last executing test programs: 2m22.87668524s ago: executing program 1 (id=61): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) (async) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x285}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r4, &(0x7f0000000140)=""/26, 0x1a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) r5 = userfaultfd(0x80001) (async) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000712000/0x2000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r7, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x4048086) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r8 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 2m22.718841832s ago: executing program 1 (id=64): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x3c, 0xc, &(0x7f0000000000)="db", 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1fff, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200002, 0x7}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x18, 0x36, {0x36, 0x3, "17ba2ecbb3ac4fcca68b0d4dd17ea18265cc3288651c16a4887bbf7d2b44b03a1b6c9be06bd2951b98091f3e9afa20b396d4fa97"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 2m21.081436588s ago: executing program 1 (id=81): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000097ff0000000000000700000001440e"], 0x20}}], 0x1, 0x0) 2m21.080880868s ago: executing program 1 (id=82): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='omfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x400000, 0x80) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syslog(0x4, &(0x7f0000000000)=""/184, 0xb8) syslog(0x3, &(0x7f0000000300)=""/132, 0x84) setreuid(0xee00, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000240), 0x0, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x200, {{@in=@broadcast, @in6=@remote, 0x43, 0x2}, {@in6=@remote, 0x4d3, 0x2b}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000640)='\x00') mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xfffff000) 2m20.484546146s ago: executing program 1 (id=83): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r4, &(0x7f0000001780)=[{&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/58, 0x3a}], 0x6, 0x200, 0xd3) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@multicast1, {0x0, 0x0, 0xb347}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x3507, 0xa, 0x4, 0x0, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '?,:\\{]y\xb3\xcb\x06\x8d\x05\x01\xcf4\xdc\xfa\xf1hv\xa5\xe8\xe1g|`\x19\xf5\xe5\xb4\x02(\x05\xec\x8a\x93)c\xe37\x10\x8cI\x88\xa4\x95\x00\x13\x99s\x02\xac\x8a\xfa^Y\xa6U\xa1y\x03\xd8\x8e\x8aC\xa3\xe0\x1e9+xorp\xb6\x02\xb8\xb8\xf1\xaap\xa5\xaeIW\xd7\xd8n\xf4\x9c\x89 \x83\x87\x06\xcf\x87\t\x8b\xafQa6=\xa7\x1b\xe8K\xc9T\x0f\xff\xf55Z\x7fF-\xab\x9b\xf2)\x80s\x83\x02\x80q\xdd\xb8\xc6\b\xc5\x16_U\xb1U|\x02\xe8gI'}}, {@cache_fscache}]}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 2m20.417432668s ago: executing program 1 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f000016e000/0x9000)=nil, 0x9000, 0x3000003, 0x13, r4, 0x8354a000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000166000/0x13000)=nil, 0x13000, 0x1000000, 0x50, r5, 0x10000000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001040)={[0xbf8, 0x7ffffff7, 0x5, 0x4, 0x7fffffffffffffff, 0x10001, 0x1, 0x101, 0xfffffffffffffe00, 0x9, 0x3, 0x9, 0x400, 0x9, 0x7fffffffffffffff, 0x2], 0xdddd1000, 0x44}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xc, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xfb88, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2", 0x7}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) open(0x0, 0x14927e, 0x110) setns(r9, 0x24020000) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) 2m20.395461078s ago: executing program 32 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f000016e000/0x9000)=nil, 0x9000, 0x3000003, 0x13, r4, 0x8354a000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000166000/0x13000)=nil, 0x13000, 0x1000000, 0x50, r5, 0x10000000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001040)={[0xbf8, 0x7ffffff7, 0x5, 0x4, 0x7fffffffffffffff, 0x10001, 0x1, 0x101, 0xfffffffffffffe00, 0x9, 0x3, 0x9, 0x400, 0x9, 0x7fffffffffffffff, 0x2], 0xdddd1000, 0x44}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xc, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xfb88, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2", 0x7}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) open(0x0, 0x14927e, 0x110) setns(r9, 0x24020000) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) 1m40.264824343s ago: executing program 2 (id=689): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='{%*\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x84, 0xfc, 0xfb, 0x100800}, {0x56, 0x0, 0x1a, 0x4ca}, {0x6, 0xe6, 0x6, 0x81}, {0x6, 0xfc, 0x7, 0x10000}, {0x0, 0x1, 0x6, 0x558d}, {0x8, 0x93, 0x9, 0x7}, {0x5, 0x2, 0x5, 0xe340}]}) 1m39.420622706s ago: executing program 2 (id=698): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x11008a, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}, {@version_u}, {@version_u}, {@debug={'debug', 0x3d, 0x9}}, {@cache_loose}, {@debug={'debug', 0x3d, 0xfffffffffffffff9}}, {@afid={'afid', 0x3d, 0x8}}, {@version_L}, {@cache_mmap}], [{@smackfshat={'smackfshat', 0x3d, '!)}&'}}]}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@directio}, {@afid={'afid', 0x3d, 0x8}}]}}) r5 = open(&(0x7f0000000540)='./file1/file0\x00', 0x10fd02, 0x46) sendfile(r5, r0, 0x0, 0x80000000) 1m39.417989716s ago: executing program 2 (id=699): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x19) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x111491, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) (async) sendfile(r3, r3, 0x0, 0x7ffff000) 1m38.48044586s ago: executing program 2 (id=702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) statx(0xffffffffffffffff, &(0x7f0000001040)='./file1\x00', 0x400, 0x228, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001300)={&(0x7f0000000500)={0x50, 0x0, 0xfffffffffffffffb, {0x7, 0x2b, 0x100, 0x40402100, 0x4, 0x46, 0x3, 0x8, 0x0, 0x0, 0x0, 0xffffcba6}}, &(0x7f0000000480)={0x18, 0x0, 0x1, {0x3}}, &(0x7f0000000580)={0x18, 0x0, 0x1, {0x2}}, &(0x7f00000005c0)={0x18, 0x0, 0x4, {0x3}}, &(0x7f0000000600)={0x18, 0xfffffffffffffff5, 0x1ff, {0x8}}, &(0x7f0000000640)={0x28, 0x0, 0x8, {{0x8, 0xfffffffffffffffd, 0x1}}}, &(0x7f0000000680)={0x60, 0x0, 0x7f, {{0x6, 0x80, 0x80, 0xff, 0x5, 0xbab, 0x5}}}, &(0x7f0000000700)={0x18, 0x0, 0x1, {0xf}}, &(0x7f0000000740)={0x13, 0x0, 0x4, {'!+\x00'}}, &(0x7f0000000800)={0x20, 0x0, 0x81, {0x0, 0x6}}, &(0x7f0000000980)={0x78, 0x0, 0x6, {0x7, 0x8, 0x0, {0x5, 0x100000001, 0x3, 0x300000000, 0x4, 0x3, 0xff, 0xd, 0x8001, 0x1000, 0x40, 0xffffffffffffffff, 0x0, 0xcc1, 0xb}}}, &(0x7f0000000ac0)={0x90, 0x0, 0xfff, {0x0, 0x2, 0x0, 0xffffffff00000001, 0x29, 0xbb01, {0x1, 0x1, 0x100000001, 0x2, 0xff, 0x401, 0x1, 0x5, 0x10, 0x6000, 0x70f7, 0x0, 0x0, 0x5437, 0x1ff}}}, &(0x7f0000000b80)={0xf0, 0x0, 0x300000, [{0x3, 0x7, 0x7, 0x6, '{^%@:%&'}, {0x6, 0x8, 0x1, 0x7, '/'}, {0x5, 0x4, 0x1, 0x3ba4, '{'}, {0x6, 0x9, 0x6, 0x401, 'tmpfs\x00'}, {0x1, 0xbdb3, 0x5, 0x3ed6bab2, '*.\\-\\'}, {0x4, 0x0, 0x0, 0x4}, {0x6, 0x4e6, 0x9, 0x3, 'nr_blocks'}]}, &(0x7f0000000cc0)={0x158, 0xfffffffffffffff5, 0x3, [{{0x2, 0x3, 0x4, 0x4, 0x0, 0x1ff, {0x1, 0x8, 0x81, 0x9, 0x3ff, 0x6, 0x2b17cb26, 0x9, 0xfe3b, 0xc000, 0x81, 0x0, 0xffffffffffffffff, 0x7, 0xff}}, {0x1, 0x3ff, 0x10, 0x8c9b, 'huge=within_size'}}, {{0x2, 0x1, 0x8, 0x9a98, 0x80, 0x6, {0x5, 0x8, 0x10000, 0x6, 0x80000001, 0x4, 0xf, 0x9, 0x7ff, 0x9000, 0x8a, 0x0, 0x0, 0x0, 0xb54b}}, {0x4, 0x622, 0x4, 0x0, '{)]-'}}]}, &(0x7f0000000e80)={0xa0, 0x0, 0x7f, {{0xffffffffffffffff, 0x1, 0x625, 0x8, 0x6b0, 0x8, {0x4, 0x1a5, 0x48d, 0x4, 0x9, 0x9, 0x1, 0x9, 0x6, 0x6000, 0x388a9d89, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x80000000}}, {0x0, 0x3}}}, &(0x7f0000000f40)={0x20, 0x0, 0x9e, {0x9, 0x0, 0x6, 0x401}}, &(0x7f00000011c0)={0x130, 0x0, 0x7, {0xfffffffffffffffc, 0x79, 0x0, '\x00', {0x20, 0x3ff, 0xbec0, 0x200, r2, r3, 0x6000, '\x00', 0x2053, 0x3, 0x7fff, 0x9, {0x7, 0x1}, {0x2, 0x3}, {0x3, 0x1ff}, {0x80000001, 0x4}, 0x6, 0x5, 0x400, 0x3}}}}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000000180)={'bridge0\x00', 0x0}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000100)="301b983cbde73f583091b6878f286e46a266033f2a1839871c4f7267ac4de3ed57e6d5bd5bb0cd32efc2275c6caf9b585e5a3cfc30db3312da8d9d2a292d5d1e9736545576ca04d7bccc2db41a00569f875b2aa7bc2f575740ffa74bb5fa2290a5863c140a40bbd63762", 0x6a}, {0x0}], 0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) chdir(&(0x7f0000001180)='./bus\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004300)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004380)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x7fffffffffffffff, {0x2, 0x3, 0x80000000, 0x10000, 0x0, 0x0, {0x2, 0xfffffffffffffff9, 0x3, 0xeb, 0x1, 0x400, 0x2, 0x1, 0x7f, 0x4000, 0xffffb96d, r9, r10, 0xa0000000, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x80, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x9e7086e9b4d2875b, 0x25]}}, {@inode32}, {@nr_blocks={'nr_blocks', 0x3d, [0x34]}}, {@grpquota_inode_hardlimit}, {@mode={'mode', 0x3d, 0x2}}, {@huge_within_size}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'upperdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x2, 0x5, 0x64, 0x65, 0x33, 0x37, 0x66, 0x66], 0x2d, [0x64, 0x64, 0x35, 0x65], 0x2d, [0x39, 0x68, 0x35, 0x37], 0x2d, [0x39, 0x4, 0x2, 0x65], 0x2d, [0x32, 0x38, 0x38, 0x35, 0x31, 0x66, 0x37, 0x37]}}}, {@hash}]}) rmdir(&(0x7f0000000440)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m37.659005853s ago: executing program 2 (id=722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2800, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000009740)=[{{&(0x7f00000032c0)={0xa, 0x4e22, 0x10000, @local, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000003840)=[@flowinfo={{0x14, 0x29, 0x37, 0xffff}}], 0x18}}], 0x1, 0x24008085) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) lsm_list_modules(0x0, &(0x7f0000000040)=0x18, 0x0) r5 = dup(r3) connect$packet(r5, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x6}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2800, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000009740)=[{{&(0x7f00000032c0)={0xa, 0x4e22, 0x10000, @local, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000003840)=[@flowinfo={{0x14, 0x29, 0x37, 0xffff}}], 0x18}}], 0x1, 0x24008085) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) (async) ioctl$TIOCMGET(r4, 0x5415, 0x0) (async) lsm_list_modules(0x0, &(0x7f0000000040)=0x18, 0x0) (async) dup(r3) (async) connect$packet(r5, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x6}, 0x14) (async) 1m37.612863274s ago: executing program 2 (id=726): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200ee1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x40087707, 0x2) 1m37.576391024s ago: executing program 33 (id=726): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200ee1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x40087707, 0x2) 50.985868728s ago: executing program 3 (id=1370): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x1}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc$})\'!&}*', 0x3a, '', 0x3a, './file0'}, 0x36) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e0097305e07af0300000000000000c7"], 0x1c}], 0x1, 0x0, 0x0, 0x8050}, 0x8850) (async) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e0097305e07af0300000000000000c7"], 0x1c}], 0x1, 0x0, 0x0, 0x8050}, 0x8850) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x1}) dup2(r4, r0) (async) dup2(r4, r0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635004000000f300f00d636808a0d0001ba4300b80b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x4c}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000500)) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0xea, 0x40, 0x5, 0x5, 0x11, 0x4}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xf8, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "ebe6807b52c9efa1e7622ec9e293c68765596572db1950ccdb1a580df004d7f0d84b5ef6352998a0a8f2b0e7f0b17ba9657667994ed2c65b5e8d5331ca3f0215227ae0a7b90535c2719e60563c7a23355b3c2336b6a30a7e0d7da8f6e933deec0729c0d387a4f418e5fe8efb111c8d1c25c424023c5e065bf878341ae33cf16fc526062ce82e1fe5cdc8d428f4dc7180f550e21d21b00942f4f3c27b151cc5ca10e7bd7d5a4ab055f6a421290db3f66d36d311496aef7bd3054d46edf182919aba6e3ceb63f3f8282722c15e4da3dd23a6f4067f952eb5e09ddbe09969d9a5"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 50.772287402s ago: executing program 3 (id=1378): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) ptrace$getregs(0xe, r0, 0x6a, &(0x7f0000000000)=""/213) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f00005c4000/0x3000)=nil, r2, 0x0, 0x4000010, r1, 0x0) 50.550796175s ago: executing program 3 (id=1379): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r3, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee01) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000700)=[@clear_death], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresgid(0xffffffffffffffff, r3, r3) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async) setuid(0xee01) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000700)=[@clear_death], 0x0, 0x0, 0x0}) (async) 49.847890136s ago: executing program 3 (id=1385): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xa, 0xffffffff85000014, 0x100, 0x7}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4a438dde92cbb6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="30000000000000000066c31b9bbc37bfef000000000000000500000000000007000000cf0000002f2e5c282e265e0000"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 49.732357578s ago: executing program 3 (id=1386): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='sockfs\x00', 0x808081, 0x0) 49.668188699s ago: executing program 3 (id=1387): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002100)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0}, &(0x7f0000002180)=0xc) r5 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0}, &(0x7f0000002200)=0xc) r7 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002240)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000002340)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002380)={0x0, 0x0, 0x0}, &(0x7f00000023c0)=0xc) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002580)={0x3c8, 0x0, r2, [{{0x3, 0x1, 0x7, 0x0, 0x0, 0x1, {0x1, 0x8, 0x200, 0x2, 0x10001, 0x401, 0x5, 0x7, 0xea, 0xf660e14342451127, 0x3, r3, 0x0, 0x2548, 0x1}}, {0x4, 0xa, 0xa, 0xb, ':/:{-%&)\xdd{'}}, {{0x6, 0x0, 0x82, 0x2, 0x5, 0x4, {0x4, 0x6, 0x0, 0x7, 0x6, 0x0, 0xb, 0xfa, 0x3, 0x2000, 0x0, r4, 0xee00, 0x2, 0x5}}, {0x5, 0x8, 0x8, 0xc53, '}{^/\xf7-%!'}}, {{0x6, 0x3, 0x8000, 0x6, 0x0, 0x1, {0x6, 0x0, 0x8, 0x1, 0x8, 0x7c4, 0x1, 0xb, 0x3, 0x1000, 0x7, r5, 0xee01, 0x0, 0x84}}, {0x4, 0x3, 0x4, 0x0, '@m-\''}}, {{0x2, 0x1, 0x8, 0x80000001, 0x7, 0x6, {0x4, 0x4, 0x4, 0x3, 0x1, 0xffffffffffffff71, 0x23, 0xc0000000, 0x50, 0x1000, 0x1, r6, r7, 0x5, 0x7}}, {0x1, 0x9, 0x0, 0xb}}, {{0x100000000000, 0x0, 0x100000001, 0x8, 0x2, 0x2, {0x4, 0x4, 0x4, 0x401, 0x3, 0x7, 0x3, 0x8000, 0x1, 0x2000, 0x8, r8, r10, 0x3, 0xe}}, {0x2, 0x10001, 0x4, 0x715, '{(.('}}, {{0x6, 0x2, 0x8, 0xa, 0x7fff, 0x0, {0x0, 0xb, 0xffff, 0xe7a1, 0xffffffff, 0x10001, 0xa, 0x4, 0x0, 0x8000, 0xdd, r11, r12, 0x100, 0xad69}}, {0x1, 0x3, 0x0, 0x7}}]}, 0x3c8) sendfile(r1, r1, &(0x7f0000002980)=0x1ff, 0xfff) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002a00)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x0, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f00000029c0), {[{{@arp={@local, @private=0xa010102, 0xffffffff, 0xff, 0xc, 0xe, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x1, 0x3, 0x1, 0xffb0, 0x2e, 'syzkaller1\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x0, 0x214}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac, @multicast2, @rand_addr=0x64010100, 0x1, 0xffffffff}}}, {{@arp={@private=0xa010100, @broadcast, 0xff, 0xff, 0xd, 0x8, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, {[0xff, 0x80, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x302, 0x9, 0x4, 0x5, 0x200, 'batadv_slave_1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x160}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @loopback, @rand_addr=0x64010101, 0x2, 0xffffffff}}}, {{@arp={@multicast2, @empty, 0x0, 0xff, 0x9, 0x4, {@empty, {[0x8943abae4bba74ec, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x7f]}}, 0x43, 0x40, 0x7f, 0x0, 0xb, 0x5, 'team_slave_0\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x1c6}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x80000001}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002f00)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000003000)=0xe8) mount$tmpfs(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x1000004, &(0x7f0000003040)={[{@mode={'mode', 0x3d, 0x8001}}, {@noswap}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x33, 0x35, 0x34]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x32, 0x6b, 0x67, 0x25, 0x67]}}], [{@smackfsdef}, {@obj_role={'obj_role', 0x3d, 'filter\x00'}}, {@smackfshat={'smackfshat', 0x3d, '[]}'}}, {@obj_role={'obj_role', 0x3d, 'mangle\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r14}}]}) getresuid(&(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000003200), 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r15, 0x29, 0x1, &(0x7f0000003240), 0x4) sendmsg(r15, &(0x7f00000038c0)={&(0x7f0000003280)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003300)="dd4b645f76bf4a710de945a7203ac7daaba5fa4567ecb213132a00d492a773efd205def63ca19c6754fc36499098ec4bf96d934c3c8a1070647aad88f7d44227757a2395ae58a69fdb06b278f9464787bb854e3913485af7d4f22ee1ca45fa6f31dd2bbd1f4547fd499b0428df940563d8e0177ba26e63e28d468df5d418a9d6eecb1b8d794b5eab9051fce5c900fd67c02ca3adcba64a6e69aab75fc8a43e7fd100ea0a49956fec850dfe811136f23e4dff9629996219fbbff88d06cdfc7de9848e61f9ade66f86bf", 0xc9}, {&(0x7f0000003400)="55c4dd02c4980716432f65a59d32f67b11e9e32b3feafd10", 0x18}, {&(0x7f0000003440)="71e853baebcb8e", 0x7}, {&(0x7f0000003480)}, {&(0x7f00000034c0)="dd02fb4100765f84b63d6e802252abf09a0190dbd5902d6cd219faec1c0151c460ed3dbb45cee9bc1babfaa04110e91b048850a5042f3e8dad70c3764165bb1b5d2b51afabed25b5894a4169b5b6aec8f411554ec0702fb3c9fa40adde", 0x5d}], 0x5, &(0x7f00000035c0)=[{0x68, 0x29, 0x4, "a60a528b025f73aa9de60b358661e5c59b11c758df976d30efbc84ff247cfe12064a13f87ecea3afa7c6cc5a48d3df11ad17a92d336c3e5b4ee945680eb6cf883d06bd5c59406d39c19af794bb1b70b3e5931992"}, {0x100, 0x114, 0x8001, "c911dd8d0faf23880e9200f7c34e1917d335185e2f790b8d8edb211a1791353f397ce6a45380528fdb4aa2becf5f985e5e995ee8fead858591b6023b7153704b31de0ce85baf83cede4e33f51d9c4b170ca39db688038543b057a234ac88ab2a1b22bcf7b1fffbcde755e6580bedd00bda888e0b19ef7d0510697afff0fee18a6874546779b1ede901615e1989a4fec755e60f37cda66deb57883108e5f6a37ec41ef9438139b4d5c87b9d5c93880f662f51af4cd16a4c25beb0100b0a180859b56e17a54f1c38099843b8ba49b515ea5effb7a644ba59b41f0c417ae340a721392291ccc2e2c5e5fb"}, {0xa0, 0x119, 0x3, "0b966d88c831968d267586616a231670444f774a33af7cdf7865cd7a9c4da1f2f509b11e866a9bd88dec9766c3eec10133eba9c469391e2d1e00e19133a6faa88a511f269cfe45f5591d9704d6de309948f24742f47217c401bd838a628a7fdda211f4129cca9d46c1fcea99c8019031feb035e9f5c96fb6ec4d024c882cdfbbc30df42e61728588ddd41cd7"}, {0xd0, 0x104, 0x100, "35ebbb8c4d0156accfc457b4e82a01d7be9d3fe26d477839ba2767a7fdc62c195f75b8109d6ae01f4a08e226f1900e498619ae330a0670629867d5f29dcbc2df4f99b789cbcff7d3d2c1ad478ab84331de6fd3ff565413b6656e38ccae02df7c702dac3ae8cf174553c14d393399121557cd805ca22062838e6a091725ae3dcc13875b4cfd7cea6f50dcbda73aef347b03f564df80e6609a70c3ac61c64c37f62161cba914da98ef35a0290513537f873cd4cf6acf39635601cbbf58e8"}], 0x2d8}, 0x4000) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r9, r16) openat(r15, &(0x7f00000039c0)='./file0/file0\x00', 0x200000, 0x16e) close(r1) brk(0xe5) sendmsg$OSF_MSG_ADD(r15, &(0x7f00000048c0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004880)={&(0x7f0000003a40)={0xe0c, 0x0, 0x5, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0x6, 0x1, 0x1, 0x3, 0x27, 'syz1\x00', "ae366ea8dfdce78bf4cfaf55f9b62fd5d5bf48d62c90b4016b9390be6c15c640", "c5b90a4f3e809e06de2b1c6080d28eb1da6109ede2366b65b217650f013d4377", [{0x5, 0x20, {0x3, 0x8}}, {0x10, 0x6, {0x2, 0x8000}}, {0x4, 0x10, {0x3, 0x8}}, {0x9, 0x0, {0x1, 0x5}}, {0xe5, 0x5, {0x1, 0x81}}, {0x6a1d, 0x7f, {0x1, 0x38}}, {0x7f, 0x5, {0x3, 0x5}}, {0xffff, 0xa1, {0x3, 0x8bc2}}, {0x7, 0x3ded, {0x1, 0x101}}, {0x400, 0x9, {0x3, 0x400}}, {0x80, 0x5, {0x3, 0x92}}, {0x5, 0x9, {0x2, 0x7f}}, {0x0, 0x3, {0x2, 0x4ab}}, {0x1, 0x5, {0x1, 0x4ecdc132}}, {0xc59, 0x100, {0x1, 0x8}}, {0x3, 0x8, {0x2, 0x58}}, {0xb, 0x1c8e, {0x0, 0x6c25cf9e}}, {0x80, 0x8, {0x1, 0x8}}, {0x9, 0x3ff, {0x1}}, {0x3ff, 0x3, {0x1, 0x7}}, {0x0, 0x7, {0x0, 0x4}}, {0xf9, 0xfff8, {0x0, 0xfffffff5}}, {0x3, 0x8, {0x2, 0x9a}}, {0x3, 0xe86, {0x3}}, {0x7f, 0x2, {0x0, 0x2b}}, {0x7, 0x5, {0x1, 0xec57}}, {0x5523, 0xb, {0x2, 0xb}}, {0x9, 0x0, {0x1, 0x6}}, {0x8000, 0x1, {0x0, 0xd4}}, {0x100, 0x5248, {0x1, 0x2}}, {0x8, 0xe7, {0x3, 0x1}}, {0x800, 0x9, {0x0, 0x2ce}}, {0x9, 0x5, {0x0, 0x3}}, {0x400, 0x1e, {0x0, 0x5}}, {0x3ff, 0xfff8, {0x2, 0x10000}}, {0xffff, 0x2, {0x3, 0x3}}, {0x9, 0x7, {0x2, 0x3}}, {0x101, 0x800, {0x0, 0x6}}, {0x7, 0x1, {0x0, 0xffff}}, {0x1, 0x7, {0x1, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x3, 0xff}, 0xf2, 0xff, 0xfff4, 0x6, 0x26, 'syz0\x00', "8fa810f3ee70742294a648822443ce957133985aaee5ac4cbfea3a34d6ac4936", "3f120b2bf93fea7846fd028a274ffd989a10a78ff1e1c79d30c358aa6bc37efa", [{0x0, 0x1, {0x0, 0x42}}, {0x9, 0xff00, {0x1, 0x9}}, {0x401, 0x7, {0x1, 0x1ff}}, {0x4e, 0x8, {0x0, 0xff}}, {0xfffe, 0x40, {0x2}}, {0x2000, 0x7, {0x0, 0x8}}, {0x2, 0x4, {0x1, 0xc}}, {0x3, 0x8, {0x1, 0xd}}, {0x7, 0x4, {0x0, 0xcf2}}, {0x3, 0x3baf, {0x1, 0xfd}}, {0x6, 0x8059, {0x1}}, {0xff, 0x9, {0x3, 0x401}}, {0x5d11, 0x1000, {0x1, 0xe8ef}}, {0x2, 0x7, {0x1, 0x9}}, {0x3, 0x1, {0x1, 0x3}}, {0x7, 0x0, {0x3, 0x6}}, {0x7fff, 0xffff, {0x1, 0x1}}, {0x10, 0x8, {0x2, 0x6}}, {0x5, 0x7, {0x1, 0x2000000}}, {0x40, 0x9, {0x4, 0x2}}, {0x80f, 0x8, {0x2, 0x2}}, {0x0, 0x4, {0x3, 0x3}}, {0x4, 0x18, {0x3, 0x429a}}, {0xde, 0x5, {0x4, 0x8}}, {0x2, 0x80, {0x1, 0x1}}, {0x8, 0x46a, {0x1, 0x1}}, {0x0, 0xf2, {0x2, 0x8}}, {0x200, 0xdbe, {0x3, 0x4}}, {0x5, 0x800, {0x1, 0x9}}, {0x3, 0x4, {0x75a42c1cc3910005, 0x1}}, {0x8, 0x0, {0x3, 0x5}}, {0x100, 0xfff8, {0x0, 0x6}}, {0x3ff, 0xf1, {0x0, 0xcda0}}, {0x400, 0x2, {0x2, 0x7}}, {0xfff9, 0xff, {0x1, 0x3ff}}, {0x0, 0x4, {0x3, 0x6}}, {0x3b, 0x0, {0x3, 0xbe6}}, {0x8, 0x9, {0x0, 0x80000001}}, {0x5, 0x5, {0x0, 0xad}}, {0x1460, 0x7, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0xf8, 0xc, 0x2, 0x2, 0x1d, 'syz0\x00', "4256ce58414937815a938650153266534491d845aaf519b4bc81ac2568679450", "670688ca87c447f591155e5df51214ecd6b45d53d3ac966e29f03246dcf91ac0", [{0x2, 0x0, {0x0, 0x3}}, {0x7, 0x4, {0x1, 0x75a8}}, {0x400, 0x0, {0x0, 0x244}}, {0x4, 0x7f, {0x0, 0xd22}}, {0x9, 0x800, {0x2, 0x8}}, {0x4, 0x6}, {0x8, 0xc00, {0x2, 0xfff}}, {0x1, 0xff, {0x3, 0x3}}, {0x7, 0xfffe, {0x1, 0xfffff801}}, {0x6, 0x87, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x0, 0x8, {0x2, 0x3}}, {0x0, 0x8, {0x1, 0x80000000}}, {0xc000, 0x0, {0x2, 0x4}}, {0x1, 0x3, {0x3, 0x8}}, {0x3, 0x8, {0x1, 0x8}}, {0x2, 0xffff, {0x3, 0x7ff}}, {0xfc00, 0x101, {0x1, 0x1000}}, {0xff01, 0x5, {0x2}}, {0x8, 0x401, {0x0, 0x8}}, {0x7fff, 0x4, {0x3, 0x4}}, {0x400, 0x13, {0x0, 0x9}}, {0x250, 0x0, {0x1, 0x3}}, {0xfffe, 0x4, {0x1, 0x5}}, {0x1, 0x9, {0x1, 0x6}}, {0x5, 0xa, {0x0, 0x510}}, {0x25e7, 0x1, {0x3, 0x5}}, {0x9, 0x4, {0x3, 0x4}}, {0x7, 0x8, {0x3, 0x8001}}, {0x7, 0x8, {0x0, 0x401}}, {0x4, 0x9, {0x3, 0x16}}, {0x2, 0x400, {0x3, 0x8001}}, {0x2, 0x6, {0x3, 0x1e}}, {0x4, 0x0, {0x3, 0x7}}, {0xced, 0x0, {0x1, 0xb}}, {0x8, 0x1000, {0x0, 0x5}}, {0x1, 0x8, {0x0, 0x2}}, {0x8, 0x5, {0x2}}, {0x1, 0x7, {0x3, 0x12}}, {0x1, 0x4, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x28, 0xc, 0x8, 0x41, 0x7, 'syz0\x00', "b0e6dd9e1fd6c20499deea1aecb0813f10f873583be077ffeb8c31254dffd228", "ee5f4a7c8be3f8778539c35d437e1fae946e6b7ebe3b69341bfb3d7c37b48dcb", [{0x2, 0x8, {0x0, 0x401}}, {0x81, 0xfff9, {0x3, 0x7da1ae9}}, {0x7, 0x0, {0x3, 0x208}}, {0x8001, 0x4, {0x2, 0x5}}, {0x449, 0x873, {0x2, 0x2}}, {0x9, 0xfffe, {0x3, 0x2}}, {0x5, 0x9, {0x1, 0x293e}}, {0x8, 0x7, {0x2, 0x69a}}, {0x6, 0x4, {0x0, 0x3ff}}, {0x4, 0xffff, {0x3, 0x62}}, {0x401, 0x4, {0x0, 0x80}}, {0x1000, 0x0, {0x1, 0x8}}, {0xfff, 0x3, {0x0, 0x8a}}, {0x4, 0x80, {0x3, 0x7}}, {0x4383, 0x3, {0x1, 0x7f}}, {0x6, 0xb92b, {0x2, 0x108}}, {0x8, 0x5, {0x2, 0x5}}, {0x0, 0x2, {0x2, 0x1}}, {0xc00, 0x2, {0x1, 0x7fffffff}}, {0x5363, 0x9e, {0x2, 0x5}}, {0x251, 0x8, {0x1, 0x9}}, {0x0, 0x6, {0x1, 0x6}}, {0x3ff, 0x9, {0x1, 0x8}}, {0x6, 0x2, {0x3, 0x8}}, {0x7, 0x6, {0x0, 0xbf}}, {0x8f, 0x1, {0x1, 0x5}}, {0x32, 0xfd, {0x3, 0xe}}, {0x7, 0x4, {0x0, 0x1}}, {0x8, 0x8001, {0x1, 0x3}}, {0x9, 0x7, {0x0, 0x6}}, {0x4, 0x0, {0x3, 0x8}}, {0xff6e, 0xaa, {0x2, 0x4319}}, {0x9, 0xca3, {0x2, 0x8}}, {0x0, 0x26, {0x3, 0x60}}, {0x7, 0x0, {0x0, 0xfffffffc}}, {0x3, 0x2, {0x1, 0x4}}, {0x7f, 0x2, {0x1, 0x6}}, {0xb, 0xf, {0x1, 0x9}}, {0x9, 0x0, {0x0, 0xffff}}, {0x8, 0x6, {0x3}}]}}}, {{0x254, 0x1, {{0x0, 0xdcc3}, 0x1, 0x4, 0xa11a, 0x0, 0x8, 'syz1\x00', "025ef2d3e2cbf635b2dfca2a6010aec15fe927364be72183e92c4407e8e47e70", "1a3214156486e96cf69ea736427ad200b2cd7635ebb6997a1cda446d6c60a977", [{0x1, 0x8, {0x2, 0x3}}, {0x0, 0x3, {0x1, 0x7fff}}, {0x0, 0x1, {0x0, 0x5}}, {0x1, 0x6a8, {0x3, 0x3}}, {0x5d, 0x7, {0x0, 0x1}}, {0x7, 0x40, {0x0, 0x200}}, {0x3ff, 0xd0b2, {0x1, 0x1ff}}, {0xffbe, 0x9, {0x2, 0x6}}, {0x2, 0x4, {0x1, 0xc3}}, {0x100, 0x100, {0x0, 0x1}}, {0x2, 0x27, {0x0, 0x5}}, {0x2, 0x3, {0x2, 0x10}}, {0x9, 0x80, {0x1, 0x346c}}, {0x7f, 0x0, {0x1, 0x1}}, {0x80, 0x8000, {0x0, 0x2}}, {0x3, 0xc, {0x1, 0x9}}, {0x4, 0x680, {0x3, 0xd}}, {0x7, 0x9, {0x3, 0xffff}}, {0x9, 0x4, {0xfa8a31cbc710b97c, 0x80}}, {0x7, 0x0, {0x0, 0x6}}, {0x3, 0xe09, {0x0, 0xe}}, {0x8dc7, 0xa, {0x22b070826bed8753, 0x3}}, {0x7, 0x0, {0xbd0ce4890b1d714e, 0x7888}}, {0x81, 0x843a, {0x2, 0xb}}, {0x5, 0x9, {0x2, 0x2}}, {0x7, 0x7, {0x1, 0x8}}, {0x10, 0x7fff, {0x1, 0x41}}, {0x0, 0xb, {0x2, 0x8001}}, {0x9, 0x7, {0x1, 0xfff}}, {0x4, 0x800, {0x2, 0x3}}, {0x9, 0x4, {0x0, 0x2}}, {0x588c, 0x9, {0x1, 0xf}}, {0x4, 0x2, {0x2, 0x401}}, {0x1, 0x9, {0x1, 0x1}}, {0x7, 0xffff, {0x1, 0xffffffff}}, {0x2, 0x9, {0x1, 0xfab3}}, {0x2, 0xfffa, {0x0, 0x7}}, {0x0, 0x6, {0x3, 0x3ff}}, {0x9, 0xf98a, {0x2, 0x9}}, {0x100, 0xfff8, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xaf}, 0x3, 0x1, 0x6, 0x40, 0x7, 'syz1\x00', "aef3af6daa4b78b055bd0ab6c7e04c4f1afe4aeef0cc3e46562c6b62aaa8759f", "9ef1291c2def9656d883687aa06d1561b9b35719a00e285cb7a3d8de9a34efbd", [{0x7, 0x5a71, {0x2, 0xfffffff9}}, {0x0, 0x7ff, {0x0, 0xe1}}, {0x5, 0x3}, {0x1, 0x6, {0x1, 0x100}}, {0x2, 0x9, {0x3, 0x9f8}}, {0xfff7, 0x1, {0x0, 0x9}}, {0x0, 0xf270, {0x1, 0x8}}, {0x6, 0x7, {0x1, 0x1330000}}, {0x4, 0x8, {0x3, 0x6}}, {0x8, 0xf, {0x2, 0x3123}}, {0x3, 0x1, {0x1, 0x1}}, {0xffff, 0x9, {0x1, 0x3}}, {0x40, 0x8, {0x0, 0x401}}, {0xe, 0x3, {0x2, 0x88}}, {0x6, 0x9, {0x1, 0x1}}, {0x2, 0x0, {0x1, 0x1ff}}, {0x40, 0x8, {0x3, 0x9}}, {0x7, 0xe, {0x3, 0x6}}, {0x101, 0x6, {0x3}}, {0x5, 0x1, {0x0, 0x2}}, {0x81b, 0x7ff, {0x3, 0x1ff}}, {0x0, 0x8, {0x1}}, {0x3, 0xffff, {0x2, 0xfff}}, {0x93, 0xa, {0x1, 0x8}}, {0x4, 0x78, {0x2, 0x9}}, {0x8814, 0x200, {0x3, 0x81}}, {0xfff7, 0x5, {0x0, 0xd33}}, {0x5, 0xc000, {0xb1874cb2a9d8078, 0x6}}, {0x8, 0x8, {0x3, 0x4}}, {0x401, 0x35, {0x0, 0x5}}, {0xf, 0x0, {0x1, 0x9}}, {0xfffa, 0x2, {0x3, 0x3}}, {0x1, 0xfff, {0x1, 0x6d66}}, {0xd, 0x5f, {0x1, 0x3}}, {0x0, 0x400, {0x3}}, {0x2, 0x7, {0x1, 0x6}}, {0x8000, 0x64, {0x3, 0x97d3}}, {0xb, 0x868, {0x1, 0x8}}, {0x0, 0xc}, {0x0, 0x1, {0x1, 0x9}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4008041}, 0x8001) 49.664268979s ago: executing program 34 (id=1387): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002100)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0}, &(0x7f0000002180)=0xc) r5 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0}, &(0x7f0000002200)=0xc) r7 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002240)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000002340)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002380)={0x0, 0x0, 0x0}, &(0x7f00000023c0)=0xc) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002580)={0x3c8, 0x0, r2, [{{0x3, 0x1, 0x7, 0x0, 0x0, 0x1, {0x1, 0x8, 0x200, 0x2, 0x10001, 0x401, 0x5, 0x7, 0xea, 0xf660e14342451127, 0x3, r3, 0x0, 0x2548, 0x1}}, {0x4, 0xa, 0xa, 0xb, ':/:{-%&)\xdd{'}}, {{0x6, 0x0, 0x82, 0x2, 0x5, 0x4, {0x4, 0x6, 0x0, 0x7, 0x6, 0x0, 0xb, 0xfa, 0x3, 0x2000, 0x0, r4, 0xee00, 0x2, 0x5}}, {0x5, 0x8, 0x8, 0xc53, '}{^/\xf7-%!'}}, {{0x6, 0x3, 0x8000, 0x6, 0x0, 0x1, {0x6, 0x0, 0x8, 0x1, 0x8, 0x7c4, 0x1, 0xb, 0x3, 0x1000, 0x7, r5, 0xee01, 0x0, 0x84}}, {0x4, 0x3, 0x4, 0x0, '@m-\''}}, {{0x2, 0x1, 0x8, 0x80000001, 0x7, 0x6, {0x4, 0x4, 0x4, 0x3, 0x1, 0xffffffffffffff71, 0x23, 0xc0000000, 0x50, 0x1000, 0x1, r6, r7, 0x5, 0x7}}, {0x1, 0x9, 0x0, 0xb}}, {{0x100000000000, 0x0, 0x100000001, 0x8, 0x2, 0x2, {0x4, 0x4, 0x4, 0x401, 0x3, 0x7, 0x3, 0x8000, 0x1, 0x2000, 0x8, r8, r10, 0x3, 0xe}}, {0x2, 0x10001, 0x4, 0x715, '{(.('}}, {{0x6, 0x2, 0x8, 0xa, 0x7fff, 0x0, {0x0, 0xb, 0xffff, 0xe7a1, 0xffffffff, 0x10001, 0xa, 0x4, 0x0, 0x8000, 0xdd, r11, r12, 0x100, 0xad69}}, {0x1, 0x3, 0x0, 0x7}}]}, 0x3c8) sendfile(r1, r1, &(0x7f0000002980)=0x1ff, 0xfff) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002a00)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x0, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f00000029c0), {[{{@arp={@local, @private=0xa010102, 0xffffffff, 0xff, 0xc, 0xe, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x1, 0x3, 0x1, 0xffb0, 0x2e, 'syzkaller1\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x0, 0x214}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac, @multicast2, @rand_addr=0x64010100, 0x1, 0xffffffff}}}, {{@arp={@private=0xa010100, @broadcast, 0xff, 0xff, 0xd, 0x8, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, {[0xff, 0x80, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x302, 0x9, 0x4, 0x5, 0x200, 'batadv_slave_1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x160}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @loopback, @rand_addr=0x64010101, 0x2, 0xffffffff}}}, {{@arp={@multicast2, @empty, 0x0, 0xff, 0x9, 0x4, {@empty, {[0x8943abae4bba74ec, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x7f]}}, 0x43, 0x40, 0x7f, 0x0, 0xb, 0x5, 'team_slave_0\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x1c6}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x80000001}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002f00)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000003000)=0xe8) mount$tmpfs(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x1000004, &(0x7f0000003040)={[{@mode={'mode', 0x3d, 0x8001}}, {@noswap}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x33, 0x35, 0x34]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x32, 0x6b, 0x67, 0x25, 0x67]}}], [{@smackfsdef}, {@obj_role={'obj_role', 0x3d, 'filter\x00'}}, {@smackfshat={'smackfshat', 0x3d, '[]}'}}, {@obj_role={'obj_role', 0x3d, 'mangle\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r14}}]}) getresuid(&(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000003200), 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r15, 0x29, 0x1, &(0x7f0000003240), 0x4) sendmsg(r15, &(0x7f00000038c0)={&(0x7f0000003280)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003300)="dd4b645f76bf4a710de945a7203ac7daaba5fa4567ecb213132a00d492a773efd205def63ca19c6754fc36499098ec4bf96d934c3c8a1070647aad88f7d44227757a2395ae58a69fdb06b278f9464787bb854e3913485af7d4f22ee1ca45fa6f31dd2bbd1f4547fd499b0428df940563d8e0177ba26e63e28d468df5d418a9d6eecb1b8d794b5eab9051fce5c900fd67c02ca3adcba64a6e69aab75fc8a43e7fd100ea0a49956fec850dfe811136f23e4dff9629996219fbbff88d06cdfc7de9848e61f9ade66f86bf", 0xc9}, {&(0x7f0000003400)="55c4dd02c4980716432f65a59d32f67b11e9e32b3feafd10", 0x18}, {&(0x7f0000003440)="71e853baebcb8e", 0x7}, {&(0x7f0000003480)}, {&(0x7f00000034c0)="dd02fb4100765f84b63d6e802252abf09a0190dbd5902d6cd219faec1c0151c460ed3dbb45cee9bc1babfaa04110e91b048850a5042f3e8dad70c3764165bb1b5d2b51afabed25b5894a4169b5b6aec8f411554ec0702fb3c9fa40adde", 0x5d}], 0x5, &(0x7f00000035c0)=[{0x68, 0x29, 0x4, "a60a528b025f73aa9de60b358661e5c59b11c758df976d30efbc84ff247cfe12064a13f87ecea3afa7c6cc5a48d3df11ad17a92d336c3e5b4ee945680eb6cf883d06bd5c59406d39c19af794bb1b70b3e5931992"}, {0x100, 0x114, 0x8001, "c911dd8d0faf23880e9200f7c34e1917d335185e2f790b8d8edb211a1791353f397ce6a45380528fdb4aa2becf5f985e5e995ee8fead858591b6023b7153704b31de0ce85baf83cede4e33f51d9c4b170ca39db688038543b057a234ac88ab2a1b22bcf7b1fffbcde755e6580bedd00bda888e0b19ef7d0510697afff0fee18a6874546779b1ede901615e1989a4fec755e60f37cda66deb57883108e5f6a37ec41ef9438139b4d5c87b9d5c93880f662f51af4cd16a4c25beb0100b0a180859b56e17a54f1c38099843b8ba49b515ea5effb7a644ba59b41f0c417ae340a721392291ccc2e2c5e5fb"}, {0xa0, 0x119, 0x3, "0b966d88c831968d267586616a231670444f774a33af7cdf7865cd7a9c4da1f2f509b11e866a9bd88dec9766c3eec10133eba9c469391e2d1e00e19133a6faa88a511f269cfe45f5591d9704d6de309948f24742f47217c401bd838a628a7fdda211f4129cca9d46c1fcea99c8019031feb035e9f5c96fb6ec4d024c882cdfbbc30df42e61728588ddd41cd7"}, {0xd0, 0x104, 0x100, "35ebbb8c4d0156accfc457b4e82a01d7be9d3fe26d477839ba2767a7fdc62c195f75b8109d6ae01f4a08e226f1900e498619ae330a0670629867d5f29dcbc2df4f99b789cbcff7d3d2c1ad478ab84331de6fd3ff565413b6656e38ccae02df7c702dac3ae8cf174553c14d393399121557cd805ca22062838e6a091725ae3dcc13875b4cfd7cea6f50dcbda73aef347b03f564df80e6609a70c3ac61c64c37f62161cba914da98ef35a0290513537f873cd4cf6acf39635601cbbf58e8"}], 0x2d8}, 0x4000) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r9, r16) openat(r15, &(0x7f00000039c0)='./file0/file0\x00', 0x200000, 0x16e) close(r1) brk(0xe5) sendmsg$OSF_MSG_ADD(r15, &(0x7f00000048c0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004880)={&(0x7f0000003a40)={0xe0c, 0x0, 0x5, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0x6, 0x1, 0x1, 0x3, 0x27, 'syz1\x00', "ae366ea8dfdce78bf4cfaf55f9b62fd5d5bf48d62c90b4016b9390be6c15c640", "c5b90a4f3e809e06de2b1c6080d28eb1da6109ede2366b65b217650f013d4377", [{0x5, 0x20, {0x3, 0x8}}, {0x10, 0x6, {0x2, 0x8000}}, {0x4, 0x10, {0x3, 0x8}}, {0x9, 0x0, {0x1, 0x5}}, {0xe5, 0x5, {0x1, 0x81}}, {0x6a1d, 0x7f, {0x1, 0x38}}, {0x7f, 0x5, {0x3, 0x5}}, {0xffff, 0xa1, {0x3, 0x8bc2}}, {0x7, 0x3ded, {0x1, 0x101}}, {0x400, 0x9, {0x3, 0x400}}, {0x80, 0x5, {0x3, 0x92}}, {0x5, 0x9, {0x2, 0x7f}}, {0x0, 0x3, {0x2, 0x4ab}}, {0x1, 0x5, {0x1, 0x4ecdc132}}, {0xc59, 0x100, {0x1, 0x8}}, {0x3, 0x8, {0x2, 0x58}}, {0xb, 0x1c8e, {0x0, 0x6c25cf9e}}, {0x80, 0x8, {0x1, 0x8}}, {0x9, 0x3ff, {0x1}}, {0x3ff, 0x3, {0x1, 0x7}}, {0x0, 0x7, {0x0, 0x4}}, {0xf9, 0xfff8, {0x0, 0xfffffff5}}, {0x3, 0x8, {0x2, 0x9a}}, {0x3, 0xe86, {0x3}}, {0x7f, 0x2, {0x0, 0x2b}}, {0x7, 0x5, {0x1, 0xec57}}, {0x5523, 0xb, {0x2, 0xb}}, {0x9, 0x0, {0x1, 0x6}}, {0x8000, 0x1, {0x0, 0xd4}}, {0x100, 0x5248, {0x1, 0x2}}, {0x8, 0xe7, {0x3, 0x1}}, {0x800, 0x9, {0x0, 0x2ce}}, {0x9, 0x5, {0x0, 0x3}}, {0x400, 0x1e, {0x0, 0x5}}, {0x3ff, 0xfff8, {0x2, 0x10000}}, {0xffff, 0x2, {0x3, 0x3}}, {0x9, 0x7, {0x2, 0x3}}, {0x101, 0x800, {0x0, 0x6}}, {0x7, 0x1, {0x0, 0xffff}}, {0x1, 0x7, {0x1, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x3, 0xff}, 0xf2, 0xff, 0xfff4, 0x6, 0x26, 'syz0\x00', "8fa810f3ee70742294a648822443ce957133985aaee5ac4cbfea3a34d6ac4936", "3f120b2bf93fea7846fd028a274ffd989a10a78ff1e1c79d30c358aa6bc37efa", [{0x0, 0x1, {0x0, 0x42}}, {0x9, 0xff00, {0x1, 0x9}}, {0x401, 0x7, {0x1, 0x1ff}}, {0x4e, 0x8, {0x0, 0xff}}, {0xfffe, 0x40, {0x2}}, {0x2000, 0x7, {0x0, 0x8}}, {0x2, 0x4, {0x1, 0xc}}, {0x3, 0x8, {0x1, 0xd}}, {0x7, 0x4, {0x0, 0xcf2}}, {0x3, 0x3baf, {0x1, 0xfd}}, {0x6, 0x8059, {0x1}}, {0xff, 0x9, {0x3, 0x401}}, {0x5d11, 0x1000, {0x1, 0xe8ef}}, {0x2, 0x7, {0x1, 0x9}}, {0x3, 0x1, {0x1, 0x3}}, {0x7, 0x0, {0x3, 0x6}}, {0x7fff, 0xffff, {0x1, 0x1}}, {0x10, 0x8, {0x2, 0x6}}, {0x5, 0x7, {0x1, 0x2000000}}, {0x40, 0x9, {0x4, 0x2}}, {0x80f, 0x8, {0x2, 0x2}}, {0x0, 0x4, {0x3, 0x3}}, {0x4, 0x18, {0x3, 0x429a}}, {0xde, 0x5, {0x4, 0x8}}, {0x2, 0x80, {0x1, 0x1}}, {0x8, 0x46a, {0x1, 0x1}}, {0x0, 0xf2, {0x2, 0x8}}, {0x200, 0xdbe, {0x3, 0x4}}, {0x5, 0x800, {0x1, 0x9}}, {0x3, 0x4, {0x75a42c1cc3910005, 0x1}}, {0x8, 0x0, {0x3, 0x5}}, {0x100, 0xfff8, {0x0, 0x6}}, {0x3ff, 0xf1, {0x0, 0xcda0}}, {0x400, 0x2, {0x2, 0x7}}, {0xfff9, 0xff, {0x1, 0x3ff}}, {0x0, 0x4, {0x3, 0x6}}, {0x3b, 0x0, {0x3, 0xbe6}}, {0x8, 0x9, {0x0, 0x80000001}}, {0x5, 0x5, {0x0, 0xad}}, {0x1460, 0x7, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0xf8, 0xc, 0x2, 0x2, 0x1d, 'syz0\x00', "4256ce58414937815a938650153266534491d845aaf519b4bc81ac2568679450", "670688ca87c447f591155e5df51214ecd6b45d53d3ac966e29f03246dcf91ac0", [{0x2, 0x0, {0x0, 0x3}}, {0x7, 0x4, {0x1, 0x75a8}}, {0x400, 0x0, {0x0, 0x244}}, {0x4, 0x7f, {0x0, 0xd22}}, {0x9, 0x800, {0x2, 0x8}}, {0x4, 0x6}, {0x8, 0xc00, {0x2, 0xfff}}, {0x1, 0xff, {0x3, 0x3}}, {0x7, 0xfffe, {0x1, 0xfffff801}}, {0x6, 0x87, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x0, 0x8, {0x2, 0x3}}, {0x0, 0x8, {0x1, 0x80000000}}, {0xc000, 0x0, {0x2, 0x4}}, {0x1, 0x3, {0x3, 0x8}}, {0x3, 0x8, {0x1, 0x8}}, {0x2, 0xffff, {0x3, 0x7ff}}, {0xfc00, 0x101, {0x1, 0x1000}}, {0xff01, 0x5, {0x2}}, {0x8, 0x401, {0x0, 0x8}}, {0x7fff, 0x4, {0x3, 0x4}}, {0x400, 0x13, {0x0, 0x9}}, {0x250, 0x0, {0x1, 0x3}}, {0xfffe, 0x4, {0x1, 0x5}}, {0x1, 0x9, {0x1, 0x6}}, {0x5, 0xa, {0x0, 0x510}}, {0x25e7, 0x1, {0x3, 0x5}}, {0x9, 0x4, {0x3, 0x4}}, {0x7, 0x8, {0x3, 0x8001}}, {0x7, 0x8, {0x0, 0x401}}, {0x4, 0x9, {0x3, 0x16}}, {0x2, 0x400, {0x3, 0x8001}}, {0x2, 0x6, {0x3, 0x1e}}, {0x4, 0x0, {0x3, 0x7}}, {0xced, 0x0, {0x1, 0xb}}, {0x8, 0x1000, {0x0, 0x5}}, {0x1, 0x8, {0x0, 0x2}}, {0x8, 0x5, {0x2}}, {0x1, 0x7, {0x3, 0x12}}, {0x1, 0x4, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x28, 0xc, 0x8, 0x41, 0x7, 'syz0\x00', "b0e6dd9e1fd6c20499deea1aecb0813f10f873583be077ffeb8c31254dffd228", "ee5f4a7c8be3f8778539c35d437e1fae946e6b7ebe3b69341bfb3d7c37b48dcb", [{0x2, 0x8, {0x0, 0x401}}, {0x81, 0xfff9, {0x3, 0x7da1ae9}}, {0x7, 0x0, {0x3, 0x208}}, {0x8001, 0x4, {0x2, 0x5}}, {0x449, 0x873, {0x2, 0x2}}, {0x9, 0xfffe, {0x3, 0x2}}, {0x5, 0x9, {0x1, 0x293e}}, {0x8, 0x7, {0x2, 0x69a}}, {0x6, 0x4, {0x0, 0x3ff}}, {0x4, 0xffff, {0x3, 0x62}}, {0x401, 0x4, {0x0, 0x80}}, {0x1000, 0x0, {0x1, 0x8}}, {0xfff, 0x3, {0x0, 0x8a}}, {0x4, 0x80, {0x3, 0x7}}, {0x4383, 0x3, {0x1, 0x7f}}, {0x6, 0xb92b, {0x2, 0x108}}, {0x8, 0x5, {0x2, 0x5}}, {0x0, 0x2, {0x2, 0x1}}, {0xc00, 0x2, {0x1, 0x7fffffff}}, {0x5363, 0x9e, {0x2, 0x5}}, {0x251, 0x8, {0x1, 0x9}}, {0x0, 0x6, {0x1, 0x6}}, {0x3ff, 0x9, {0x1, 0x8}}, {0x6, 0x2, {0x3, 0x8}}, {0x7, 0x6, {0x0, 0xbf}}, {0x8f, 0x1, {0x1, 0x5}}, {0x32, 0xfd, {0x3, 0xe}}, {0x7, 0x4, {0x0, 0x1}}, {0x8, 0x8001, {0x1, 0x3}}, {0x9, 0x7, {0x0, 0x6}}, {0x4, 0x0, {0x3, 0x8}}, {0xff6e, 0xaa, {0x2, 0x4319}}, {0x9, 0xca3, {0x2, 0x8}}, {0x0, 0x26, {0x3, 0x60}}, {0x7, 0x0, {0x0, 0xfffffffc}}, {0x3, 0x2, {0x1, 0x4}}, {0x7f, 0x2, {0x1, 0x6}}, {0xb, 0xf, {0x1, 0x9}}, {0x9, 0x0, {0x0, 0xffff}}, {0x8, 0x6, {0x3}}]}}}, {{0x254, 0x1, {{0x0, 0xdcc3}, 0x1, 0x4, 0xa11a, 0x0, 0x8, 'syz1\x00', "025ef2d3e2cbf635b2dfca2a6010aec15fe927364be72183e92c4407e8e47e70", "1a3214156486e96cf69ea736427ad200b2cd7635ebb6997a1cda446d6c60a977", [{0x1, 0x8, {0x2, 0x3}}, {0x0, 0x3, {0x1, 0x7fff}}, {0x0, 0x1, {0x0, 0x5}}, {0x1, 0x6a8, {0x3, 0x3}}, {0x5d, 0x7, {0x0, 0x1}}, {0x7, 0x40, {0x0, 0x200}}, {0x3ff, 0xd0b2, {0x1, 0x1ff}}, {0xffbe, 0x9, {0x2, 0x6}}, {0x2, 0x4, {0x1, 0xc3}}, {0x100, 0x100, {0x0, 0x1}}, {0x2, 0x27, {0x0, 0x5}}, {0x2, 0x3, {0x2, 0x10}}, {0x9, 0x80, {0x1, 0x346c}}, {0x7f, 0x0, {0x1, 0x1}}, {0x80, 0x8000, {0x0, 0x2}}, {0x3, 0xc, {0x1, 0x9}}, {0x4, 0x680, {0x3, 0xd}}, {0x7, 0x9, {0x3, 0xffff}}, {0x9, 0x4, {0xfa8a31cbc710b97c, 0x80}}, {0x7, 0x0, {0x0, 0x6}}, {0x3, 0xe09, {0x0, 0xe}}, {0x8dc7, 0xa, {0x22b070826bed8753, 0x3}}, {0x7, 0x0, {0xbd0ce4890b1d714e, 0x7888}}, {0x81, 0x843a, {0x2, 0xb}}, {0x5, 0x9, {0x2, 0x2}}, {0x7, 0x7, {0x1, 0x8}}, {0x10, 0x7fff, {0x1, 0x41}}, {0x0, 0xb, {0x2, 0x8001}}, {0x9, 0x7, {0x1, 0xfff}}, {0x4, 0x800, {0x2, 0x3}}, {0x9, 0x4, {0x0, 0x2}}, {0x588c, 0x9, {0x1, 0xf}}, {0x4, 0x2, {0x2, 0x401}}, {0x1, 0x9, {0x1, 0x1}}, {0x7, 0xffff, {0x1, 0xffffffff}}, {0x2, 0x9, {0x1, 0xfab3}}, {0x2, 0xfffa, {0x0, 0x7}}, {0x0, 0x6, {0x3, 0x3ff}}, {0x9, 0xf98a, {0x2, 0x9}}, {0x100, 0xfff8, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xaf}, 0x3, 0x1, 0x6, 0x40, 0x7, 'syz1\x00', "aef3af6daa4b78b055bd0ab6c7e04c4f1afe4aeef0cc3e46562c6b62aaa8759f", "9ef1291c2def9656d883687aa06d1561b9b35719a00e285cb7a3d8de9a34efbd", [{0x7, 0x5a71, {0x2, 0xfffffff9}}, {0x0, 0x7ff, {0x0, 0xe1}}, {0x5, 0x3}, {0x1, 0x6, {0x1, 0x100}}, {0x2, 0x9, {0x3, 0x9f8}}, {0xfff7, 0x1, {0x0, 0x9}}, {0x0, 0xf270, {0x1, 0x8}}, {0x6, 0x7, {0x1, 0x1330000}}, {0x4, 0x8, {0x3, 0x6}}, {0x8, 0xf, {0x2, 0x3123}}, {0x3, 0x1, {0x1, 0x1}}, {0xffff, 0x9, {0x1, 0x3}}, {0x40, 0x8, {0x0, 0x401}}, {0xe, 0x3, {0x2, 0x88}}, {0x6, 0x9, {0x1, 0x1}}, {0x2, 0x0, {0x1, 0x1ff}}, {0x40, 0x8, {0x3, 0x9}}, {0x7, 0xe, {0x3, 0x6}}, {0x101, 0x6, {0x3}}, {0x5, 0x1, {0x0, 0x2}}, {0x81b, 0x7ff, {0x3, 0x1ff}}, {0x0, 0x8, {0x1}}, {0x3, 0xffff, {0x2, 0xfff}}, {0x93, 0xa, {0x1, 0x8}}, {0x4, 0x78, {0x2, 0x9}}, {0x8814, 0x200, {0x3, 0x81}}, {0xfff7, 0x5, {0x0, 0xd33}}, {0x5, 0xc000, {0xb1874cb2a9d8078, 0x6}}, {0x8, 0x8, {0x3, 0x4}}, {0x401, 0x35, {0x0, 0x5}}, {0xf, 0x0, {0x1, 0x9}}, {0xfffa, 0x2, {0x3, 0x3}}, {0x1, 0xfff, {0x1, 0x6d66}}, {0xd, 0x5f, {0x1, 0x3}}, {0x0, 0x400, {0x3}}, {0x2, 0x7, {0x1, 0x6}}, {0x8000, 0x64, {0x3, 0x97d3}}, {0xb, 0x868, {0x1, 0x8}}, {0x0, 0xc}, {0x0, 0x1, {0x1, 0x9}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4008041}, 0x8001) 3.184781301s ago: executing program 0 (id=1869): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000000000000797000001440e"], 0x20}}], 0x1, 0x0) 3.174142021s ago: executing program 0 (id=1870): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = memfd_create(&(0x7f0000000740)='\vem\xda\x99R@i\x93\xfe\x9b#*\xffm\x89o\x1c;\xa2{\xd6\x00\x0e\x94Q\xeb\x99\x02F\xe4\xe8\x85\xe8\x8eI>\x15H$\x13\xdbw\xa2\xe7\xe3\xdb\xa9\x83\x97\xa9i\x942f\x04\x00U!\xc3\x93\xd58\xbf\x91\x03\xaa&\x12z\xd1\xbf\x06T\xc9l\xd8\xb4~\x87\xa5\x1emC\x9a\xf8\x8bb\x81\t\xc8\x87\xd1\a\x00\x00\x00\x00\"/i\xb0\v\xcf\x17\xbe\xbaX\xa0\x87\xcf\xa5jae\x04*p\x9a\v.\xc3\xbb`\xe7\x14\xb1\xe2G\xf4\xfc\xfd\xe3H\xf3>\\|\bK\b\xb9!\x00(\xea\x8c_\xa29\x9e\xf7\x92\xd9z~\xbdSjb\v\xb0\xbag\xb3\n\xb7!\xfb\x9d\x16z\xfd\xe3-\xcbd\x1c>\x1c*\x90^[/\x94p=\xb3mK\xe2\t!\x02\xfa?\x17g\x02\x8bO\x1a\xd5q\x96K\xa9%\x98\x8bD\xd5/\xcbm\xfc\xf4\xdd\xeb!l\xc5swE3\xda\xe4\xd0+j\xe9\xc5\xdd\x00\x00\x00\x00\xae\x93{\xf92\xdeN0\x17Z\xdaRM\xad\x92\xa1\xb2[<\ftG\xaaW\xae\f\xa7\xe5\xa8\xe9\xc9\n\xb8\xbc\xd0\x94\xb5\"\x1f\x9c\x97`#\v\x12\xad\xbby\xa7\x92\xbc\x1e75V\x8d\xb4\xd4_\x04\x04%\xd1\xdd\xbe\xf4\xef\v\xbd\x12n\xbf\x7f\xed\x8e\x1cj\xe1\x13\xc4o\xab\xe7\x8b\xa9\xab\xe6\xc4>\xf0\xea\x7f\x82\xe7\xc2\r\xf2>\xe2\x89i$\'\f\x93E\xcc\x19\xa5M\x1c>\xa4Z&\xc1\x9ew\x03\x13\xc7\xb5\xf9\x84\xd86\xb5\x99\x83\x18*\x85\x9d\xf8T\xe1\xb6\xcd{\x8c\xeer\xf8\xbc\xb2\xe0\xaf\xeaM\xe4\xac\x8b\'\xac\xf2G\xf6\xfdT<\x94}\x13c\xc9M\xd0\x1af&\x95\xc3\xb1\x8b\xe4\xd9\x0f/\xfe\xb9\xc7\xd0 G\x00'/437, 0x2) write(r1, &(0x7f0000000040)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0xfffffffffffffffe, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, 0x0, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000380)=0x102408, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc0400, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg(r0, &(0x7f000000a140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') splice(r3, &(0x7f0000000280), r6, &(0x7f00000002c0), 0x3, 0x8) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mkdir(&(0x7f0000000440)='./file0\x00', 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10, 0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r4, @ANYBLOB="c936b17728c12be330d236660c7125f1ad9143535c676c72ed94ca2a41e0ddd1c50482acdfe65a203015982095cd8d843fb0cb8530073e9e7c970941472c94b137cd70a147d2fe3aac1307dee0df98bbe9db0eb3c3f9a1b590af32ad482a86eb3343ecc3ab2bcd86fa055d76f6498245290793d3736f23e55076648c79b1d522f8661ca33b8325d4b4a632ef22e1690317665c30187c4dc6fc168673a07d4fc890a993c709939ceb22875cecb5507740101c", @ANYRES64=r7], 0x38}, 0x1, 0x0, 0x0, 0x57}, 0x4040040) open(&(0x7f0000000480)='./file1\x00', 0x503943, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r9, 0x4068aea3, &(0x7f0000000040)={0xcc, 0x0, 0x1}) 2.804644517s ago: executing program 0 (id=1871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYBLOB="9f9e98112ee52ece9471443353cd6d772800a5bb2d4f2e58d978b910c158cd3d0594fe00ab62850f286b412e2dcfb308401e1caa08409a4c1fa19d0554876f25586bef5889e6c23a091bdae8439e90089a11afacfce23759f177e4adbc791693c6d0cd127244ff83957e492f63834210e7d2861b590d6f9514eaf4ce989318d5ba21ea172938a22d43bbd3080af4a54e9875f7696c54d1e5fede1384f5c360e32c123689c2c4c6dd154095a62a9a45c293607287f4d4b546289e9edf413efa5bfde5f174514f344fbf083e673a1ea54eb24deee8918c7dce88979499116413fd26e7f5c105353cbb773dfe1428e5"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 2.763025387s ago: executing program 0 (id=1872): socket$key(0xf, 0x3, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xe) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x3}, 0x10) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/71, 0x47}], 0x1}, 0x2}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x1, r2}) syz_usb_connect$cdc_ecm(0x6, 0x56, 0x0, 0x0) close_range(r0, r0, 0x2) 2.212656896s ago: executing program 0 (id=1873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="04", 0x5e0, 0x0, &(0x7f0000000180)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.413426929s ago: executing program 0 (id=1880): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000d2000000d200a7ea311df0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 908.698836ms ago: executing program 5 (id=1882): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xc}, @fd={0x66642a85, 0x0, r2}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x38, 0x0, &(0x7f0000000080)=[@register_looper, @increfs_done, @acquire_done={0x40106309, 0x7fff}, @free_buffer={0x40086303, r3}], 0x9c, 0x0, &(0x7f0000000480)="b7e7ac287063a7755b1ae21f045c4f6b45b9091f2452926008b2843b6be6d8be243762c627d8bcd6373078febedef4d1625a45d4a9cfb81e521941be591bbd6a448e92872825e0951fe2f89545d75931d3f5649ad1b13f35ecb77454bfcada3ef9aa438e5321aaada00a0b21a325aaa5df85399cd6828a75f20d16136243df8cd0ca2640c7115f2cbcd57e461e1c8ee256ee7a020b94e2fb822dcf87"}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)="301b983cbde73f583091b6878f286e46a266033f2a1839871c4f7267ac4de3ed57e6d5bd5bb0cd32efc2275c6caf9b585e5a3cfc30db3312da8d9d2a292d5d1e9736545576ca04d7bccc2db41a00569f875b2aa7bc2f575740ffa74bb5fa2290a5863c140a40bbd63762d89657c9f2c28f6e787806513e52d9f244f1f3d50675f6a195f31e48b1fd25574196ee3d920422a717a76b42eefa81cfbf564f6c6ea5fa7147883eb63a3090bb85179f17bce44b5d92998312afcde7fdd198ec09efa0b836f9225f660be49ca37da06f688bd2a0cbb4175823a84aaa8bfbf88cdaad5a4da6c63653ddab100d688a431632bfd3fee4b8925a6017efafaef224f4083d1c514f0c7a06ecce92ed69be137af842dd24c7124e7c0aa859c8d9d34ad1d0fd891b5f1df7a9d4e2526db6b94b3438", 0x12e}, {0x0}, {&(0x7f0000000000)="8eb17abb3cad1a0c0291a71ad64d5f634fd640e8c093b09d8acbe024189ad2cd6c585867ea0642f4c5f46c9a223725aafea7adfed34e7c6ddda1b1df2809ca0671ca4364b59c6812da679c5604a4cd4cfb0d337644aa2458701aa8fa44936e87e5079143b4", 0x65}, {&(0x7f0000000180)="a9c13a375055e03041f019c53ebe9ad58a710231079b2ab3746f31607e67d3a21e3c766593df938e374e55761489c274442240a404148bf0d08c20819d0dc0aea3d29c3e8f29012452", 0x49}, {&(0x7f0000000200)="67456456f36f8e4e6765a3eb71e0debd1d853b63f59e4a5922a1261f3a350ec305eaea147a96aade93667cca53a0fbb6d6a347b24c31c8b35c8b7bac944491017b0805ba44a631e47384562d794f71f2593f0dfb5bc4bd217308f47cc1b7cf6efd7cffbf0c3d166087ec2fce5f5e823a35cdc786ad9fda01869db86d52000000010000000111269109b0da30352d36748eb6b8535966b6ab76def323224016cb05fad2f179a3", 0xa6}], 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 906.251186ms ago: executing program 5 (id=1883): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000009, 0x4000150, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f870006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) 905.914186ms ago: executing program 5 (id=1884): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000000000000007fd000001440e"], 0x20}}], 0x1, 0x0) 904.204716ms ago: executing program 5 (id=1885): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getrandom(&(0x7f0000000040)=""/105, 0x69, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0xc4) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) accept(r2, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000031f000/0x400000)=nil) 586.175981ms ago: executing program 5 (id=1890): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x49, &(0x7f0000000040), 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x100010, r1, 0x99b37000) (async) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x24040040) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000000)={0x29, 0x6, 0x0, {0x2, 0x6}}, 0x29) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f000001a240)=ANY=[], 0x2020) (async) ptrace(0x10, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) 508.700362ms ago: executing program 5 (id=1891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r0}}, 0x0}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000180)={0x7, 'veth0_to_hsr\x00', {0x7f4}, 0x8}) 136.928978ms ago: executing program 6 (id=1909): unshare(0x62000000) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) 114.889438ms ago: executing program 4 (id=1910): mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 68.750949ms ago: executing program 6 (id=1911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) 68.578499ms ago: executing program 4 (id=1912): socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x27) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 68.525549ms ago: executing program 4 (id=1913): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) 64.857679ms ago: executing program 6 (id=1914): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 60.432259ms ago: executing program 4 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) 878.449µs ago: executing program 4 (id=1916): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) getresuid(0x0, 0x0, &(0x7f00000004c0)) 750.929µs ago: executing program 6 (id=1917): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 679.2µs ago: executing program 4 (id=1918): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000e, 0x12, r0, 0x343e2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 618.9µs ago: executing program 6 (id=1919): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=[{}]) 0s ago: executing program 6 (id=1920): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) lseek(r0, 0x209, 0x1) kernel console output (not intermixed with test programs): wn parameter '' [ 80.072875][ T3022] rust_binder: Error in use_page_slow: ESRCH [ 80.072892][ T3022] rust_binder: use_range failure ESRCH [ 80.079013][ T3022] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 80.084562][ T3022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 80.092735][ T3022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:76 [ 80.115666][ T3026] overlay: filesystem on ./bus not supported as upperdir [ 80.163576][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 80.163596][ T36] audit: type=1400 audit(1753804817.666:419): avc: denied { execute } for pid=3032 comm="syz.4.840" path="/398/cpu.stat" dev="tmpfs" ino=2190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.233975][ T36] audit: type=1400 audit(1753804817.736:420): avc: denied { setopt } for pid=3040 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.253785][ T36] audit: type=1400 audit(1753804817.736:421): avc: denied { bind } for pid=3040 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.273081][ T36] audit: type=1400 audit(1753804817.736:422): avc: denied { name_bind } for pid=3040 comm="syz.4.843" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.293993][ T36] audit: type=1400 audit(1753804817.736:423): avc: denied { node_bind } for pid=3040 comm="syz.4.843" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 80.358975][ T36] audit: type=1400 audit(1753804817.856:424): avc: denied { listen } for pid=3046 comm="syz.5.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.411885][ T2846] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.521352][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.527607][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.533986][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.540212][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.546475][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.552750][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.559567][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.566168][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.572878][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.582474][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.588698][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.594976][ T1423] snd-usb-audio 4-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 80.610962][ T1423] usb 4-1: USB disconnect, device number 20 [ 80.617245][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.627964][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.630206][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:195.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.634268][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.656367][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.662673][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.668932][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.675276][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.681465][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.687648][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.693852][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.700336][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.706555][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.712784][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.718916][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.725241][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.731572][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.737835][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.744143][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.750459][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.756731][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.764368][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.771003][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.777898][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.785349][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.791633][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.797844][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.804159][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.810796][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.817085][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.823386][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.830508][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.836738][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.842939][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.849071][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.855463][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.861757][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.867991][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.874608][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.880819][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.887099][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.893409][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.899726][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.906023][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.912322][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.918492][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.924752][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.931938][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.938268][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.944495][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.950867][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.957113][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.963385][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.969722][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 80.975961][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 81.050225][ T3070] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.059214][ T329] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 81.135242][ T3078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'. [ 81.219183][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 81.237387][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.263931][ T329] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 81.290388][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.309183][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.317203][ T329] usb 4-1: SerialNumber: syz [ 81.325384][ T329] usb 4-1: bad CDC descriptors [ 81.525708][ T1423] usb 4-1: USB disconnect, device number 21 [ 81.889435][ T1423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.896914][ T1423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.904441][ T1423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.911982][ T1423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.919544][ T1423] rtc rtc0: __rtc_set_alarm: err=-22 [ 81.927664][ T3104] 8021q: VLANs not supported on ip6gre0 [ 81.933295][ T36] audit: type=1400 audit(1753804819.426:425): avc: denied { accept } for pid=3105 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.954416][ T36] audit: type=1400 audit(1753804819.456:426): avc: denied { getopt } for pid=3103 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.985372][ T3112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.986018][ T3112] rust_binder: 325: no such ref 3 [ 81.997888][ T3112] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 82.181727][ T3127] rust_binder: Write failure EFAULT in pid:333 [ 82.222524][ T36] audit: type=1400 audit(1753804819.726:427): avc: denied { relabelfrom } for pid=3137 comm="syz.4.875" name="" dev="pipefs" ino=17075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 82.416490][ T2845] Bluetooth: hci1: Frame reassembly failed (-84) [ 82.489199][ T416] Bluetooth: hci0: command 0x1003 tx timeout [ 82.489196][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.122463][ T36] audit: type=1326 audit(1753804820.626:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3146 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0218e9a9 code=0x7fc00000 [ 83.154625][ T3165] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003017777777777777777777770xffffffffffffffff' [ 83.167026][ T3165] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 83.175959][ T3165] overlayfs: missing 'lowerdir' [ 83.191527][ T3167] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 83.769220][ T329] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.899210][ T329] usb 6-1: device descriptor read/64, error -71 [ 84.139197][ T329] usb 6-1: device descriptor read/64, error -71 [ 84.379201][ T329] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.489218][ T531] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 84.495578][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 84.512487][ T329] usb 6-1: device descriptor read/64, error -71 [ 84.583231][ T3202] input: syz1 as /devices/virtual/input/input16 [ 84.609375][ T3207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.609410][ T3207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 84.620462][ T3208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.759219][ T329] usb 6-1: device descriptor read/64, error -71 [ 84.879357][ T329] usb usb6-port1: attempt power cycle [ 85.219204][ T329] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.240210][ T329] usb 6-1: device descriptor read/8, error -71 [ 85.370324][ T329] usb 6-1: device descriptor read/8, error -71 [ 85.609206][ T329] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.630219][ T329] usb 6-1: device descriptor read/8, error -71 [ 85.760213][ T329] usb 6-1: device descriptor read/8, error -71 [ 85.869280][ T329] usb usb6-port1: unable to enumerate USB device [ 86.315562][ T3226] netlink: 72 bytes leftover after parsing attributes in process `syz.4.903'. [ 86.821343][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 86.821360][ T36] audit: type=1400 audit(1753804824.326:435): avc: denied { map } for pid=3254 comm="syz.5.912" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.127243][ T3260] incfs: Options parsing error. -22 [ 87.132599][ T3260] incfs: mount failed -22 [ 87.331969][ T36] audit: type=1400 audit(1753804824.836:436): avc: denied { bpf } for pid=3264 comm="syz.3.916" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.621120][ T3288] rust_binder: 485: no such ref 2 [ 87.626185][ T3288] rust_binder: 485: no such ref 0 [ 87.631311][ T3288] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 87.638607][ T3288] rust_binder: 485: no such ref 2 [ 87.643677][ T3288] rust_binder: 485: no such ref 0 [ 87.648730][ T3288] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 87.689217][ T64] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.742937][ T3299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 87.754495][ T3303] 9pnet_fd: Insufficient options for proto=fd [ 87.782927][ T3306] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.791717][ T3306] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 87.800123][ T3306] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.808046][ T3306] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 87.840621][ T3313] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 87.840958][ T36] audit: type=1400 audit(1753804825.346:437): avc: denied { setattr } for pid=3312 comm="syz.3.932" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.872142][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 87.878456][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 87.889752][ T64] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 87.902685][ T64] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 87.911824][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.920437][ T64] usb 6-1: config 0 descriptor?? [ 88.175009][ T3320] rust_binder: 3319 RLIMIT_NICE not set [ 88.324906][ T3329] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 88.330584][ T3329] rust_binder: Error while translating object. [ 88.333597][ T64] uclogic 0003:28BD:0075.000C: interface is invalid, ignoring [ 88.339637][ T3329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.353034][ T3329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521 [ 88.443938][ T36] audit: type=1400 audit(1753804825.946:438): avc: denied { remount } for pid=3334 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 88.512734][ T3339] netlink: 'syz.4.942': attribute type 3 has an invalid length. [ 88.541543][ T64] usb 6-1: USB disconnect, device number 8 [ 88.810949][ T3363] 9pnet_fd: Insufficient options for proto=fd [ 88.871716][ T3366] rust_binder: Write failure EFAULT in pid:531 [ 89.033267][ T3377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.070293][ T3382] netlink: 'syz.0.958': attribute type 4 has an invalid length. [ 89.772612][ T36] audit: type=1400 audit(1753804827.276:439): avc: denied { shutdown } for pid=3407 comm="syz.3.967" laddr=fe80::e lport=39737 faddr=fe80::bb fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.778712][ T3413] binder: Bad value for 'max' [ 89.929604][ T3419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 89.948159][ T3439] xt_NFQUEUE: number of total queues is 0 [ 89.967788][ T3442] tipc: Can't bind to reserved service type 0 [ 90.023416][ T3465] overlayfs: failed to clone upperpath [ 90.030233][ T36] audit: type=1400 audit(1753804827.536:440): avc: denied { append } for pid=3440 comm="syz.0.973" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.043208][ T3468] 9pnet_fd: Insufficient options for proto=fd [ 90.073409][ T329] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 90.109300][ T64] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 90.148308][ T36] audit: type=1400 audit(1753804827.646:441): avc: denied { setattr } for pid=3475 comm="syz.0.984" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.229227][ T329] usb 6-1: Using ep0 maxpacket: 16 [ 90.235647][ T329] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.245944][ T329] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 90.250089][ T36] audit: type=1400 audit(1753804827.746:442): avc: denied { setopt } for pid=3481 comm="syz.4.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.260323][ T329] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.279397][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 90.294537][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.303501][ T64] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 90.304130][ T329] usb 6-1: SerialNumber: syz [ 90.312745][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.319881][ T329] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 90.325479][ T64] usb 4-1: Product: syz [ 90.337923][ T64] usb 4-1: Manufacturer: syz [ 90.342780][ T64] usb 4-1: SerialNumber: syz [ 90.349504][ T64] usb 4-1: config 0 descriptor?? [ 90.356549][ T64] usb-storage 4-1:0.0: USB Mass Storage device detected [ 90.367225][ T64] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 90.374727][ T64] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.12.38-syzkaller-g616c12b4d684) [ 90.374727][ T64] Please send a copy of this message to and [ 90.526931][ T329] usb 6-1: USB disconnect, device number 9 [ 90.559190][ T2845] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.195677][ T3545] rust_binder: Error while translating object. [ 91.195728][ T3545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.198375][ T3548] virtio-fs: tag not found [ 91.202666][ T3545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 91.283927][ T36] audit: type=1400 audit(1753804828.786:443): avc: denied { create } for pid=3554 comm="syz.5.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.312615][ T36] audit: type=1400 audit(1753804828.786:444): avc: denied { ioctl } for pid=3554 comm="syz.5.1014" path="socket:[18426]" dev="sockfs" ino=18426 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.145870][ T3563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.247292][ T3564] rust_binder: 3564 RLIMIT_NICE not set [ 92.569204][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 92.572075][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.589491][ T404] usb 4-1: USB disconnect, device number 22 [ 92.605509][ T3571] veth1_macvtap: left promiscuous mode [ 92.613427][ T3571] netlink: 'syz.4.1020': attribute type 13 has an invalid length. [ 92.643991][ T36] audit: type=1400 audit(1753804830.146:445): avc: denied { lock } for pid=3576 comm="syz.4.1022" path="socket:[19372]" dev="sockfs" ino=19372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.981656][ T64] rust_binder: 3562: removing orphan mapping 0:24 [ 92.988404][ T64] rust_binder: 0: removing orphan mapping 48:1048 [ 92.994549][ T3579] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1023'. [ 93.252272][ T3621] overlayfs: missing 'lowerdir' [ 93.252421][ T3622] overlayfs: missing 'lowerdir' [ 93.276611][ T36] audit: type=1400 audit(1753804830.776:446): avc: denied { accept } for pid=3623 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.299194][ T36] audit: type=1400 audit(1753804830.796:447): avc: denied { execute } for pid=3623 comm="syz.3.1038" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.309201][ T64] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 93.479198][ T64] usb 6-1: device descriptor read/64, error -71 [ 93.719296][ T64] usb 6-1: device descriptor read/64, error -71 [ 93.959477][ T64] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 93.987869][ T36] audit: type=1400 audit(1753804831.486:448): avc: denied { getopt } for pid=3650 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.052617][ T3664] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1053'. [ 94.061820][ T3664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.099280][ T64] usb 6-1: device descriptor read/64, error -71 [ 94.185870][ T36] audit: type=1400 audit(1753804831.686:449): avc: denied { read } for pid=3677 comm="syz.4.1058" name="/" dev="configfs" ino=2371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.207892][ T36] audit: type=1400 audit(1753804831.686:450): avc: denied { open } for pid=3677 comm="syz.4.1058" path="/" dev="configfs" ino=2371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.306121][ T36] audit: type=1400 audit(1753804831.806:451): avc: denied { listen } for pid=3692 comm="syz.4.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.379290][ T64] usb 6-1: device descriptor read/64, error -71 [ 94.499262][ T64] usb usb6-port1: attempt power cycle [ 94.538452][ T36] audit: type=1400 audit(1753804832.036:452): avc: denied { watch watch_reads } for pid=3696 comm="syz.3.1066" path="/193/file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.849243][ T64] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 94.872427][ T64] usb 6-1: device descriptor read/8, error -71 [ 95.020406][ T64] usb 6-1: device descriptor read/8, error -71 [ 95.259227][ T64] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 95.280234][ T64] usb 6-1: device descriptor read/8, error -71 [ 95.410212][ T64] usb 6-1: device descriptor read/8, error -71 [ 95.519317][ T64] usb usb6-port1: unable to enumerate USB device [ 95.559258][ T49] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 95.711020][ T49] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.724368][ T49] usb 4-1: config 1 interface 0 has no altsetting 0 [ 95.733153][ T49] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.40 [ 95.742811][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.751268][ T49] usb 4-1: Product: К [ 95.755451][ T49] usb 4-1: Manufacturer: ᐁ [ 95.760463][ T49] usb 4-1: SerialNumber: ⥓ꐝ雪ᝎΩ㿬붳遨핂謻蚒袠킆羰橇맆朝睜淪褽濕ᬻ（옣極㛁ᙯ킾㷑Ꟊ㓤漵눘᧥춾ᤃﺯ⼿峅맃蛟涧咢㏿슭쬈 [ 95.780569][ T49] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 95.789708][ T49] usb 4-1: no configuration chosen from 1 choice [ 95.801008][ T2845] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.854290][ T36] audit: type=1400 audit(1753804833.356:454): avc: denied { getattr } for pid=3728 comm="syz.4.1076" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.878787][ T36] audit: type=1400 audit(1753804833.356:453): avc: denied { getattr } for pid=3728 comm="syz.4.1076" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.104002][ T3742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.155709][ T3743] rust_binder: Got transaction with invalid offset. [ 96.162324][ T3743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.169038][ T3743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 96.376767][ T3753] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.386059][ T3755] rust_binder: Error while translating object. [ 96.392525][ T3755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 96.398802][ T3755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:424 [ 96.415299][ T3757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.424927][ T3757] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 96.431390][ T3757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 96.439428][ T3757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:428 [ 97.229243][ T64] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 97.389203][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 97.395458][ T64] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.405708][ T64] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.416001][ T64] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.425069][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.433092][ T64] usb 6-1: Product: syz [ 97.437343][ T64] usb 6-1: Manufacturer: syz [ 97.441955][ T64] usb 6-1: SerialNumber: syz [ 97.800165][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 97.800179][ T36] audit: type=1400 audit(1753804835.306:461): avc: denied { mount } for pid=3780 comm="syz.4.1094" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.800530][ T3781] overlayfs: failed to clone lowerpath [ 98.338743][ T329] usb 4-1: USB disconnect, device number 23 [ 98.361522][ T3785] cgroup: release_agent respecified [ 98.384611][ T3794] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1099'. [ 98.393705][ T3794] tipc: Invalid UDP bearer configuration [ 98.393731][ T3794] tipc: Enabling of bearer rejected, failed to enable media [ 98.729681][ T329] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 98.859195][ T329] usb 4-1: device descriptor read/64, error -71 [ 99.099233][ T329] usb 4-1: device descriptor read/64, error -71 [ 99.339237][ T329] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 99.469208][ T329] usb 4-1: device descriptor read/64, error -71 [ 99.532959][ T3809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.549490][ T3811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27494 sclass=netlink_route_socket pid=3811 comm=syz.0.1104 [ 99.709254][ T329] usb 4-1: device descriptor read/64, error -71 [ 99.819322][ T329] usb usb4-port1: attempt power cycle [ 99.954636][ T64] usb 6-1: 0:2 : does not exist [ 99.959769][ T3813] netlink: 'syz.5.1105': attribute type 4 has an invalid length. [ 99.965237][ T64] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 99.976069][ T3813] netlink: 'syz.5.1105': attribute type 12 has an invalid length. [ 99.983878][ T64] usb 6-1: USB disconnect, device number 14 [ 99.994265][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.105367][ T3827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'. [ 100.114829][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'. [ 100.159247][ T329] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 100.180560][ T329] usb 4-1: device descriptor read/8, error -71 [ 100.191817][ T3843] syz.4.1116 (3843): attempted to duplicate a private mapping with mremap. This is not supported. [ 100.203398][ T3844] overlayfs: failed to clone lowerpath [ 100.209732][ T3844] overlayfs: failed to clone lowerpath [ 100.215662][ T3844] overlayfs: failed to clone lowerpath [ 100.221670][ T3844] overlayfs: failed to clone lowerpath [ 100.227435][ T3844] overlayfs: failed to clone lowerpath [ 100.233271][ T3844] overlayfs: failed to clone lowerpath [ 100.239384][ T3844] overlayfs: failed to clone lowerpath [ 100.245109][ T3844] overlayfs: failed to clone lowerpath [ 100.250926][ T3844] overlayfs: failed to clone lowerpath [ 100.309632][ T3855] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1120'. [ 100.319380][ T329] usb 4-1: device descriptor read/8, error -71 [ 100.340769][ T36] audit: type=1400 audit(1753804837.846:462): avc: denied { create } for pid=3856 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 100.389210][ T64] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 100.549194][ T64] usb 6-1: Using ep0 maxpacket: 8 [ 100.556033][ T64] usb 6-1: config 9 has an invalid interface number: 128 but max is 2 [ 100.564364][ T64] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 100.569203][ T329] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 100.573119][ T64] usb 6-1: config 9 has an invalid interface association descriptor of length 2, skipping [ 100.590711][ T64] usb 6-1: config 9 has an invalid descriptor of length 37, skipping remainder of the config [ 100.601083][ T64] usb 6-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 100.609956][ T64] usb 6-1: config 9 has no interface number 0 [ 100.610249][ T329] usb 4-1: device descriptor read/8, error -71 [ 100.616042][ T64] usb 6-1: config 9 interface 128 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 100.633299][ T64] usb 6-1: config 9 interface 128 altsetting 7 bulk endpoint 0xE has invalid maxpacket 16 [ 100.643222][ T64] usb 6-1: config 9 interface 128 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 100.654171][ T64] usb 6-1: config 9 interface 128 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 100.665457][ T64] usb 6-1: config 9 interface 128 altsetting 7 has an endpoint descriptor with address 0x7C, changing to 0xC [ 100.668747][ T3863] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1123'. [ 100.677492][ T64] usb 6-1: config 9 interface 128 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 100.696997][ T64] usb 6-1: config 9 interface 128 altsetting 7 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 100.710169][ T64] usb 6-1: config 9 interface 128 has no altsetting 0 [ 100.718250][ T64] usb 6-1: New USB device found, idVendor=05c6, idProduct=9003, bcdDevice= 4.4c [ 100.727411][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.735704][ T64] usb 6-1: Product: ᰁ [ 100.740131][ T64] usb 6-1: Manufacturer: 蚕ᖷ섘岋㦂掍㸭뙴⬏ஃꨤ퇌뫣啔서㗃떠낱⺧ꐦ췾叁㳎⥔㡞ဪ⨈歁 [ 100.753239][ T64] usb 6-1: SerialNumber: ᐇ [ 100.758604][ T3817] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 100.766883][ T329] usb 4-1: device descriptor read/8, error -71 [ 100.879293][ T329] usb usb4-port1: unable to enumerate USB device [ 101.166484][ T3817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3817 comm=syz.5.1106 [ 101.179212][ T3817] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1106'. [ 101.188243][ T3817] 0M: renamed from gretap0 (while UP) [ 101.194802][ T3817] 0M: entered allmulticast mode [ 101.200358][ T3817] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 101.221663][ T64] usb 6-1: USB disconnect, device number 15 [ 101.455590][ T36] audit: type=1400 audit(1753804838.956:463): avc: denied { ioctl } for pid=3875 comm="syz.3.1126" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.179240][ T329] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 102.245999][ T3893] rust_binder: Error while translating object. [ 102.246046][ T3893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.252431][ T3893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 102.273518][ T3897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:609 [ 102.339206][ T329] usb 6-1: Using ep0 maxpacket: 16 [ 102.342363][ T3901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:613 [ 102.349767][ T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 102.374123][ T329] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.387058][ T329] usb 6-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 102.396128][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.409724][ T329] usb 6-1: config 0 descriptor?? [ 102.519712][ T3909] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 102.625478][ T3921] SELinux: security_context_str_to_sid () failed with errno=-22 [ 102.666251][ T3928] overlayfs: missing 'lowerdir' [ 102.671874][ T36] audit: type=1400 audit(1753804840.176:464): avc: denied { remount } for pid=3927 comm="syz.3.1144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.704259][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.808034][ T3941] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 102.815392][ T3941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 102.824443][ T3941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:451 [ 102.829527][ T3890] netlink: 'syz.5.1130': attribute type 6 has an invalid length. [ 102.854874][ T329] wacom 0003:056A:0090.000D: item fetching failed at offset 3/5 [ 102.862800][ T329] wacom 0003:056A:0090.000D: parse failed [ 102.868817][ T329] wacom 0003:056A:0090.000D: probe with driver wacom failed with error -22 [ 102.972394][ T3946] rust_binder: 3945 RLIMIT_NICE not set [ 103.023454][ T3946] rust_binder: 3946 RLIMIT_NICE not set [ 103.032345][ T329] rust_binder: 3944: removing orphan mapping 0:24 [ 103.044789][ T329] rust_binder: 0: removing orphan mapping 24:1048 [ 103.279243][ T64] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 103.409220][ T64] usb 4-1: device descriptor read/64, error -71 [ 103.543735][ T3950] binder: Unknown parameter '01777777777777777777777' [ 103.649230][ T64] usb 4-1: device descriptor read/64, error -71 [ 103.716221][ T3952] 9pnet_fd: Insufficient options for proto=fd [ 103.730209][ T3955] overlayfs: failed to clone upperpath [ 103.899234][ T64] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 104.009943][ T3973] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 104.018676][ T3973] netlink: 416 bytes leftover after parsing attributes in process `syz.4.1161'. [ 104.049259][ T64] usb 4-1: device descriptor read/64, error -71 [ 104.289222][ T64] usb 4-1: device descriptor read/64, error -71 [ 104.399331][ T64] usb usb4-port1: attempt power cycle [ 104.561669][ T36] audit: type=1400 audit(1753804842.066:465): avc: denied { lock } for pid=3979 comm="syz.4.1164" path="socket:[21253]" dev="sockfs" ino=21253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.584997][ T36] audit: type=1400 audit(1753804842.066:466): avc: denied { map } for pid=3979 comm="syz.4.1164" path="socket:[21253]" dev="sockfs" ino=21253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.624707][ T3984] overlayfs: failed to clone upperpath [ 104.639001][ T3986] overlayfs: failed to clone upperpath [ 104.665012][ T3990] overlayfs: failed to clone upperpath [ 104.690897][ T3995] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 104.701047][ T3995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3995 comm=syz.4.1171 [ 104.739215][ T64] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 104.760379][ T64] usb 4-1: device descriptor read/8, error -71 [ 104.845173][ T4015] overlayfs: failed to clone upperpath [ 104.861721][ T4017] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 104.890212][ T64] usb 4-1: device descriptor read/8, error -71 [ 104.933630][ T4020] 9pnet: Could not find request transport: frfdng0x0000000000000003 [ 104.950604][ T49] usb 6-1: USB disconnect, device number 16 [ 105.129553][ T64] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 105.150321][ T64] usb 4-1: device descriptor read/8, error -71 [ 105.290338][ T64] usb 4-1: device descriptor read/8, error -71 [ 105.399349][ T64] usb usb4-port1: unable to enumerate USB device [ 105.726174][ T4030] fuse: Unknown parameter 'rootKode' [ 105.785177][ T4044] overlayfs: failed to clone upperpath [ 105.853311][ T4052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.934134][ T4065] overlayfs: failed to clone upperpath [ 105.965606][ T4071] overlayfs: missing 'lowerdir' [ 105.971047][ T4071] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 106.056800][ T4089] overlayfs: failed to clone upperpath [ 106.076421][ T4093] overlayfs: failed to clone upperpath [ 106.085798][ T36] audit: type=1400 audit(1753804843.586:467): avc: denied { execute_no_trans } for pid=4092 comm="syz.4.1210" path="/593/bus/file0" dev="tmpfs" ino=3309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.086651][ T4093] overlay: ./file0 is not a directory [ 106.110575][ T329] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 106.270452][ T329] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.282075][ T329] usb 6-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 106.291165][ T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.299202][ T329] usb 6-1: Product: syz [ 106.303363][ T329] usb 6-1: Manufacturer: syz [ 106.308008][ T329] usb 6-1: SerialNumber: syz [ 106.313258][ T329] usb 6-1: config 0 descriptor?? [ 106.319019][ T329] usb 6-1: bad CDC descriptors [ 106.324048][ T329] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 106.332204][ T329] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 106.338716][ T329] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 106.521844][ T64] usb 6-1: USB disconnect, device number 17 [ 106.736199][ T36] audit: type=1400 audit(1753804844.236:468): avc: denied { getopt } for pid=4120 comm="syz.3.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.818903][ T4125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:667 [ 107.086871][ T4147] 9pnet_fd: Insufficient options for proto=fd [ 107.109193][ T64] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 107.269879][ T64] usb 4-1: not running at top speed; connect to a high speed hub [ 107.278770][ T64] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 107.287109][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.297546][ T64] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.306673][ T64] usb 4-1: config 1 has no interface number 1 [ 107.313096][ T64] usb 4-1: too many endpoints for config 1 interface 6 altsetting 13: 248, using maximum allowed: 30 [ 107.324589][ T64] usb 4-1: config 1 interface 6 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 107.338019][ T64] usb 4-1: config 1 interface 6 has no altsetting 0 [ 107.346338][ T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.355697][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.363962][ T64] usb 4-1: Manufacturer: 粑죓ꋕ慀ⳝ밵袿ᝤ㢙㝘퓻荞⋰摾鄵㞓僀会ﺍ隬૑碬乿䝆暓뺅畃蹬ᄉ♽炔Э욤秀럱汰Ӛ侰뒟졚⑾师੣㽋퇼⇹ʬ [ 107.383146][ T64] usb 4-1: SerialNumber: щ [ 107.389205][ T329] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 107.393214][ T64] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 107.406862][ T64] usb 4-1: no configuration chosen from 1 choice [ 107.419490][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 107.430996][ T36] audit: type=1400 audit(1753804844.936:469): avc: denied { create } for pid=4156 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 107.556097][ T4166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.559203][ T329] usb 6-1: Using ep0 maxpacket: 8 [ 107.572014][ T329] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.583263][ T329] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.593333][ T329] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.600169][ T329] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 107.609843][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.619407][ T329] usb 6-1: config 0 descriptor?? [ 107.619618][ T4167] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 107.624708][ T4167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 107.632799][ T4167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:471 [ 107.642433][ T4167] rust_binder: inc_ref_done called when no active inc_refs [ 107.651573][ T4167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.658850][ T4167] rust_binder: Read failure Err(EFAULT) in pid:471 [ 107.681410][ T4171] 9pnet_fd: Insufficient options for proto=fd [ 107.736264][ T4179] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 107.744816][ T4179] 9pnet_fd: Insufficient options for proto=fd [ 107.834340][ T329] usbhid 6-1:0.0: can't add hid device: -71 [ 107.840996][ T329] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 107.852348][ T329] usb 6-1: USB disconnect, device number 18 [ 108.090429][ T4192] overlayfs: missing 'lowerdir' [ 108.527471][ T4208] 9pnet_fd: Insufficient options for proto=fd [ 108.535247][ T4208] 9pnet_fd: Insufficient options for proto=fd [ 108.557682][ T4213] input: syz1 as /devices/virtual/input/input18 [ 108.608338][ T4217] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 108.643319][ T4221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1257'. [ 108.869199][ T329] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 109.020424][ T329] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 109.028787][ T329] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.039302][ T329] usb 6-1: config 0 has no interface number 0 [ 109.046927][ T329] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 109.056626][ T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.065251][ T329] usb 6-1: Product: syz [ 109.069939][ T329] usb 6-1: Manufacturer: syz [ 109.074728][ T329] usb 6-1: SerialNumber: syz [ 109.080572][ T329] usb 6-1: config 0 descriptor?? [ 109.289522][ T36] audit: type=1400 audit(1753804846.796:470): avc: denied { connect } for pid=4218 comm="syz.5.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.319933][ T36] audit: type=1400 audit(1753804846.816:471): avc: denied { write } for pid=4218 comm="syz.5.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.348513][ T64] usb 6-1: USB disconnect, device number 19 [ 109.869666][ T4228] rust_binder: Error while translating object. [ 109.869703][ T4228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 109.875993][ T4228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:249 [ 109.877558][ T329] usb 4-1: USB disconnect, device number 32 [ 110.015265][ T4231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:252 [ 110.401140][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.417666][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.424794][ T4242] bridge_slave_0: entered allmulticast mode [ 110.431237][ T4242] bridge_slave_0: entered promiscuous mode [ 110.438332][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.445388][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.452592][ T4242] bridge_slave_1: entered allmulticast mode [ 110.459417][ T4242] bridge_slave_1: entered promiscuous mode [ 110.504371][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.512318][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.520026][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.527224][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.547928][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.555296][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.564806][ T2837] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.571871][ T2837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.580929][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.587964][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.612143][ T4242] veth0_vlan: entered promiscuous mode [ 110.623479][ T4242] veth1_macvtap: entered promiscuous mode [ 110.665196][ T4255] rust_binder: Error while translating object. [ 110.665243][ T4255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.671715][ T4255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 110.748756][ T329] rust_binder: 4230: removing orphan mapping 0:24 [ 110.785191][ T36] audit: type=1400 audit(1753804848.286:472): avc: denied { append } for pid=4261 comm="syz.3.1267" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.080318][ T4270] rust_binder: Error while translating object. [ 111.080365][ T4270] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.086632][ T4270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:695 [ 111.113568][ T4272] binder: Bad value for 'max' [ 111.265196][ T4281] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 111.266442][ T36] audit: type=1400 audit(1753804848.766:473): avc: denied { ioctl } for pid=4277 comm="syz.4.1275" path="socket:[22971]" dev="sockfs" ino=22971 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.534886][ T36] audit: type=1400 audit(1753804849.036:474): avc: denied { read } for pid=94 comm="acpid" name="mouse8" dev="devtmpfs" ino=582 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 111.556597][ T36] audit: type=1400 audit(1753804849.036:475): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse8" dev="devtmpfs" ino=582 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 111.579638][ T36] audit: type=1400 audit(1753804849.036:476): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse8" dev="devtmpfs" ino=582 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 111.764182][ T4297] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96 [ 111.790522][ T36] audit: type=1400 audit(1753804849.286:477): avc: denied { setattr } for pid=4296 comm="syz.0.1280" name="/" dev="incremental-fs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.856948][ T36] audit: type=1400 audit(1753804849.356:478): avc: denied { append } for pid=4311 comm="syz.4.1286" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.905701][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 111.982397][ T4331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=4331 comm=syz.0.1291 [ 111.983491][ T4330] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 112.043963][ T4341] overlayfs: failed to resolve './file0': -2 [ 112.255543][ T4352] ext4: Unknown parameter 'discardy Hl' [ 112.361236][ T4352] netlink: 'syz.5.1297': attribute type 3 has an invalid length. [ 112.475828][ T4365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33 sclass=netlink_audit_socket pid=4365 comm=syz.5.1300 [ 112.515373][ T4367] rust_binder: 716: no such ref 0 [ 112.521503][ T4368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:716 [ 112.521584][ T4367] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 112.538781][ T4367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:716 [ 112.771975][ T2846] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.788908][ T2846] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.974925][ T36] audit: type=1400 audit(1753804850.476:479): avc: denied { map } for pid=4379 comm="syz.4.1305" path="socket:[23220]" dev="sockfs" ino=23220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.171141][ T4387] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 251) [ 113.171166][ T4387] rust_binder: Error while translating object. [ 113.182228][ T4387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.188933][ T4387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:725 [ 113.301876][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.319968][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.539202][ T329] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 113.669223][ T329] usb 4-1: device descriptor read/64, error -71 [ 113.909195][ T329] usb 4-1: device descriptor read/64, error -71 [ 114.149206][ T329] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 114.279258][ T329] usb 4-1: device descriptor read/64, error -71 [ 114.519260][ T329] usb 4-1: device descriptor read/64, error -71 [ 114.629303][ T329] usb usb4-port1: attempt power cycle [ 114.809286][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.809335][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 114.969510][ T329] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 114.992415][ T329] usb 4-1: device descriptor read/8, error -71 [ 115.120239][ T329] usb 4-1: device descriptor read/8, error -71 [ 115.289209][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 115.359193][ T329] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 115.390206][ T329] usb 4-1: device descriptor read/8, error -71 [ 115.439322][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 115.451580][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.474912][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.495502][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.521536][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.541143][ T9] usb 6-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 115.550714][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.559365][ T36] audit: type=1400 audit(1753804853.036:480): avc: denied { attach_queue } for pid=4417 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 115.580351][ T9] usb 6-1: config 0 descriptor?? [ 115.589784][ T329] usb 4-1: device descriptor read/8, error -71 [ 115.699319][ T329] usb usb4-port1: unable to enumerate USB device [ 115.854844][ T4420] usb usb1: usbfs: process 4420 (syz.0.1317) did not claim interface 0 before use [ 115.864513][ T4420] rust_binder: Write failure EFAULT in pid:527 [ 115.991988][ T9] itetech 0003:048D:8595.000E: item fetching failed at offset 2/5 [ 116.006698][ T9] itetech 0003:048D:8595.000E: probe with driver itetech failed with error -22 [ 116.190999][ T1423] usb 6-1: USB disconnect, device number 20 [ 116.512927][ T4428] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 116.712950][ T4433] SELinux: security_context_str_to_sid () failed with errno=-22 [ 116.759499][ T36] audit: type=1400 audit(1753804854.256:481): avc: denied { create } for pid=4434 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 116.940835][ T4458] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 116.958986][ T4458] kvm: Disabled LAPIC found during irq injection [ 116.983770][ T36] audit: type=1326 audit(1753804854.486:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.1331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd59bb8e9a9 code=0x0 [ 117.087076][ T4467] overlayfs: failed to clone upperpath [ 117.088124][ T36] audit: type=1400 audit(1753804854.586:483): avc: denied { mounton } for pid=4460 comm="syz.3.1331" path="/bus" dev="ramfs" ino=23942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 117.169242][ T329] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 117.319207][ T329] usb 6-1: Using ep0 maxpacket: 16 [ 117.325645][ T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.336780][ T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.346586][ T329] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 117.355847][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.364452][ T329] usb 6-1: config 0 descriptor?? [ 117.775541][ T329] apple 0003:05AC:024B.000F: fixing up MacBook JIS keyboard report descriptor [ 117.776396][ T4469] binder: Unknown parameter 'fscontext?}' [ 117.785716][ T329] apple 0003:05AC:024B.000F: unknown main item tag 0x6 [ 117.797905][ T329] apple 0003:05AC:024B.000F: ignoring exceeding usage max [ 117.806863][ T329] apple 0003:05AC:024B.000F: invalid report_size 16640 [ 117.813807][ T329] apple 0003:05AC:024B.000F: item 0 2 1 7 parsing failed [ 117.826155][ T329] apple 0003:05AC:024B.000F: parse failed [ 117.832118][ T329] apple 0003:05AC:024B.000F: probe with driver apple failed with error -22 [ 117.850531][ T4473] overlay: Unknown parameter 'subj_user' [ 117.857102][ T4474] overlay: Unknown parameter 'subj_user' [ 117.899116][ T4488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.899987][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 117.916672][ T4488] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 117.916695][ T4488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 117.924757][ T4488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:561 [ 118.099217][ T329] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 118.131030][ T4507] binder: Unknown parameter 'defcontext01777777777777777777777' [ 118.139315][ T9] usb 6-1: USB disconnect, device number 21 [ 118.228796][ T4512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.269189][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 118.283736][ T329] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 118.294087][ T329] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 118.307092][ T329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.308452][ T4523] 9pnet_fd: Insufficient options for proto=fd [ 118.313793][ T329] usb 4-1: New USB device found, idVendor=056a, idProduct=4090, bcdDevice= 0.00 [ 118.329614][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.339659][ T329] usb 4-1: config 0 descriptor?? [ 118.558037][ T329] usb 4-1: USB disconnect, device number 37 [ 118.578588][ T4531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1352'. [ 118.658393][ T4541] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 118.747969][ T4551] tmpfs: Unknown parameter 'hu' [ 118.844604][ T4557] rust_binder: Error while translating object. [ 118.844640][ T4557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 118.859400][ T4557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:340 [ 118.915451][ T4566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:609 [ 118.965127][ T4578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.971705][ T36] audit: type=1400 audit(1753804856.466:484): avc: denied { unmount } for pid=2680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.975687][ T4578] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 119.016821][ T4578] rust_binder: Write failure EINVAL in pid:613 [ 119.030572][ T36] audit: type=1400 audit(1753804856.536:485): avc: denied { create } for pid=4569 comm="syz.3.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 119.057635][ T4586] binder: Unknown parameter '" ' [ 119.082372][ T36] audit: type=1400 audit(1753804856.586:486): avc: denied { map } for pid=4590 comm="syz.4.1371" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.117651][ T4594] overlayfs: workdir and upperdir must be separate subtrees [ 119.158231][ T36] audit: type=1400 audit(1753804856.656:487): avc: denied { lock } for pid=4597 comm="syz.4.1374" path="socket:[24301]" dev="sockfs" ino=24301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 119.223381][ T4605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 119.223475][ T4605] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 119.239817][ T4605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 119.249283][ T329] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 119.315333][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 119.316642][ T36] audit: type=1400 audit(1753804856.816:488): avc: denied { ioctl } for pid=4606 comm="syz.4.1377" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.429194][ T329] usb 6-1: Using ep0 maxpacket: 8 [ 119.437140][ T329] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 119.442009][ T4609] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.448322][ T329] usb 6-1: config 1 interface 0 has no altsetting 0 [ 119.458553][ T36] audit: type=1400 audit(1753804856.956:489): avc: denied { map } for pid=4608 comm="syz.3.1378" path="/proc/768/net/pfkey" dev="proc" ino=4026532622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.498057][ T329] usb 6-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.40 [ 119.509174][ T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.515871][ T4614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:772 [ 119.525225][ T329] usb 6-1: Product: syz [ 119.540896][ T329] usb 6-1: Manufacturer: syz [ 119.545576][ T329] usb 6-1: SerialNumber: syz [ 119.759257][ T49] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 119.909242][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 119.915550][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.927305][ T49] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 119.936405][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.944431][ T49] usb 4-1: Product: syz [ 119.948594][ T49] usb 4-1: Manufacturer: syz [ 119.953219][ T49] usb 4-1: SerialNumber: syz [ 119.958656][ T49] usb 4-1: config 0 descriptor?? [ 119.961629][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.971742][ T49] usb 4-1: bad CDC descriptors [ 119.972936][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.977036][ T49] usb 4-1: unsupported MDLM descriptors [ 119.984589][ T4581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.998699][ T4581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.019737][ T329] usbhid 6-1:1.0: can't add hid device: -71 [ 120.025728][ T329] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 120.036274][ T329] usb 6-1: USB disconnect, device number 22 [ 120.191642][ T4614] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 120.202899][ T49] usb 4-1: USB disconnect, device number 38 [ 120.329212][ T329] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 120.437772][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.444879][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.452052][ T4639] bridge_slave_0: entered allmulticast mode [ 120.458369][ T4639] bridge_slave_0: entered promiscuous mode [ 120.464810][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.471891][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.479241][ T4639] bridge_slave_1: entered allmulticast mode [ 120.485464][ T4639] bridge_slave_1: entered promiscuous mode [ 120.499194][ T329] usb 6-1: Using ep0 maxpacket: 16 [ 120.505624][ T329] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.515863][ T329] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 120.529752][ T329] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.538942][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.547013][ T329] usb 6-1: SerialNumber: syz [ 120.554818][ T329] usb 6-1: bad CDC descriptors [ 120.593178][ T2846] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.600269][ T2846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.610643][ T2837] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.617784][ T2837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.641081][ T4639] veth0_vlan: entered promiscuous mode [ 120.651757][ T4639] veth1_macvtap: entered promiscuous mode [ 120.681506][ T36] audit: type=1400 audit(1753804858.186:490): avc: denied { create } for pid=4649 comm="syz.6.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.759956][ T49] usb 6-1: USB disconnect, device number 23 [ 121.009192][ T64] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 121.519216][ T49] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 121.670902][ T49] usb 6-1: config 9 has an invalid interface number: 71 but max is 3 [ 121.679170][ T49] usb 6-1: config 9 has an invalid interface number: 83 but max is 3 [ 121.687243][ T49] usb 6-1: config 9 has an invalid interface number: 120 but max is 3 [ 121.695701][ T49] usb 6-1: config 9 has an invalid interface number: 170 but max is 3 [ 121.704029][ T49] usb 6-1: config 9 has no interface number 0 [ 121.710137][ T49] usb 6-1: config 9 has no interface number 1 [ 121.716206][ T49] usb 6-1: config 9 has no interface number 2 [ 121.722493][ T49] usb 6-1: config 9 has no interface number 3 [ 121.728576][ T49] usb 6-1: config 9 interface 71 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 121.739402][ T49] usb 6-1: config 9 interface 71 altsetting 176 has an invalid descriptor for endpoint zero, skipping [ 121.750419][ T49] usb 6-1: config 9 interface 71 altsetting 176 has a duplicate endpoint with address 0xD, skipping [ 121.761232][ T49] usb 6-1: config 9 interface 71 altsetting 176 bulk endpoint 0xF has invalid maxpacket 1023 [ 121.771536][ T49] usb 6-1: config 9 interface 71 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 121.782621][ T49] usb 6-1: config 9 interface 83 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 121.793305][ T49] usb 6-1: config 9 interface 83 altsetting 6 bulk endpoint 0xE has invalid maxpacket 16 [ 121.803497][ T49] usb 6-1: config 9 interface 83 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 121.814306][ T49] usb 6-1: config 9 interface 83 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 121.827392][ T49] usb 6-1: config 9 interface 120 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 121.838190][ T49] usb 6-1: config 9 interface 120 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 121.849029][ T49] usb 6-1: config 9 interface 120 altsetting 14 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 121.860802][ T49] usb 6-1: config 9 interface 120 altsetting 14 endpoint 0x86 has an invalid bInterval 61, changing to 7 [ 121.872080][ T49] usb 6-1: config 9 interface 120 altsetting 14 endpoint 0x86 has invalid maxpacket 18426, setting to 1024 [ 121.883580][ T49] usb 6-1: config 9 interface 120 altsetting 14 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.896856][ T49] usb 6-1: config 9 interface 170 altsetting 76 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 121.907826][ T49] usb 6-1: config 9 interface 71 has no altsetting 0 [ 121.914556][ T49] usb 6-1: config 9 interface 83 has no altsetting 0 [ 121.921386][ T49] usb 6-1: config 9 interface 120 has no altsetting 0 [ 121.928471][ T49] usb 6-1: config 9 interface 170 has no altsetting 0 [ 121.938441][ T49] usb 6-1: New USB device found, idVendor=19d2, idProduct=0093, bcdDevice=ed.28 [ 121.947711][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.955467][ T4669] rust_binder: Write failure EFAULT in pid:18 [ 121.961253][ T49] usb 6-1: Product: 燺䗎侱鉏餯溝ﱃﶶ␷陖搖촲呏힐뱴딗㹍︭컚蝍汿콹槝欛蒽ꚲ㊂걧습弝檁愕䭏匝梅╯䂾ꯁﶺ堄⩣틌킮튎㛁峂ᬟ锅㻇᝖뮷ࣶ똆䍠氐ᰘ⃱塱軨랓ዳ⫁⌓媠㓂櫞ᖕ憳䖶퐴ꞧ됷⦢婀울꒮ꊈ迸껇溵䃍ᩧ圅ਙ妭첩䛯䧵 [ 121.976304][ T4671] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 121.997176][ T49] usb 6-1: Manufacturer: ఇ [ 122.008608][ T49] usb 6-1: SerialNumber: 慠壹砀ꫫ甭蕞㒝퉎垧♫ꫯ悿䮃㶡勌↵䃜駎俅齐쯩䭤琼茙쯹︸㋷鞻콝ꊹꍁ [ 122.024653][ T4662] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 122.239778][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.248607][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.258661][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.268226][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.277474][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.288475][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.514089][ T49] usb 6-1: USB disconnect, device number 24 [ 122.957923][ T4708] rust_binder: Write failure EFAULT in pid:33 [ 123.035915][ T4726] netlink: 'syz.6.1410': attribute type 39 has an invalid length. [ 123.058556][ T4729] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 123.079440][ T4731] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1416'. [ 123.128008][ T2846] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.134488][ T2846] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.901085][ T4753] rust_binder: Write failure EFAULT in pid:39 [ 124.005345][ T4762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.072410][ T4765] overlayfs: failed to resolve './file1': -2 [ 124.086345][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 124.086360][ T36] audit: type=1400 audit(1753804861.580:492): avc: denied { add_name } for pid=4763 comm="syz.5.1426" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.087836][ T4765] overlayfs: upper fs does not support tmpfile. [ 124.092749][ T36] audit: type=1400 audit(1753804861.580:493): avc: denied { create } for pid=4763 comm="syz.5.1426" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 124.139532][ T36] audit: type=1400 audit(1753804861.580:494): avc: denied { associate } for pid=4763 comm="syz.5.1426" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.161378][ T36] audit: type=1400 audit(1753804861.580:495): avc: denied { getattr } for pid=4763 comm="syz.5.1426" name="/" dev="incremental-fs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.185199][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 124.319219][ T64] usb 7-1: device descriptor read/64, error -71 [ 124.559263][ T64] usb 7-1: device descriptor read/64, error -71 [ 124.799182][ T64] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 124.856046][ T36] audit: type=1400 audit(1753804862.350:496): avc: denied { unmount } for pid=2680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 124.881378][ T4768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.881406][ T4768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:387 [ 124.929226][ T64] usb 7-1: device descriptor read/64, error -71 [ 124.949947][ T4771] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1428'. [ 125.129207][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 125.135311][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.179362][ T64] usb 7-1: device descriptor read/64, error -71 [ 125.199202][ T404] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 125.213339][ T4785] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1435'. [ 125.289319][ T64] usb usb7-port1: attempt power cycle [ 125.332871][ T36] audit: type=1400 audit(1753804862.830:497): avc: denied { append } for pid=4790 comm="syz.4.1437" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.356312][ T36] audit: type=1400 audit(1753804862.830:498): avc: denied { connect } for pid=4790 comm="syz.4.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.379197][ T404] usb 6-1: Using ep0 maxpacket: 16 [ 125.387112][ T404] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 125.396241][ T404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.404518][ T404] usb 6-1: Product: syz [ 125.408746][ T404] usb 6-1: Manufacturer: syz [ 125.413409][ T404] usb 6-1: SerialNumber: syz [ 125.419695][ T404] usb 6-1: config 0 descriptor?? [ 125.425478][ T404] usb-storage 6-1:0.0: USB Mass Storage device detected [ 125.435362][ T404] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 125.450136][ T4799] binder: Unknown parameter 'k' [ 125.455400][ T404] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.12.38-syzkaller-g616c12b4d684) [ 125.455400][ T404] Please send a copy of this message to and [ 125.639252][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 125.660314][ T64] usb 7-1: device descriptor read/8, error -71 [ 125.800218][ T64] usb 7-1: device descriptor read/8, error -71 [ 126.039198][ T64] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 126.060274][ T64] usb 7-1: device descriptor read/8, error -71 [ 126.190485][ T64] usb 7-1: device descriptor read/8, error -71 [ 126.299293][ T64] usb usb7-port1: unable to enumerate USB device [ 126.564116][ T36] audit: type=1326 audit(1753804864.060:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21df18e9a9 code=0x7ffc0000 [ 126.589067][ T36] audit: type=1326 audit(1753804864.060:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21df18e9a9 code=0x7ffc0000 [ 126.612589][ T36] audit: type=1326 audit(1753804864.060:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f21df18e9a9 code=0x7ffc0000 [ 126.673622][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.682446][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.168429][ T4852] 9pnet_fd: Insufficient options for proto=fd [ 127.206039][ T4859] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 127.689208][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 127.689208][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.703475][ T49] usb 6-1: USB disconnect, device number 25 [ 128.070946][ T4861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 128.122001][ T4863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.231804][ T4875] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 128.253883][ T4874] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 128.478378][ T4890] overlayfs: failed to resolve './file0': -2 [ 128.489333][ T49] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 128.641747][ T49] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.650843][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.658829][ T49] usb 7-1: Product: syz [ 128.663003][ T49] usb 7-1: Manufacturer: syz [ 128.667596][ T49] usb 7-1: SerialNumber: syz [ 128.739204][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 128.869245][ T10] usb 6-1: device descriptor read/64, error -71 [ 129.109205][ T10] usb 6-1: device descriptor read/64, error -71 [ 129.349180][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 129.479174][ T10] usb 6-1: device descriptor read/64, error -71 [ 129.719200][ T10] usb 6-1: device descriptor read/64, error -71 [ 129.829255][ T10] usb usb6-port1: attempt power cycle [ 130.076236][ T4904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.083856][ T4909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.091699][ T4909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.098191][ T4910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.104779][ T4909] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 130.118664][ T4910] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 130.138855][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 130.138871][ T36] audit: type=1400 audit(1753804867.630:515): avc: denied { view } for pid=4911 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 130.169214][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 130.190285][ T10] usb 6-1: device descriptor read/8, error -71 [ 130.257587][ T4918] FAT-fs (rnullb0): bogus number of reserved sectors [ 130.264314][ T4918] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 130.320192][ T10] usb 6-1: device descriptor read/8, error -71 [ 130.559216][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 130.580277][ T10] usb 6-1: device descriptor read/8, error -71 [ 130.710282][ T10] usb 6-1: device descriptor read/8, error -71 [ 130.819297][ T10] usb usb6-port1: unable to enumerate USB device [ 131.048736][ T4923] rust_binder: 157: no such ref 0 [ 131.130942][ T4927] fuse: Unknown parameter 'rqodX' [ 131.152629][ T4929] fuse: Invalid rootmode [ 131.234221][ T1423] usb 7-1: USB disconnect, device number 7 [ 131.706321][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1482'. [ 131.979191][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 132.130256][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.140446][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.151637][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.173502][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.182611][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.190619][ T10] usb 6-1: Product: syz [ 132.194815][ T10] usb 6-1: Manufacturer: syz [ 132.199415][ T10] usb 6-1: SerialNumber: syz [ 132.205648][ T10] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 132.212476][ T10] cdc_ncm 6-1:1.0: bind() failure [ 132.409496][ T49] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 132.559226][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 132.565551][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.576568][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.586319][ T49] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.599110][ T49] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.608160][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.616776][ T49] usb 7-1: config 0 descriptor?? [ 132.924887][ T4956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.933509][ T4956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.023624][ T49] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 133.031702][ T49] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 133.043317][ T49] microsoft 0003:045E:07DA.0010: no inputs found [ 133.049886][ T49] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 133.224954][ T36] audit: type=1400 audit(1753804870.720:516): avc: denied { execute } for pid=4951 comm="syz.6.1485" path="/proc/83/net/pfkey" dev="proc" ino=4026533021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.292609][ T49] usb 7-1: USB disconnect, device number 8 [ 133.731136][ T36] audit: type=1400 audit(1753804871.230:517): avc: denied { execute } for pid=4982 comm="syz.5.1492" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.803765][ T4987] 9pnet_fd: Insufficient options for proto=fd [ 133.957856][ T4997] rust_binder: Got transaction with invalid offset. [ 133.957896][ T4997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.964696][ T4997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 133.979733][ T5005] SELinux: security_context_str_to_sid ((u#b7?-+b]W8aL)9ЖW=G@.%) failed with errno=-22 [ 134.018923][ T5012] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 134.021037][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.036934][ T36] audit: type=1400 audit(1753804871.510:518): avc: denied { load_policy } for pid=5011 comm="syz.6.1502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 134.045008][ T5020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.057217][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.058643][ T5012] SELinux: failed to load policy [ 134.068790][ T5020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.083125][ T5020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:696 [ 134.123649][ T36] audit: type=1400 audit(1753804871.620:519): avc: denied { remount } for pid=5023 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.219294][ T2837] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.559188][ T49] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 134.660694][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.669739][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.709204][ T49] usb 7-1: Invalid ep0 maxpacket: 16 [ 134.839177][ T49] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 134.989169][ T49] usb 7-1: Invalid ep0 maxpacket: 16 [ 134.994550][ T49] usb usb7-port1: attempt power cycle [ 135.262372][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 135.349306][ T49] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 135.354492][ T36] audit: type=1400 audit(1753804872.850:520): avc: denied { mounton } for pid=5076 comm="syz.5.1521" path=2F3135362FE91F7189591E9233614B dev="tmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 135.389546][ T49] usb 7-1: Invalid ep0 maxpacket: 16 [ 135.519224][ T49] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 135.539493][ T49] usb 7-1: Invalid ep0 maxpacket: 16 [ 135.544923][ T49] usb usb7-port1: unable to enumerate USB device [ 135.620066][ T5084] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.671717][ T5085] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 135.678173][ T5085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 135.686214][ T5085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:714 [ 136.193479][ T5088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.249208][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 136.249208][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.256330][ T5088] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 136.276904][ T5088] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 103) [ 136.276928][ T5088] rust_binder: Error while translating object. [ 136.290371][ T5088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.293540][ T5094] input: syz0 as /devices/virtual/input/input21 [ 136.300990][ T5088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 136.323473][ T5100] syzkaller0: entered promiscuous mode [ 136.338977][ T5100] syzkaller0: entered allmulticast mode [ 136.366305][ T5103] rust_binder: inc_ref_done called when no active inc_refs [ 136.384180][ T5106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.445509][ T36] audit: type=1400 audit(1753804873.940:521): avc: denied { getattr } for pid=5117 comm="syz.4.1532" path="cgroup:[4026532435]" dev="nsfs" ino=4026532435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.446115][ T5118] loop8: detected capacity change from 0 to 79 [ 136.480079][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.488566][ T36] audit: type=1400 audit(1753804873.980:522): avc: denied { setopt } for pid=5122 comm="syz.0.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.562302][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 136.583754][ T36] audit: type=1400 audit(1753804874.080:523): avc: denied { name_bind } for pid=5140 comm="syz.4.1540" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 136.625118][ T5139] rust_binder: Write failure EINVAL in pid:506 [ 136.628282][ T9] rust_binder: 5138: removing orphan mapping 0:1024 [ 136.667868][ T5150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:513 [ 136.727818][ T5165] 9pnet_fd: Insufficient options for proto=fd [ 137.874911][ T5176] rust_binder: 5175 RLIMIT_NICE not set [ 137.889106][ T5179] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 137.999288][ T36] audit: type=1326 audit(1753804875.500:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.1558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc40578e9a9 code=0x0 [ 138.195341][ T5194] SELinux: security_context_str_to_sid () failed with errno=-22 [ 138.196374][ T5193] SELinux: security_context_str_to_sid () failed with errno=-22 [ 138.229418][ T5202] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 138.236746][ T5202] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 138.236781][ T5202] rust_binder: Error while translating object. [ 138.247804][ T5202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.254068][ T5202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:551 [ 138.266806][ T9] rust_binder: 5200: removing orphan mapping 0:1048 [ 138.290821][ T36] audit: type=1400 audit(1753804875.790:525): avc: denied { bind } for pid=5208 comm="syz.5.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.292930][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.319031][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.327274][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.335831][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.479212][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 138.489220][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 138.489229][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.629170][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 138.635330][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 138.646622][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9984, setting to 1024 [ 138.657695][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.670505][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.23 [ 138.679544][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.688024][ T10] usb 7-1: config 0 descriptor?? [ 138.693260][ T5205] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 138.854191][ T5214] rust_binder: 560: no such ref 3 [ 138.859344][ T5214] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 139.021762][ T5218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.106881][ T10] wacom 0003:056A:0090.0011: item fetching failed at offset 3/5 [ 139.114796][ T10] wacom 0003:056A:0090.0011: parse failed [ 139.120587][ T10] wacom 0003:056A:0090.0011: probe with driver wacom failed with error -22 [ 139.307471][ T49] usb 7-1: USB disconnect, device number 13 [ 139.694813][ T5221] binder: Bad value for 'stats' [ 139.759417][ T5227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:567 [ 140.209331][ T405] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 140.360139][ T405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.371489][ T405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.372232][ T5249] rust_binder: Error while translating object. [ 140.381403][ T5249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 140.381413][ T405] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 140.381436][ T405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.387663][ T5249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:206 [ 140.397854][ T405] usb 7-1: config 0 descriptor?? [ 140.550005][ T5267] netlink: 'syz.5.1585': attribute type 16 has an invalid length. [ 140.557825][ T5267] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1585'. [ 140.656434][ T5277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.706482][ T36] audit: type=1400 audit(1753804878.200:526): avc: denied { lock } for pid=5268 comm="syz.4.1584" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.785017][ T5291] rust_binder: Write failure EFAULT in pid:587 [ 140.831159][ T405] hid-generic 0003:04F3:0754.0012: unknown main item tag 0x0 [ 140.838635][ T405] hid-generic 0003:04F3:0754.0012: unknown main item tag 0x0 [ 140.849259][ T405] hid-generic 0003:04F3:0754.0012: unknown main item tag 0x0 [ 140.856697][ T405] hid-generic 0003:04F3:0754.0012: unknown main item tag 0x0 [ 140.864334][ T405] hid-generic 0003:04F3:0754.0012: unknown main item tag 0x0 [ 140.872343][ T405] hid-generic 0003:04F3:0754.0012: failed to start in urb: -90 [ 140.881447][ T405] hid-generic 0003:04F3:0754.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 140.910952][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.920914][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.931562][ T36] audit: type=1400 audit(1753804878.430:527): avc: denied { getopt } for pid=5308 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.035588][ T9] usb 7-1: USB disconnect, device number 14 [ 141.551362][ T5318] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1601'. [ 141.575136][ T5320] kvm: kvm [5319]: vcpu6, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 141.647965][ T5323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:600 [ 141.831719][ T5327] netlink: 'syz.6.1603': attribute type 27 has an invalid length. [ 141.856383][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.863559][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.139168][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 142.289197][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 142.295748][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 142.304171][ T10] usb 7-1: config 1 has an invalid interface number: 81 but max is 0 [ 142.312300][ T10] usb 7-1: config 1 has no interface number 0 [ 142.319822][ T10] usb 7-1: New USB device found, idVendor=19d2, idProduct=6a61, bcdDevice=b0.c0 [ 142.328915][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.340708][ T10] usb 7-1: Product: syz [ 142.344874][ T10] usb 7-1: Manufacturer: syz [ 142.349816][ T10] usb 7-1: SerialNumber: syz [ 142.430045][ T5330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.482356][ T5331] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 142.488898][ T5331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 142.496979][ T5331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:604 [ 142.557919][ T10] usb 7-1: bad CDC descriptors [ 142.572835][ T10] usb 7-1: USB disconnect, device number 15 [ 143.176559][ T5340] SELinux: syz.0.1607 (5340) set checkreqprot to 1. This is no longer supported. [ 143.185837][ T36] audit: type=1400 audit(143.143:528): avc: denied { setcheckreqprot } for pid=5337 comm="syz.0.1607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 143.186958][ T5341] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 143.294978][ T5349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.304582][ T5349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.857275][ T5353] cgroup: fork rejected by pids controller in /syz5 [ 143.917500][ T64] rust_binder: 5334: removing orphan mapping 0:112 [ 143.918184][ T5490] fuse: Bad value for 'fd' [ 143.929321][ T64] rust_binder: 0: removing orphan mapping 112:1048 [ 143.946320][ T5494] overlay: Unknown parameter 'obj_type' [ 144.076178][ T5528] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 144.128746][ T5539] overlay: Unknown parameter 'mask' [ 144.128778][ T36] audit: type=1400 audit(144.093:529): avc: denied { create } for pid=5538 comm="syz.5.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.157378][ T5539] binder: Unknown parameter 'context' [ 144.174293][ T5538] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.190099][ T5546] overlay: ./file0 is not a directory [ 144.313647][ T5556] rust_binder: 5555 RLIMIT_NICE not set [ 144.375773][ T5566] fuse: root generation should be zero [ 144.460903][ T5569] 9pnet_fd: Insufficient options for proto=fd [ 144.536608][ T5576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.545887][ T5576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.554368][ T5576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1634'. [ 144.884676][ T49] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.892289][ T49] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.899869][ T49] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.907436][ T49] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.915054][ T49] rtc rtc0: __rtc_set_alarm: err=-22 [ 144.934828][ T5585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.934857][ T5585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 144.965416][ T36] audit: type=1400 audit(144.933:530): avc: denied { module_load } for pid=5588 comm="syz.6.1639" path="/sys/power/wake_lock" dev="sysfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 144.998641][ T36] audit: type=1400 audit(144.933:531): avc: denied { getopt } for pid=5588 comm="syz.6.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.018981][ T36] audit: type=1400 audit(144.963:532): avc: denied { create } for pid=5590 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 145.249187][ T10] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 145.379176][ T10] usb 7-1: device descriptor read/64, error -71 [ 145.619213][ T10] usb 7-1: device descriptor read/64, error -71 [ 145.859219][ T10] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 145.989199][ T10] usb 7-1: device descriptor read/64, error -71 [ 146.229205][ T10] usb 7-1: device descriptor read/64, error -71 [ 146.339297][ T10] usb usb7-port1: attempt power cycle [ 146.679239][ T10] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 146.700344][ T10] usb 7-1: device descriptor read/8, error -71 [ 146.830382][ T10] usb 7-1: device descriptor read/8, error -71 [ 147.069218][ T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 147.090439][ T10] usb 7-1: device descriptor read/8, error -71 [ 147.220286][ T10] usb 7-1: device descriptor read/8, error -71 [ 147.329684][ T10] usb usb7-port1: unable to enumerate USB device [ 147.437093][ T5618] fuse: Invalid rootmode [ 147.437093][ T5619] fuse: Invalid rootmode [ 147.660534][ T5642] No source specified [ 147.682981][ T5644] fuse: Unknown parameter '0x000000000000000300000000000000000000003' [ 147.692001][ T5644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.700608][ T5644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.052331][ T5646] __vm_enough_memory: pid: 5646, comm: syz.6.1660, bytes: 18014402804453376 not enough memory for the allocation [ 148.139667][ T5649] SELinux: security_context_str_to_sid () failed with errno=-22 [ 148.313020][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.321519][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.321598][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.330058][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.339778][ T5663] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=5663 comm=syz.5.1665 [ 148.873900][ T5668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.976436][ T5668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.982971][ T5668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:816 [ 149.429168][ T405] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 149.589187][ T405] usb 7-1: Using ep0 maxpacket: 16 [ 149.595450][ T405] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.605677][ T405] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 149.619426][ T405] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.628562][ T405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.636567][ T405] usb 7-1: SerialNumber: syz [ 149.643021][ T405] usb 7-1: bad CDC descriptors [ 149.779886][ T5695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.779911][ T5695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:826 [ 149.845522][ T405] usb 7-1: USB disconnect, device number 20 [ 150.247198][ T36] audit: type=1400 audit(150.213:533): avc: denied { validate_trans } for pid=5704 comm="syz.0.1681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.292152][ T5709] 9pnet_fd: Insufficient options for proto=fd [ 150.472235][ T5721] FAT-fs (rnullb0): bogus number of reserved sectors [ 150.478957][ T5721] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 150.514051][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.523350][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.533119][ T5736] __vm_enough_memory: pid: 5736, comm: syz.0.1693, bytes: 9223372036854775808 not enough memory for the allocation [ 150.646136][ T5741] rust_binder: 5740 RLIMIT_NICE not set [ 151.363063][ T5762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.377155][ T5762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.499429][ T5765] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1703'. [ 151.581733][ T5767] overlayfs: failed to resolve './file0': -2 [ 151.596646][ T5769] rust_binder: 310: no such ref 0 [ 151.604282][ T5769] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 151.611895][ T5769] rust_binder: 310: no such ref 0 [ 151.626945][ T5771] rust_binder: inc_ref_done called when no active inc_refs [ 151.652347][ T5776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.710947][ T5777] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 151.717744][ T5777] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 152.294734][ T5780] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 152.342540][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.351737][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.362036][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.370601][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.577685][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1718'. [ 152.588121][ T5803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 152.588153][ T5803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:330 [ 152.600299][ T5803] can0: slcan on ttyS3. [ 152.613737][ T36] audit: type=1400 audit(152.573:534): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 152.634154][ T36] audit: type=1400 audit(152.573:535): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.655047][ T36] audit: type=1400 audit(152.573:536): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=4959 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.676084][ T36] audit: type=1400 audit(152.573:537): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4959 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.698384][ T36] audit: type=1400 audit(152.573:538): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4959 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.721253][ T36] audit: type=1400 audit(152.603:539): avc: denied { read } for pid=5806 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.733992][ T5802] can0 (unregistered): slcan off ttyS3. [ 152.743816][ T36] audit: type=1400 audit(152.603:540): avc: denied { open } for pid=5806 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.778406][ T36] audit: type=1400 audit(152.603:541): avc: denied { getattr } for pid=5806 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.803351][ T36] audit: type=1400 audit(152.663:542): avc: denied { write } for pid=5805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.993687][ T5836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:876 [ 153.001648][ T5838] 9pnet_fd: Insufficient options for proto=fd [ 153.024944][ T5840] fuse: Unknown parameter 'Iūorootmode' [ 153.038993][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 153.512089][ T5852] incfs: Options parsing error. -22 [ 153.517384][ T5852] incfs: mount failed -22 [ 153.583218][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 153.759164][ T404] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 153.919174][ T404] usb 7-1: Using ep0 maxpacket: 16 [ 153.925349][ T404] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 153.935528][ T404] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 153.949225][ T404] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.958289][ T404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.966392][ T404] usb 7-1: SerialNumber: syz [ 153.976861][ T5851] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 153.999574][ T5857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.999686][ T5857] netlink: 'syz.5.1728': attribute type 29 has an invalid length. [ 154.014374][ T5857] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 154.014401][ T5857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 154.022457][ T5857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:891 [ 154.200967][ T404] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 154.223914][ T404] usb 7-1: USB disconnect, device number 21 [ 154.232936][ T5867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.233047][ T5867] rust_binder: 231: no such ref 3 [ 154.245615][ T5867] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 154.271684][ T5869] rust_binder: Write failure EFAULT in pid:233 [ 154.619174][ T404] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 154.779165][ T404] usb 7-1: Using ep0 maxpacket: 32 [ 154.785533][ T404] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.795939][ T404] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.806091][ T404] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.819284][ T404] usb 7-1: config 0 interface 0 has no altsetting 0 [ 154.825961][ T404] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 154.835386][ T404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.848119][ T404] usb 7-1: config 0 descriptor?? [ 154.895596][ T5878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.895627][ T5878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.902424][ T5878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.908627][ T5878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.149270][ T5895] tipc: Enabling of bearer rejected, failed to enable media [ 155.255461][ T404] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 155.263396][ T404] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 155.271335][ T404] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 155.279200][ T404] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 155.287009][ T404] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 155.295902][ T404] hid-thrustmaster 0003:044F:B65D.0013: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 155.307994][ T404] hid-thrustmaster 0003:044F:B65D.0013: Wrong number of endpoints? [ 155.456933][ C0] hid-thrustmaster 0003:044F:B65D.0013: Unknown packet type 0x0, unable to proceed further with wheel init [ 155.658692][ T64] usb 7-1: USB disconnect, device number 22 [ 155.985087][ T64] rust_binder: 5894: removing orphan mapping 0:1048 [ 155.995522][ T5902] rust_binder: Got transaction with invalid offset. [ 155.995549][ T5902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.002201][ T5902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:922 [ 156.039319][ T5906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.180896][ T5914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.187532][ T5914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 156.395072][ T5932] rust_binder: Write failure EINVAL in pid:934 [ 156.413087][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.427819][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.436478][ T5934] batadv_slave_1: entered promiscuous mode [ 156.442586][ T5934] batadv_slave_1: left promiscuous mode [ 156.584607][ T5936] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.599307][ T64] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 156.749184][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 156.756038][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 156.764508][ T64] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 156.772275][ T64] usb 7-1: can't read configurations, error -71 [ 156.789896][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 156.789912][ T36] audit: type=1400 audit(156.763:554): avc: denied { map } for pid=5947 comm="syz.0.1759" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.971383][ T5968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.010992][ T5976] input: syz1 as /devices/virtual/input/input27 [ 157.527334][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1774'. [ 157.625608][ T13] bridge_slave_1: left allmulticast mode [ 157.645413][ T13] bridge_slave_1: left promiscuous mode [ 157.652901][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.661877][ T13] bridge_slave_0: left allmulticast mode [ 157.667591][ T13] bridge_slave_0: left promiscuous mode [ 157.674134][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.773591][ T36] audit: type=1400 audit(157.743:555): avc: denied { accept } for pid=6013 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.833658][ T36] audit: type=1400 audit(157.803:556): avc: denied { relabelto } for pid=6010 comm="syz.6.1776" name="file0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 157.864555][ T13] veth0_vlan: left promiscuous mode [ 157.996832][ T36] audit: type=1400 audit(157.963:557): avc: denied { unlink } for pid=4639 comm="syz-executor" name="file0" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 158.031133][ T6045] __vm_enough_memory: pid: 6045, comm: syz.6.1787, bytes: 18014402804453376 not enough memory for the allocation [ 158.105400][ T6059] rust_binder: Got transaction with invalid offset. [ 158.105438][ T6059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.107149][ T6058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.123725][ T6059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 158.221093][ T6069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.231319][ T6069] rust_binder: Error while translating object. [ 158.237789][ T6069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 158.244316][ T6069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:848 [ 158.389157][ T64] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 158.579235][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 158.586879][ T64] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 158.596295][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.604302][ T64] usb 7-1: Product: syz [ 158.608460][ T64] usb 7-1: Manufacturer: syz [ 158.613061][ T64] usb 7-1: SerialNumber: syz [ 158.618211][ T64] usb 7-1: config 0 descriptor?? [ 158.623951][ T64] usb-storage 7-1:0.0: USB Mass Storage device detected [ 158.631639][ T64] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 158.639055][ T64] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.12.38-syzkaller-g616c12b4d684) [ 158.639055][ T64] Please send a copy of this message to and [ 160.326921][ T6088] fuse: Bad value for 'rootmode' [ 160.378534][ T36] audit: type=1400 audit(160.343:558): avc: denied { mounton } for pid=6090 comm="syz.5.1803" path="/" dev="configfs" ino=2371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.419711][ T6099] overlayfs: workdir and upperdir must reside under the same mount [ 160.428437][ T6099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.428523][ T6099] rust_binder: 966: no such ref 3 [ 160.440035][ T6099] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 160.447045][ T6099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:966 [ 160.889157][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.889168][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 160.912372][ T64] usb 7-1: USB disconnect, device number 25 [ 161.259450][ T6102] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 161.267451][ T6102] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 161.275923][ T6102] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 161.283856][ T6102] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 161.346362][ T6112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:979 [ 161.354581][ T6114] fuse: Bad value for 'group_id' [ 161.368689][ T6114] fuse: Bad value for 'group_id' [ 161.424875][ T2837] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.431323][ T2837] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.431888][ T6117] rust_binder: Write failure EINVAL in pid:981 [ 161.463299][ T6124] overlayfs: missing 'lowerdir' [ 161.640549][ T6134] binder: Bad value for 'max' [ 161.661117][ T6138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.661540][ T6138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.669215][ T64] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 161.694312][ T2837] Bluetooth: hci1: Frame reassembly failed (-84) [ 161.697561][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.709355][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.737461][ T6143] rust_binder: Write failure EFAULT in pid:870 [ 161.829165][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 161.841788][ T64] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.852295][ T64] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.863550][ T64] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.873709][ T64] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 161.886904][ T64] usb 7-1: config 0 interface 0 has no altsetting 0 [ 161.893766][ T64] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 161.907447][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.928221][ T64] usb 7-1: config 0 descriptor?? [ 162.336118][ T64] hid-thrustmaster 0003:044F:B65D.0014: item fetching failed at offset 3/5 [ 162.344970][ T64] hid-thrustmaster 0003:044F:B65D.0014: parse failed with error -22 [ 162.353011][ T64] hid-thrustmaster 0003:044F:B65D.0014: probe with driver hid-thrustmaster failed with error -22 [ 162.538825][ T404] usb 7-1: USB disconnect, device number 26 [ 162.551814][ T6164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.551841][ T6164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.572486][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 163.449185][ T416] Bluetooth: hci0: command 0x1003 tx timeout [ 163.449192][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.471275][ T36] audit: type=1400 audit(163.443:559): avc: denied { execute } for pid=6176 comm="syz.6.1831" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.613872][ T36] audit: type=1400 audit(163.583:560): avc: denied { create } for pid=6191 comm="syz.6.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.769184][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 163.769189][ T531] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 164.352161][ T6200] binder: Unknown parameter 'dv'' [ 164.459583][ T6206] SELinux: Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped). [ 164.469354][ T36] audit: type=1400 audit(164.433:561): avc: denied { relabelto } for pid=6205 comm="syz.6.1840" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 164.498589][ T36] audit: type=1400 audit(164.443:562): avc: denied { associate } for pid=6205 comm="syz.6.1840" name="ptmx" dev="devtmpfs" ino=24 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dri_device_t:s0" [ 164.506622][ T6206] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 164.603837][ T6211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1008 [ 165.427711][ T36] audit: type=1400 audit(165.393:563): avc: denied { map } for pid=6219 comm="syz.5.1845" path="socket:[35862]" dev="sockfs" ino=35862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.517629][ T6225] input: syz1 as /devices/virtual/input/input30 [ 165.599196][ T329] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 165.621183][ T36] audit: type=1400 audit(165.593:564): avc: denied { append } for pid=6230 comm="syz.5.1850" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.652140][ T6236] /dev/loop0: Can't lookup blockdev [ 165.655295][ T6238] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.678170][ T36] audit: type=1400 audit(165.643:565): avc: denied { setattr } for pid=6245 comm="syz.5.1854" name="L2CAP" dev="sockfs" ino=35497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.703699][ T6248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.704126][ T6248] rust_binder: Got transaction with invalid offset. [ 165.712912][ T6248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.721084][ T6248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:907 [ 165.731471][ T6248] rust_binder: Write failure EFAULT in pid:907 [ 165.741341][ T329] usb 7-1: device descriptor read/64, error -71 [ 165.928055][ T36] audit: type=1400 audit(165.893:566): avc: denied { map } for pid=6273 comm="syz.0.1863" path="socket:[35526]" dev="sockfs" ino=35526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.992718][ T36] audit: type=1400 audit(165.963:567): avc: denied { read append } for pid=6280 comm="syz.5.1866" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 166.019197][ T329] usb 7-1: device descriptor read/64, error -71 [ 166.025570][ T6282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.025809][ T36] audit: type=1400 audit(165.963:568): avc: denied { open } for pid=6280 comm="syz.5.1866" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 166.026131][ T6283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.032319][ T6282] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 166.068011][ T6282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 166.074427][ T6283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:918 [ 166.077411][ T6282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:918 [ 166.086502][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.112259][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.259186][ T329] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 166.389182][ T329] usb 7-1: device descriptor read/64, error -71 [ 166.629270][ T329] usb 7-1: device descriptor read/64, error -71 [ 166.739235][ T329] usb usb7-port1: attempt power cycle [ 166.796020][ T6289] >: renamed from veth0_vlan (while UP) [ 166.796581][ T6288] exFAT-fs (rnullb0): invalid boot record signature [ 166.808236][ T6288] exFAT-fs (rnullb0): failed to read boot sector [ 166.814701][ T6288] exFAT-fs (rnullb0): failed to recognize exfat type [ 167.089171][ T329] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 167.110268][ T329] usb 7-1: device descriptor read/8, error -71 [ 167.242524][ T329] usb 7-1: device descriptor read/8, error -71 [ 167.479225][ T329] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 167.500200][ T329] usb 7-1: device descriptor read/8, error -71 [ 167.630253][ T329] usb 7-1: device descriptor read/8, error -71 [ 167.739275][ T329] usb usb7-port1: unable to enumerate USB device [ 167.803184][ T6303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.855150][ T6304] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 167.861708][ T6304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 167.869814][ T6304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:937 [ 168.380659][ T6354] tipc: Enabling of bearer rejected, failed to enable media [ 168.398793][ T6354] binder: Bad value for 'max' [ 168.516718][ T6358] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.759174][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 168.882749][ T405] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.890353][ T405] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.897801][ T405] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.905323][ T405] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.912893][ T405] rtc rtc0: __rtc_set_alarm: err=-22 [ 168.920169][ T10] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 168.928413][ T10] usb 7-1: config 0 has no interface number 0 [ 168.934610][ T10] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.945692][ T10] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.955632][ T10] usb 7-1: New USB device found, idVendor=29bd, idProduct=0055, bcdDevice= 0.00 [ 168.964808][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.973530][ T10] usb 7-1: config 0 descriptor?? [ 168.980321][ T10] usbhid 7-1:0.128: can't add hid device: -22 [ 168.986423][ T10] usbhid 7-1:0.128: probe with driver usbhid failed with error -22 [ 169.104681][ T6365] rust_binder: Read failure Err(EAGAIN) in pid:1063 [ 169.104846][ T6365] random: crng reseeded on system resumption [ 169.182774][ T405] usb 7-1: USB disconnect, device number 31 [ 169.269363][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 169.269378][ T36] audit: type=1400 audit(169.243:573): avc: denied { setattr } for pid=6376 comm="syz.4.1887" name="packet" dev="proc" ino=4026532541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 169.309650][ T36] audit: type=1400 audit(169.283:574): avc: denied { accept } for pid=6370 comm="syz.5.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.470921][ T36] audit: type=1400 audit(169.443:575): avc: denied { map } for pid=6387 comm="syz.5.1890" path="socket:[35721]" dev="sockfs" ino=35721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 169.685543][ T6408] batadv0: tun_chr_ioctl cmd 1074025677 [ 169.691210][ T6408] batadv0: linktype set to 769 [ 169.873814][ T6424] veth0_vlan: entered allmulticast mode [ 169.955267][ T6438] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 169.964247][ T6438] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.029213][ T36] audit: type=1400 audit(169.993:576): avc: denied { map } for pid=6449 comm="syz.4.1918" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 170.055690][ T6450] BUG: unable to handle page fault for address: fffffffffffffff1 [ 170.063444][ T6450] #PF: supervisor read access in kernel mode [ 170.069516][ T6450] #PF: error_code(0x0000) - not-present page [ 170.075579][ T6450] PGD 72ac067 P4D 72ac067 PUD 72ae067 PMD 0 [ 170.077741][ T36] audit: type=1400 audit(169.993:577): avc: denied { execute } for pid=6449 comm="syz.4.1918" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 170.081572][ T6450] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 170.081603][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.4.1918 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf [ 170.108380][ T36] audit: type=1400 audit(170.033:578): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 170.110409][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.110430][ T6450] RIP: 0010:read_pages+0x47e/0x670 [ 170.124929][ T36] audit: type=1400 audit(170.033:579): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.144929][ T6450] Code: 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 d2 a8 1c 00 49 8b 3c 24 48 89 de 4d 89 f3 41 ba 21 29 0b e6 <45> 03 53 f1 74 02 0f 0b 2e e8 60 20 41 1e 4c 89 e7 e8 2c 36 00 00 [ 170.144950][ T6450] RSP: 0018:ffffc900083ef160 EFLAGS: 00010246 [ 170.144967][ T6450] RAX: dffffc0000000000 RBX: ffffea0004675400 RCX: 1ffffffff0c2c571 [ 170.144983][ T6450] RDX: ffffc90007278000 RSI: ffffea0004675400 RDI: ffff88811f2993c0 [ 170.155376][ T36] audit: type=1400 audit(170.033:580): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.160103][ T6450] RBP: ffffc900083ef290 R08: ffffea0004675437 R09: 1ffffd40008cea86 [ 170.160120][ T6450] R10: 00000000e60b2921 R11: 0000000000000000 R12: ffffc900083ef5f0 [ 170.181030][ T36] audit: type=1400 audit(170.033:581): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.200427][ T6450] R13: 1ffff9200107debe R14: 0000000000000000 R15: ffffffff86162b88 [ 170.200444][ T6450] FS: 00007f21dff4d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 170.200461][ T6450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.200474][ T6450] CR2: fffffffffffffff1 CR3: 000000011cde4000 CR4: 00000000003526b0 [ 170.200489][ T6450] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 170.200501][ T6450] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 170.200513][ T6450] Call Trace: [ 170.200519][ T6450] [ 170.200529][ T6450] ? page_cache_ra_unbounded+0x960/0x960 [ 170.207234][ T36] audit: type=1400 audit(170.033:582): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 170.214573][ T6450] ? folio_add_lru+0xc8/0x170 [ 170.214601][ T6450] ? filemap_add_folio+0x14d/0x2d0 [ 170.367925][ T6450] page_cache_ra_order+0x8cd/0xdf0 [ 170.373095][ T6450] ? __cfi_page_cache_ra_order+0x10/0x10 [ 170.378753][ T6450] page_cache_sync_ra+0x713/0x920 [ 170.383798][ T6450] hpage_collapse_scan_file+0xbab/0x3510 [ 170.389448][ T6450] ? wait_for_completion+0x40/0x40 [ 170.394570][ T6450] ? hugepage_vma_revalidate+0x480/0x480 [ 170.400212][ T6450] ? __virt_addr_valid+0xc5/0x380 [ 170.405250][ T6450] ? kasan_addr_to_slab+0x11/0x80 [ 170.410294][ T6450] ? __kasan_check_write+0x18/0x20 [ 170.415421][ T6450] ? mutex_unlock+0x8b/0x240 [ 170.420040][ T6450] ? __kasan_check_write+0x18/0x20 [ 170.425163][ T6450] madvise_collapse+0x4c6/0xaf0 [ 170.430031][ T6450] madvise_vma_behavior+0x69d/0x2d40 [ 170.435328][ T6450] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 170.441104][ T6450] ? __sched_text_start+0x10/0x10 [ 170.446157][ T6450] ? __futex_queue+0x19a/0x340 [ 170.450948][ T6450] ? __cfi___futex_queue+0x10/0x10 [ 170.456100][ T6450] ? futex_wait_setup+0x1bc/0x260 [ 170.461138][ T6450] ? schedule+0xc6/0x240 [ 170.465403][ T6450] ? mtree_range_walk+0x573/0x730 [ 170.470457][ T6450] ? mas_prev_slot+0xab4/0xb60 [ 170.475246][ T6450] ? mas_prev+0x5f/0xa0 [ 170.479425][ T6450] ? find_vma_prev+0xfd/0x170 [ 170.484120][ T6450] ? __cfi_find_vma_prev+0x10/0x10 [ 170.489244][ T6450] ? futex_wait+0x29a/0x7a0 [ 170.493758][ T6450] ? __kasan_check_write+0x18/0x20 [ 170.498881][ T6450] ? rwsem_read_trylock+0x2b1/0x660 [ 170.504095][ T6450] ? downgrade_write+0x440/0x440 [ 170.509064][ T6450] madvise_walk_vmas+0x1b1/0x2e0 [ 170.514020][ T6450] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 170.519760][ T6450] ? madvise_set_anon_name+0x610/0x610 [ 170.525236][ T6450] ? __asan_memset+0x39/0x50 [ 170.529845][ T6450] ? blk_start_plug+0x72/0x1c0 [ 170.534720][ T6450] do_madvise+0x508/0x8b0 [ 170.539078][ T6450] ? __se_sys_futex+0x28f/0x300 [ 170.543950][ T6450] ? __cfi_do_madvise+0x10/0x10 [ 170.548819][ T6450] ? __kasan_check_write+0x18/0x20 [ 170.553954][ T6450] ? fpregs_restore_userregs+0x11d/0x260 [ 170.559601][ T6450] __x64_sys_madvise+0xae/0xc0 [ 170.564354][ T6450] x64_sys_call+0x20c3/0x2ee0 [ 170.569012][ T6450] do_syscall_64+0x58/0xf0 [ 170.573433][ T6450] ? clear_bhb_loop+0x50/0xa0 [ 170.578097][ T6450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.583972][ T6450] RIP: 0033:0x7f21df18e9a9 [ 170.588365][ T6450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.608062][ T6450] RSP: 002b:00007f21dff4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 170.616472][ T6450] RAX: ffffffffffffffda RBX: 00007f21df3b5fa0 RCX: 00007f21df18e9a9 [ 170.624440][ T6450] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 170.632400][ T6450] RBP: 00007f21df210d69 R08: 0000000000000000 R09: 0000000000000000 [ 170.640356][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.648311][ T6450] R13: 0000000000000000 R14: 00007f21df3b5fa0 R15: 00007fff0ab96628 [ 170.656268][ T6450] [ 170.659267][ T6450] Modules linked in: [ 170.663151][ T6450] CR2: fffffffffffffff1 [ 170.667285][ T6450] ---[ end trace 0000000000000000 ]--- [ 170.672719][ T6450] RIP: 0010:read_pages+0x47e/0x670 [ 170.677817][ T6450] Code: 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 d2 a8 1c 00 49 8b 3c 24 48 89 de 4d 89 f3 41 ba 21 29 0b e6 <45> 03 53 f1 74 02 0f 0b 2e e8 60 20 41 1e 4c 89 e7 e8 2c 36 00 00 [ 170.697425][ T6450] RSP: 0018:ffffc900083ef160 EFLAGS: 00010246 [ 170.703491][ T6450] RAX: dffffc0000000000 RBX: ffffea0004675400 RCX: 1ffffffff0c2c571 [ 170.711479][ T6450] RDX: ffffc90007278000 RSI: ffffea0004675400 RDI: ffff88811f2993c0 [ 170.719435][ T6450] RBP: ffffc900083ef290 R08: ffffea0004675437 R09: 1ffffd40008cea86 [ 170.727389][ T6450] R10: 00000000e60b2921 R11: 0000000000000000 R12: ffffc900083ef5f0 [ 170.735426][ T6450] R13: 1ffff9200107debe R14: 0000000000000000 R15: ffffffff86162b88 [ 170.743376][ T6450] FS: 00007f21dff4d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 170.752291][ T6450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.758864][ T6450] CR2: fffffffffffffff1 CR3: 000000011cde4000 CR4: 00000000003526b0 [ 170.766831][ T6450] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 170.775306][ T6450] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 170.783261][ T6450] Kernel panic - not syncing: Fatal exception [ 170.789540][ T6450] Kernel Offset: disabled [ 170.793860][ T6450] Rebooting in 86400 seconds..