a6449ad64ecbeb9f0d8e06beb736fe25e782800c20c6cdb4a873d55a9f02987561edf68e154410b9ecaf2b761e995dfe7149ad917348618d0463eacb1855f69e09c5471b139bda16fbe81745771db538a412d99d9f0fe7da03b5e77f931f4fad8e9cfea5974981be704f25a8e26e4185ffbf962d3ab24a55da4d583ef040ed1a86"], 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = dup3(r9, r7, 0x0) recvmmsg(r10, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x1e, 0x1000, @vifc_lcl_ifindex=r1, @private=0xa010101}, 0x10) capset(&(0x7f0000000040), 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m20.200297011s ago: executing program 1 (id=1477): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x206c00, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001000)=ANY=[@ANYBLOB="0000000000000000000600"/24]) (async) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001000)=ANY=[@ANYBLOB="0000000000000000000600"/24]) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6(0xa, 0x80000, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x89901) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x122, 0x0, 0xfffffffffffffffe}]}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x122, 0x0, 0xfffffffffffffffe}]}) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) recvmsg$unix(r5, &(0x7f0000000180)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000480)=""/78, 0xe}, {&(0x7f0000000700)=""/186, 0xba}], 0x6, &(0x7f0000000040)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000180)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000480)=""/78, 0xe}, {&(0x7f0000000700)=""/186, 0xba}], 0x6, &(0x7f0000000040)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getpeername$packet(r6, 0x0, &(0x7f0000000280)) (async) getpeername$packet(r6, 0x0, &(0x7f0000000280)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 3m19.578954701s ago: executing program 1 (id=1484): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="fdea10dbd8780857c7858c00e36a78d91f007ae2acbd711f8a5570d32072aa56dfba23c514f4457e18f053394bde51ba9f3bc617c78fb4fc42f11ddfb5c6b5969c036ceb5ee7", 0x46}, {&(0x7f0000000100)}], 0x2, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0x800}}], 0x18}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3c89}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="0b1e8d36770873d5beceea10d1aa0b6c306b2ee410bd39480dd9e61bfe274d3e44a209cddc526a2d30f02f0033edddf998e4f4aa49495607db06ce8ced41f67f6107123819a71d98beeeb06710b1a1ca828fde2b7df28e31193537e4b6fc", 0x5e}, {&(0x7f0000000300)="7beafc28fb7aa5a9c3675c73496ca34adb5ae5f5174e3108aae94da0cce3c1c4006cbcf3ed3b4bc777c66501ac3a006d416988b9e8f2ee4b6ca3a5e27b86b7a3eea8fe2a284a4794acaec3e459", 0x4d}], 0x2, &(0x7f0000000640)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}, @hopopts={{0x20, 0x29, 0x36, {0x2a, 0x0, '\x00', [@ra={0x5, 0x2, 0x2}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0xaa, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0xd0}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x40}}, {{&(0x7f00000019c0)={0xa, 0x4e22, 0xa, @mcast2, 0xfffffffe}, 0x1c, 0x0}}], 0x4, 0x4000) 3m19.376839684s ago: executing program 1 (id=1487): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000001200)=""/198, 0xc6, 0xff) 3m19.349941814s ago: executing program 33 (id=1487): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000001200)=""/198, 0xc6, 0xff) 1m3.671442733s ago: executing program 0 (id=2612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x15a, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2ba52ebd7000fddbdf251b0000000600210061"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000002c0)=[@clear_death={0x400c630f, 0x2}], 0x51, 0x0, &(0x7f0000000000)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x112, r2, 0x74e17000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m3.650056613s ago: executing program 0 (id=2613): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYBLOB="dad45b908443cf7e7281ba35a15337c30199a10da8f0d5dc7187434266c05951b0573caa683039e76a155a1b6a2d6699af97190b8e9c91d720724ec69bf7bc5fa8e0e5678b7ec802ec6ad80419b13d592114a122c9c91be771e11d609db3d186ef859786d5bb04e851d7267f0e46e7717342e1fdf5baba2fc98396d8d681648cbbecbc1642e826074d1fa569406ad0b79531fe87ba8b362422d7b197e82c70b9eaa5069e6c7a23a2dbde6982875666edb75cce66c66d72026d15fc2b2e364d79e5bcb7c4910c8ed03761a54fe78ae61dee9c5a80cf07484750fd85bb17ca76b0bea8be9af9a059a22f8f7941f429", @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @local, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="55ec", 0x2}], 0x1}}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f00000007c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x100880a8, 0x0, 0x8, 0x0, 0x40, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r4, 0x47f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40}]) 1m3.622464314s ago: executing program 0 (id=2614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40082, 0x0) setreuid(0xffffffffffffffff, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x0, 0x0) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000280)={0x6000, 0x40000080600}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000180)={[0x1000, 0x6000, 0x100000, 0x4000], 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=[@clear_death={0x400c630f, 0x1}, @acquire={0x40046305, 0x1}], 0x1a, 0x0, &(0x7f00000001c0)="d7e55ff59a1246f77f41a901d7c79a69df27b13b83f5d428f041"}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close_range(r6, r3, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) 1m3.621973854s ago: executing program 0 (id=2615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000040)={0x1, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.620476894s ago: executing program 0 (id=2616): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.440309736s ago: executing program 0 (id=2617): mkdir(0x0, 0x9) (async) chdir(0x0) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x200) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x5) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r5) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x14, r7, 0x21, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4050) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0xaa080, 0x0) (async) statx(r4, &(0x7f0000000380)='./file0\x00', 0x800, 0x402, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000300), 0x40, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noxattr}, {@ignoreqv}], [{@audit}, {@euid_gt={'euid>', r9}}, {@subj_user={'subj_user', 0x3d, 'TIPCv2\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\'('}}, {@uid_lt={'uid<', r10}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=r2], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) (async) r11 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r11, r0, 0x0, 0x80000000) 1m3.439691816s ago: executing program 34 (id=2617): mkdir(0x0, 0x9) (async) chdir(0x0) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x200) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x5) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r5) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x14, r7, 0x21, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4050) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0xaa080, 0x0) (async) statx(r4, &(0x7f0000000380)='./file0\x00', 0x800, 0x402, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000300), 0x40, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noxattr}, {@ignoreqv}], [{@audit}, {@euid_gt={'euid>', r9}}, {@subj_user={'subj_user', 0x3d, 'TIPCv2\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\'('}}, {@uid_lt={'uid<', r10}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=r2], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) (async) r11 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r11, r0, 0x0, 0x80000000) 4.467552752s ago: executing program 5 (id=3101): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ptrace(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000002940)) 4.379819623s ago: executing program 5 (id=3103): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r0, 0x6, 0x1) (async) r1 = dup2(r0, r0) (async) socketpair(0x2, 0x6, 0xc6c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0xffffffff) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x180000e, 0x2010, r1, 0xf80d000) r5 = syz_clone(0x1000, &(0x7f0000000080)="f7b734cd1d40f943159bfed379c4fbe18254bbe083b2cf584ccca94336a3355f1414f9cd633e1b405d37741cd3d2b84942ae04bacff74b6b6b6a7f1b56327d5031c9e27b3175e1e8760eb80ebfe51b9c0d38b6922e6d9dfde0498c897f893f77636832e00e997b36585f764f9397a277fc4eb0e970b66b5abef711ddaa8074cfc66a35aeca600758aec5ae94106754f71a67663b9b0219c698a87c11a01671bde74238ae718adc38a26ac0460a395f48b2535074cd03b0e74ee5cb17d4529c062daa3403cace0f181ce28bb6e61d11bbfeaf23160c", 0xd5, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="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") (async) write$binfmt_format(r0, &(0x7f0000000300)='-1\x00', 0x3) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x5, 0x2, 0x51, @local, @rand_addr=' \x01\x00', 0x7, 0x20, 0x0, 0x5}}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r2, &(0x7f0000002a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a00)={&(0x7f00000025c0)=@acquire={0x414, 0x17, 0x200, 0x70bd29, 0x25dfdbfe, {{@in=@rand_addr=0x64010100, 0x4d3, 0x33}, @in6=@private2, {@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x6c, r6, r8}, {{@in=@multicast1, @in=@loopback, 0x4e23, 0x8, 0x4e23, 0x0, 0x2, 0x0, 0x20, 0x33, 0x0, r9}, {0x0, 0x3, 0x5, 0x8000000000000000, 0x2, 0x200, 0x0, 0x6fef}, {0x0, 0xffffffffffffffff, 0xffffffff, 0x3}, 0x80000001, 0x6e6bbf, 0x2, 0x0, 0x2, 0x2dad127761f4e11e}, 0x1, 0x72, 0x5, 0x70bd28}, [@lifetime_val={0x24, 0x9, {0x1, 0x3, 0x470000, 0x7407}}, @tfcpad={0x8, 0x16, 0x400}, @tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x2b}, 0x0, @in6=@mcast1, 0x3501, 0x1, 0x0, 0x3, 0x8, 0x7, 0x200}, {{@in6=@private1, 0x4d5, 0xff}, 0x2, @in=@multicast2, 0x3501, 0x0, 0x1, 0x5, 0x7ff, 0x4}]}, @tmpl={0xc4, 0x5, [{{@in6=@private2, 0x4d2}, 0x2, @in=@multicast2, 0x34ff, 0x2, 0x3, 0x3, 0x8, 0x2, 0x1000}, {{@in=@multicast1, 0x4d4, 0x6c}, 0xa, @in=@empty, 0x3501, 0x0, 0x3, 0xd, 0x9, 0x6, 0x8}, {{@in=@broadcast, 0x4d6, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x3503, 0x3, 0x2, 0x0, 0x56, 0x5, 0x1ff}]}, @tmpl={0x104, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xff, 0x3c}, 0x2, @in=@private=0xa010100, 0x3505, 0x4, 0x0, 0x3, 0x2, 0x546e1599, 0x2efd}, {{@in=@private=0xa010100, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3505, 0x4, 0x3, 0x6, 0xbcc, 0xfa11, 0x2}, {{@in6=@local, 0x4d5, 0xff}, 0xa, @in=@rand_addr=0x64010100, 0x3504, 0x4, 0x2, 0xfd, 0x1, 0x9, 0xfffffffb}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3500, 0x4, 0x2, 0x4, 0x8000, 0x9, 0x5}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xa}}, @coaddr={0x14, 0xe, @in6=@empty}, @extra_flags={0x8, 0x18, 0x3}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x8}}]}, 0x414}, 0x1, 0x0, 0x0, 0x1}, 0x44000) sendmsg$nl_route_sched_retired(r3, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)=@delqdisc={0xa8, 0x25, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0x9}, {0x2, 0xfff3}, {0x2}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002c80)={'syztnl0\x00', &(0x7f0000002c00)={'syztnl0\x00', r6, 0x29, 0x8, 0x6, 0xfffffff7, 0x5, @mcast1, @mcast2, 0x8, 0x40, 0x20d8, 0x3}}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002cc0)={@rand_addr=0x64010100, @broadcast, r10}, 0xc) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d40), r3) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x1c, r11, 0x20, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async, rerun: 64) mount$9p_virtio(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x50, &(0x7f0000002f00)={'trans=virtio,', {[{@noxattr}, {@access_client}], [{@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@uid_gt={'uid>', r8}}, {@smackfsdef={'smackfsdef', 0x3d, ' \x01\x00'}}, {@hash}, {@euid_eq={'euid', 0x3d, r8}}, {@dont_hash}]}}) (rerun: 64) getdents(r1, &(0x7f0000002fc0)=""/29, 0x1d) socketpair(0x21, 0x6, 0xc, &(0x7f0000003000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003040), 0x440001, 0x0) read(r13, &(0x7f0000003080)=""/164, 0xa4) (async) getpgrp(r5) (async) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000003140)={0x5, 0x0, [{0xc0000000, 0x800, 0xf, 0xf985, 0xfff}, {0x7, 0xd, 0x9, 0x8, 0x7}, {0x40000001, 0x0, 0x5, 0x4, 0x6}, {0xd, 0x6254, 0x5, 0x4, 0x8a5}, {0x2, 0x4513, 0x2, 0xe62d, 0x4}]}) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f00000031c0)={0x4, {{0x2, 0x4e24, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @loopback}}]}, 0x210) (async, rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x1c, r14, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4185}, 0x1) (async) mount$9p_xen(&(0x7f0000003580), &(0x7f00000035c0)='./file0\x00', &(0x7f0000003600), 0x3204420, &(0x7f0000003640)={'trans=xen,', {[{@aname={'aname', 0x3d, '['}}, {@access_any}, {@cache_fscache}, {@ignoreqv}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@seclabel}, {@appraise}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}}) socket$nl_generic(0x10, 0x3, 0x10) 4.378375573s ago: executing program 5 (id=3105): syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x88, &(0x7f0000000680)={0x5, 0xf, 0x88, 0x5, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x10, 0x0, 0xff0, 0xf00f, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0xfe, 0x0, 0x20, 0xf00f, 0x33}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7f, 0xca, 0x1003}, @generic={0x5e, 0x10, 0x4, "8c5bcf0b0bfa17108fdac34e952d6fb953ca13e143778c0d979a4158b68880c809bdeac30bd70c5f19861b0bad9d804af5d0c17cedd84663dabd14687910da62560e9685d0444be1eeabe24aa9d16d5e178e15a4813c1b9d621a66"}]}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) signalfd(r2, &(0x7f0000000100)={[0x4]}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200"], 0x23c}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000140)) futex_waitv(&(0x7f0000001480)=[{0x9, 0x0, 0x56f77dbfbcc63790}], 0x1, 0x0, 0x0, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x4, 0x80) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [{0x20, '&-'}, {0x20, '{^,:.%@\x16'}, {0x20, './binderfs/binder0\x00'}], 0xa, "b81530a32a2af621ba3af3a46f10e074b4597b3d8dac4422d8c27d88a9454e4f"}, 0x4b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000140)=0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="0b000000fbea711e8eda5fb210a7fa2c83a4742c2702b5293118911721af6973b08e9166c2e0e736cdb97222f9d1d821bed7faf94d7655115c9ba6a947fd5e55cc2689b9493e65d87f9fed003b8baceaa47d73686e7c398b97c24d066df074097e62efe4f021ebf75971905f232be03d59c3875b28153353dab93b648ed8414887a04f30be661cd9483db56d8e4a9e65f4dcba3b0f43a85e2a821a509018047a9fe7505ecdb500"/176, @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf250200000004000180"], 0x18}}, 0x8c0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/notes', 0x149b82, 0x0) write$cgroup_int(r10, &(0x7f0000000000)=0x800, 0x12) ioctl$BTRFS_IOC_GET_FEATURES(r10, 0x80189439, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780), 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x19) ioctl$KVM_GET_REG_LIST(r10, 0xc008aeb0, &(0x7f0000000040)={0x4, [0x6, 0x0, 0x3, 0xfffffffffffff800]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x141640, 0x0) 3.715578053s ago: executing program 4 (id=3110): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8d2c472504c8279fa2739ec22080b7d8d47288a8b92add0f70f0e67017634c7d0413176bd17f4b78812c8091111dd680e2712362038df926a9c98d5913111da0dac20045f2f6150285505665d3ae7b8e50bb4c5a4d549919ec3576c87b6ea25cfb78f93bafd95678e6e219420bae7a4c7a62f0c6c5f1fa88ad2a1a19a7ffc30e55ced5b5c34bfabfc94f08f2c49fb9d811ead257609", 0x99}, {0x0}], 0x2) 3.577337625s ago: executing program 4 (id=3111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 3.480386226s ago: executing program 4 (id=3112): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0xc17ac000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x40, 0x81, 0x0, 0xf43f, 0xb, 0x49, 0x7, 0x2, 0xfb, 0x3, 0xa4, 0x0, 0x4, 0x6bd, 0x2, 0x8, 0x1, 0x7, '\x00', 0x2, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.405427178s ago: executing program 4 (id=3114): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) getrlimit(0x6, &(0x7f0000000040)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) getrlimit(0x6, &(0x7f0000000040)) (async) 3.003591344s ago: executing program 4 (id=3118): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000a00)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x8, 0x2, 0x1}, @fd, @flat=@handle={0x73682a85, 0x0, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000120001"], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a001501f7bf2ce0039ec5665e2470"], 0x1c}], 0x1}, 0x200000c8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x10101, 0x15, 0x2b}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120003000200000000000100000006003200030000000000000000000000fe800000000000001d470000000000bbac1414aa000000000000000000000000030005000000000002000000ac1414bb0000000000000000030006003c00000002"], 0x80}, 0x1, 0x300}, 0x0) move_mount(r2, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffffff, 0xfffffffffffffffe, 0x360) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x3a, 0x2, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) keyctl$update(0x2, r4, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200), 0x1b0084, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x1000, 0x14000) 1.200362332s ago: executing program 5 (id=3143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) setfsuid(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001900)={0x4c, 0x0, &(0x7f0000001700)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x2, 0x2000000, &(0x7f0000001800)="02b4"}) 1.093452413s ago: executing program 5 (id=3144): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf56, 0xfffffffd}, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf56, 0xfffffffd}, 0x0) r0 = getpgrp(0x0) ioprio_set$pid(0x2, r0, 0x4004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) clock_gettime(0x0, &(0x7f00000024c0)={0x0, 0x0}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4000000, 0xfdfffffd}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4000000, 0xfdfffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x259, 0x0, 0x1}]}) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, 0x0, 0x0) clock_settime(0x7, &(0x7f0000000700)={0x77359400}) recvmmsg(r1, &(0x7f0000002380)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/237, 0xed}], 0x3, &(0x7f0000000380)=""/4, 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/58, 0x3a}], 0x1, &(0x7f0000000440)=""/74, 0x4a}, 0x1}, {{&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)=""/143, 0x8f}, {&(0x7f0000000900)=""/242, 0xf2}], 0x7, &(0x7f0000000a80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001a80)=@qipcrtr, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b00)=""/244, 0xf4}, {&(0x7f0000001c00)=""/110, 0x6e}, {&(0x7f0000001c80)=""/192, 0xc0}], 0x3, &(0x7f0000001d80)=""/92, 0x5c}, 0xd919}, {{&(0x7f0000001e00)=@l2tp6, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e80)=""/103, 0x67}, {&(0x7f0000001f00)=""/138, 0x8a}, {&(0x7f0000001fc0)=""/198, 0xc6}, {&(0x7f00000020c0)=""/111, 0x6f}, {&(0x7f0000002140)=""/113, 0x71}, {&(0x7f00000021c0)=""/236, 0xec}, {&(0x7f00000022c0)=""/8, 0x8}], 0x7}, 0x7}], 0x5, 0x40002022, &(0x7f0000002500)={r2, r3+60000000}) (async) recvmmsg(r1, &(0x7f0000002380)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/237, 0xed}], 0x3, &(0x7f0000000380)=""/4, 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/58, 0x3a}], 0x1, &(0x7f0000000440)=""/74, 0x4a}, 0x1}, {{&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)=""/143, 0x8f}, {&(0x7f0000000900)=""/242, 0xf2}], 0x7, &(0x7f0000000a80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001a80)=@qipcrtr, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b00)=""/244, 0xf4}, {&(0x7f0000001c00)=""/110, 0x6e}, {&(0x7f0000001c80)=""/192, 0xc0}], 0x3, &(0x7f0000001d80)=""/92, 0x5c}, 0xd919}, {{&(0x7f0000001e00)=@l2tp6, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e80)=""/103, 0x67}, {&(0x7f0000001f00)=""/138, 0x8a}, {&(0x7f0000001fc0)=""/198, 0xc6}, {&(0x7f00000020c0)=""/111, 0x6f}, {&(0x7f0000002140)=""/113, 0x71}, {&(0x7f00000021c0)=""/236, 0xec}, {&(0x7f00000022c0)=""/8, 0x8}], 0x7}, 0x7}], 0x5, 0x40002022, &(0x7f0000002500)={r2, r3+60000000}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10240, 0x0) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10240, 0x0) sendfile(r9, r9, 0x0, 0x7ffff000) (async) sendfile(r9, r9, 0x0, 0x7ffff000) 1.060689753s ago: executing program 5 (id=3145): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x575083, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x220202, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000100)={0x2, 0xe}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902"], 0x0) io_setup(0xffffffff, &(0x7f0000000040)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x97, 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f0000000180)="f8255c46a81d9bed56c9d19638b9c2c21fe60f58d9907f011f7aca354b04a88a94a84c20ec1aad7f29b7123cf3834921f6d5d4d2c2749c5e6c10883b70491db31f31e7d83c27eae8c62654ce4343c0612544623571fab654fd63a1424ea6", 0x5e, 0x2, 0x0, 0x2, r4}]) close_range(r0, 0xffffffffffffffff, 0x0) 855.146667ms ago: executing program 6 (id=3147): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x21c041, 0x0) r1 = memfd_secret(0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(r1, r2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0x800448f0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) modify_ldt$write(0x2000, 0x0, 0x0) unshare(0x22020600) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000100)='./file1/file1\x00', 0x111) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', r8, 0x29, 0x6, 0x7, 0x800, 0x626ef55348a96e87, @loopback, @mcast2, 0x7800, 0x8000, 0xf8, 0x7}}) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000040)=0x7, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 801.749427ms ago: executing program 6 (id=3148): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x100, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, &(0x7f0000001240)) (async) getsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, &(0x7f0000001240)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x231, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) (async) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x231, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$EVIOCGPROP(r7, 0x80404509, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x1020, 0x0, 0x31, {0x3baf, 0x0, 0x7fff, 0xffffffff}}, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 569.275981ms ago: executing program 6 (id=3149): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x4000, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0xb1, 0x72, 0x7, 0x4, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x80, 0x2, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x170, 0x0, 0xa00, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x170}}, 0x4000) (async) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000480)) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/38}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom0\x00', 0x2, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x420302, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) (async) getsockname$inet6(r0, &(0x7f0000000680)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000006c0)=0x1c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$get_security(0x11, 0x0, &(0x7f0000000700)=""/242, 0xf2) (async) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000800)="0919e7d27f2533d6f5b2f74c8ea4e95bb018e09af7a40787c42aaf6932d2a9e7b6fb44dea2a13d501f4459e3343a1e708ea8ca") (async) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000840)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000008c0)=0x827, 0x8) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r7, &(0x7f0000000900)={0xa, 0x4e24, 0xa, @local, 0xfffffff8}, 0x1c) (async) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000940), 0x80000, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$TCXONC(r4, 0x540a, 0x2) (async) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000a00)=[@textreal={0x8, &(0x7f0000000980)="660febf30f01f4f2f226c11466ba4300ec66b90808000066b8ec00000066ba000000000f30660f381471083e81612d080066b9800000c00f326635010000000f300faee9670f07", 0x47}], 0x1, 0x0, &(0x7f0000000a40)=[@vmwrite={0x8, 0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x8001}], 0x1) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000a80)={0x2, 0xe5, 0x1000}, 0x10) (async) ioctl$VT_RELDISP(r6, 0x5605) (async) socket$unix(0x1, 0x1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000ac0)) 500.287722ms ago: executing program 6 (id=3150): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x80000080000fffe, 0x40000001}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200011, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c04a500", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x84100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0x14) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000856000/0x2000)=nil) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000572000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, 0x0, 0x0, 0x8, 0x40, 0x15, 0x4d}) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) close(0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40095505, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000438000/0x2000)=nil, &(0x7f0000e17000/0x3000)=nil, 0x2000, 0x3}) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000380)="120000001200e7ef007b00000000000000a16e3165faa71333212d79121fdf239942f03f65bd83d92bc28da917984a449edb83e305b78039d157f1fa35311a9ca8a552c2ce0c3b33d6185e24767348df6f5a6eef00f50efdf97a74496a1ad0ce2d04e75e3a9912e2696ef76154bc8cb84560dff19b2f25687eda1caddd7cb1e32dafe5693fc735f0ef06b8500e7e92c05e47d5408a9edbd67286a08bdd6bee664ec482ac31000000000000000000", 0xae, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000007c0)=""/145, 0x91}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/248, 0xf8}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f0000000500)=""/138, 0x8a}], 0x9}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000100, 0x0) 495.463182ms ago: executing program 6 (id=3151): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r4, 0x0, r1}, 0x10) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[]) 434.381473ms ago: executing program 6 (id=3153): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r4, 0xfffffffffffffc01, 0x0) tee(r0, r4, 0x60000000000, 0x0) 331.691734ms ago: executing program 3 (id=3155): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x51, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x3c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x4, 0xffff, 0xe, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x6, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x7, 0x0, 0xffffffff, 0x1, 0x9, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x7, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x800009, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x1000, 0xfffffffe, 0x15, 0x8002, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4b564d02, 0x0, 0x3}]}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r4, 0x147a5000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) eventfd2(0x0, 0x800) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000640)=""/84, 0x7}) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) (async, rerun: 32) accept4$unix(r6, &(0x7f0000000500), &(0x7f0000000040)=0x6e, 0x180000) (rerun: 32) 300.910535ms ago: executing program 3 (id=3156): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000020603000000000000000000000000001e70a8a566"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000020603000000000000000000000000001e70a8a566"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmmsg$unix(r1, &(0x7f00000000c0), 0x3f, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000000c0), 0x3f, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x2, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffffff7c, 0xac, 0x5, 0x9, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x7, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffc, 0xc1e, 0x9de, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0xd1, 0xf2b, 0x1, 0x6, 0xfffffff6, 0xffff, 0x8, 0x2, 0x4, 0xffffff80, 0x9, 0x6, 0xd2, 0x1, 0x38, 0x52, 0x1], [0x5, 0x2, 0xd91, 0xc, 0x3ff, 0xfffffff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x5, 0x8, 0x0, 0x405, 0x2, 0x9, 0x5, 0xc, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x4000200, 0x10000000, 0x9, 0xe22, 0x9, 0x5, 0x10001, 0xfffffffe, 0x865f, 0x7ffffffd, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x0, 0x10000, 0xa, 0x26, 0x1, 0x5, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb02, 0xfffeffff, 0xc, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x401, 0x5, 0xa, 0x2, 0x3, 0x2, 0x1, 0xfffffffe, 0x10000002, 0xfffffff8, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x200004, 0x2, 0x1f85, 0xb, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x2, 0x4, 0x6], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x54ee, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x5, 0x9, 0x4, 0x2, 0x2, 0xa, 0x27, 0x400, 0x70, 0x2, 0x100ffa, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0xfffffc00, 0x1, 0x3, 0xfffffbff, 0x4, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) (async) write$uinput_user_dev(r5, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x2, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffffff7c, 0xac, 0x5, 0x9, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x7, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffc, 0xc1e, 0x9de, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0xd1, 0xf2b, 0x1, 0x6, 0xfffffff6, 0xffff, 0x8, 0x2, 0x4, 0xffffff80, 0x9, 0x6, 0xd2, 0x1, 0x38, 0x52, 0x1], [0x5, 0x2, 0xd91, 0xc, 0x3ff, 0xfffffff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x5, 0x8, 0x0, 0x405, 0x2, 0x9, 0x5, 0xc, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x4000200, 0x10000000, 0x9, 0xe22, 0x9, 0x5, 0x10001, 0xfffffffe, 0x865f, 0x7ffffffd, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x0, 0x10000, 0xa, 0x26, 0x1, 0x5, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb02, 0xfffeffff, 0xc, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x401, 0x5, 0xa, 0x2, 0x3, 0x2, 0x1, 0xfffffffe, 0x10000002, 0xfffffff8, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x200004, 0x2, 0x1f85, 0xb, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x2, 0x4, 0x6], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x54ee, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x5, 0x9, 0x4, 0x2, 0x2, 0xa, 0x27, 0x400, 0x70, 0x2, 0x100ffa, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0xfffffc00, 0x1, 0x3, 0xfffffbff, 0x4, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000defeff000300000000000098", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r2, @ANYBLOB="030000e0010000000400008007020000d467aef0f23fe738"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) (async) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000defeff000300000000000098", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r2, @ANYBLOB="030000e0010000000400008007020000d467aef0f23fe738"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 246.552346ms ago: executing program 3 (id=3157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg$unix(r3, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x40397, @empty}, 0x1c) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6, 0x0, 0x4}, {0x64}, {0x401, 0x4}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c00c0c4) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) (async) close_range(r0, 0xffffffffffffffff, 0x0) 183.632527ms ago: executing program 3 (id=3158): r0 = epoll_create(0x7) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x1, 0x8, 0x80, 0x4, 0x79e0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0x3ff, 0x478, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={r1, 0x4, 0x0, [0x1, 0x81, 0x3, 0x9, 0xb], [0x100000000000000, 0x101, 0x0, 0x9, 0x3, 0x0, 0x80000001, 0xca8, 0x37, 0xffffffffffffde16, 0xaa, 0x8, 0x7, 0x40, 0xb, 0xa, 0x48, 0x7, 0xfffffffeffffffff, 0x80, 0x2, 0x0, 0x8, 0x6, 0x654a, 0x35d57d76, 0x6, 0x8, 0x4, 0x133, 0xc702, 0x81, 0x1, 0x3, 0x7, 0x2, 0xd, 0x9, 0x3, 0xd9f, 0x3, 0x0, 0xfd9, 0x51, 0xffff, 0x8, 0x6, 0x8c35, 0xb5b, 0x4, 0xffffffffffffe155, 0x5, 0x6, 0x6, 0x10001, 0x1000, 0x7fff, 0x7fffffff, 0x7, 0xa52, 0x7, 0x7, 0xfffffffffffff93d, 0x1, 0x5, 0x8000000000000000, 0x0, 0x5, 0x6, 0x3ff, 0xff, 0x4, 0x7, 0x7, 0x0, 0x6, 0x7, 0x1, 0x1, 0x40, 0x6, 0xf, 0x5, 0x2, 0x7f, 0x3, 0x9, 0x7, 0xc, 0xffff, 0xea07, 0x1, 0x100, 0x8001, 0x9, 0x80, 0x100000001, 0x5, 0x0, 0x78, 0x3, 0x80, 0xba6, 0xc, 0x1, 0xfc6, 0xfffffffffffffffc, 0x6, 0x3, 0xce, 0xffffffffffffff84, 0x1, 0x0, 0x4, 0x3, 0x1f97, 0x6, 0x2, 0x4, 0x3e3b, 0x3]}) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r2, &(0x7f0000000940)) r3 = openat(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0x111000, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), r3) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = pidfd_getfd(r3, r0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000b00)={0xfffffffffffffffc, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x1, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7bca}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000b80)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000bc0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001b80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000c00)={0xf08, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0xea0, 0x8, 0x0, 0x1, [{0x2dc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0xd31}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "05f129fd45737097f4717d41c45efbc9c211bf7d33992ec80198e5ebad5069fd"}]}, {0xb98, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1a}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0cc3035b47353462df07f035e0100c7d40e826bad3ed6157b71105198331cfc"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ALLOWEDIPS={0x644, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4c0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d54825c97606f0a928d1d1d66aaeae3aab8e61c28f6a83b577dd1f440768d111"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0xf08}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r9 = socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001c00)={0x0, 0x0}) ppoll(&(0x7f0000001bc0)=[{r0, 0x400}, {r5, 0x201}, {r0, 0x100}, {r3, 0x81c2}, {r9, 0x44ab}], 0x5, &(0x7f0000001c40)={r10, r11+10000000}, &(0x7f0000001c80)={[0x8]}, 0x8) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001e80)={'gretap0\x00', &(0x7f0000001d40)={'erspan0\x00', r8, 0x7800, 0x700, 0x5, 0xffffba8f, {{0x45, 0x4, 0x1, 0x0, 0x114, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x46, 0x1, [{0x1, 0x9, "28268927dc4ba5"}, {0x6, 0x9, "d0fbc6ac895d86"}, {0x0, 0xc, "4d6775f5fc4317bbd6c1"}, {0x0, 0xe, "60aed39cf7e77a72e8584833"}, {0x1, 0x2}, {0x5, 0x12, "e54eccfe067f9e2337e74b99595da5bb"}]}, @cipso={0x86, 0x19, 0x3, [{0x7, 0x5, "378470"}, {0x7, 0xe, "78e813a248d771bde1db91e6"}]}, @ssrr={0x89, 0xb, 0xf6, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}]}, @rr={0x7, 0x1f, 0xa1, [@multicast1, @local, @loopback, @broadcast, @private=0xa010101, @local, @private=0xa010100]}, @ssrr={0x89, 0x17, 0x71, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp={0x44, 0x20, 0xb, 0x0, 0x4, [0x88c, 0xc, 0x5, 0x2, 0x8, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0x2, 0x3, 0x4, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3e24}, {@broadcast, 0x3}, {@local, 0x8000}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x6}, {@broadcast, 0x2}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001f40)={'ip6_vti0\x00', &(0x7f0000001ec0)={'syztnl2\x00', r8, 0x2f, 0x9, 0x3, 0x9, 0x1b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x0, 0x98}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000002100)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f80)={0x12c, r12, 0x2a, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x19edaef966061a32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, r12, 0x904, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xfffff628}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xac04}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000002240)={@dev}, &(0x7f0000002280)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@private2, @in=@multicast1, 0x4e23, 0x0, 0x4e22, 0x9, 0xa, 0x20, 0x0, 0x2b, 0x0, r2}, {0x4, 0x918, 0xa58, 0x0, 0x2, 0x5, 0xa, 0x1}, {0x0, 0x7f, 0x6, 0x6}, 0x9, 0x6e6bb0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@local, 0x4d3, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x3507, 0x2, 0x3449f0be4b81898e, 0x2, 0x1, 0x5, 0x8}}, 0xe8) fcntl$notify(r6, 0x402, 0x80000020) epoll_create(0x2) socketpair(0xf, 0x5, 0xfffffff8, &(0x7f00000023c0)) getpeername$inet(0xffffffffffffffff, &(0x7f0000002400), &(0x7f0000002440)=0x10) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000002480)) 182.601527ms ago: executing program 3 (id=3159): r0 = getpid() r1 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000240)=0xd) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x49) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f00000000c0)=0xc, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x1, 0x4000000000000}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x700000000000000, 0x0}) 156.678147ms ago: executing program 3 (id=3160): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r1, &(0x7f0000000100)=""/176, 0xb0) socket(0x29, 0x0, 0x6) (async) socket(0x29, 0x0, 0x6) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x18, 0x59}) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x18b1, 0x37, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xac, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb04}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfa, 0x1f, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x53, 0x6}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xff, 0x15, 0x20, 0xbf, 0x8}, 0x90, &(0x7f00000000c0)={0x5, 0xf, 0x90, 0x3, [@generic={0x7d, 0x10, 0xb, "848a9bd4e4ea874279acc510983bfeb7036efd2f2359283325acd94bb56490697345b5ff1a1d689d3ee162cebba9a146b13b6d17314c45a50ea33a8b71f4a0d631c6b2fd6eb87ce33d0a1fed422a0f16180e50d161ce4110db45416f9f7f678a5ecdf5f48a9d1802be2f682b536493c2242877798309d5e78d9c"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xd, 0x6, 0xf, 0x68}]}, 0x6, [{0xfb, &(0x7f00000002c0)=@string={0xfb, 0x3, "8077b13c8efd43a56fb473210072c0340983d440f46aed527b225c7159dbbaedc935096f04abd5eac469bf43b4225ef270a239b44144f287de871202bb8b1f010a01d4e6222f3668b61fb36d5848cf2e8250c147318f8c20832719b76ebe5fdd20c31369571cc5c67cd241e1402794d53dfac9547899538da28550a124e157ebc9c46c37130438c32f22be7a1eb5d6b013705ea24d0f1fa9982fbcea833384039e90aacfbe6a544c66eb29b2b95f6bf8a14ab55d23f27f4dccec481b43f043f1f9d101ad80a9e862eea3ba17d8fe75adb1c5d89a404953d02a4098e9a8819d23a377b2eb264156fc8c929ea69ec4570cd54dc66773c1439144"}}, {0x1a, &(0x7f0000000180)=@string={0x1a, 0x3, "7baa1d1b7c33dcccf5ed282192ee14485f39dafc3b934dde"}}, {0x72, &(0x7f00000003c0)=@string={0x72, 0x3, "55475e2ae20604f7aeae97d943236f419089dac708d751e24a76abd2d5726a0b3363574ea525adde1e88430622376063cc8b9c3fac94970b2e2ec2a5509225a5cc1e93b40d543c0f64ffceeb389ed8bc6670f6a7c3891554c3d18ea34afb26d7b314398498ce3ee08a1c3b2c04e160bf"}}, {0x77, &(0x7f0000000440)=@string={0x77, 0x3, "4262b8335319b3a3ca0c9f8c1e8d18724f869d8a92690c74cc6ada2ebd4a1ed33fa2369b2e3b94a481e665ad3c543450e2288c2e09e8031889caa34c8a411f674a2104265a5af49dc67e0c2e5c8efd8fcb1963177ca3180f79cc8749241699ce70e81cc18e61ccc7f02c69d06d51c2c5c551300471"}}, {0xa7, &(0x7f00000004c0)=@string={0xa7, 0x3, "01fad48c4ddd785e2c58781e3c946c8facf0bb093ce9d6f2fef9c3b50a1528224dbf7ebed8aeecdceb854b968f7dbd7bb4ea473dc760c4a6a694df576a34dc55bbacb8c8de9dd33fca1ec2c2b4e02c4c78cdf8b0dac02345d4992c716715050647a63fdec8be91287d04ceed20675afa4915422ae371f99385586fa67967b3bb698cd6732bf43b08f221ce0fc30b8bf3627b24bb9469a41749da638a816ac27e7af8d4edbb"}}, {0x6f, &(0x7f0000000580)=@string={0x6f, 0x3, "191f898f9be52249ec1d283e97530c8eb7f3021076c2c7a5d4d12a714aac7d05c85d76a59ed96bc82ee12ce92cb759182a921e24c084f92be3333f11ff2abcb0269b4cb03e36b60a7da919385f1ab7db2be3ad33b219de2230d84963107aae53f7f0e07b72046f44ea177e46ae"}}]}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x18b1, 0x37, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xac, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb04}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfa, 0x1f, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x53, 0x6}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xff, 0x15, 0x20, 0xbf, 0x8}, 0x90, &(0x7f00000000c0)={0x5, 0xf, 0x90, 0x3, [@generic={0x7d, 0x10, 0xb, "848a9bd4e4ea874279acc510983bfeb7036efd2f2359283325acd94bb56490697345b5ff1a1d689d3ee162cebba9a146b13b6d17314c45a50ea33a8b71f4a0d631c6b2fd6eb87ce33d0a1fed422a0f16180e50d161ce4110db45416f9f7f678a5ecdf5f48a9d1802be2f682b536493c2242877798309d5e78d9c"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xd, 0x6, 0xf, 0x68}]}, 0x6, [{0xfb, &(0x7f00000002c0)=@string={0xfb, 0x3, "8077b13c8efd43a56fb473210072c0340983d440f46aed527b225c7159dbbaedc935096f04abd5eac469bf43b4225ef270a239b44144f287de871202bb8b1f010a01d4e6222f3668b61fb36d5848cf2e8250c147318f8c20832719b76ebe5fdd20c31369571cc5c67cd241e1402794d53dfac9547899538da28550a124e157ebc9c46c37130438c32f22be7a1eb5d6b013705ea24d0f1fa9982fbcea833384039e90aacfbe6a544c66eb29b2b95f6bf8a14ab55d23f27f4dccec481b43f043f1f9d101ad80a9e862eea3ba17d8fe75adb1c5d89a404953d02a4098e9a8819d23a377b2eb264156fc8c929ea69ec4570cd54dc66773c1439144"}}, {0x1a, &(0x7f0000000180)=@string={0x1a, 0x3, "7baa1d1b7c33dcccf5ed282192ee14485f39dafc3b934dde"}}, {0x72, &(0x7f00000003c0)=@string={0x72, 0x3, "55475e2ae20604f7aeae97d943236f419089dac708d751e24a76abd2d5726a0b3363574ea525adde1e88430622376063cc8b9c3fac94970b2e2ec2a5509225a5cc1e93b40d543c0f64ffceeb389ed8bc6670f6a7c3891554c3d18ea34afb26d7b314398498ce3ee08a1c3b2c04e160bf"}}, {0x77, &(0x7f0000000440)=@string={0x77, 0x3, "4262b8335319b3a3ca0c9f8c1e8d18724f869d8a92690c74cc6ada2ebd4a1ed33fa2369b2e3b94a481e665ad3c543450e2288c2e09e8031889caa34c8a411f674a2104265a5af49dc67e0c2e5c8efd8fcb1963177ca3180f79cc8749241699ce70e81cc18e61ccc7f02c69d06d51c2c5c551300471"}}, {0xa7, &(0x7f00000004c0)=@string={0xa7, 0x3, "01fad48c4ddd785e2c58781e3c946c8facf0bb093ce9d6f2fef9c3b50a1528224dbf7ebed8aeecdceb854b968f7dbd7bb4ea473dc760c4a6a694df576a34dc55bbacb8c8de9dd33fca1ec2c2b4e02c4c78cdf8b0dac02345d4992c716715050647a63fdec8be91287d04ceed20675afa4915422ae371f99385586fa67967b3bb698cd6732bf43b08f221ce0fc30b8bf3627b24bb9469a41749da638a816ac27e7af8d4edbb"}}, {0x6f, &(0x7f0000000580)=@string={0x6f, 0x3, "191f898f9be52249ec1d283e97530c8eb7f3021076c2c7a5d4d12a714aac7d05c85d76a59ed96bc82ee12ce92cb759182a921e24c084f92be3333f11ff2abcb0269b4cb03e36b60a7da919385f1ab7db2be3ad33b219de2230d84963107aae53f7f0e07b72046f44ea177e46ae"}}]}) 0s ago: executing program 4 (id=3161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0xa8) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x40) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x1d5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={0x2c, r5, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, 0x0) mkdir(0x0, 0x9) unlinkat(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fdc000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="f00fbb150f210d0f06660fe19181000f01c20f00d032400065f73dbaf80c66b89d8c988f66efbafc0cb000eeb820000f00d8", 0x32}], 0x1, 0x48, 0x0, 0x0) faccessat2(r1, &(0x7f00000002c0)='./file0/file0\x00', 0x2, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'batadv_slave_1\x00', 0x2}, 0x18) r10 = dup3(r3, r0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): value: 18 [ 186.596141][ T438] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 186.605232][ T438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.613765][ T438] usb 6-1: config 0 descriptor?? [ 186.691351][ T342] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 186.821315][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.832051][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.832410][ T438] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 186.852127][ T342] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.852182][ T438] usb 6-1: USB disconnect, device number 25 [ 186.863181][ T342] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 186.870315][ T438] usblp0: removed [ 186.882919][ T342] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 186.896432][ T342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.903064][ T342] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 186.912112][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.920606][ T342] usb 4-1: config 0 descriptor?? [ 186.925901][ T7223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 186.935886][ T7227] 9pnet_fd: Insufficient options for proto=fd [ 187.180592][ T438] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 187.330357][ T438] usb 6-1: Using ep0 maxpacket: 32 [ 187.336714][ T438] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.337666][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.347067][ T438] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 187.352292][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.360985][ T438] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.368061][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.376959][ T438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.383869][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.393568][ T438] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.400534][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.410218][ T438] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.417140][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.430266][ T438] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.437103][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.446205][ T438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.453126][ T342] chicony 0003:04F2:1123.001E: unknown main item tag 0x0 [ 187.464887][ T438] usb 6-1: config 0 descriptor?? [ 187.468963][ T342] chicony 0003:04F2:1123.001E: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.3-1/input0 [ 187.686722][ T438] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 187.700687][ T438] usb 6-1: USB disconnect, device number 26 [ 187.708562][ T438] usblp0: removed [ 188.028192][ T36] audit: type=1400 audit(2000000051.029:28430): avc: denied { read } for pid=94 comm="acpid" name="event6" dev="devtmpfs" ino=760 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 188.050024][ T36] audit: type=1400 audit(2000000051.029:28431): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=760 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 188.053268][ T7251] SELinux: failed to load policy [ 188.072942][ T36] audit: type=1400 audit(2000000051.029:28432): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=760 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 188.081119][ T7252] SELinux: failed to load policy [ 188.108166][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.117229][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.338875][ T45] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 188.498118][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.506111][ T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.517419][ T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 188.528455][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 188.535206][ T45] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 188.544459][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.554131][ T45] usb 1-1: config 0 descriptor?? [ 188.559628][ T7251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.769536][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 188.777331][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 188.787447][ T45] usb 1-1: USB disconnect, device number 38 [ 189.456638][ T535] usb 4-1: USB disconnect, device number 58 [ 189.598860][ T7273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1441 [ 189.651734][ T7276] rust_binder: Write failure EFAULT in pid:1444 [ 189.926891][ T36] audit: type=1400 audit(190.399:28433): avc: denied { validate_trans } for pid=7314 comm="syz.3.2358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.226752][ T535] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 190.377724][ T535] usb 4-1: config 1 has an invalid interface number: 53 but max is 3 [ 190.385813][ T535] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 190.394632][ T535] usb 4-1: config 1 has an invalid interface number: 176 but max is 3 [ 190.405334][ T535] usb 4-1: config 1 has an invalid interface number: 23 but max is 3 [ 190.413590][ T535] usb 4-1: config 1 has an invalid interface number: 249 but max is 3 [ 190.422046][ T535] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 190.431115][ T535] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 190.441599][ T535] usb 4-1: config 1 has no interface number 0 [ 190.447947][ T535] usb 4-1: config 1 has no interface number 1 [ 190.454028][ T535] usb 4-1: config 1 has no interface number 2 [ 190.460352][ T535] usb 4-1: config 1 has no interface number 3 [ 190.466455][ T535] usb 4-1: config 1 interface 53 altsetting 91 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 190.477627][ T535] usb 4-1: config 1 interface 53 altsetting 91 has a duplicate endpoint with address 0xF, skipping [ 190.489843][ T535] usb 4-1: config 1 interface 176 altsetting 212 endpoint 0x2 has invalid maxpacket 544, setting to 64 [ 190.501090][ T535] usb 4-1: config 1 interface 176 altsetting 212 endpoint 0x9 has an invalid bInterval 158, changing to 7 [ 190.513005][ T709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.516727][ T4160] Bluetooth: hci0: command 0x1003 tx timeout [ 190.526726][ T535] usb 4-1: config 1 interface 176 altsetting 212 has a duplicate endpoint with address 0xF, skipping [ 190.539700][ T535] usb 4-1: config 1 interface 23 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.562358][ T535] usb 4-1: too many endpoints for config 1 interface 249 altsetting 26: 142, using maximum allowed: 30 [ 190.574902][ T535] usb 4-1: config 1 interface 249 altsetting 26 endpoint 0x5 has invalid maxpacket 31649, setting to 64 [ 190.587029][ T535] usb 4-1: config 1 interface 249 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 142 [ 190.610234][ T535] usb 4-1: config 1 interface 53 has no altsetting 0 [ 190.626426][ T535] usb 4-1: config 1 interface 176 has no altsetting 0 [ 190.633595][ T535] usb 4-1: config 1 interface 23 has no altsetting 0 [ 190.640471][ T535] usb 4-1: config 1 interface 249 has no altsetting 0 [ 190.657784][ T535] usb 4-1: New USB device found, idVendor=12d1, idProduct=141d, bcdDevice= 0.00 [ 190.666957][ T535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.677578][ T535] usb 4-1: Product: ﻄ蚽缧혵ⰿ෨ሩ믣毼醫덛헽﯄뽮蘉凓쥱⣀䠪훲㧶결胒儓ﱖ蝝䙌삋ತ줐䵖늊鯋䎀㑳词ᢂᱼ燑ꘖ垇얓쎆䦒苶땢Ჿ덥㹹흃瞟㦯鱸欗⃮ဏ缧僸 [ 190.706771][ T535] usb 4-1: Manufacturer: Я [ 190.711375][ T535] usb 4-1: SerialNumber: syz [ 190.860673][ T36] audit: type=1400 audit(191.329:28434): avc: denied { write } for pid=531 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43512 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.921362][ T7320] input: syz1 as /devices/virtual/input/input30 [ 190.929599][ T7320] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 190.938130][ T7320] 9pnet_fd: Insufficient options for proto=fd [ 190.945745][ T535] usb-storage 4-1:1.53: USB Mass Storage device detected [ 190.988014][ T535] usb-storage 4-1:1.176: USB Mass Storage device detected [ 191.028674][ T535] usb-storage 4-1:1.23: USB Mass Storage device detected [ 191.088528][ T535] usb-storage 4-1:1.249: USB Mass Storage device detected [ 191.129985][ T535] usb 4-1: USB disconnect, device number 59 [ 191.418916][ T7367] sit0: mtu greater than device maximum [ 191.424622][ T7366] sit0: mtu greater than device maximum [ 192.472324][ T36] audit: type=1326 audit(192.939:28435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb178e929 code=0x7fc00000 [ 192.546741][ T535] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 192.626755][ T531] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 192.696753][ T535] usb 6-1: Using ep0 maxpacket: 16 [ 192.702983][ T535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.713946][ T535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.723739][ T535] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.736583][ T535] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.745642][ T535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.754214][ T535] usb 6-1: config 0 descriptor?? [ 192.777849][ T531] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 192.788248][ T531] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.797849][ T531] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.806962][ T531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.814948][ T531] usb 4-1: SerialNumber: syz [ 193.022087][ T531] usb 4-1: 0:2 : does not exist [ 193.028636][ T531] usb 4-1: USB disconnect, device number 60 [ 193.035904][ T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 193.149957][ T36] audit: type=1326 audit(193.619:28436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5bb172ab19 code=0x7fc00000 [ 193.175084][ T535] microsoft 0003:045E:07DA.001F: unknown main item tag 0xd [ 193.185077][ T535] microsoft 0003:045E:07DA.001F: No inputs registered, leaving [ 193.187330][ T7393] can0: slcan on ptm0. [ 193.198214][ T535] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 193.213568][ T535] microsoft 0003:045E:07DA.001F: no inputs found [ 193.220653][ T535] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 193.436782][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 193.562508][ T7417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.562835][ T7417] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 193.569450][ T7417] rust_binder: Error while translating object. [ 193.569800][ T9] usb 1-1: device descriptor read/64, error -71 [ 193.580289][ T7417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.592536][ T7417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1485 [ 193.726220][ T7421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 193.735540][ T7421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:721 [ 193.805432][ T7423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:997 [ 193.816744][ T9] usb 1-1: device descriptor read/64, error -71 [ 193.826251][ T7425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:999 [ 193.895429][ T7427] binder: Unknown parameter 'c 7P1by1` UU_)'' [ 193.920319][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.920347][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.926843][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.933538][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.940036][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.946515][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.953315][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.959960][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.966439][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.973066][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.979522][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.986017][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.992557][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.999179][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.005626][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.012292][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.018759][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.025186][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.031887][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.038351][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.044763][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.051212][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.057660][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.064084][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.070727][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.077175][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.083586][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.086769][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 194.090030][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.103972][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.110407][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.116842][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.123241][ T7430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.216791][ T9] usb 1-1: device descriptor read/64, error -71 [ 194.466752][ T9] usb 1-1: device descriptor read/64, error -71 [ 194.576860][ T9] usb usb1-port1: attempt power cycle [ 194.916763][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 194.937732][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.067825][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.302745][ T438] usb 6-1: USB disconnect, device number 27 [ 195.307088][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 195.327756][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.457773][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.566865][ T9] usb usb1-port1: unable to enumerate USB device [ 195.885697][ T7442] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2392'. [ 195.913685][ T36] audit: type=1400 audit(196.379:28437): avc: denied { execute } for pid=7445 comm="syz.5.2393" path="/dev/binderfs/binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.913822][ T7446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 195.937520][ T7446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:734 [ 195.946990][ T7446] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 195.956112][ T7446] rust_binder: Read failure Err(EFAULT) in pid:734 [ 196.240232][ T7393] can0 (unregistered): slcan off ptm0. [ 196.265643][ T7471] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.273602][ T7471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.280858][ T7471] IPv6: NLM_F_CREATE should be set when creating new route [ 196.292822][ T36] audit: type=1400 audit(196.759:28438): avc: denied { map } for pid=7470 comm="syz.0.2397" path="socket:[43632]" dev="sockfs" ino=43632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 212.806747][ T7532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:746 [ 212.813181][ T7534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1010 [ 212.823940][ T36] audit: type=1400 audit(213.279:28439): avc: denied { create } for pid=7529 comm="syz.4.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 212.947287][ T7561] @: renamed from vlan0 (while UP) [ 213.039213][ T7568] rust_binder: Error in use_page_slow: ESRCH [ 213.039226][ T7568] rust_binder: use_range failure ESRCH [ 213.045337][ T7568] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 213.050904][ T7568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 213.058925][ T7568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:763 [ 213.076458][ T7571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.085749][ T7571] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 213.100320][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2423'. [ 213.226050][ T321] tipc: Subscription rejected, illegal request [ 213.233113][ T7580] tipc: Invalid UDP bearer configuration [ 213.233135][ T7580] tipc: Enabling of bearer rejected, failed to enable media [ 213.288733][ T7582] input: syz0 as /devices/virtual/input/input33 [ 213.295004][ T7582] input: failed to attach handler leds to device input33, error: -6 [ 231.561531][ T7592] /dev/sg0: Can't lookup blockdev [ 231.564918][ T36] audit: type=1400 audit(232.029:28440): avc: denied { create } for pid=7590 comm="syz.3.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 231.610350][ T7603] O3c: renamed from veth0_to_bridge (while UP) [ 231.826779][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 231.836751][ T438] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 231.976740][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 231.983138][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.991652][ T9] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 231.996735][ T438] usb 4-1: Using ep0 maxpacket: 16 [ 232.000048][ T9] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 232.006570][ T438] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32 [ 232.015353][ T9] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 232.025501][ T438] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 232.034573][ T9] usb 6-1: config 128 has no interface number 0 [ 232.044448][ T438] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.050420][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 232.058765][ T438] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.068236][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.068266][ T9] usb 6-1: config 128 interface 127 has no altsetting 0 [ 232.077645][ T438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.090625][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 232.094403][ T438] usb 4-1: Product: 䠊 [ 232.102474][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.111394][ T438] usb 4-1: Manufacturer:  [ 232.115601][ T9] usb 6-1: Product: syz [ 232.123491][ T438] usb 4-1: SerialNumber: ф [ 232.128147][ T9] usb 6-1: Manufacturer: syz [ 232.133083][ T7593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.136610][ T9] usb 6-1: SerialNumber: syz [ 232.141418][ T7593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.366650][ T9] usb 6-1: USB disconnect, device number 28 [ 232.376922][ T438] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 232.381220][ T7629] udevd[7629]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 232.393649][ T438] usb 4-1: USB disconnect, device number 61 [ 232.747196][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'. [ 232.839232][ T7651] tmpfs: Unknown parameter '' [ 232.901181][ T7657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.901686][ T7657] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 233.106758][ T438] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 233.266728][ T438] usb 6-1: Using ep0 maxpacket: 32 [ 233.272245][ T438] usb 6-1: too many configurations: 236, using maximum allowed: 8 [ 233.280769][ T438] usb 6-1: config 0 has no interfaces? [ 233.286889][ T438] usb 6-1: config 0 has no interfaces? [ 233.292998][ T438] usb 6-1: config 0 has no interfaces? [ 233.299140][ T438] usb 6-1: config 0 has no interfaces? [ 233.305330][ T438] usb 6-1: config 0 has no interfaces? [ 233.311730][ T438] usb 6-1: config 0 has no interfaces? [ 233.317909][ T438] usb 6-1: config 0 has no interfaces? [ 233.324054][ T438] usb 6-1: config 0 has no interfaces? [ 233.330915][ T438] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 233.340016][ T438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 233.348006][ T438] usb 6-1: Product: syz [ 233.352158][ T438] usb 6-1: Manufacturer: syz [ 233.356767][ T438] usb 6-1: SerialNumber: syz [ 233.362147][ T438] usb 6-1: config 0 descriptor?? [ 233.557182][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.565515][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.573894][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.582185][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.590448][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.598717][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.606976][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.615258][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.623635][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.631965][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.640275][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.648559][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.656813][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.665023][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.673265][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.681517][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.689775][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.698026][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.706218][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.714494][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.722756][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.731019][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.739279][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.747574][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.755784][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.764044][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.772267][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.780536][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.788770][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.797038][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.805247][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.813511][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.821759][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.830008][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.838236][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.846447][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.854715][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.862943][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.871371][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.879714][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.888007][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.896208][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.904467][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.912717][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.920992][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.929323][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.936281][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.937682][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.948079][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.955166][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.966248][ T7681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.970007][ T7681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:786 [ 233.970203][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 233.997060][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.006397][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.014659][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.023014][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.031439][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.039804][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.048068][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.056297][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.064547][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.072794][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.081056][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.089375][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.097635][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.105864][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.114140][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.122395][ T7678] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 234.147914][ T36] audit: type=1326 audit(234.619:28441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.0.2466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb178e929 code=0x0 [ 235.871600][ T9] usb 6-1: USB disconnect, device number 29 [ 236.091366][ T7715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.164257][ T7727] rust_binder: Error in use_page_slow: ESRCH [ 236.170895][ T7727] rust_binder: use_range failure ESRCH [ 236.177605][ T7727] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 236.183283][ T7727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 236.191433][ T7727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1509 [ 236.219595][ T36] audit: type=1400 audit(236.689:28442): avc: denied { remount } for pid=7734 comm="syz.5.2484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.219594][ T7735] binder: Unknown parameter 'context' [ 236.546777][ T31] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 236.698602][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.709552][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.719292][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.732190][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.741231][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.749852][ T31] usb 4-1: config 0 descriptor?? [ 237.209172][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.216721][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.224124][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.231596][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.239028][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.246443][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.253861][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.261401][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.262420][ T7749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.268926][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.282909][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.285365][ T7754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.290436][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.292370][ T7754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1523 [ 237.296943][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.320931][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.328359][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.335740][ T31] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 237.343304][ T31] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 237.352274][ T31] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 237.367108][ T31] usb 4-1: USB disconnect, device number 62 [ 237.379823][ T7756] fido_id[7756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 238.010085][ T7758] /dev/loop0: Can't lookup blockdev [ 238.058382][ T7766] bridge0: entered promiscuous mode [ 238.098506][ T7765] bridge0: left promiscuous mode [ 238.353457][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2504'. [ 238.426870][ T7802] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2505'. [ 238.546767][ T438] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 238.676773][ T438] usb 4-1: device descriptor read/64, error -71 [ 238.916747][ T438] usb 4-1: device descriptor read/64, error -71 [ 239.166788][ T438] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 239.296774][ T438] usb 4-1: device descriptor read/64, error -71 [ 239.449738][ T36] audit: type=1326 audit(239.919:28443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3238e929 code=0x7fc00000 [ 239.546842][ T438] usb 4-1: device descriptor read/64, error -71 [ 239.656810][ T438] usb usb4-port1: attempt power cycle [ 239.667791][ T7842] FAT-fs (rnullb0): bogus number of reserved sectors [ 239.674552][ T7842] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 239.698626][ T36] audit: type=1400 audit(240.169:28444): avc: denied { setattr } for pid=7846 comm="syz.5.2523" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.966738][ T31] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 239.996728][ T438] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 240.017870][ T438] usb 4-1: device descriptor read/8, error -71 [ 240.116753][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 240.122921][ T31] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 240.131313][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.133823][ T36] audit: type=1326 audit(240.599:28445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c3232ab19 code=0x7fc00000 [ 240.141696][ T31] usb 6-1: config 1 has no interface number 0 [ 240.167075][ T36] audit: type=1326 audit(240.629:28446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3c3232abdf code=0x7fc00000 [ 240.178011][ T31] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.193435][ T36] audit: type=1326 audit(240.629:28447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.4.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3c3238e929 code=0x7fc00000 [ 240.208906][ T31] usb 6-1: config 1 interface 105 has no altsetting 0 [ 240.236197][ T438] usb 4-1: device descriptor read/8, error -71 [ 240.243489][ T31] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 240.252583][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.260380][ T7859] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2527'. [ 240.260912][ T31] usb 6-1: Product: syz [ 240.273775][ T31] usb 6-1: Manufacturer: syz [ 240.278422][ T31] usb 6-1: SerialNumber: syz [ 240.476754][ T438] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 240.485391][ T31] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 240.509101][ T438] usb 4-1: device descriptor read/8, error -71 [ 240.648145][ T438] usb 4-1: device descriptor read/8, error -71 [ 240.699592][ T36] audit: type=1400 audit(241.169:28448): avc: denied { accept } for pid=7872 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 240.756890][ T438] usb usb4-port1: unable to enumerate USB device [ 241.333098][ T7894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.419702][ T7907] SELinux: Context system_u:object_r:ifconfig_exec_t:s0 is not valid (left unmapped). [ 241.436233][ T36] audit: type=1400 audit(241.899:28449): avc: denied { relabelto } for pid=7906 comm="syz.3.2547" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:ifconfig_exec_t:s0" [ 241.463212][ T36] audit: type=1400 audit(241.899:28450): avc: denied { associate } for pid=7906 comm="syz.3.2547" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ifconfig_exec_t:s0" [ 241.765396][ T7935] fuse: Bad value for 'fd' [ 241.766748][ T438] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 241.927868][ T438] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.938028][ T438] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.947685][ T438] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.956775][ T438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.964754][ T438] usb 4-1: SerialNumber: syz [ 242.172311][ T438] usb 4-1: 0:2 : does not exist [ 242.178924][ T438] usb 4-1: USB disconnect, device number 67 [ 242.664213][ T7959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7959 comm=syz.4.2567 [ 242.689759][ T7961] SELinux: Context system_u:object_r:system_dbusd_var_lib_t:s0 is not valid (left unmapped). [ 242.700304][ T36] audit: type=1400 audit(243.169:28451): avc: denied { relabelto } for pid=7960 comm="syz.3.2568" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 242.707030][ T7961] 9pnet_fd: Insufficient options for proto=fd [ 242.729424][ T36] audit: type=1400 audit(243.169:28452): avc: denied { associate } for pid=7960 comm="syz.3.2568" name="kvm" dev="devtmpfs" ino=13 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 242.797932][ T531] usb 6-1: USB disconnect, device number 30 [ 243.126746][ T531] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 243.278099][ T531] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.285814][ T531] usb 6-1: no configurations [ 243.290468][ T531] usb 6-1: can't read configurations, error -22 [ 243.426744][ T531] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 243.538568][ T7990] tmpfs: Cannot disable swap on remount [ 243.545712][ T7990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1557 [ 243.561438][ T7995] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 243.573085][ T7994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.580881][ T531] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.595208][ T531] usb 6-1: no configurations [ 243.599841][ T531] usb 6-1: can't read configurations, error -22 [ 243.606626][ T531] usb usb6-port1: attempt power cycle [ 243.703070][ T8011] batadv_slave_1: entered promiscuous mode [ 243.710482][ T8010] batadv_slave_1: left promiscuous mode [ 243.806242][ T8015] fuse: Bad value for 'fd' [ 243.946766][ T531] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 243.968269][ T531] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.975948][ T531] usb 6-1: no configurations [ 243.980597][ T531] usb 6-1: can't read configurations, error -22 [ 244.052278][ T8028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.052514][ T8028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.116797][ T531] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 244.149645][ T531] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.157386][ T531] usb 6-1: no configurations [ 244.161970][ T531] usb 6-1: can't read configurations, error -22 [ 244.168419][ T531] usb usb6-port1: unable to enumerate USB device [ 244.883429][ T8059] cgroup: Invalid name [ 244.895212][ T8061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.898982][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 244.898999][ T36] audit: type=1400 audit(245.369:28459): avc: denied { mount } for pid=8062 comm="syz.0.2610" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 245.057937][ T8070] fuse: Bad value for 'fd' [ 245.136793][ T31] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 245.286727][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 245.292936][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.303152][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 245.313024][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 245.327195][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 245.336238][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.344271][ T31] usb 4-1: Product: syz [ 245.348510][ T31] usb 4-1: Manufacturer: syz [ 245.353121][ T31] usb 4-1: SerialNumber: syz [ 245.358698][ T31] usb 4-1: config 0 descriptor?? [ 245.387369][ T339] bridge_slave_1: left allmulticast mode [ 245.393052][ T339] bridge_slave_1: left promiscuous mode [ 245.398745][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.406269][ T339] bridge_slave_0: left allmulticast mode [ 245.411999][ T339] bridge_slave_0: left promiscuous mode [ 245.417622][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.504494][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.511585][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.518735][ T8076] bridge_slave_0: entered allmulticast mode [ 245.524880][ T8076] bridge_slave_0: entered promiscuous mode [ 245.531561][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.538854][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.546024][ T8076] bridge_slave_1: entered allmulticast mode [ 245.552324][ T8076] bridge_slave_1: entered promiscuous mode [ 245.559052][ T339] veth1_macvtap: left promiscuous mode [ 245.564606][ T339] veth0_vlan: left promiscuous mode [ 245.566750][ T8061] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 245.571320][ T31] usb 4-1: USB disconnect, device number 68 [ 245.644092][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.651163][ T8076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.658445][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.665463][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.686075][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.694164][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.703964][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.711024][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.720306][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.727377][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.753750][ T8076] veth0_vlan: entered promiscuous mode [ 245.765144][ T8076] veth1_macvtap: entered promiscuous mode [ 245.783140][ T36] audit: type=1400 audit(246.249:28460): avc: denied { mounton } for pid=8076 comm="syz-executor" path="/root/syzkaller.G5u663/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 245.812357][ T36] audit: type=1400 audit(246.279:28461): avc: denied { mounton } for pid=8076 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 245.826370][ T8082] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 245.835996][ T8082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:832 [ 245.905050][ T8089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:837 [ 245.977003][ T8091] futex_wake_op: syz.6.2621 tries to shift op by -1; fix this program [ 245.995422][ T8091] incfs: iterate_incfs_dir / -22 [ 246.183277][ T8098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.183493][ T8098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.206745][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 246.374321][ T8116] binder: Unknown parameter '00000000000000000000000' [ 246.380755][ T9] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.399327][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 246.402283][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.407683][ T9] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 246.423389][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.431784][ T9] usb 6-1: Product: 鑏㖐㠋뭬䙜巑獵敏뜐缗砀ꊸ뫳꣙貗Ꙓ蕌炱莗븖䤑聧碁歨ꔒ蹴搃앀빿簋૑懛ԫ펛椵ﴰﷹ캭ᷝᝊ챧垥Ᏺᪧꌅ䃮່솢䑈歑葃዁䯥윣齟 [ 246.459726][ T8120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1608 [ 246.530333][ T9] usb 6-1: Manufacturer: 慯䩕쥦奍曆⍢痉喨莆އꭥ믦蠨⃢篫㌨볥葏㎏뺀學䬳倒䥃㳬葢斒徛剕茔ꝉ瑞䧊┉⸶㶽촒浿Ⳓ런筗ಮ尞觊贵ﭺ붃핻ჲ⥡骢㵁Ά䏈軗䁎檯䌄ꤘ砉幧슼緀㹏邓﹕ﵒ扰ㅧ꼑 [ 246.571657][ T9] usb 6-1: SerialNumber: Л [ 246.573705][ T36] audit: type=1400 audit(247.039:28462): avc: denied { mounton } for pid=8124 comm="syz.3.2631" path="/561/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 246.626728][ T531] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 246.777996][ T531] usb 7-1: not running at top speed; connect to a high speed hub [ 246.786755][ T531] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.799873][ T531] usb 7-1: config 1 interface 0 has no altsetting 0 [ 246.808280][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 246.814260][ T531] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 246.823377][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 246.832444][ T9] usb 6-1: USB disconnect, device number 35 [ 246.838448][ T531] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.847807][ T531] usb 7-1: Product: syz [ 246.852012][ T531] usb 7-1: Manufacturer: syz [ 246.856623][ T531] usb 7-1: SerialNumber: syz [ 246.862206][ T8112] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 246.989261][ T8089] rust_binder: Error while translating object. [ 246.989294][ T8089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 246.995518][ T8089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:837 [ 247.080004][ T531] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 247.101099][ T531] usb 7-1: USB disconnect, device number 2 [ 247.108552][ T531] usblp0: removed [ 247.248355][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2633'. [ 247.524256][ T36] audit: type=1400 audit(247.989:28463): avc: denied { setattr } for pid=8153 comm="syz.5.2641" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 247.967516][ T8156] cgroup: release_agent respecified [ 248.326784][ T31] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 248.476812][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 248.482984][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.493884][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.503676][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.516734][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 248.525781][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.536971][ T31] usb 6-1: config 0 descriptor?? [ 248.765692][ T8186] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 248.774031][ T8186] overlayfs: missing 'lowerdir' [ 248.938359][ T8190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.045281][ T36] audit: type=1400 audit(249.509:28464): avc: denied { add_name } for pid=8195 comm="syz.6.2659" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.072897][ T36] audit: type=1400 audit(249.509:28465): avc: denied { create } for pid=8195 comm="syz.6.2659" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.106726][ T36] audit: type=1400 audit(249.509:28466): avc: denied { associate } for pid=8195 comm="syz.6.2659" name="memory.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 249.386744][ T531] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 249.539159][ T531] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 249.548315][ T531] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.556323][ T531] usb 7-1: Product: syz [ 249.560554][ T531] usb 7-1: Manufacturer: syz [ 249.565148][ T531] usb 7-1: SerialNumber: syz [ 249.570587][ T531] usb 7-1: config 0 descriptor?? [ 249.576503][ T531] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 249.583482][ T531] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 249.591657][ T531] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 249.736128][ T8217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.797918][ T36] audit: type=1400 audit(250.269:28467): avc: denied { read } for pid=8204 comm="syz.6.2662" path="socket:[48528]" dev="sockfs" ino=48528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.853263][ T8205] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 249.853288][ T8205] rust_binder: Read failure Err(EFAULT) in pid:50 [ 249.862354][ T36] audit: type=1400 audit(250.329:28468): avc: denied { create } for pid=8204 comm="syz.6.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.864305][ T45] usb 7-1: USB disconnect, device number 3 [ 250.136735][ T4901] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 250.288113][ T4901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.296325][ T4901] usb 4-1: not running at top speed; connect to a high speed hub [ 250.305381][ T4901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.317344][ T4901] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 250.326411][ T4901] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 250.334538][ T4901] usb 4-1: Product: syz [ 250.338733][ T4901] usb 4-1: Manufacturer: syz [ 250.343326][ T4901] usb 4-1: SerialNumber: syz [ 250.348599][ T4901] usb 4-1: config 0 descriptor?? [ 250.554387][ T8218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1615 [ 250.646745][ T531] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 250.807780][ T531] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.818910][ T531] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 250.829839][ T531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.836453][ T531] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 250.845618][ T531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.854281][ T531] usb 7-1: config 0 descriptor?? [ 250.859677][ T8222] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 251.088134][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 251.094527][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 251.103383][ T31] usb 6-1: USB disconnect, device number 36 [ 251.268490][ T531] holtek_mouse 0003:04D9:A067.0021: unknown main item tag 0x6 [ 251.277445][ T531] holtek_mouse 0003:04D9:A067.0021: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.6-1/input0 [ 251.468503][ T531] usb 7-1: USB disconnect, device number 4 [ 251.611324][ T8228] netlink: 'syz.5.2670': attribute type 27 has an invalid length. [ 251.627441][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.634647][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.025262][ T8239] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 252.033585][ T8239] rust_binder: Write failure EINVAL in pid:58 [ 252.084878][ T8242] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 252.129762][ T8245] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 252.190858][ T8246] 9pnet_fd: Insufficient options for proto=fd [ 252.197377][ T8246] rust_binder: Error while translating object. [ 252.197414][ T8246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 252.203670][ T8246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:63 [ 252.320485][ T8258] incfs: iterate_incfs_dir / -22 [ 252.336028][ T8258] netlink: 'syz.5.2681': attribute type 4 has an invalid length. [ 252.344410][ T8258] netlink: 'syz.5.2681': attribute type 4 has an invalid length. [ 252.500208][ T36] audit: type=1326 audit(252.969:28469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3238e929 code=0x7fc00000 [ 252.556747][ T531] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 252.611206][ T8268] binder: Binderfs stats mode cannot be changed during a remount [ 252.706901][ T531] usb 7-1: Using ep0 maxpacket: 8 [ 252.713093][ T531] usb 7-1: config 0 has an invalid interface number: 155 but max is 0 [ 252.721536][ T531] usb 7-1: config 0 has no interface number 0 [ 252.727688][ T531] usb 7-1: config 0 interface 155 has no altsetting 0 [ 252.735880][ T531] usb 7-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice=32.14 [ 252.744805][ T4901] usb 4-1: USB disconnect, device number 69 [ 252.747184][ T531] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.762378][ T531] usb 7-1: Product: syz [ 252.766730][ T531] usb 7-1: Manufacturer: syz [ 252.771380][ T531] usb 7-1: SerialNumber: syz [ 252.777912][ T531] usb 7-1: config 0 descriptor?? [ 252.779790][ T8275] netlink: 'syz.3.2686': attribute type 4 has an invalid length. [ 252.792335][ T8275] netlink: 'syz.3.2686': attribute type 4 has an invalid length. [ 252.810660][ T8277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.811262][ T8277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1624 [ 252.818277][ T8277] rust_binder: Error while translating object. [ 252.827631][ T8277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.833834][ T8277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1624 [ 252.876751][ T31] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 253.011321][ T531] usb-storage 7-1:0.155: USB Mass Storage device detected [ 253.056787][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 253.063156][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 253.066471][ T531] usb 7-1: USB disconnect, device number 5 [ 253.076805][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.088049][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.100400][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.109742][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.120473][ T31] usb 6-1: Product: syz [ 253.124647][ T31] usb 6-1: Manufacturer: syz [ 253.126763][ T36] audit: type=1326 audit(253.589:28470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c3232ab19 code=0x7fc00000 [ 253.129266][ T31] usb 6-1: SerialNumber: syz [ 253.176757][ T36] audit: type=1326 audit(253.589:28471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3c3232abdf code=0x7fc00000 [ 253.203229][ T36] audit: type=1326 audit(253.589:28472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3c3238e929 code=0x7fc00000 [ 253.227002][ T36] audit: type=1400 audit(253.699:28473): avc: denied { create } for pid=8293 comm="syz.4.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 253.256749][ T64] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 253.416822][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 253.423577][ T64] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 253.435154][ T64] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.448386][ T64] usb 4-1: config 1 interface 0 has no altsetting 0 [ 253.457341][ T64] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 253.466759][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.474845][ T64] usb 4-1: Product: syz [ 253.479401][ T64] usb 4-1: Manufacturer: L [ 253.484036][ T64] usb 4-1: SerialNumber: syz [ 253.490279][ T64] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 253.501279][ T64] usb 4-1: no configuration chosen from 1 choice [ 253.597312][ T31] usb 6-1: 0:2 : does not exist [ 253.612517][ T31] usb 6-1: USB disconnect, device number 37 [ 253.964633][ T8323] netlink: 'syz.6.2702': attribute type 6 has an invalid length. [ 254.146441][ T8326] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 254.146460][ T8326] rust_binder: Error while translating object. [ 254.155279][ T8326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.162056][ T8326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 254.778615][ T8344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2710'. [ 254.953172][ T8360] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 254.990131][ T36] audit: type=1400 audit(255.459:28474): avc: denied { accept } for pid=8370 comm="syz.6.2720" path=0000234E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 255.057660][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 255.108685][ T8384] futex_wake_op: syz.4.2726 tries to shift op by -1; fix this program [ 255.125865][ T8386] bridge0: port 3(ip6gretap0) entered blocking state [ 255.132691][ T8386] bridge0: port 3(ip6gretap0) entered disabled state [ 255.139568][ T8386] ip6gretap0: entered allmulticast mode [ 255.145385][ T8386] ip6gretap0: entered promiscuous mode [ 255.150974][ T8386] bridge0: port 3(ip6gretap0) entered blocking state [ 255.157680][ T8386] bridge0: port 3(ip6gretap0) entered forwarding state [ 255.164755][ T8386] tipc: Resetting bearer [ 255.226759][ T31] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 255.245494][ T8396] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2732'. [ 255.380695][ T31] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 255.386791][ T8399] overlayfs: failed to clone upperpath [ 255.389883][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.404327][ T31] usb 7-1: config 0 descriptor?? [ 256.006849][ T64] usb 4-1: USB disconnect, device number 70 [ 256.036611][ T8430] binder: Unknown parameter '18446744073709551615' [ 256.129140][ T8447] 9pnet_fd: Insufficient options for proto=fd [ 256.216905][ T31] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 256.227110][ T31] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 256.256813][ T31] asix 7-1:0.0: probe with driver asix failed with error -71 [ 256.265483][ T31] usb 7-1: USB disconnect, device number 6 [ 256.868741][ T8469] incfs: Backing dir is not set, filesystem can't be mounted. [ 256.876275][ T8469] incfs: mount failed -2 [ 256.952179][ T8472] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 162) [ 256.952206][ T8472] rust_binder: Error while translating object. [ 256.963013][ T8472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.969399][ T8472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 257.060766][ T8476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.756760][ T64] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 257.862689][ T8501] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 257.872621][ T36] audit: type=1400 audit(258.339:28475): avc: denied { relabelto } for pid=8499 comm="syz.6.2773" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 257.899602][ T36] audit: type=1400 audit(258.339:28476): avc: denied { associate } for pid=8499 comm="syz.6.2773" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:userio_device_t:s0" [ 257.919195][ T64] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 257.927113][ T31] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 257.936362][ T64] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 257.951778][ T64] usb 6-1: Product: syz [ 257.955951][ T64] usb 6-1: Manufacturer: syz [ 257.962015][ T64] usb 6-1: SerialNumber: syz [ 257.967255][ T64] usb 6-1: config 0 descriptor?? [ 258.087759][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 258.106054][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 258.117961][ T31] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 258.127548][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.135642][ T31] usb 4-1: Product: syz [ 258.144404][ T31] usb 4-1: Manufacturer: syz [ 258.149253][ T31] usb 4-1: SerialNumber: syz [ 258.156796][ T31] usb 4-1: config 0 descriptor?? [ 258.162298][ T8490] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 258.171445][ T8490] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 258.178976][ T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 258.337806][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.348130][ T45] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.357351][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.367095][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.376962][ T45] usb 7-1: config 0 descriptor?? [ 258.392506][ T8490] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 258.400097][ T8490] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 258.587387][ T64] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 258.838899][ T8543] batadv_slave_1: entered promiscuous mode [ 258.845531][ T8542] batadv_slave_1: left promiscuous mode [ 259.189122][ T8482] rust_binder: Error while translating object. [ 259.189152][ T8482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 259.195356][ T8482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:880 [ 259.205651][ T64] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 259.211040][ T36] audit: type=1400 audit(259.679:28477): avc: denied { map } for pid=8489 comm="syz.3.2768" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 259.214728][ T64] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 259.233730][ T36] audit: type=1400 audit(259.689:28478): avc: denied { execute } for pid=8489 comm="syz.3.2768" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 259.289905][ T64] asix 6-1:0.0: probe with driver asix failed with error -71 [ 259.299954][ T64] usb 6-1: USB disconnect, device number 38 [ 259.330595][ T31] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 259.340890][ T31] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, f0:86:73:e3:13:cb [ 259.355328][ T31] usb 4-1: USB disconnect, device number 71 [ 259.361751][ T31] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 259.982554][ T8571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.983250][ T8571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.991139][ T8571] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 30) [ 259.997729][ T8571] rust_binder: Error while translating object. [ 260.008422][ T8571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 260.014751][ T8571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1650 [ 260.256747][ T531] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 260.416737][ T531] usb 4-1: Using ep0 maxpacket: 16 [ 260.422950][ T531] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 260.431189][ T531] usb 4-1: config 1 has no interface number 0 [ 260.437313][ T531] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 260.447258][ T531] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 9447, setting to 1024 [ 260.458481][ T531] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 260.468664][ T531] usb 4-1: config 1 interface 105 has no altsetting 0 [ 260.476834][ T531] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 260.485868][ T531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.493868][ T531] usb 4-1: Product: syz [ 260.498057][ T531] usb 4-1: Manufacturer: syz [ 260.502646][ T531] usb 4-1: SerialNumber: syz [ 260.508428][ T8571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 260.515661][ T8571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 260.624993][ T8580] bpf: Bad value for 'gid' [ 260.627155][ T8584] bpf: Bad value for 'gid' [ 260.724172][ T531] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 260.822607][ T45] usb 7-1: USB disconnect, device number 7 [ 261.101761][ T8591] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 261.110032][ T8591] tipc: Enabled bearer , priority 10 [ 261.276189][ T8592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1650 [ 261.426919][ T8594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.574507][ T36] audit: type=1400 audit(262.039:28479): avc: denied { read write } for pid=8596 comm="syz.5.2813" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 261.576756][ T8597] input: syz1 as /devices/virtual/input/input34 [ 261.601515][ T36] audit: type=1400 audit(262.039:28480): avc: denied { open } for pid=8596 comm="syz.5.2813" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 261.635000][ T36] audit: type=1400 audit(262.089:28481): avc: denied { remount } for pid=8596 comm="syz.5.2813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.671300][ T36] audit: type=1400 audit(262.139:28482): avc: denied { ioctl } for pid=8596 comm="syz.5.2813" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 261.700825][ T36] audit: type=1400 audit(262.169:28483): avc: denied { map } for pid=8596 comm="syz.5.2813" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 262.479380][ T8605] rust_binder: Error while translating object. [ 262.479402][ T8605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 262.485618][ T8605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:896 [ 262.604917][ T36] audit: type=1400 audit(263.069:28484): avc: denied { read } for pid=8608 comm="syz.5.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.766593][ T339] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.773040][ T8609] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 262.780529][ T339] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.988940][ T64] usb 4-1: USB disconnect, device number 72 [ 262.997542][ T531] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 263.119557][ T8615] FAT-fs (rnullb0): bogus number of reserved sectors [ 263.126379][ T8615] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 263.899936][ T8630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.900036][ T8630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1670 [ 263.907184][ T8630] rust_binder: Error while translating object. [ 263.916507][ T8630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 263.922843][ T8630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1670 [ 264.007697][ T8633] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2826'. [ 264.396768][ T45] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 264.526770][ T45] usb 7-1: device descriptor read/64, error -71 [ 264.756736][ T64] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 264.766779][ T45] usb 7-1: device descriptor read/64, error -71 [ 264.826824][ T4160] Bluetooth: hci0: command 0x1003 tx timeout [ 264.826900][ T709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.916731][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 264.922968][ T64] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 264.931291][ T64] usb 4-1: config 0 has no interface number 0 [ 264.937424][ T64] usb 4-1: config 0 interface 184 has no altsetting 0 [ 264.945690][ T64] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 264.954788][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.962816][ T64] usb 4-1: Product: syz [ 264.967002][ T64] usb 4-1: Manufacturer: syz [ 264.971595][ T64] usb 4-1: SerialNumber: syz [ 264.976937][ T64] usb 4-1: config 0 descriptor?? [ 264.982604][ T64] smsc75xx v1.0.0 [ 265.006742][ T45] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 265.146911][ T45] usb 7-1: device descriptor read/64, error -71 [ 265.386751][ T45] usb 7-1: device descriptor read/64, error -71 [ 265.496857][ T45] usb usb7-port1: attempt power cycle [ 265.672898][ T8691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.681213][ T8690] rust_binder: Error in use_page_slow: ESRCH [ 265.681251][ T8690] rust_binder: use_range failure ESRCH [ 265.687293][ T8690] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 265.692762][ T8690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 265.700700][ T8690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:904 [ 265.836768][ T45] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 265.843377][ T8710] rust_binder: Write failure EINVAL in pid:924 [ 265.860837][ T45] usb 7-1: device descriptor read/8, error -71 [ 265.861352][ T8714] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 265.985231][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 265.996126][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.007749][ T45] usb 7-1: device descriptor read/8, error -71 [ 266.042742][ T8729] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2859'. [ 266.206416][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.215007][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.246746][ T45] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 266.257701][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 266.267848][ T45] usb 7-1: device descriptor read/8, error -71 [ 266.268631][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 266.284368][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 266.293829][ T64] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 266.303400][ T64] usb 4-1: USB disconnect, device number 73 [ 266.397764][ T45] usb 7-1: device descriptor read/8, error -71 [ 266.506769][ T531] usb 6-1: device descriptor read/64, error -71 [ 266.506982][ T45] usb usb7-port1: unable to enumerate USB device [ 266.562979][ T8735] tmpfs: Unknown parameter ' Ng~93TV*׋W [ 266.562979][ T8735] h7' [ 266.767651][ T531] usb 6-1: Using ep0 maxpacket: 8 [ 266.775223][ T531] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 266.786757][ T531] usb 6-1: config 179 has no interface number 0 [ 266.793104][ T531] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 266.805396][ T531] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 266.816953][ T531] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.828484][ T531] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 266.841649][ T531] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 266.855927][ T531] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 266.865405][ T531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.879099][ T8732] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 266.891123][ T8761] can: request_module (can-proto-3) failed. [ 266.983743][ T8779] x_tables: duplicate entry at hook 1 [ 267.169714][ T31] usb 6-1: USB disconnect, device number 39 [ 267.169801][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 267.186873][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 267.216745][ T531] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 267.244804][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2880'. [ 267.254391][ T8793] binder: Bad value for 'stats' [ 267.324282][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 267.324299][ T36] audit: type=1400 audit(267.789:28486): avc: denied { append } for pid=8797 comm="syz.6.2882" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 267.397870][ T531] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 267.410306][ T531] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.427600][ T531] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.436820][ T531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.444978][ T531] usb 4-1: SerialNumber: syz [ 267.652616][ T531] usb 4-1: 0:2 : does not exist [ 267.657611][ T531] usb 4-1: unit 5 not found! [ 267.663823][ T531] usb 4-1: USB disconnect, device number 74 [ 267.673826][ T7629] udevd[7629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.396758][ T531] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 268.491532][ T36] audit: type=1400 audit(268.959:28487): avc: denied { create } for pid=8875 comm="syz.4.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 268.521066][ T8878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8878 comm=syz.5.2915 [ 268.556890][ T531] usb 4-1: Using ep0 maxpacket: 16 [ 268.563012][ T8882] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2917'. [ 268.574103][ T531] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 268.582449][ T531] usb 4-1: config 1 has no interface number 0 [ 268.589121][ T531] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.605164][ T531] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.615457][ T531] usb 4-1: config 1 interface 105 has no altsetting 0 [ 268.622710][ T64] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 268.633910][ T531] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 268.643156][ T531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.651665][ T531] usb 4-1: Product: syz [ 268.656004][ T531] usb 4-1: Manufacturer: syz [ 268.661021][ T531] usb 4-1: SerialNumber: syz [ 268.670634][ T8848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.678011][ T8848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.756764][ T64] usb 7-1: device descriptor read/64, error -71 [ 268.996751][ T64] usb 7-1: device descriptor read/64, error -71 [ 269.089021][ T8848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 269.096236][ T8848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 269.236744][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 269.278443][ T36] audit: type=1400 audit(269.749:28488): avc: denied { name_bind } for pid=8923 comm="syz.4.2932" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 269.366790][ T64] usb 7-1: device descriptor read/64, error -71 [ 269.437000][ T8938] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2937'. [ 269.447545][ T8938] fuse: Bad value for 'group_id' [ 269.452507][ T8938] fuse: Bad value for 'group_id' [ 269.511803][ T531] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 269.522910][ T531] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 269.533905][ T531] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 269.547091][ T531] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:50:19:12:70:58 [ 269.562807][ T531] usb 4-1: USB disconnect, device number 75 [ 269.572727][ T531] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 269.593857][ T8944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 269.593905][ T8944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:987 [ 269.616779][ T64] usb 7-1: device descriptor read/64, error -71 [ 269.638584][ T531] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 269.656758][ T531] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 269.666288][ T531] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 269.736877][ T64] usb usb7-port1: attempt power cycle [ 270.076744][ T64] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 270.097725][ T64] usb 7-1: device descriptor read/8, error -71 [ 270.227796][ T64] usb 7-1: device descriptor read/8, error -71 [ 270.406734][ T31] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 270.408191][ T36] audit: type=1326 audit(270.879:28489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab53b8e929 code=0x0 [ 270.437193][ T36] audit: type=1326 audit(270.879:28490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab53b8e929 code=0x0 [ 270.468982][ T64] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 270.497863][ T64] usb 7-1: device descriptor read/8, error -71 [ 270.521982][ T9015] fuse: Unknown parameter 'f ' [ 270.558098][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.567873][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 270.577553][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.591964][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 270.601159][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 270.609357][ T31] usb 4-1: Product: syz [ 270.613842][ T31] usb 4-1: Manufacturer: syz [ 270.618499][ T31] usb 4-1: SerialNumber: syz [ 270.628366][ T64] usb 7-1: device descriptor read/8, error -71 [ 270.736811][ T64] usb usb7-port1: unable to enumerate USB device [ 270.825539][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 271.026477][ T36] audit: type=1400 audit(271.489:28491): avc: denied { read write } for pid=8982 comm="syz.3.2946" name="lp0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 271.049655][ T36] audit: type=1400 audit(271.489:28492): avc: denied { open } for pid=8982 comm="syz.3.2946" path="/dev/usb/lp0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 271.078289][ T64] usb 4-1: USB disconnect, device number 76 [ 271.085409][ T64] usblp0: removed [ 271.461194][ T9038] batadv_slave_1: entered promiscuous mode [ 271.467549][ T9038] batadv_slave_1: left promiscuous mode [ 271.496931][ T4901] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 271.620650][ T36] audit: type=1326 audit(272.089:28493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.6.2969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce7238e929 code=0x0 [ 271.664727][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.671866][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.679321][ T9043] bridge_slave_0: entered allmulticast mode [ 271.685837][ T9043] bridge_slave_0: entered promiscuous mode [ 271.692032][ T4901] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 271.692450][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.700170][ T4901] usb 6-1: config 0 has no interface number 0 [ 271.708064][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.714212][ T4901] usb 6-1: config 0 interface 41 has no altsetting 0 [ 271.727217][ T9043] bridge_slave_1: entered allmulticast mode [ 271.733688][ T9043] bridge_slave_1: entered promiscuous mode [ 271.740329][ T4901] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 271.749444][ T4901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.760754][ T4901] usb 6-1: Product: syz [ 271.772169][ T4901] usb 6-1: Manufacturer: syz [ 271.777205][ T4901] usb 6-1: SerialNumber: syz [ 271.777737][ T9058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.790562][ T4901] usb 6-1: config 0 descriptor?? [ 271.987255][ T321] ip6gretap0: left allmulticast mode [ 271.992668][ T321] ip6gretap0: left promiscuous mode [ 271.998096][ T321] bridge0: port 3(ip6gretap0) entered disabled state [ 272.005435][ T321] bridge_slave_1: left allmulticast mode [ 272.011439][ T321] bridge_slave_1: left promiscuous mode [ 272.017894][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.025592][ T321] bridge_slave_0: left allmulticast mode [ 272.026747][ T64] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 272.031691][ T321] bridge_slave_0: left promiscuous mode [ 272.044453][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.052316][ T321] tipc: Resetting bearer [ 272.070128][ T321] tipc: Disabling bearer [ 272.114120][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.121186][ T9043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.128458][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.135476][ T9043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.155117][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.162444][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.169796][ T64] usb 4-1: device descriptor read/64, error -71 [ 272.179188][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.186237][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.193648][ T321] tipc: Disabling bearer [ 272.198977][ T321] tipc: Left network mode [ 272.200839][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.210326][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.217933][ T36] audit: type=1400 audit(272.689:28494): avc: denied { append } for pid=9028 comm="syz.5.2962" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 272.249368][ T321] veth1_macvtap: left promiscuous mode [ 272.249666][ T36] audit: type=1400 audit(272.719:28495): avc: denied { listen } for pid=9028 comm="syz.5.2962" path=2F3336362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 272.254990][ T321] veth0_vlan: left promiscuous mode [ 272.335560][ T9064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9064 comm=syz.5.2962 [ 272.343509][ T9043] veth0_vlan: entered promiscuous mode [ 272.369654][ T9043] veth1_macvtap: entered promiscuous mode [ 272.406794][ T64] usb 4-1: device descriptor read/64, error -71 [ 272.491606][ T9069] 8021q: VLANs not supported on ip6gre0 [ 272.497727][ T9070] /dev/rnullb0: Can't open blockdev [ 272.646792][ T64] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 272.776997][ T64] usb 4-1: device descriptor read/64, error -71 [ 273.016745][ T64] usb 4-1: device descriptor read/64, error -71 [ 273.126853][ T64] usb usb4-port1: attempt power cycle [ 273.467092][ T64] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 273.497798][ T64] usb 4-1: device descriptor read/8, error -71 [ 273.637834][ T64] usb 4-1: device descriptor read/8, error -71 [ 273.763203][ T9084] bridge0: port 3(veth1_macvtap) entered blocking state [ 273.775470][ T9084] bridge0: port 3(veth1_macvtap) entered disabled state [ 273.783020][ T9084] veth1_macvtap: entered allmulticast mode [ 273.789580][ T9084] veth1_macvtap: left allmulticast mode [ 273.877833][ T64] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 273.907766][ T64] usb 4-1: device descriptor read/8, error -71 [ 274.037777][ T64] usb 4-1: device descriptor read/8, error -71 [ 274.126794][ T45] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 274.152240][ T64] usb usb4-port1: unable to enumerate USB device [ 274.277702][ T45] usb 7-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 274.288044][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.297613][ T45] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 274.306661][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.314766][ T45] usb 7-1: SerialNumber: syz [ 274.397524][ T4901] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 274.407133][ T4901] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 274.419669][ T4901] usb 6-1: USB disconnect, device number 40 [ 274.522461][ T45] usb 7-1: 0:2 : does not exist [ 274.527395][ T45] usb 7-1: unit 5 not found! [ 274.533509][ T45] usb 7-1: USB disconnect, device number 16 [ 290.691763][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.705408][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.712794][ T9107] bridge_slave_0: entered allmulticast mode [ 290.719297][ T9107] bridge_slave_0: entered promiscuous mode [ 290.728696][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.736859][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.743943][ T9107] bridge_slave_1: entered allmulticast mode [ 290.754411][ T9107] bridge_slave_1: entered promiscuous mode [ 290.849010][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.856072][ T9107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.863409][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.870477][ T9107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.895665][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.903321][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.920090][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.927173][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.958371][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.965446][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.987463][ T9107] veth0_vlan: entered promiscuous mode [ 291.001655][ T9107] veth1_macvtap: entered promiscuous mode [ 291.027680][ T9099] bpf: Bad value for 'gid' [ 291.048243][ T36] audit: type=1400 audit(291.519:28496): avc: denied { setattr } for pid=9112 comm="syz.6.2987" name="NETLINK" dev="sockfs" ino=55480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.071804][ T36] audit: type=1400 audit(291.519:28497): avc: granted { setsecparam } for pid=9112 comm="syz.6.2987" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 291.090849][ T36] audit: type=1400 audit(291.519:28498): avc: granted { setsecparam } for pid=9112 comm="syz.6.2987" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 291.125176][ T9115] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 291.125200][ T9115] rust_binder: Read failure Err(EFAULT) in pid:172 [ 291.157519][ T36] audit: type=1400 audit(291.629:28499): avc: denied { mounton } for pid=9118 comm="syz.3.2990" path="/proc/4/cgroup" dev="proc" ino=54460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 291.157608][ T9122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 291.170417][ T9124] SELinux: security_context_str_to_sid (unc) failed with errno=-22 [ 291.193021][ T9125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 291.195323][ T36] audit: type=1400 audit(291.629:28500): avc: denied { set_context_mgr } for pid=9120 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 291.234109][ T9121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.234228][ T9121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:174 [ 291.243408][ T36] audit: type=1400 audit(291.709:28501): avc: denied { create } for pid=9120 comm="syz.6.2991" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 291.285515][ T36] audit: type=1400 audit(291.719:28502): avc: denied { read write } for pid=4757 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.340345][ T36] audit: type=1400 audit(291.719:28503): avc: denied { open } for pid=4757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.366948][ T9137] rust_binder: Write failure EINVAL in pid:11 [ 291.367687][ T9137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 291.378523][ T9137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:11 [ 291.392521][ T36] audit: type=1400 audit(291.719:28504): avc: denied { ioctl } for pid=4757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.432269][ T36] audit: type=1400 audit(291.779:28505): avc: denied { create } for pid=9129 comm="syz.4.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.487528][ T9145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.627672][ T9] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 291.779605][ T9167] fuse: Bad value for 'group_id' [ 291.782364][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 291.784570][ T9167] fuse: Bad value for 'group_id' [ 291.811446][ T9167] fuse: Unknown parameter 'И_Wy>' [ 291.871155][ T9172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.936734][ T9] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 292.096735][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 292.102433][ T9] usb usb6-port1: attempt power cycle [ 292.146732][ T438] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 292.276737][ T438] usb 7-1: device descriptor read/64, error -71 [ 292.446770][ T9] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 292.467411][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 292.516751][ T438] usb 7-1: device descriptor read/64, error -71 [ 292.596772][ T9] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 292.622894][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 292.628350][ T9] usb usb6-port1: unable to enumerate USB device [ 292.766781][ T438] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 292.896745][ T438] usb 7-1: device descriptor read/64, error -71 [ 292.976739][ T4901] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 293.130941][ T4901] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 293.140027][ T438] usb 7-1: device descriptor read/64, error -71 [ 293.146264][ T4901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.154315][ T4901] usb 4-1: Product: syz [ 293.158548][ T4901] usb 4-1: Manufacturer: syz [ 293.163131][ T4901] usb 4-1: SerialNumber: syz [ 293.169246][ T4901] usb 4-1: config 0 descriptor?? [ 293.246871][ T438] usb usb7-port1: attempt power cycle [ 293.606739][ T438] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 293.638841][ T438] usb 7-1: device descriptor read/8, error -71 [ 293.768757][ T438] usb 7-1: device descriptor read/8, error -71 [ 294.006717][ T438] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 294.028641][ T438] usb 7-1: device descriptor read/8, error -71 [ 294.158565][ T438] usb 7-1: device descriptor read/8, error -71 [ 294.267015][ T438] usb usb7-port1: unable to enumerate USB device [ 295.181897][ T9218] can0: slcan on ptm0. [ 295.436730][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 295.470959][ T9247] netlink: 'syz.5.3029': attribute type 21 has an invalid length. [ 295.478927][ T9247] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3029'. [ 295.599372][ T9] usb 7-1: config 0 has no interfaces? [ 295.609478][ T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 295.619029][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.628764][ T9] usb 7-1: Product: syz [ 295.633018][ T9] usb 7-1: Manufacturer: syz [ 295.638535][ T9] usb 7-1: SerialNumber: syz [ 295.646941][ T9] usb 7-1: config 0 descriptor?? [ 295.749312][ T4901] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 295.759494][ T4901] asix 4-1:0.0: probe with driver asix failed with error -71 [ 295.769535][ T342] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 295.769621][ T4901] usb 4-1: USB disconnect, device number 81 [ 295.861459][ T45] usb 7-1: USB disconnect, device number 21 [ 295.938267][ T9218] can0 (unregistered): slcan off ptm0. [ 295.946739][ T342] usb 6-1: Invalid ep0 maxpacket: 64 [ 296.063917][ T36] kauditd_printk_skb: 830 callbacks suppressed [ 296.063934][ T36] audit: type=1400 audit(296.529:29336): avc: denied { search } for pid=9271 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.086740][ T342] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 296.092818][ T36] audit: type=1400 audit(296.529:29337): avc: denied { search } for pid=9271 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.122151][ T36] audit: type=1400 audit(296.529:29338): avc: denied { search } for pid=9271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.145484][ T36] audit: type=1400 audit(296.529:29339): avc: denied { search } for pid=9271 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.168750][ T36] audit: type=1400 audit(296.569:29340): avc: denied { search } for pid=9272 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.191262][ T36] audit: type=1400 audit(296.569:29341): avc: denied { read } for pid=9272 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 296.213082][ T9262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.220645][ T9262] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 296.224114][ T9043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.229169][ T9265] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.276885][ T4901] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 296.286726][ T342] usb 6-1: Invalid ep0 maxpacket: 64 [ 296.292217][ T342] usb usb6-port1: attempt power cycle [ 296.303550][ T9278] Invalid logical block size (-3) [ 296.369838][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.385610][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.427282][ T4901] usb 4-1: Using ep0 maxpacket: 32 [ 296.436858][ T4901] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 296.448066][ T4901] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.463421][ T4901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 296.473932][ T4901] usb 4-1: New USB device found, idVendor=046d, idProduct=101a, bcdDevice= 0.40 [ 296.483398][ T4901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.491455][ T535] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 296.499106][ T4901] usb 4-1: Product: В [ 296.503185][ T4901] usb 4-1: Manufacturer: 﫧ሁ捨쫯暧좗卤疧옮究뾈糧듙솛⩨⨝薻뛔蜻鍴袕銁뺨軼㔴䥬肎켌匧叽졇煤韙傛貰賨䂬废⒬傹履埻静೚ᵳ쨊胁햯듭Ⓧ듁夅丱쎜犾엪䔵㞋䧠䃎ꀃﹾￚ⍼⋊숖擈质謴ꓙꝤ⯙⡄꼑lj꿡 [ 296.529465][ T4901] usb 4-1: SerialNumber: Ћ [ 296.540447][ T9262] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.636802][ T342] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 296.657346][ T342] usb 6-1: Invalid ep0 maxpacket: 64 [ 296.667223][ T535] usb 7-1: device descriptor read/64, error -71 [ 296.786771][ T342] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 296.807360][ T342] usb 6-1: Invalid ep0 maxpacket: 64 [ 296.812760][ T342] usb usb6-port1: unable to enumerate USB device [ 296.906729][ T535] usb 7-1: device descriptor read/64, error -71 [ 296.955382][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.963942][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.146743][ T535] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 297.175157][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.183690][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.250056][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.258615][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.268768][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.277286][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.285082][ T535] usb 7-1: device descriptor read/64, error -71 [ 297.296483][ T4901] usbhid 4-1:1.0: can't add hid device: -71 [ 297.302512][ T4901] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 297.316868][ T4901] usb 4-1: USB disconnect, device number 82 [ 297.526766][ T535] usb 7-1: device descriptor read/64, error -71 [ 297.636874][ T535] usb usb7-port1: attempt power cycle [ 297.976772][ T535] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 297.998622][ T535] usb 7-1: device descriptor read/8, error -71 [ 298.128637][ T535] usb 7-1: device descriptor read/8, error -71 [ 298.366757][ T535] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 298.388709][ T535] usb 7-1: device descriptor read/8, error -71 [ 298.518594][ T535] usb 7-1: device descriptor read/8, error -71 [ 298.558366][ T9298] netlink: 'syz.5.3035': attribute type 4 has an invalid length. [ 298.568109][ T9298] netlink: 'syz.5.3035': attribute type 4 has an invalid length. [ 298.626848][ T535] usb usb7-port1: unable to enumerate USB device [ 298.936749][ T9] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 299.069840][ T9309] rust_binder: Error in use_page_slow: ESRCH [ 299.069865][ T9309] rust_binder: use_range failure ESRCH [ 299.075966][ T9309] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 299.081517][ T9309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 299.089672][ T9309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:51 [ 299.096292][ T9312] overlay: filesystem on ./bus not supported as upperdir [ 299.111145][ T9] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.134103][ T9] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 24, setting to 8 [ 299.145447][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 299.152776][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 299.162531][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.176951][ T9] usb 6-1: config 0 descriptor?? [ 299.183304][ T9301] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.291685][ T9325] input: syz1 as /devices/virtual/input/input38 [ 299.601731][ T9] wacom 0003:056A:4001.0022: unknown main item tag 0x6 [ 299.621912][ T9] wacom 0003:056A:4001.0022: hidraw0: USB HID v0.00 Device [HID 056a:4001] on usb-dummy_hcd.5-1/input0 [ 299.769771][ T9349] can0: slcan on ptm0. [ 299.809605][ T4901] usb 6-1: USB disconnect, device number 49 [ 299.841980][ T9350] can0 (unregistered): slcan off ptm0. [ 299.974620][ T9361] rust_binder: Error while translating object. [ 299.974649][ T9361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 299.984800][ T9361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 300.283276][ T9384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 300.302605][ T9384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:45 [ 300.322293][ T9380] rust_binder: Error while translating object. [ 300.344507][ T9380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 300.376024][ T9380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:89 [ 300.393049][ T9388] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 300.563094][ T9403] sit0: entered promiscuous mode [ 300.578144][ T9403] netlink: 'syz.6.3066': attribute type 1 has an invalid length. [ 300.585904][ T9403] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3066'. [ 300.758109][ T9417] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 300.884547][ T9423] binder: Unknown parameter 'qtats' [ 300.954203][ T9423] rust_binder: Error while translating object. [ 300.954254][ T9423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.967783][ T9423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 301.067462][ T36] kauditd_printk_skb: 1206 callbacks suppressed [ 301.067480][ T36] audit: type=1400 audit(301.539:30522): avc: denied { read write } for pid=9107 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.116293][ T36] audit: type=1400 audit(301.539:30523): avc: denied { read write open } for pid=9107 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.172799][ T36] audit: type=1400 audit(301.539:30524): avc: denied { ioctl } for pid=9107 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.198513][ T36] audit: type=1400 audit(301.609:30525): avc: denied { read } for pid=9428 comm="syz.6.3071" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 301.218304][ T9431] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.231817][ T9431] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 301.246066][ T9431] audit: backlog limit exceeded [ 301.252662][ T36] audit: type=1400 audit(301.609:30526): avc: denied { read open } for pid=9428 comm="syz.6.3071" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 301.257965][ T9431] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.280877][ T9427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.426744][ T45] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 301.497861][ T9435] binder: Unknown parameter '' [ 301.541332][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.566742][ T45] usb 4-1: device descriptor read/64, error -71 [ 301.806776][ T45] usb 4-1: device descriptor read/64, error -71 [ 301.836749][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 301.988880][ T9] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 301.996139][ T9] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 302.005213][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.014418][ T9] usb 6-1: config 0 descriptor?? [ 302.028219][ T9] rndis_host 6-1:0.0: skipping garbage [ 302.033714][ T9] usb 6-1: bad CDC descriptors [ 302.056740][ T45] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 302.187331][ T45] usb 4-1: device descriptor read/64, error -71 [ 302.227666][ T9] usb 6-1: USB disconnect, device number 50 [ 302.426775][ T45] usb 4-1: device descriptor read/64, error -71 [ 302.536826][ T45] usb usb4-port1: attempt power cycle [ 302.876735][ T45] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 302.916289][ T45] usb 4-1: device descriptor read/8, error -71 [ 303.036059][ T9484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.048665][ T45] usb 4-1: device descriptor read/8, error -71 [ 303.097069][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 303.128792][ T9488] incfs: Can't find or create .incomplete dir in ./file0 [ 303.135965][ T9488] incfs: mount failed -22 [ 303.260473][ T9] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 303.270744][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 303.279794][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.291978][ T9] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 303.311624][ T45] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 303.339056][ T45] usb 4-1: device descriptor read/8, error -71 [ 303.365813][ T9497] batadv_slave_1: entered promiscuous mode [ 303.373053][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.373314][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.381872][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.389349][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.396037][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.402767][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.409418][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.416038][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.422739][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.429430][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.436043][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.442761][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.449392][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.456014][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.462707][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.469356][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.475963][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.482681][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.489374][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.494879][ T45] usb 4-1: device descriptor read/8, error -71 [ 303.496046][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.502980][ T9480] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388857856 i:0 err:EBUSY [ 303.508653][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.516480][ T9480] rust_binder: Error in use_page_slow: EBUSY [ 303.525396][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.532522][ T9480] rust_binder: use_range failure EBUSY [ 303.537786][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.544938][ T9480] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 303.549895][ T709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.556088][ T9480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 303.569962][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.581168][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.588834][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.597208][ T9480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:1073 [ 303.597718][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.609419][ T9] usb 6-1: USB disconnect, device number 51 [ 303.621846][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.627590][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.630513][ T45] usb usb4-port1: unable to enumerate USB device [ 303.634295][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.647091][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.655669][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.663646][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.670439][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.677199][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.683901][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.690631][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.697278][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.703884][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.711617][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.718821][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.725425][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.732855][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.739489][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.746080][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.752939][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.759572][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.766198][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.772984][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.779622][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.786227][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.792962][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.799713][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.806385][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.813117][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.819921][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.826996][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.834927][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.841810][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.848738][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.855466][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.862285][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.870217][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.877200][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.948024][ T9495] batadv_slave_1: left promiscuous mode [ 304.298850][ T9527] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 305.009845][ T9558] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 305.028211][ T9558] kvm: pic: non byte read [ 305.032734][ T9558] kvm: pic: level sensitive irq not supported [ 305.032774][ T9558] kvm: pic: non byte read [ 305.043414][ T9558] kvm: pic: level sensitive irq not supported [ 305.043479][ T9558] kvm: pic: non byte read [ 305.054128][ T9558] kvm: pic: level sensitive irq not supported [ 305.054184][ T9558] kvm: pic: non byte read [ 305.056738][ T45] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 305.138660][ T9562] rust_binder: Error while translating object. [ 305.138691][ T9562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 305.144905][ T9562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:127 [ 305.156735][ T9563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.229519][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.240517][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.250280][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.263217][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.272752][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.283439][ T45] usb 7-1: config 0 descriptor?? [ 305.350879][ T9574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 305.374209][ T9576] rust_binder: Error while translating object. [ 305.374393][ T9576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 305.383627][ T9576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 305.680607][ T9589] /dev/sg0: Can't lookup blockdev [ 305.713924][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.725290][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.744724][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.752838][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.760773][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.769497][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.777431][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.784944][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.793158][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.801122][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.809085][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.816522][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.823977][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.831428][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.839428][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 305.847593][ T45] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 305.861918][ T45] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 305.967349][ T9] usb 7-1: USB disconnect, device number 26 [ 306.074580][ T9612] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 306.081782][ T9612] rust_binder: Write failure EINVAL in pid:152 [ 306.091504][ T36] kauditd_printk_skb: 1119 callbacks suppressed [ 306.091521][ T36] audit: type=1400 audit(306.559:31618): avc: denied { read write } for pid=9107 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.128113][ T36] audit: type=1400 audit(306.559:31619): avc: denied { read write open } for pid=9107 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.158125][ T36] audit: type=1400 audit(306.559:31620): avc: denied { ioctl } for pid=9107 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.183377][ T36] audit: type=1400 audit(306.579:31621): avc: denied { read write } for pid=9613 comm="syz.3.3125" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 306.210573][ T36] audit: type=1400 audit(306.579:31622): avc: denied { read open } for pid=9613 comm="syz.3.3125" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 306.238455][ T36] audit: type=1400 audit(306.579:31623): avc: denied { map } for pid=9613 comm="syz.3.3125" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 306.265261][ T36] audit: type=1400 audit(306.579:31624): avc: denied { read } for pid=9613 comm="syz.3.3125" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 306.292583][ T36] audit: type=1400 audit(306.589:31625): avc: denied { read write } for pid=9107 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.324456][ T36] audit: type=1400 audit(306.589:31626): avc: denied { read write open } for pid=9107 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.349026][ T36] audit: type=1400 audit(306.589:31627): avc: denied { ioctl } for pid=9107 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.141288][ T9643] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 307.189118][ T9646] cgroup: subsys name conflicts with all [ 307.271385][ T9657] netlink: 'syz.6.3140': attribute type 4 has an invalid length. [ 307.281292][ T9657] netlink: 'syz.6.3140': attribute type 4 has an invalid length. [ 307.507237][ T9666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1085 [ 307.906743][ T45] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 308.068898][ T45] usb 6-1: config 0 has no interfaces? [ 308.077759][ T45] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 308.086840][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.094861][ T45] usb 6-1: Product: syz [ 308.099030][ T45] usb 6-1: Manufacturer: syz [ 308.103606][ T45] usb 6-1: SerialNumber: syz [ 308.109926][ T45] usb 6-1: config 0 descriptor?? [ 308.321650][ T45] usb 6-1: USB disconnect, device number 52 [ 308.516271][ T9718] overlayfs: failed to clone upperpath [ 308.731875][ T9724] rust_kernel: panicked at drivers/android/binder/node.rs:893:13: [ 308.731875][ T9724] attempt to subtract with overflow [ 308.744935][ T9724] ------------[ cut here ]------------ [ 308.750422][ T9724] kernel BUG at rust/helpers/bug.c:7! [ 308.756049][ T9724] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 308.762984][ T9724] CPU: 0 UID: 0 PID: 9724 Comm: syz.4.3161 Not tainted 6.12.30-syzkaller-g1ccb219f8cda #0 7a2e1ed1be67dd4e5f42c8044c2ea2ca0199c2ac [ 308.776414][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.786450][ T9724] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 308.791743][ T9724] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7b ab c0 45 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 31 6f 89 c9 90 90 90 90 90 90 90 90 90 [ 308.811336][ T9724] RSP: 0018:ffffc9000399da90 EFLAGS: 00010246 [ 308.817404][ T9724] RAX: 0000000000000061 RBX: 1ffff92000733b54 RCX: 5752b37cb4dd9000 [ 308.825356][ T9724] RDX: ffffc90009e72000 RSI: 000000000000548f RDI: 0000000000005490 [ 308.833325][ T9724] RBP: ffffc9000399da90 R08: ffffc9000399d787 R09: 1ffff92000733af0 [ 308.841317][ T9724] R10: dffffc0000000000 R11: fffff52000733af1 R12: 0000000000000000 [ 308.849298][ T9724] R13: dffffc0000000000 R14: ffffc9000399dac0 R15: ffffc9000399daf0 [ 308.857277][ T9724] FS: 00007ff564ff76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 308.866213][ T9724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.872787][ T9724] CR2: 000000110c342efb CR3: 000000014510a000 CR4: 00000000003526b0 [ 308.880745][ T9724] Call Trace: [ 308.884094][ T9724] [ 308.887010][ T9724] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 308.894467][ T9724] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 308.902431][ T9724] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 308.912652][ T9724] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 308.926181][ T9724] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 308.936755][ T9724] ? __kasan_check_write+0x18/0x20 [ 308.941857][ T9724] ? _raw_spin_lock+0x8c/0x120 [ 308.946609][ T9724] ? __cfi__raw_spin_lock+0x10/0x10 [ 308.951794][ T9724] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 308.958976][ T9724] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 308.966855][ T9724] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 308.976731][ T9724] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 308.987302][ T9724] ? __asan_memcpy+0x5a/0x80 [ 308.991878][ T9724] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 309.001759][ T9724] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 309.011825][ T9724] ? _raw_spin_unlock+0x45/0x60 [ 309.016772][ T9724] ? rust_helper_spin_unlock+0x19/0x30 [ 309.022213][ T9724] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x665/0xc40 [ 309.032092][ T9724] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x10/0x10 [ 309.042316][ T9724] ? __kasan_check_write+0x18/0x20 [ 309.047411][ T9724] ? _raw_spin_lock+0x8c/0x120 [ 309.052185][ T9724] ? __cfi__raw_spin_lock+0x10/0x10 [ 309.057375][ T9724] ? __kasan_check_write+0x18/0x20 [ 309.062475][ T9724] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 309.072024][ T9724] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 309.081950][ T9724] ? unwind_next_frame+0x3c2/0x750 [ 309.087078][ T9724] ? kvm_mmu_post_init_vm+0x1a6/0x310 [ 309.092467][ T9724] ? kvm_mmu_post_init_vm+0x1a6/0x310 [ 309.097855][ T9724] ? __kernel_text_address+0x11/0x40 [ 309.103156][ T9724] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 309.109326][ T9724] ? arch_stack_walk+0x12a/0x170 [ 309.114284][ T9724] ? kvm_mmu_post_init_vm+0x1a6/0x310 [ 309.119675][ T9724] ? unwind_next_frame+0x3c2/0x750 [ 309.124794][ T9724] ? inode_permission+0xf3/0x4c0 [ 309.129749][ T9724] ? inode_permission+0xf3/0x4c0 [ 309.134704][ T9724] ? __kernel_text_address+0x11/0x40 [ 309.140001][ T9724] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 309.146165][ T9724] ? arch_stack_walk+0x12a/0x170 [ 309.151115][ T9724] ? inode_permission+0xf3/0x4c0 [ 309.156074][ T9724] ? native_smp_send_reschedule+0x3d/0x60 [ 309.161819][ T9724] ? update_curr_dl_se+0x65a/0xb20 [ 309.166959][ T9724] ? resched_curr+0x1c6/0x430 [ 309.171649][ T9724] ? __cfi_resched_curr+0x10/0x10 [ 309.176690][ T9724] ? unwind_next_frame+0x3c2/0x750 [ 309.181802][ T9724] ? __se_sys_ioctl+0x53/0x1b0 [ 309.186589][ T9724] ? __se_sys_ioctl+0x53/0x1b0 [ 309.191365][ T9724] ? __kernel_text_address+0x11/0x40 [ 309.196656][ T9724] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 309.202818][ T9724] ? arch_stack_walk+0x12a/0x170 [ 309.207776][ T9724] ? __se_sys_ioctl+0x53/0x1b0 [ 309.212562][ T9724] ? stack_depot_save_flags+0x38/0x800 [ 309.218032][ T9724] ? stack_depot_save+0x12/0x20 [ 309.222891][ T9724] ? save_stack+0x11c/0x1f0 [ 309.227397][ T9724] ? free_contig_range+0x270/0x270 [ 309.232517][ T9724] ? __reset_page_owner+0x450/0x450 [ 309.237701][ T9724] ? zone_page_state_add+0x43/0x90 [ 309.242796][ T9724] ? post_alloc_hook+0x3b9/0x3f0 [ 309.247711][ T9724] ? prep_new_page+0x1c/0x120 [ 309.252369][ T9724] ? get_page_from_freelist+0x46bb/0x4750 [ 309.258085][ T9724] ? __alloc_pages_noprof+0x30d/0x6c0 [ 309.263435][ T9724] ? alloc_slab_page+0x6b/0x1f0 [ 309.268274][ T9724] ? allocate_slab+0x69/0x440 [ 309.272944][ T9724] ? native_smp_send_reschedule+0x3d/0x60 [ 309.278656][ T9724] ? update_curr_dl_se+0x65a/0xb20 [ 309.283780][ T9724] ? resched_curr+0x1c6/0x430 [ 309.288467][ T9724] ? __cfi_resched_curr+0x10/0x10 [ 309.293505][ T9724] ? read_tsc+0xd/0x20 [ 309.297577][ T9724] ? ktime_get+0x1df/0x210 [ 309.301999][ T9724] ? start_dl_timer+0x1b9/0x380 [ 309.306852][ T9724] ? update_curr_dl_se+0x65a/0xb20 [ 309.311949][ T9724] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 309.317993][ T9724] ? update_curr+0x60d/0xc60 [ 309.322568][ T9724] ? is_bpf_text_address+0x17b/0x1a0 [ 309.327840][ T9724] ? kernel_text_address+0xa9/0xe0 [ 309.332948][ T9724] ? __kernel_text_address+0x11/0x40 [ 309.338214][ T9724] ? unwind_get_return_address+0x51/0x90 [ 309.343826][ T9724] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 309.349970][ T9724] ? arch_stack_walk+0x10b/0x170 [ 309.354916][ T9724] ? stack_trace_save+0x9d/0xe0 [ 309.359764][ T9724] ? stack_depot_save_flags+0x38/0x800 [ 309.365207][ T9724] ? kasan_save_track+0x4f/0x80 [ 309.370038][ T9724] ? kasan_save_track+0x3e/0x80 [ 309.374884][ T9724] ? kasan_save_free_info+0x4a/0x60 [ 309.380064][ T9724] ? __kasan_slab_free+0x5f/0x80 [ 309.384983][ T9724] ? kmem_cache_free+0x1c1/0x4c0 [ 309.389902][ T9724] ? audit_log_end+0x1f1/0x240 [ 309.394644][ T9724] ? common_lsm_audit+0x148c/0x1860 [ 309.399818][ T9724] ? slow_avc_audit+0x18d/0x1f0 [ 309.404651][ T9724] ? avc_has_extended_perms+0x895/0xdd0 [ 309.410186][ T9724] ? ioctl_has_perm+0x384/0x4d0 [ 309.415031][ T9724] ? selinux_file_ioctl+0x6e0/0x1360 [ 309.420299][ T9724] ? security_file_ioctl+0x58/0xd0 [ 309.425389][ T9724] ? __se_sys_ioctl+0x53/0x1b0 [ 309.430132][ T9724] ? __x64_sys_ioctl+0x7f/0xa0 [ 309.434878][ T9724] ? x64_sys_call+0x1878/0x2ee0 [ 309.439732][ T9724] ? do_syscall_64+0x58/0xf0 [ 309.444296][ T9724] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 309.450341][ T9724] ? __kasan_check_write+0x18/0x20 [ 309.455434][ T9724] ? _raw_spin_lock+0x8c/0x120 [ 309.460201][ T9724] ? __cfi__raw_spin_lock+0x10/0x10 [ 309.465381][ T9724] ? _raw_spin_unlock+0x45/0x60 [ 309.470216][ T9724] ? rust_helper_spin_unlock+0x19/0x30 [ 309.475658][ T9724] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 309.486140][ T9724] ? kmem_cache_free+0x1c1/0x4c0 [ 309.491061][ T9724] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 309.501802][ T9724] ? audit_log_end+0x1f1/0x240 [ 309.506546][ T9724] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 309.512506][ T9724] ? common_lsm_audit+0x148c/0x1860 [ 309.517683][ T9724] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 309.523650][ T9724] ? slow_avc_audit+0x18d/0x1f0 [ 309.528483][ T9724] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 309.537573][ T9724] ? avc_denied+0x112/0x180 [ 309.542055][ T9724] ? avc_has_extended_perms+0x895/0xdd0 [ 309.547581][ T9724] ? avc_has_extended_perms+0x91a/0xdd0 [ 309.553104][ T9724] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 309.562630][ T9724] ? do_vfs_ioctl+0xeda/0x1e30 [ 309.567376][ T9724] ? preempt_schedule_common+0x2d/0x60 [ 309.572812][ T9724] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 309.578423][ T9724] ? __cfi_preempt_schedule+0x10/0x10 [ 309.583774][ T9724] ? preempt_schedule_thunk+0x1a/0x40 [ 309.589127][ T9724] ? try_to_wake_up+0xe17/0x1aa0 [ 309.594051][ T9724] ? ioctl_has_perm+0x384/0x4d0 [ 309.598884][ T9724] ? has_cap_mac_admin+0xd0/0xd0 [ 309.603803][ T9724] ? futex_wake+0x63a/0x900 [ 309.608284][ T9724] ? __cfi_futex_wake+0x10/0x10 [ 309.613115][ T9724] ? selinux_file_ioctl+0x6e0/0x1360 [ 309.618380][ T9724] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 309.623910][ T9724] ? do_futex+0x356/0x500 [ 309.628223][ T9724] ? __cfi_do_futex+0x10/0x10 [ 309.632884][ T9724] ? __fget_files+0x2c5/0x340 [ 309.637542][ T9724] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 309.646026][ T9724] ? __se_sys_ioctl+0x114/0x1b0 [ 309.650862][ T9724] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 309.659957][ T9724] __se_sys_ioctl+0x132/0x1b0 [ 309.664619][ T9724] __x64_sys_ioctl+0x7f/0xa0 [ 309.669194][ T9724] x64_sys_call+0x1878/0x2ee0 [ 309.673850][ T9724] do_syscall_64+0x58/0xf0 [ 309.678263][ T9724] ? clear_bhb_loop+0x50/0xa0 [ 309.682921][ T9724] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 309.688791][ T9724] RIP: 0033:0x7ff56698e929 [ 309.693182][ T9724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.712770][ T9724] RSP: 002b:00007ff564ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.721168][ T9724] RAX: ffffffffffffffda RBX: 00007ff566bb5fa0 RCX: 00007ff56698e929 [ 309.729122][ T9724] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 309.737074][ T9724] RBP: 00007ff566a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 309.745024][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.752974][ T9724] R13: 0000000000000000 R14: 00007ff566bb5fa0 R15: 00007ffe1fc902e8 [ 309.760931][ T9724] [ 309.763928][ T9724] Modules linked in: [ 309.768225][ T9724] ---[ end trace 0000000000000000 ]--- [ 309.773737][ T9724] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 309.794181][ T9724] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7b ab c0 45 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 31 6f 89 c9 90 90 90 90 90 90 90 90 90 [ 309.835673][ T9724] RSP: 0018:ffffc9000399da90 EFLAGS: 00010246 [ 309.842511][ T9724] RAX: 0000000000000061 RBX: 1ffff92000733b54 RCX: 5752b37cb4dd9000 [ 309.851274][ T9724] RDX: ffffc90009e72000 RSI: 000000000000548f RDI: 0000000000005490 [ 309.859993][ T9724] RBP: ffffc9000399da90 R08: ffffc9000399d787 R09: 1ffff92000733af0 [ 309.868778][ T9724] R10: dffffc0000000000 R11: fffff52000733af1 R12: 0000000000000000 [ 309.877609][ T9724] R13: dffffc0000000000 R14: ffffc9000399dac0 R15: ffffc9000399daf0 [ 309.885860][ T9724] FS: 00007ff564ff76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 309.895724][ T9724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.903093][ T9724] CR2: 00007f9360f5df98 CR3: 000000014510a000 CR4: 00000000003526b0 [ 309.911523][ T9724] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 309.919955][ T9724] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.927996][ T9724] Kernel panic - not syncing: Fatal exception [ 309.934290][ T9724] Kernel Offset: disabled [ 309.938596][ T9724] Rebooting in 86400 seconds..