last executing test programs: 1m22.927236466s ago: executing program 1 (id=214): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5625e9b6}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000002ec0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000049"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m22.926721966s ago: executing program 1 (id=215): r0 = fsopen(&(0x7f0000000280)='fuse\x00', 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000785000/0x2000)=nil, 0x2000, 0x11) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f00000004c0)) 1m22.908799906s ago: executing program 1 (id=216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r3}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001640)={0x20, r5, 0x1, 0x1f, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x8051) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 1m22.898737216s ago: executing program 1 (id=217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) shutdown(0xffffffffffffffff, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000040"]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130) openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x10001, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x40046721, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r10, 0x0, {0x0, 0x0, 0x0, 0x5, 0xffffffffffff0000, 0x0, 0x0, 0x1b, 0xd, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc00180cc4dae42614623061b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$RTC_PLL_GET(r10, 0x80207011, &(0x7f00000001c0)) ioctl$LOOP_CLR_FD(r5, 0x4c01) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r11, &(0x7f00000001c0)="a02d", 0x2) r12 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r12, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1m22.779382149s ago: executing program 1 (id=218): userfaultfd(0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000260e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000200000044000500"], 0x174}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000004c0)=[@exit_looper], 0x0, 0x0, 0x0}) 1m22.688733401s ago: executing program 1 (id=219): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7000000000000000000000000000000000100000001000000020000"], 0x110) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x94022, &(0x7f0000000180)=ANY=[@ANYBLOB="47756765010000000100000087eda9b62841b84e334e6600873a533f1cff25bac2b61bb1796e4d075a20522d5b02b78bdf641b42b12c5fe163b519fb1bcb738ada0e1c345b04279ae84c091c23e50a279bce45f3423bb6212d53c7ecc2776e78bc84e59dd8a3cf46a4aa302b805003965dcd3916aa3f8e3f990c867db65da583cc4c0ee9a66d4c728cb1"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c40)={"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"}) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) 1m22.634434492s ago: executing program 32 (id=219): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7000000000000000000000000000000000100000001000000020000"], 0x110) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x94022, &(0x7f0000000180)=ANY=[@ANYBLOB="47756765010000000100000087eda9b62841b84e334e6600873a533f1cff25bac2b61bb1796e4d075a20522d5b02b78bdf641b42b12c5fe163b519fb1bcb738ada0e1c345b04279ae84c091c23e50a279bce45f3423bb6212d53c7ecc2776e78bc84e59dd8a3cf46a4aa302b805003965dcd3916aa3f8e3f990c867db65da583cc4c0ee9a66d4c728cb1"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c40)={"e54c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774ca3d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa10aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4887906737c78821371dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7692a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34cc79c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240bb700b9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883cff7f000000000000aea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc00794d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea979a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbe8a970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad583779b97034f9400"}) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) 1m3.754059336s ago: executing program 0 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0xb) chdir(&(0x7f0000001180)='./bus\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 1m3.753515217s ago: executing program 0 (id=530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x22, 0x0, &(0x7f0000000040)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100b, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1000000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x50d, @link_local}, 0x60, {0x2, 0x4e22, @local}, 'pim6reg1\x00'}) (async, rerun: 32) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xd, @local, 0xfffffffb}, 0x1c) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) (rerun: 64) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r8}) (async) ioctl$KVM_CAP_XEN_HVM(r5, 0x4068aea3, &(0x7f0000000400)={0x26, 0x0, 0x20}) (async) sendmmsg$inet6(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x30000001) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc4, 0x0, &(0x7f0000000300)=[@free_buffer, @increfs_done={0x40106308, 0x2}, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x0, 0x2, 0x14}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/85, 0x55, 0x1, 0x8}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x3}, @exit_looper], 0x0, 0x0, 0x0}) (rerun: 64) 1m3.751899897s ago: executing program 0 (id=531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x1800, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x3fb, 0x1}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d00000008000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18170000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf251500000004001d80"], 0x18}}, 0x20000001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x41}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffe4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 1m3.751587987s ago: executing program 0 (id=532): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x74566ae45aceda7f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000240)='./file1\x00', 0x24) mkdir(0x0, 0x100) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file1\x00') r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b0f2b5aa40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB="b3129f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) write(r4, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 1m0.705764286s ago: executing program 0 (id=559): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={0x0}) (async) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa0d91f34127032be, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 1m0.353654683s ago: executing program 0 (id=562): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) signalfd4(r1, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') read$FUSE(r3, 0x0, 0x7c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x1, 0x10040, 0x6, 0x101, 0x9, 0x514ccb65}, {0x2, 0x2, 0x1ff, 0x5, 0xffffffff}]}) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 1m0.314823423s ago: executing program 33 (id=562): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) signalfd4(r1, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r2, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') read$FUSE(r3, 0x0, 0x7c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x1, 0x10040, 0x6, 0x101, 0x9, 0x514ccb65}, {0x2, 0x2, 0x1ff, 0x5, 0xffffffff}]}) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 54.490648406s ago: executing program 2 (id=628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0xa4, 0x9, 0x1, {0x22, 0x54c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0xf, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x0, 0x0, 0x40, 0xa}, 0x13, &(0x7f0000000140)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x2, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x8}]}, 0x3, [{0x2a, &(0x7f00000001c0)=@string={0x2a, 0x3, "6892cf6ff9f787689774db92d2929ed3309798409725e75930d8eb18b85d30d022817f67bd178bb6"}}, {0x8a, &(0x7f0000000440)=@string={0x8a, 0x3, "b5a37ab53866f06d764dd3ceea90a526e0c357dae965c3b134b1c0f7040e5ba9553bb42c002ebd68a0ceed4221f03559fbe23f900c5bf83bfecd1259ce2f89dcfb496a25b22b5a3b37bd15c14c941b369549cb4a5eeddfe194d9aa407eafbb5fef82ab8ca2399a7a09e59bf228f69350478f5951166c5a51bc5e2028877a0cfb1ea41d65c8d9121e"}}, {0x28, &(0x7f0000000280)=@string={0x28, 0x3, "ee859c85ccfe44012687deed5f7ac10ba9dd4aa058669705dc055d408fe093cf8557a7ba3d2b"}}]}) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x40, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRES8=r3, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x13) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000240)={0x20, 0x12, 0x4, "9dbac184"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = eventfd2(0x6, 0x80002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x4, r5}) mkdir(0x0, 0x21) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x100, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 54.080955974s ago: executing program 4 (id=632): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseb\xd3\xb4l', &(0x7f0000000940)='\xa8\xabo\x82L\xe4\x920\vA\xfd\xe5\xcaxd\xd4\xf3\x8e\xe9y\x9a\f$p\xe6\xd0I_\xd7s`\xa6\xa4\xff\xbc@d>\xf1l\xc7}\xde8\xf1\xcb.G\x1dj\x03\xb9p\xc6!`\xd5\x15\xe1\xb9\xd3R\xa7\xeb\xbeD\xdb\xddk_\x8a\x00\xd1\xa8rH\x14\xb4\x90P\"\x7f\xed\xc6\xac-3`unuE\x8fv6V\x04\x8e', 0x0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000100)=0x281, 0x4) read(r0, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, 0x0) 54.079929914s ago: executing program 4 (id=633): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80141, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) (async) dup3(r1, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) (rerun: 32) 54.031942235s ago: executing program 4 (id=634): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6070000009332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000005c0)=0x1, 0x4) close_range(r2, r3, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) 53.985015346s ago: executing program 2 (id=635): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') read$FUSE(r0, &(0x7f00000043c0)={0x2020}, 0x2020) faccessat2(r0, &(0x7f00000000c0)='./cgroup\x00', 0xe9, 0x1600) 53.931403627s ago: executing program 2 (id=636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$bt_hci(r0, &(0x7f0000000440)={0x1, @accept_phy_link={{0x436, 0x1003}, {0xc9, 0x0, 0x2, "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"}}}, 0x1007) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000000)=0x1) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) 53.918760527s ago: executing program 4 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x10, 0x5, 0x0, 0x4, 0x7, 0x0, 0x7, 0xfc, 0x0, 0xfc, 0x0, 0x1ff, 0x2, 0xff, 0x0, 0x45, [0x0, 0x1]}}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 53.917678737s ago: executing program 4 (id=638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r3, 0x400454de, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r5, 0x8924, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x1000, 0x6000, 0x2}}, "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", "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"}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2000000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1c) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.872509288s ago: executing program 4 (id=639): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) timer_create(0x80d5b643adfce43f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r1) (async) syz_genetlink_get_family_id$l2tp(0x0, r1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030632bd7000fcdbdf2503000000050003007e5900000c00018008000100", @ANYRESDEC=r3, @ANYBLOB="050005"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000100)) (async) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000100)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) listen(r5, 0x5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) memfd_create(&(0x7f0000000680)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\xf0\xff\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xb3\xad\x04B\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8f\x92\x04\xaf\xc5^>\x9f\x04\x89<\xb7S\\{!\xd4\x82#\xe2\x05\x9d\x0fD\xb7\xe0(\xa5\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1\xd4\x00\x00\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\x9c\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\x03\x00\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5P\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0\x02\x00\x00\x00\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}\x00\x00\x00\x03\xfcWZ!<\x16a5\vL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0\xce\xdc\x95BkA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xcb\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\x9a', 0x1) (async) r7 = memfd_create(&(0x7f0000000680)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\xf0\xff\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xb3\xad\x04B\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8f\x92\x04\xaf\xc5^>\x9f\x04\x89<\xb7S\\{!\xd4\x82#\xe2\x05\x9d\x0fD\xb7\xe0(\xa5\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1\xd4\x00\x00\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\x9c\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\x03\x00\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5P\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0\x02\x00\x00\x00\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}\x00\x00\x00\x03\xfcWZ!<\x16a5\vL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0\xce\xdc\x95BkA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xcb\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\x9a', 0x1) write(r7, &(0x7f0000000140)='/', 0x1) sendfile(r6, r7, &(0x7f0000000040), 0xfec) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = accept4$unix(r5, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg$unix(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1}, 0x0) 53.820599969s ago: executing program 34 (id=639): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) timer_create(0x80d5b643adfce43f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r1) (async) syz_genetlink_get_family_id$l2tp(0x0, r1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030632bd7000fcdbdf2503000000050003007e5900000c00018008000100", @ANYRESDEC=r3, @ANYBLOB="050005"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000100)) (async) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000100)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) listen(r5, 0x5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) memfd_create(&(0x7f0000000680)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\xf0\xff\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xb3\xad\x04B\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8f\x92\x04\xaf\xc5^>\x9f\x04\x89<\xb7S\\{!\xd4\x82#\xe2\x05\x9d\x0fD\xb7\xe0(\xa5\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1\xd4\x00\x00\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\x9c\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\x03\x00\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5P\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0\x02\x00\x00\x00\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}\x00\x00\x00\x03\xfcWZ!<\x16a5\vL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0\xce\xdc\x95BkA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xcb\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\x9a', 0x1) (async) r7 = memfd_create(&(0x7f0000000680)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\xf0\xff\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xb3\xad\x04B\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8f\x92\x04\xaf\xc5^>\x9f\x04\x89<\xb7S\\{!\xd4\x82#\xe2\x05\x9d\x0fD\xb7\xe0(\xa5\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1\xd4\x00\x00\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\x9c\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\x03\x00\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5P\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0\x02\x00\x00\x00\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}\x00\x00\x00\x03\xfcWZ!<\x16a5\vL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0\xce\xdc\x95BkA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xcb\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\x9a', 0x1) write(r7, &(0x7f0000000140)='/', 0x1) sendfile(r6, r7, &(0x7f0000000040), 0xfec) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = accept4$unix(r5, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg$unix(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1}, 0x0) 53.465297826s ago: executing program 2 (id=641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup(r0) execveat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000240)='./binderfs/binder0\x00', &(0x7f0000000280)='&\x00', &(0x7f0000000400)='#\x00', &(0x7f0000000440)='}^--&&\xbd&:/{^:+)#&(!$.$\x00', &(0x7f0000000480)=')/}$,}(\x00', &(0x7f00000004c0)='/dev/kvm\x00', &(0x7f0000000500)='([-\x00', &(0x7f0000000540)='./binderfs/binder0\x00', &(0x7f0000000580)='I\x00']}, &(0x7f0000000840)={[&(0x7f0000000640)='/dev/kvm\x00', &(0x7f0000000680)='S\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='$\x00', &(0x7f00000007c0)='[-.!\x00', &(0x7f0000000800)='./binderfs/binder0\x00']}, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r4, 0x8140aecc, &(0x7f00000002c0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) r6 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BLKRRPART(r7, 0x125f, 0x0) 53.399596907s ago: executing program 2 (id=642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x1}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.282886029s ago: executing program 2 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.24156459s ago: executing program 35 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 49.59703525s ago: executing program 3 (id=714): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0002026}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close_range(r0, r1, 0x0) 49.534502821s ago: executing program 3 (id=715): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\x1dNh\xf7$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r4 = socket(0xa, 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) utimensat(r5, 0x0, &(0x7f0000000880)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 49.533888422s ago: executing program 3 (id=716): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x2}) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000041, 0x0, 0x1}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 49.485109072s ago: executing program 3 (id=717): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x221) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0xbc) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x4, r2, 0x0, 0x0, 0x3000}]) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000240)={0x7, 0x20, 0xd, 0x2, 0x0, 0x7, 0x6, 0xdc}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 48.629747649s ago: executing program 3 (id=722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x85, 0x1b}}}}, [@NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0xea9, "0612646b7ac3", @long="d2dd537ef4a2894bd456351a4270cab0"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}, @NL80211_ATTR_IE={0x21, 0x2a, [@chsw_timing={0x68, 0x4, {0x4, 0x3ff}}, @rann={0x7e, 0x15, {{0x0, 0x77}, 0x2, 0x8, @device_b, 0x400, 0x7}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x48001) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r12, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff15000e001c"], 0x4c}}, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r13, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x20044001) r14 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r14, 0xffff) fcntl$addseals(r14, 0x409, 0x7) r15 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r14, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r15, 0xc0086202, &(0x7f0000000440)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 48.497247342s ago: executing program 3 (id=723): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000), 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/netstat\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/netstat\x00') read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) 48.469418552s ago: executing program 36 (id=723): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000), 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/netstat\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/netstat\x00') read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) 39.167506232s ago: executing program 6 (id=840): read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0x26c, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x3c, 0x17, {0x8, 0x70bd2a, 0x70bd25, 0x70bd2b, 0x70bd27, 0x3, [0x1000, 0xd, 0x40, 0x1000, 0x9, 0xdfb4, 0x7, 0x7]}}, @migrate={0xe8, 0x11, [{@in=@private=0xa010101, @in=@local, @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3c, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in6=@local, @in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0x2}, {@in=@local, @in6=@mcast1, @in=@empty, @in=@loopback, 0xff, 0x4, 0x0, 0x0, 0xa, 0x2}]}, @replay_thresh={0x8, 0xb, 0x8}, @replay_thresh={0x8, 0xb, 0x80000001}, @extra_flags={0x8, 0x18, 0xffffffff}, @algo_auth={0x48, 0x1, {{'hmac(sha1-avx2)\x00'}}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@empty, 0xa, 0x5, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffffff}]}, 0x26c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x2}) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x11, r0, 0x45809000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) (async) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x1a3503) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x22, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 39.167122852s ago: executing program 6 (id=841): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r3, 0x1) (async) listen(r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400c050}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400c050}, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x88000, 0x0) pidfd_send_signal(r4, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x436}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0x9) sendfile(r0, r0, 0x0, 0x1200000000000) (async) sendfile(r0, r0, 0x0, 0x1200000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x0, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x0, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r7, 0x1, 0x6, @random="b3bef56bcd32"}, 0x10) (async) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r7, 0x1, 0x6, @random="b3bef56bcd32"}, 0x10) fsetxattr$trusted_overlay_upper(r5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb15050d6e19943de8024bdb7d35cec7ccf564d314ea82ae970686cd3d74e6ecd957acbbded8a4f8a14f26688b6b6871acd63569c3efbcb8c5c78c72e69e0fcbdb70e6b7d2084efc3fbf2b2d6a9f8bd8d95a0c412ab30264f41c61758c71596f89dbe82adab1e0bc55412746eced76c74bec06de455ac14a1425d2e99e6849c947756ebb3c2799cb1e6ff036d65b08cb4a6919289ab8fa6f4b2d5c1b8a08e65d"], 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xffff9000) 39.161462933s ago: executing program 6 (id=843): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2}) mkdirat(r0, &(0x7f00000000c0)='./cgroup\x00', 0x50) 39.149081703s ago: executing program 6 (id=844): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) pwrite64(r0, 0x0, 0x0, 0x7) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x4, 0x9, &(0x7f0000000080)=0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 39.062659464s ago: executing program 6 (id=849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x600, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040ef0ec47200000000000109022400010000c0b109040000010300010024f190a937b1ecc30009058103ff030c00001109b8fa8ff9b58b9c3b5736ef9af76d5ef772ce7ffe5a517245e080f341f9eb93ffbb5c33eca062f40324a18f0d1da5dec7fe333a14e5e6b5c012b63f19aa80ae61f27f5e61fc8c62266467b8e161f93d689ecd3215a0e41172f10cbaeeee0d3c74f9ffbdb7736d302187e22bc1bb1b5f45fd277fd721a93f"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000001080)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, &(0x7f0000000380)={0x0, 0xf, 0x74, {0x74, 0x24, "9164172b6b446f9bfca83a8caf8d7c1878e7be383592cf0cf9ada7b37390416408d9d4e834039366e4d972926a32ed3172f2e7726de78e56187b0d7f26ab0f8f3a06e9271a28c74055e5b25ed1eea1e0266cd54f50beadad86c5c01f2457b7332515a0cd22ac50ab819e0cde7eefa8833323"}}, &(0x7f0000000080)={0x0, 0x3, 0x22, @string={0x22, 0x3, "18bbe2535f34ea0ababc076e3ed291b19bcee5f21827a9243ce35f745002944b"}}, &(0x7f0000000500)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x8}, @global=@item_4={0x3, 0x1, 0x8282a74afcc06d66, "b9a1dbf2"}, @global=@item_4={0x3, 0x1, 0x3, "499c6bad"}, @global=@item_012={0x1, 0x1, 0x3, "fa"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x896}}}}, &(0x7f0000001800)={0x2c, &(0x7f00000005c0)={0x20, 0x15, 0xaf, "806b7e8cab45cb3c94c3d84e42288c4b53d9a89bd47f087fa094b7d2376206343075ac70f6fa94785bc8abafb8206b211f9f22ee0fe54162e5ce5dc44a21aa07d7a486ee41284aa601925a3f57765007895276e43bd2f72ef9f54f2edb57f50d1c43a9b134bdf7aa6a4d05095704b40a6d3bfa386ecf588850ec3999b58f5cccd65ce45481135ba7e54d02019d254f3fa82db0e5203c95e208cb7c910c6bded672e818d92c070e56ca1553c02cc58f"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001740)={0x20, 0x1, 0x44, "19a28d5e61745f8c4a8789903397cb496d2a0871c0166ce0c8947fc64a2bbb927dbd1f52432c64637cfd3f7f604f04eb7a59f877032490a06adc9e632e87a3e1beab2b43"}, &(0x7f00000017c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="f400"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xffff, 0x101040) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000300)=@usbdevfs_driver={0xe2, 0x5, &(0x7f00000006c0)="872a5a1cbd0ef00cef712c8a8615279b6c903aba88a4d9b5351260af0a27e729843eb687049f351de5e64205f80dfb445f2872b48c5e6ea104a686e463c77573e4e14f281f1847a0b368457569a343281abcac7c3653b6b0b4a3d0abec6771f943ead0fc19fea89bd0b5349468fa254c70aaba40188e677e56ba6a13bc6670b2108db19e2f7b48790265c41ead085cbd90b4fd9fc74d12eb005754c4c089f12a55333e63f772cedf123992677774519e77ff6f2449bb10947d6c81ae08302968df8a7465f04b590d5dd9cda3fea88a8be756642f4950e2b57ca5ac9468048c5fe409109b9f70abf61d1a31661c4e8f04140acb5e6908792d13bf0aa9b48b02dab94d41955ad12cc70f6f49b1c59e137d24015f4e857d56c5e5300c0d87424088daae08c020c0aa383b24c851e6c63660d07f805eb17054c2c1e017040805c6924b3b91dbc9b4407174ceb60ba358569b7c4d5e57533e9e32dad0683d5fee13a8213a271521542ffcb512cadcfa94317e4d620393d8839b0b23f12ad5fe728e3bb226d76ef59405a493f1159b132a870d2a76de0839633a7ba36b1da33ef711e205116a1ae7f53ccf71f633118229a12eff588739f18fa49a69c336967ddecb8af53186b008bc431e6197c37ad046f7f41bf486c20e17df7c9036ad149eb14713cc6bd34b4584e93619f51fa01e0ec3dd72c3cf45a3a765b5fb2eb85cd68bd8e129fb39944dd2bd2344d5b5cdfdd4602c1d090e7ab6b6eefd479e75975ef0a35d1da4a14515e8ec7ddcd8564e8a4120f6b60751b7552d25ef5b9056a6f5b08258000857320162ff92b84717617cb80734aa448f9d571439bb1579036b6a7ea1ddc5d66a1c66444a8ea3075aef5386897f395cf4afbafa09650f15c1d504e1bdb5bd03ea07320da081f165f723e3fab6ed6425db64cc6335094b1ad57863899d6cee799efe208103eee4e8e1874682202c9eb18da16e9ea5f07242a22079f323e418cf54a038992a754f9d589e91a32b3b35af719f3f6f3b9ad9cbaa80e141f80781cc92b63e5691e2e255545b1dfb6fd7c8ca0b9a99576fea8d6db9e02910391810b027c6b8728677ee8e9630d0272a4fe19920824f5e663b90c684bdfe263c40b6926ffec60fc34bd615417340e87c8bb381d3ea96f79e6923896dbe5317a10500c6a3f127002442098df773f584b59662cc67c13b7a901252c3f1cced7f93c082ecdae96f84db492b5e2ac90a7dfbc6de2524ef99bd092fbeaf14e131930f642d421c147064324589d867a79b3b418e353e629b7886cf6161096aff29a98d0128f600a4180dd4a9d8012579d1ba2419b94dd1f23cbfb3debf4d2640755a2b4166c6c7aef69d9b5b023c1f9cb4ab7270461c622d23d4a44e67797357111fdfdd620c1d66334414cf8bef67beab684e227d60d5cc1979d2344d00f893532ede74e832e5f390d626e1e0c17f3c09cb3e387097ea18565d0cf03b2524140f9bb22081684a283f937dc8d254415404f51b57343d557d16a58b5481842ae02487fc48f787cd196e7f2eb75f42298ccd16f413c9cf0c47988cb51f71c2e9ceffcd66de929c60b493f89ed4e80790eea14eabb1ca9067909f5d8123e7a0f689b9aedb186a7f6a39d8863ae60814fe9f23528ac56b7ff9714295548dd5e07f5c581d9342968c7163fd781988a9796be7b830de3746b89457b952c9e923dc6c90f87397eaf023693836874d57e51a3c79c7fed9649e5b7681a9ff02aa71c412237d726030733024953ac45596b35e9d5751c70c44023e71eac9694e5fe96168cb4748d43d9c1c5ff64d1d68b61d2e873f15735b7d2676d4539236c6982382e1f92f2caf5708c53822b181d35b8e94c4b5b73ad7e7cff2078a987a2d56937cd42296fcfd9d24c7f494d4a8876daad6e047dc935fc41203226770de6abb251922539d062f04c3f096c4b91f04a4ad07f2b9f6291d4878b21fb013f9332e9b6cc48f15de8e6243398f2da063a858382813367235398f9a3e6a003177ef5e6f76d352b7c4578a8b0f70207266d85e1acd5474e10db3f50efd4eacde8d8a6b4b9a4658664cf1602320a203db949bf4484ea5770ef339750f141302f540b60b07fafb6e0dd66307a6ba6fe6e6db458b83d86bad5fbf00956fd6cc9c1c0a25b7a01e5ec600dec8353a03e28af89e1326600fdb39856c628e8a6e0e9cb501fc2703436ffc9a41b5c143ed24caf02d91c9d5431e95a4a29df6736af25cf756cf3ad501ebd5d496183af4ed583acead4ab946fb3b808ae51f7bfdf9930e0da6ddd56da3693375ba0847f6f7f6b23d97bf4a7da5552c1edc3e9f9cad08ed22c5103fcad21b0255a8499eb0c3db5e4490c10582dcc0c9853036c39f99b7a6d32cb82add620938be6e7e30176757d8805f2e4fa09803a069abd8215a975609ad27864920049b534247ec45916fb2e1a57c627272dc88e7a611febcf18bb141605db883943ed75f25ea0ca4f57a4eeb883026bf20069a1fc0979ccf86a02cb27b3a691b6c0234c4caf2019622e03aca143592ce310b0517f6df160fedce5a9bdcc1883602cda0d3ad1c5752b2f4a645230358e24140bd36fb73a6531cb96fcecaf2d8038de7679c0705d3112798002d204ded829972583d9de1db1b7866d822a41d0c331baec683c85f22bc975df0e02b755dfa03f5e37fa6d1372ebeca4a88e80430e3cd5e9e8559cd334665d4d0ba6ef5219ed48e87d33c2d901991b84d74d971e7558257fe56c682cd5a8a932d8b4e5b996300bda9e5cc1d32913339cec8b7ea1b5468c3eca0a698b09b11f15c0f29b1cc335113bd917d5f9065f8b120c5dbd8abfede376b9ec6347441f580b951a509b5f1aca8754a955e79a6e25f7a7f62788e9635f35851e4182127def7c19e19539883e8c07715d27ee71094708d18589fa1dd6977646b64e83f3a308fd2363078b5d085a844aec7e7926667c5f69c85da0f60dc3daeca0d5e7b4d0e8c9f55a90f7e5cdbf995c65b089a42e7f3351c3746048ea1f739591c6617151e5af0d0c1b7436d43f7e74cef2beead2aa6f9a5e2289c603e73f27dc05c927a1ce3953bb67acd0526ecf44227f7c4a7b15831c7113d30f69fbf645c6a55678507eaf31b21242b2d50bed7893ce5fdcb541da23a312b31070769f11f9fd46529892aec0c5f773598f9bdf00a7ce5384c481ade7fd539f196056d15133ac7fe4028d31064569dde2eda9f00f0cefcf813daad268c7d5e339353b5e034b8138f900e3a38fbdf91c72e2f3893c1fdbc397cbf35006ec69f9db9888413b95dbec4797f46513295ba1213baf25f0a7d62a430c5e2d13294e9fb4a0f5d076a98d48b88e0b5b17fccac992f66775d6e61a92e02ed3a3f1b90122aea5e10be60b85c9ebd2322be4a51c914359aa70f3038327505e479f6cd9149ed463ae3cb9569477ea0a1d1eb1da83b0adea1fbaaedf166afaf338cb15f2e8f7d5bed8e88fc47fb08eb3fb2855114ffc0c969f8fd013e4570dfebdf0c97392d5747db1741a0e95ea2952844fecdb08e2634fdeae998f0d60323f4d4b3d5108f5a02f698424ad8b02c9d2118d44d74f6d7c5248d405241cbe08ff87548ead63df26085d9f6c6739b5782a7083875e817c23350fd9aac51eba4c3cadd02f0e6fae630f21bd93a59ad584b6d1c44292092d3eecc45169119ee23bd2b9f0c2c0b40b9f14b2690253ff1a39ab17e33773b4adaa7f285a79cc9127b6ee85b3513f85a42cf22bfc9418783d10cf9aed9596e299613abd52690dfa06d322db13a16e9f2a77dadfe127318786ca695b6b02745471a73ef7f92927cfbade566986d71f7b89be71b4fc5b74c6db4be3cd3e25a6eaceb59558354e404e23ef0df74cebd97198d62c1a3521968565b8f3adcb0cd4e7d9b9b3ec36331ccd70ccc3b21eae1f64def64a8ef68a9f483512006890f6a4fde9581efebdb6a419d57def652e0e68aa5ed778589eaaba7a850e879eb91690e026b431e5d6332ac7066aca049426aa1191fc99d421d3a81b7152eeeb7e962671b92dfede226551f91f9a0654c9b1a621228d95be1595158172e4c903b0462c9e96e94914c175e2237057e47d80bb1d66fdd2d5cd3b960b058a389a8205714a5c0897108b680c6fec1ff9141fa1da0f90ce21e97bf8e844fa31aec797fe4d0d1fc0662700c0990d5bca9328867e94410419129d0f6e92a6608848e9b17183a1e91e7015e78be26617a6fa1f97cee726d98974a6913e30c41a39f62129dbf1f87ac4f2809d0d38a4cde5c400931a942173cc3d67e0958cc784a78ae9e273e931c002b906052dd5910a43385acb7e83df9cd3a830f77e72265498897907ca4f4e64b6e566f838b28f018883cc88683ca976649465b60fe4c914e068ff19f17f3f8c74e1db487da0e1184da0902a18cf9f1c11e88782f2dff054c2f1bb93a9910103ad84d679c339b1c39a727c1d925daa0bc4af46d87138afa7abaad867f4df4c998a22e2bf77f0a4b551c6e66aa103d0e8bf07c8de1f1da73560c6dad86233d33cdfaae64ae50a8727360458c86acef108aed52880032488179565ab0bcdf258eeae884af7793b33de2766cead02b109460610ac027ba46aa32876950d2d55d9c03ab431f8fa4c2adaed6cd134db4a8122e2afc261c44eb03b884f1f7b959ef8a31afb355119cd5c82630de460c99364bb7e747e0250929c6c4626f588e1256eae5268f07635cec05a43a680c5e393c0e73ad30f9c19cf37e4ca7c3197854d14732018809be91cb249d1b41b1dc800e40e82cf60c1c30ce9262a4e192120cdcd887430e7453996e9c5d2a256e992124b5fdb15dd75147db446d212113534233dc0b006952d1babffb61275af7c9e9ef0de9624070493101c160830a25500d7759a16bdd5fb337106c6df772ba49a0864f5ba65690beffa9bfa0bff18090e976d97f1e7e9e9f5e548087f89d33bc6db6946b18455768d7430ce06b1e8c41e4d1d11ed269c141eeb807a9c4c8636d73ce697e224302ae13f366c79b4f4df81d85a519919a082fac19a8acea0c59e0fd6a301b5b7fa93f3b03dd4cb4cbf65f46b7c833b946c09e4c6ba436665beb46017fef812f8fa2ea709d8fa5064c06cb7ec0e85d9cb700cd4ce8d2db8cb1f4c2bb6b0e0b098092628b09159d4bba69f06f9c0e6c798c48e9764173c5e751997b4f06a9120b52865b76ffb825f5baa2128e0770245421e1627a38f3cca9e9a8961dda9926525bc9511d4c0e01f018f90fbde2b65c0616c74a5743859c6a85acb24aff397829e40d8cb23d5c9b88b0ac535ab1c027a90ef2c3591be267c881caa56b893323748c06b12959cf3a347f1d81b0374f3799443dd7722398284ed2c99d7ef35dc19a5f4bb21b610f1417724f87aba69b632d86f153578667c70c27d6f9e82d0f926b199b3a782e92ff079bc839068b54189f0af63cf279e553b89e9b2270db18293d7a6e7ae5f69e2b9fb72ec1a39e839bc44f1f47ad1d4b65731a99ba7491ef1359c2d345b94fa156cc836a4eb1459dbdbe5e912f38542f467b92c60226bb54f6b45ab252133c06d53540e0acd239ebcfa212b6e2477ba3f28d0119db4e9c7b1e544ee37d56f8849b8fc262fc68650d9aae5c1a5a1c42e92a43a1f57a1dfecbe3531332f819eaa52a7efd97b88e22867d869e37a7fa4e9b87c1f64acd780fae7185815f399f9d890389dcd40dd94795338dc65dc17125baf7952b490670bd21b1780a8d6fd834841b337422d615d894c99ff91382c388ce0686d1bbef0dfb0242b9bd45f0fc172726b88d"}) 38.537284364s ago: executing program 6 (id=860): r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xf0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x215}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x8, 0xa7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3d, 0x1, 0x1, 0x40, 0xf3}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfa, "8ede070200fd6bc2c617723931be4ed4"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000300)={0x0, 0xd, 0x93, {0x93, 0x2b, "2b10d5da44d46d73d81c249323a94028a4744a6af88ca63a02cc3cc890e56b0e966bf5faf741eeb0d645bdc66d393228c45aed6eda18f8a01ecd499ce3242b356612e5b9488fecae18aa8d0a53040832a6c7d5d5cb1236d0d0cf33715533b5e2cd55ede7a89b30f8b7e585073f4a737dd6d6f93fdf9c601d66fbd56da18549914767353493b93c2f416a6d379e3fdc9b21"}}, &(0x7f00000003c0)={0x0, 0x3, 0x89, @string={0x89, 0x3, "d37b0ceca9d11bd24f56fb598166f057e89dc9a4fbfbe0a82a732b9fe2c902c4c9e31e878e7bb44a350a52394464fb2ebdc3b61eeddeb0eae4cdacc2b2b4b2c81f471daf44bed2db3e1ba8954e0bb8b357775693d35f50a7358a23e7ab6b54d931ea127c13749559f752013b360535a1f40bd5c81cc5b1e66503336247e9a75da12a1b2ca509f8"}}, &(0x7f00000007c0)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "743f1b22"}, @local=@item_4={0x3, 0x2, 0x7, "0b49980b"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x2, 0x0, 0xb, "5d9e"}, @main=@item_4={0x3, 0x0, 0xa, "9159a80f"}, @global=@item_012={0x1, 0x1, 0x0, 'q'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x1, 0x1, {0x22, 0xc96}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x40, 0xc, 0x9e, "12fd4823e804b27d63e39fb71e6fdfe72dbcc512693d286e54eb8dcacf2ef1232ea870eca1de1be0306045393aa6d0b0e54b645f31cadb3c84c7fb3e45df7f598d98f8c18b3093d0dda6c2671415ae8fdee172b0d7d8d7f14837d2bd3fa52c8a19439da3ee199614182c70aa615d744d21074f80d59d1e15cf1bc2be660bf27376e5d9b1f83dad825285b31b10236fb34e62dc022a0d047d18d6f4e13a65"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x1, 0xe8, "c7b04096b3f3467752900b8ca6e7e796a9632d6c6075f6d3ec3b75362df4849f70ffb45dd6dfaf9a5d8e21a3a8ed61940541ca12c016828e7938d66d6e5fb890774edbe573c569ac8191d93f3ee0b677bed184a904106e37495b0855d777a76cf37131b31b166d85e8d7a8984ab19dd7b76fd3dcd46fa073902c77879255a0a5f90459ff78401f12344f96122e9a26224f6be0dd0349e5390a25b0029dd23784bf1cbaabfff496f8d219196eee299c48a867cb0e23dd1d0e7617cee459e79a4ccbdc5d9450894cc03568646f28ca2bc74dcc35bfd1f37bd07dc740434662a02f0db73d5a04613f74"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xce}}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x200a092, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e20, 0xe, @local, 0xffffff01}, 0x1c) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xf0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x215}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x8, 0xa7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3d, 0x1, 0x1, 0x40, 0xf3}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfa, "8ede070200fd6bc2c617723931be4ed4"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000300)={0x0, 0xd, 0x93, {0x93, 0x2b, "2b10d5da44d46d73d81c249323a94028a4744a6af88ca63a02cc3cc890e56b0e966bf5faf741eeb0d645bdc66d393228c45aed6eda18f8a01ecd499ce3242b356612e5b9488fecae18aa8d0a53040832a6c7d5d5cb1236d0d0cf33715533b5e2cd55ede7a89b30f8b7e585073f4a737dd6d6f93fdf9c601d66fbd56da18549914767353493b93c2f416a6d379e3fdc9b21"}}, &(0x7f00000003c0)={0x0, 0x3, 0x89, @string={0x89, 0x3, "d37b0ceca9d11bd24f56fb598166f057e89dc9a4fbfbe0a82a732b9fe2c902c4c9e31e878e7bb44a350a52394464fb2ebdc3b61eeddeb0eae4cdacc2b2b4b2c81f471daf44bed2db3e1ba8954e0bb8b357775693d35f50a7358a23e7ab6b54d931ea127c13749559f752013b360535a1f40bd5c81cc5b1e66503336247e9a75da12a1b2ca509f8"}}, &(0x7f00000007c0)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "743f1b22"}, @local=@item_4={0x3, 0x2, 0x7, "0b49980b"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x2, 0x0, 0xb, "5d9e"}, @main=@item_4={0x3, 0x0, 0xa, "9159a80f"}, @global=@item_012={0x1, 0x1, 0x0, 'q'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x1, 0x1, {0x22, 0xc96}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x40, 0xc, 0x9e, "12fd4823e804b27d63e39fb71e6fdfe72dbcc512693d286e54eb8dcacf2ef1232ea870eca1de1be0306045393aa6d0b0e54b645f31cadb3c84c7fb3e45df7f598d98f8c18b3093d0dda6c2671415ae8fdee172b0d7d8d7f14837d2bd3fa52c8a19439da3ee199614182c70aa615d744d21074f80d59d1e15cf1bc2be660bf27376e5d9b1f83dad825285b31b10236fb34e62dc022a0d047d18d6f4e13a65"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x1, 0xe8, "c7b04096b3f3467752900b8ca6e7e796a9632d6c6075f6d3ec3b75362df4849f70ffb45dd6dfaf9a5d8e21a3a8ed61940541ca12c016828e7938d66d6e5fb890774edbe573c569ac8191d93f3ee0b677bed184a904106e37495b0855d777a76cf37131b31b166d85e8d7a8984ab19dd7b76fd3dcd46fa073902c77879255a0a5f90459ff78401f12344f96122e9a26224f6be0dd0349e5390a25b0029dd23784bf1cbaabfff496f8d219196eee299c48a867cb0e23dd1d0e7617cee459e79a4ccbdc5d9450894cc03568646f28ca2bc74dcc35bfd1f37bd07dc740434662a02f0db73d5a04613f74"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xce}}) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x200a092, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e20, 0xe, @local, 0xffffff01}, 0x1c) (async) 23.456225826s ago: executing program 37 (id=860): r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xf0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x215}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x8, 0xa7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3d, 0x1, 0x1, 0x40, 0xf3}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfa, "8ede070200fd6bc2c617723931be4ed4"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000300)={0x0, 0xd, 0x93, {0x93, 0x2b, "2b10d5da44d46d73d81c249323a94028a4744a6af88ca63a02cc3cc890e56b0e966bf5faf741eeb0d645bdc66d393228c45aed6eda18f8a01ecd499ce3242b356612e5b9488fecae18aa8d0a53040832a6c7d5d5cb1236d0d0cf33715533b5e2cd55ede7a89b30f8b7e585073f4a737dd6d6f93fdf9c601d66fbd56da18549914767353493b93c2f416a6d379e3fdc9b21"}}, &(0x7f00000003c0)={0x0, 0x3, 0x89, @string={0x89, 0x3, "d37b0ceca9d11bd24f56fb598166f057e89dc9a4fbfbe0a82a732b9fe2c902c4c9e31e878e7bb44a350a52394464fb2ebdc3b61eeddeb0eae4cdacc2b2b4b2c81f471daf44bed2db3e1ba8954e0bb8b357775693d35f50a7358a23e7ab6b54d931ea127c13749559f752013b360535a1f40bd5c81cc5b1e66503336247e9a75da12a1b2ca509f8"}}, &(0x7f00000007c0)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "743f1b22"}, @local=@item_4={0x3, 0x2, 0x7, "0b49980b"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x2, 0x0, 0xb, "5d9e"}, @main=@item_4={0x3, 0x0, 0xa, "9159a80f"}, @global=@item_012={0x1, 0x1, 0x0, 'q'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x1, 0x1, {0x22, 0xc96}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x40, 0xc, 0x9e, "12fd4823e804b27d63e39fb71e6fdfe72dbcc512693d286e54eb8dcacf2ef1232ea870eca1de1be0306045393aa6d0b0e54b645f31cadb3c84c7fb3e45df7f598d98f8c18b3093d0dda6c2671415ae8fdee172b0d7d8d7f14837d2bd3fa52c8a19439da3ee199614182c70aa615d744d21074f80d59d1e15cf1bc2be660bf27376e5d9b1f83dad825285b31b10236fb34e62dc022a0d047d18d6f4e13a65"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x1, 0xe8, "c7b04096b3f3467752900b8ca6e7e796a9632d6c6075f6d3ec3b75362df4849f70ffb45dd6dfaf9a5d8e21a3a8ed61940541ca12c016828e7938d66d6e5fb890774edbe573c569ac8191d93f3ee0b677bed184a904106e37495b0855d777a76cf37131b31b166d85e8d7a8984ab19dd7b76fd3dcd46fa073902c77879255a0a5f90459ff78401f12344f96122e9a26224f6be0dd0349e5390a25b0029dd23784bf1cbaabfff496f8d219196eee299c48a867cb0e23dd1d0e7617cee459e79a4ccbdc5d9450894cc03568646f28ca2bc74dcc35bfd1f37bd07dc740434662a02f0db73d5a04613f74"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xce}}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x200a092, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e20, 0xe, @local, 0xffffff01}, 0x1c) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xf0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x215}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x8, 0xa7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3d, 0x1, 0x1, 0x40, 0xf3}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfa, "8ede070200fd6bc2c617723931be4ed4"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000300)={0x0, 0xd, 0x93, {0x93, 0x2b, "2b10d5da44d46d73d81c249323a94028a4744a6af88ca63a02cc3cc890e56b0e966bf5faf741eeb0d645bdc66d393228c45aed6eda18f8a01ecd499ce3242b356612e5b9488fecae18aa8d0a53040832a6c7d5d5cb1236d0d0cf33715533b5e2cd55ede7a89b30f8b7e585073f4a737dd6d6f93fdf9c601d66fbd56da18549914767353493b93c2f416a6d379e3fdc9b21"}}, &(0x7f00000003c0)={0x0, 0x3, 0x89, @string={0x89, 0x3, "d37b0ceca9d11bd24f56fb598166f057e89dc9a4fbfbe0a82a732b9fe2c902c4c9e31e878e7bb44a350a52394464fb2ebdc3b61eeddeb0eae4cdacc2b2b4b2c81f471daf44bed2db3e1ba8954e0bb8b357775693d35f50a7358a23e7ab6b54d931ea127c13749559f752013b360535a1f40bd5c81cc5b1e66503336247e9a75da12a1b2ca509f8"}}, &(0x7f00000007c0)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "743f1b22"}, @local=@item_4={0x3, 0x2, 0x7, "0b49980b"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x2, 0x0, 0xb, "5d9e"}, @main=@item_4={0x3, 0x0, 0xa, "9159a80f"}, @global=@item_012={0x1, 0x1, 0x0, 'q'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x1, 0x1, {0x22, 0xc96}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x40, 0xc, 0x9e, "12fd4823e804b27d63e39fb71e6fdfe72dbcc512693d286e54eb8dcacf2ef1232ea870eca1de1be0306045393aa6d0b0e54b645f31cadb3c84c7fb3e45df7f598d98f8c18b3093d0dda6c2671415ae8fdee172b0d7d8d7f14837d2bd3fa52c8a19439da3ee199614182c70aa615d744d21074f80d59d1e15cf1bc2be660bf27376e5d9b1f83dad825285b31b10236fb34e62dc022a0d047d18d6f4e13a65"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x1, 0xe8, "c7b04096b3f3467752900b8ca6e7e796a9632d6c6075f6d3ec3b75362df4849f70ffb45dd6dfaf9a5d8e21a3a8ed61940541ca12c016828e7938d66d6e5fb890774edbe573c569ac8191d93f3ee0b677bed184a904106e37495b0855d777a76cf37131b31b166d85e8d7a8984ab19dd7b76fd3dcd46fa073902c77879255a0a5f90459ff78401f12344f96122e9a26224f6be0dd0349e5390a25b0029dd23784bf1cbaabfff496f8d219196eee299c48a867cb0e23dd1d0e7617cee459e79a4ccbdc5d9450894cc03568646f28ca2bc74dcc35bfd1f37bd07dc740434662a02f0db73d5a04613f74"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xce}}) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x200a092, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e20, 0xe, @local, 0xffffff01}, 0x1c) (async) 6.947496305s ago: executing program 7 (id=1252): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x24008800) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4040800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioperm(0x1, 0x3, 0x163f) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES8=r1], 0x64}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001", @ANYRESHEX=r3], 0x38}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000140)={@private2}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r9, 0x0, 0x0) writev(r9, &(0x7f0000000480)=[{&(0x7f0000000200)="0a6f834eed38dc4def16f61c43a2fd878aa78dbd1f3081f45a0b7c92ae056015d18a83d59e759fb1e4254865fb7fc5837fb75ce3", 0x34}, {&(0x7f0000000240)="eedb5c7a4835b1578c7443afb32d26a4fe278713b0d07664b481192b98064901b3e3ed0a5b3c4963ab583a5918c2fd4d11371155fa52edc4ad68448f83b77245ecb4967353", 0x45}, {&(0x7f0000000340)="31157a6cdbc79d2013da3f31e26cfeeccf609cfb13d294b1cc0bb48bede8b6574526f2598ad1024d84aee4bd99499f83df28e0f8f3b653859688b7ee13826a2cdf36775aad628ebd17acad4d590f48bdf6bdd8a5429b6ce6983f4768137f5c8b6565cd77c5b8d470fb3c85d8e3bbb359002cf18a0ecd16e37ba2e3aba2f12f20156f5b9dc7a12ca4f0d4692af67ac0642efd4b5eaa160c3088176af134ce8c1e4dd976c98e031fd96f59f3205806aee2d689e9df1d", 0xb5}, {&(0x7f0000000400)="bc6ec68606bafaf1abcc30b0b99be8a022d356a5e4563ecb7a1ad5c87f6e41536998fc4b2e4889655d4e2254ddd50ed78c74be0a02551d9794b059e231642f2a501c4d6a9fdf0d84eb4725709ac24fa4881f5f3f56b68dfa74", 0x59}], 0x4) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3, 0x13, r0, 0x85b83000) 6.895871876s ago: executing program 7 (id=1253): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xb, 0x6, "0d98f14f74a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="4013b9"], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) unshare(0x22020600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, 0x2a, 0xa01, 0x0, 0x0, {0x1e}, [@typed={0xe, 0x3, 0x0, 0x0, @binary="84067d13fbbcd3547fe5"}]}, 0x24}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r3, 0x4068aea3, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.870569545s ago: executing program 7 (id=1310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, 0x0, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) ioctl$TCXONC(r4, 0x540a, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 3.863222985s ago: executing program 7 (id=1311): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x608a01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)='workdir', 0x7, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000004a00)) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000003c0)=0x43df, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 2.847559064s ago: executing program 7 (id=1319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x60100) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000400)) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x3f877817, 0x2f82) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000001c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f00000004c0)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x7) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dff", 0xd, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) (async) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x6], 0x80a0000, 0x2010d3}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) 2.783557275s ago: executing program 7 (id=1320): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080000000000000000020740000000000c000f800800014000000000"], 0x70}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 1.248668765s ago: executing program 9 (id=1335): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') getdents64(r0, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000840)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000740)=0xc00) (async, rerun: 64) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40, 0x22, 0x8}, 0x18) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0x2d, 0x4, 0x27}) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xfe6c) fchown(r1, r6, r7) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000480)=[@request_death={0x400c630e, 0x2}, @free_buffer], 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) (async, rerun: 32) keyctl$clear(0x7, 0x0) (rerun: 32) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r8, &(0x7f0000000200), r10, 0x0, 0x808, 0x0) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x114008c, &(0x7f00000003c0)={[{@noprefix}, {@subsystem='net_prio'}, {@favordynmods}, {}, {@xattr}, {@subsystem='memory'}, {@noprefix}, {@subsystem='devices'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@name={'name', 0x3d, '\'+\\%(.*$]\']'}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@seclabel}, {@euid_lt={'euid<', r6}}, {@subj_type={'subj_type', 0x3d, '#'}}]}) (async, rerun: 32) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) (rerun: 32) readlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000880)=""/232, 0xe8) ioctl$TUNGETVNETHDRSZ(r12, 0x5452, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_SURVEY(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRES8=r7, @ANYRES32=r9, @ANYBLOB="9c1050b5145ef1148e1a619c81e8156fdc79f82d0482083fb1645c29f1ae09aaba28a46d1f4c0afd8b0824e89321d342cc38dbc619acfcabf3af55ccfb57d90751e7ccad8510bf09996600adaa3be1d81c97a4c3631f5eeeabd8eb9c778a611f3554a950ba4226177c3b1b4fa0690b9cca0e6df712380d1abe68701e5b11c52e54e8d6cad7cf5931e2b764b02d4474c783b7f043d044c500e98be1bc9252f873504f2ae3900344636b32407fc1636d11c121fa595816aa644226d99bd9c487185800bf991873268bac", @ANYRES64=r5, @ANYRESHEX=r6], 0x1c}}, 0x4004050) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x20000084) 1.176923556s ago: executing program 9 (id=1336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) readlinkat(r2, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000400)=""/158, 0x9e) r3 = syz_open_dev$loop(&(0x7f00000004c0), 0x8, 0x4000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r2, 0xd54f, {0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x12, 0x1c, 0x10, "479819c9e84944d9ef87eeec7c2380480cd473dcdb4cf693e3f061a96e189920549ba2365a16ebc8105b367149694f53ad70c80044ebe221d85c297398fe5e77", "369198d51e594843b3704dad71ffa203fc9c778a70f437a9581253e7e38d3eae5ba7dd11b7f21156027f5ba57ff905324c1e14d9f12faaf167f6cffe3d27cffb", "a57c1c984fc6e974865f7c2c3eec7964150c0ec4decd118f6f340389629b5bee", [0x8, 0x5]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1aa4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x643}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3d}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 1.166406337s ago: executing program 9 (id=1337): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa0, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24004004}, 0x1) pread64(r0, &(0x7f0000000040), 0x0, 0x0) 1.119332358s ago: executing program 9 (id=1338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) read$hiddev(r2, 0x0, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) flistxattr(r3, &(0x7f0000000200)=""/109, 0x6d) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x40}, {0x94, 0x5}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000480)=0x1e) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x400042, 0x1, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044801) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}]}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'xfrm0\x00', 0x0}) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r10, 0x0, 0x0, 0x8800, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r10, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0) sendto$inet(r10, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) sendto$packet(r8, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r9, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) write$tun(r4, &(0x7f0000001940)={@val={0x0, 0x6000}, @void, @ipv6=@udp={0x2, 0x6, "9c028b", 0x220c, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @empty, {[@fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x67}, @fragment={0x2b, 0x0, 0xfc, 0x1, 0x0, 0x1b, 0x66}, @fragment={0x6c, 0x0, 0x8, 0x0, 0x0, 0x11, 0x64}, @srh={0x2f, 0xa, 0x4, 0x5, 0x0, 0x50, 0x4, [@empty, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @loopback, @private1]}, @hopopts={0xff, 0x441, '\x00', [@generic={0x5, 0x56, "0e5f84e584666fc3ca164f17fdf24c2e754aa944c163f408ccf077408d80dbbb67bbcbcb3904fb7861277b02608c47f9096705174721b61c75308373f93eb9cce950fb09759f161185fa3272c5458ee3c6ea17ebfb2a"}, @generic={0x4, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast1}, @generic={0x7f, 0x1000, "1f017b2bf4f765f31bd35d1565849d5656d744f39dc5e684f8ffc032b3edb9a6df09663fb2bec9911f79912d026d24bac1d2f2e68c53e2e2f7de180ddcb9f4155c2a148f778c7181cbc77e06345b3eeb5ffe948452785ff2c9b4727dfeab06638162bd12a5657f7081bc1700b3eaade995fa51a9ff3e46587eb5030684670f56e496e77425339e313f81989efcb776729dd389599e6d5ec29eef004417bb99e82238bf6df77d368ba330adf6fbdd8523bcf9c8751cad9dd68c2696edee3b6d69b54c2199c11210c49d4ae02af324466c865dda350034f58ae2af1c156220e6d038370cec1c9aa604c19ed5b99496b1b6732c516efaa721c5a9b51d83be0d94301077db9aa9f7f7278f7e27ffea9e6da25af0ec1c551ea299f550f57aa48ca4a4d2ddeae94fda55ee7087e5c3acf6bacb71730bf430e2cdaf1fed28ad4a6a08554d71628ac8ed8cad539fa453e346a958c206d738064c1cc7b83c91c8d0fc5e1c5225a1b207fd6527b885049446908479e7ec59f056316ab972b554305fc8e3e4c88c26beb0711a15f1232e6d22866c417b366a27ad29e72134a17c9a014ffad55548ad19ed8d8b25c37358fdae0ecc1b76bd7efb331ea2a0a83c1190f78e1113dc05f57c14c0276952b6fc8cf94e63ebf86a2dba9e2f56b2950e7293bc64b9112d947e1014ec30743aeec6926e1ebb65fde8f211ff49bd03436de8bb8aaec7ab0d8363f7f99d5a31ae138397f5fb5e15820f941fa7e2e2f3e8a5142ef135974a972da17075dac6377951ebd098b332da37d260dc3601222ece12a2f1a3805de2d5b260dabd12252b1c5f750c43f17f9664ddc4e8be91a162a3a8203425b609c8593d32cc2f6c3f389b1651f64c6d52b4f397193e78ee815e2778b8b781ff3763824e2b0baf20c38a3203e2579e8382a4b7ba72b212925412f409300b27169cc86b90c6e2b41fabb3e9b3a7b1f6403b5ad4eacc00924c8054d936f057a8b4714e7e33d02460b28e235dbf3dc47aa577a60d2daff5bb5a19a61e55bc81f309a54882dfde52ee3c6096342dad6f4b33d757e5b6ee1d7d72aece643a33de4d0707de9dbd56e98e36d56134f063e3980fd284a4d6f980a59673e658450172d363651361a3a95631b8a67f3dc9cf075238a21da87262a1a56a64a9e696674df07f846a1243be7c76dc06e4cda3cb37885536d00f27205b81dfd8cfe139e3331ad722900e3f776ee0b6b830e1cba80ad2935964b9465a87ead10534889090f682f0122492dd806819cedcf2e60c3c64ae3ccba9d78d425ced7ccfe2775bb12dc1a6d9d01619453b9f9e40a7b2995d1451d06e5fcf43c8cd2ed0e763ef7a7b78ae555c8e7f759dd4fdf77438dadeca36e72c2e593ad7232755cb6b00d8b1f09c8c5d8a3f3333ec6067d5700ac94dc3de075f4a207fed078c7bd55e9538b0c8afbe45082da092d0dbab08987241bd37e1ec1a237d9b1bb88a0831d77d9e45805b71a923ae8a9a520d41ccffc59d54d1fbc1364f5e7e8e5d4785886a3b8eb05d8c6c0c49cfb22682778ed5df9e97ac28d56cace482530454bec634e04952b65f56e64f004454721f19f8dc1187e264d1d92e79eca4a0a35e1f50c2a9a1d6f5fa9a3f6addf1915bb7cf61b1087f85736028a9b4cb49f7f2b9b76a3bfcaa0489fedfe40b1fa15b3867006f13a8eb41ed68f41f413d3daddb0203cc4101e350d2cd83cb5b99c89d020ff7396e0982794171c8e5000a4f2599b315c27f569bb192964c351f90b0a866e2d24718559e04bb088e1f0f0241faa6e6fef2bbe86514fa59eaf5a428b6b145cfbbab26894748e062beeffaa0dc176c9362282b5d72a83114df965e69a1b06c3f193c9654343cdb0afb01e95030dc39900e685a731e1a59d5c405667ed13d5ce04c84e61e9e683c1fa8bf43632e86a144ffe93da343d8cb8a76dd748b813fa9eee3f49b95153ab599f865b8d3a51b4df2c4b06bc269cce4d6a43d948d4e4749f98fd7f642e76ba5fd4dd2e1888563f3fd5c39c65bef15edc151a72e1fdd8cb56f30947020ca4ed0c186341bdb2ec87c93e9e047e38925252083cc41d14b7d2449e2ba8572e3aff8dda01624bf530ef789fac93fa391130a37f3b8f8259c2da501cce39f713ca7edf7448801c8683eeac2d04f17fbcdf9b5e9c934f9df185a3fe1869d32629afe710eaabb6403f7f97a13fe8c928a79c2c45810144c882051b441905a9c6437507268fc0cc4b8a478d49395e4a8972de52c7796598b288464c899f7e4d8653c6cde38dd244f87fdbe45e95c21e27b564f30ebdeeec77003c1567def0882afe50010ac779100f1269df834f714cb18345bba110ba289675d3f6d5a3491b03160be9ddf97da8cf20bdda5907f184232d198c83169591cb13bace56a8b311964f29b3ec22efe8bb072e2e173356574ba7380ad26a7d534602fa0e7968bc5f1cfc6eef6fe4ffcb8e671efdb4499a5642648d8a9931d0af41651aec6c6ebacd2be29057332e1a884411c8ee75d6c08e04976c5a6ccdb50a7a223a0a6eb32e3f8023cba61a9080a72378cf35c43aec79e16b26ccbf5da06552ca0f908724c6c951504ba338c3d111e9badb905ca0410b03715c9e7bf9d1b9d75600b5ba7daad39469ce8edba97a65bcd232a4bc78cb3cc3e7936c5c92e824c0638438e009483aa2ac436b2efdbd88ea3887054b9a51a65f4571715f042d6fba2a293dd11708e6900540f65b512f4f2ba4397d07bc28e04ce4cb99462e4fe595e3068bef1156536e09a0db870f1adbd4a37dcf0e554c8d55c3dbd26b59fa2890cf01cd1c568d0fb8af4291aa58c60a9da7b7d93ac46f7885b9baac59a3ce38a072ebae96b1b90e74b92eed5f665fe927a7945ab2200b107c1d416c7c5d910c761ced1fd18f1dd29aa9747862c01f72cd56b9f3490cb7ac6822862dbe4764adcbeb4b13d3ffd333981c6ab496b0cffc5a83b9883033b8c0f27280ef227453536bac953bbd2aea381ecdf02c02c479ee306b44bce2bf7f2a8074051d1b7ef91857428620bd164bf15663ceb457084928643ffb2578d8c270d24ec888ec2032761aff53db2e513427f9c45ca7f11fd078e9f1a772672f6192596e58187fc0f9e1d771e0c30c85f9bf3403a2af272863485571d75511a13f7e18d30cbf9965fb81ec10c8d5ae0edd778bb5d4d6a9e46a094b0a9e950c8d934e82fe5af3a254715c80719e9d7c73df628e81939895d75c8d695e4d44b68835dc2b8e45b203f5081b0cd275faf37541916fa5d12d8f5c465c03a44b045337d66979c2b456e2e0136585c765335bf56bd498c711f612be12f304dad90f5d6e4625a825a6f3e667600151757015e6eaf0e4a392c9c40d4cfc9775248b1b027db8fedf8b285cf9c7cef4107a75a36000ef0f5e5c1a2fbdac262c8116884a6b99903d5c8d208e02076dabf263d0825a3f9213d11de2015ccd321c30e68fa07b7f5c37995652c891d2d9a7cefaa751e01203060c17fd33c1ea26a6b40a16ad3bc7b2cd96c7700f320f4d33abd9bab75e69ebe22a5c4e2bbd46fee5ca632614700fb52cbd0d3723dac744142364387fbc15643343d3e4a654d1a3acf0b9eea659a5642c574a2ae9c6e5bcf2606fda3c660cdba3e5dc69ccb11ec0ecce7aa184504002a7653b884c778974d72b1571575ae0378f08cc545eafb8fab10d3d909ff7cb6de18e53736ba9d0f6b365f0896fb1167ccaeec703066a465087b8f5c03245e20b6cf1f4ff4611ae4972b462446c9a104053a853f39b1d194a8c4aca6dbea017ad5721d489d8671249e207dc3a5c4a3edd2859c741c74ec1f3c83fabfc00b602f0949651fd1475b020adb8d6124cdb65b77b059982659d1bc10a1303a79a016f3c937a013518b2cb027de93a3ad3b377b91921658bd7078b37a163a70f238020eabe20e2e52a4bffcd09d51e3e5465a427aef119a52843ab303e15dae6af9f1db7cda1abfc54774eb38b1ee17cfb2c5354a83009f952022a2e026437b4fbeda58ae476e29bf332bca0acfd97504f832dc78e6d3a122220d192cfe1c9aa8de4fe3eca7d63c006b311157b22abcb0d13d73dfc7321fc0943065e5011b3354ff7f6f298592479170b62615d6a2ee0c3a787836b12d3127ea2680a5d26ff66a7946089ca165caae67b307ec043b00dc9a41bec361e43ca9c868a055ecce0db87ca8064755df0bb383eaed3453dafc1d2fbb6e7a42760160a516257a5c243e124ca845486f62de67c3d6c0fd18488b7079af06e8aff9420f2c4d8e783947184967d43b515a651e38dde65372a15442959632244bbdc12f441f78e0bfdf064ceb9c3b1ebc0f553e2470b1d530f28cd3cd6c1a213b3e5aedfbe4e9df57785258eb8c2df10fb6fa0093b614f5dd9ec2eff1355c987a540b51e494a21926b1023abc04f385a748b946dfcf974f5c6242a395693592172ae620a14d856ce1625114224b277f38536ae0bb2fefff8cebffbefab5cd39ad874b2e13a25cc4f3fd80ba34103aa3ee8a69b1f8a08274f25729856b197dbff82867aab5a9f75e18bfde45ff58511fd7a9991bf746d7d4d7b4f56508cae375b433c5107157e9f368c4afdd207c4f713e99926a637b8aae50c0816b07b350ad80ceaf9c9039577f85aabf237672f3847906f796c98050ecaff5fcecdded54a7c0edce819225fc22d66d60144ef6c63c6db1dc92769f2282bc4c402a19a2f7b3ce15a77b97f52cc277602c0574e35fe359db51ab79279411bdeb1bff942208be83250fb8700b6a8f0c180fb428f343077b89825ef5a39073b67795e78116466d74b9e30bca1a839a31b911ac9c8745b26d32e9ac681539be1dcf7a20c6e781720239f3ff00ddd2d026d0674e7cd40e7b801cb00b613e6c6794cc7284b266ecb389c22b8cd306b9ae720ef1d264bbfc6966ce646815e7ba4e11427c8e163dcc30e709c859af27acbcd5f2e84a6488390dfa467b5680287effc90ab3bb1898f486236bcbb95489fb2f80c0b6ece44ebbec4fe5995e0343414383c0aa9bbeb730b7e65d43a05e3121a6d97d02b56985f39bfca0f982057d123176b0697d440965417fe3b23d378dc49cdfe18a5376c2e8402231f40f3e6db52adabfec9d7f24e94893521e60d7c7b50d4b05046566695e5a19e8444795575edc30615ba44a5b178fc43cb8c77e6e844f53bdc48183bd34037dc9f7077c7cf0b38dbd8dde18b7a880f0c720e49051f49136702865adf4d89028fd3a86b615d3af6ee8c05883d86d88d08c6d94a00458921996072f88a5eb94fc42080a5b6b561511b4b1873b994d14934def06b59b539bb162579ed93ebc058451e983899f2638a8d4b1e3ff31c1e79446748ff9dded71fc49c4e7cc533ce3108c1dc45ad6fded86aa462205620db415b7904e07faa159036105aaf40fd707607f783ae73605f95acfe30b7f4cfaa7cfc2b06bdaee707af6258e89fa947ba4db114d16b8c13b155d604c9106c76f680fd2cd844896ec3bd599e3620f73a8634e8ae8e7e128b3650248f2e152ba101e48e86ad76d927a35499175a99b10988540a1cf2f66a0f0419c94e8dd247b70031924458efda93e6714b9c301c1789b015c4273990c2563b27d526fbd88b5b35cb638b6ab9220a4e0c77e9ce84bc7e0e81253ea633830780f0aaf7e8846cf13604ddf4ed324de0587cf22614e0e814cbb467df9571cef59706b2b831e865ab0bf3e7751ea615b704c090f222eb70dad42034451d6cd6545813e6fce774eb906c5a53c18f0cb138470fb787caadd01cc73837a1fa635c249b39c7ff01b"}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x50, {0x1, 0x12, 0x3, 0x2, [0x0, 0x4a, 0x4, 0x3, 0x1e, 0x3, 0x800, 0x8000, 0x7]}}]}], {0x4e24, 0x4e23, 0xc4, 0x0, @gue={{0x2, 0x0, 0x2, 0xe7, 0x100, @val=0x80}, "830261fb026253435ee3abda9093ee1ec700d469fc69f611818d9b463bc526246a1c98e0e30193348eb948fcb39ea479cb7b2ad5f50b60277d8eb5e099046d44a2d17128b2927095cbc00e2035dfecfb7faf0c167658bc9b7e2cb0ba04132c235d3eab49e6d11a30f9561037a68ba2b210e869ce79713d508051ff1d430d39eafcc1169507f14af8dcf5d2b0845984a894df5b9ada1d0ea636920083f14db248d9dfa21b0bdfd366270a40eccfc9e2435e6c4087"}}}}}, 0x2238) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x1}, @release={0x40046306, 0x1}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/215, 0xd7, 0x0, 0x2e}, @flat=@weak_binder={0x77622a85, 0x1000}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1.084804518s ago: executing program 8 (id=1341): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10c) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2000860, &(0x7f0000000200)=ANY=[]) 1.072952209s ago: executing program 8 (id=1342): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000040)={0x201, 0x180, 0x340, &(0x7f00000002c0)=[0x10, 0x6, 0x9, 0x2, 0x0, 0x7fff, 0x3, 0xfffffffffffffffb, 0x2, 0xae42, 0x9, 0x6, 0x2, 0x6, 0xffffffffffffffff, 0x9, 0x8, 0x8, 0x5, 0x3, 0x9, 0x8, 0x40, 0x1000, 0x2, 0x9, 0xb395728, 0x8000000000000000, 0x7, 0x79e, 0x4, 0x2, 0x0, 0x9, 0x10, 0x3ff, 0x4, 0x2, 0xa, 0xd, 0x7, 0x2, 0x80, 0xc5, 0x8, 0x2, 0x2, 0x2, 0x9, 0xf24, 0x9, 0xfff, 0x80000000, 0x3, 0x4e, 0xffffffffffffffff, 0xffff, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x8000000000000001, 0x40, 0x7, 0x40, 0x9, 0x1, 0xffffffff, 0x83, 0x6, 0x9, 0x4, 0x0, 0x3, 0x8, 0x7, 0x7, 0xfffffffffffffffc, 0x4, 0x8001, 0x8000000000000000, 0x800, 0x9d16, 0x3, 0x8, 0x400, 0x2, 0x4, 0x4, 0xefd, 0x4, 0x0, 0x8000000000000000, 0x3, 0x7, 0xff, 0x9, 0x2, 0x9, 0x8, 0x7, 0x5, 0x2, 0x7ff, 0x393c, 0x8, 0x5, 0x8001, 0xffffffff, 0x1, 0x6, 0x200, 0xc, 0xc, 0x3c5e, 0x4, 0x3784, 0xfff, 0xe, 0x8, 0x40, 0x7, 0x3, 0xfffffffffffffffa, 0x80000001, 0xfffffffffffffffc, 0x8, 0x2257, 0x4, 0x431]}) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket(0x3d, 0x4, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) socket(0x1e, 0x4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 947.513001ms ago: executing program 8 (id=1343): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x48400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000800000000000001a0a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001d00140000000000000000000a0010000100000079040000e45e8eab1f2cb1ea6b82620198d7866aeb7769f826e5543c876b31f168d339d2cffe8b5c087809f69ffa48888d0e562f78e3da121659ecf18dad413703c7097425ebb2487f57651f627ea48dfd0918b0ef407cb5536745ca52b51f86332bceedb0163ec85955e8c2563f0000001402775e22aa26633e2724ece7c10e998768ff9be1081b1fda215dd7797d551286acafcb322ac41022d986adc9cd836388e2a7f276f7c73599f736c35a9c7959ff04f3a74f1cb595dbdacdaff1d2ddad9d20"], 0x1c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) dup(0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000002c0)={0x100, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 946.972871ms ago: executing program 8 (id=1344): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) pipe(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0xfffffff7, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x42ebfee3, 0x8) (async) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x42ebfee3, 0x8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) getpid() (async) getpid() r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r4, 0x7800, 0x10, 0x1, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xfffd}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r4, 0x7800, 0x10, 0x1, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xfffd}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) read(r0, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r7, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000180)=0xff) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2778) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x12, r8, 0x44da2000) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') ftruncate(r9, 0x2) (async) ftruncate(r9, 0x2) clock_gettime(0x0, &(0x7f0000000780)) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000700), 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/113, 0x71}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f00000002c0)=""/144, 0x90}], 0x3}, 0x1c0000}, {{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000880)=""/119, 0x77}, {&(0x7f0000000800)=""/42, 0x2a}], 0x4, &(0x7f00000004c0)=""/119, 0x77}, 0x4}], 0x2, 0x10001, &(0x7f00000007c0)={0x0, 0x989680}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000700), 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/113, 0x71}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f00000002c0)=""/144, 0x90}], 0x3}, 0x1c0000}, {{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000880)=""/119, 0x77}, {&(0x7f0000000800)=""/42, 0x2a}], 0x4, &(0x7f00000004c0)=""/119, 0x77}, 0x4}], 0x2, 0x10001, &(0x7f00000007c0)={0x0, 0x989680}) ioctl$VHOST_VDPA_GET_VRING_NUM(r9, 0x8002af76, &(0x7f0000000000)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r9, 0x8002af76, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x81, 0xfffe, 0x4}) (async) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x81, 0xfffe, 0x4}) 866.218643ms ago: executing program 8 (id=1345): socket(0x17, 0x3, 0xfb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000100)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x128) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x80}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x128, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa1, 0xa8, @random="f0d5e5595bd3b236be22f674fea9fa376f8bf7eef185ed947773daabf693cbe35f6a172755d3ccbb883516923e1a5e208a7b609b6a3650edd1ce4a3c4bf79364e02ed1ebd35f07ca5880a881c0c543d3e84a5d985210d4b550064ca51bfbe16ed069a2afd424241d66f46ad13f58c815f66d478473cade81bab796ae559418ab25f8c857924f1156b216bdc4fa5e9001f57b5fb95b75ca39590ef98a4b"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x20}, 0x40000) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 828.731363ms ago: executing program 8 (id=1346): syz_open_dev$hidraw(0x0, 0x80000001, 0x410480) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x65, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x7f, 0xea, 0xd2, 0x8, 0x1d2a, 0x801, 0x72c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x8, 0x60, 0x80, 0x64, [{{0x9, 0x4, 0x70, 0xf, 0x5, 0x7b, 0x6, 0x72, 0xf7, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x49, 0x1}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x6, 0x7, 0x0, [@generic={0x9, 0x4, "7016158ef74fc4"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x2, 0x9, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x7}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x3ff, 0x9, 0x90, 0x7}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xc, 0x3, 0x67, [@generic={0x4, 0x9, "63f6"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0x1, 0x40, 0x40, 0x86}, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="050f05e400"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x20000000) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000003580)=""/4094, 0xffe}], 0x5, 0x0, 0x63}, 0xffffdffe}], 0x400000000000343, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 512.42807ms ago: executing program 5 (id=1347): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x58, 0x0, &(0x7f0000000980)=[@decrefs={0x40046307, 0x1}, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@fda={0x66646185, 0x4, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/229, 0xe5, 0x0, 0x14}, @fda={0x66646185, 0x2, 0x2, 0xb}}, 0x0}}], 0x50, 0x0, &(0x7f0000000ac0)="1f2776936936fa5e7e71621d79366ec2be42bf47a2dece7dd37ec1093fe28daf62a8f07cae954e42f522e0fcf63c92ab70f48cd2fe35701cfa50c0b1195ca5e9f3eff8eb4797d7522ca35cd769228f98"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x58, 0x0, &(0x7f0000000980)=[@decrefs={0x40046307, 0x1}, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x0, &(0x7f00000006c0)={@fda={0x66646185, 0x4, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/229, 0xe5, 0x0, 0x14}, @fda={0x66646185, 0x2, 0x2, 0xb}}, 0x0}}], 0x50, 0x0, &(0x7f0000000ac0)="1f2776936936fa5e7e71621d79366ec2be42bf47a2dece7dd37ec1093fe28daf62a8f07cae954e42f522e0fcf63c92ab70f48cd2fe35701cfa50c0b1195ca5e9f3eff8eb4797d7522ca35cd769228f98"}) (async) 511.91896ms ago: executing program 5 (id=1348): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000001c0)=[@register_looper, @decrefs={0x40046307, 0x1}, @register_looper, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 511.38ms ago: executing program 5 (id=1349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0xc, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e9"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 511.221419ms ago: executing program 5 (id=1350): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) 510.1652ms ago: executing program 5 (id=1351): syz_usb_connect(0x2, 0x34, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x5e, 0xb9, 0xc4, 0x8, 0x1f38, 0x1, 0x9f80, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x1, 0x7, 0x80, 0x4, [{{0x9, 0x4, 0xb9, 0x8, 0x1, 0xb6, 0x5e, 0x6c, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xf2, 0x9, 0x1002}]}], [{{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x0, 0xfd, 0x7}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}}) syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x2008040) r3 = getpgrp(0x0) r4 = gettid() r5 = socket(0x1e, 0x1, 0x0) shutdown(r5, 0x2) kcmp(r3, r4, 0x7ffffffe, 0xffffffffffffffff, 0xffffffffffffffff) write(r0, &(0x7f0000000400)="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", 0x1f000) 259.719444ms ago: executing program 9 (id=1352): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000ef000/0x1000)=nil, 0x1000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f00000ef000/0x1000)=nil, 0x1000, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) (async) 254.647074ms ago: executing program 9 (id=1353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="240000002800010023bd700000000500100000000c00000000000001200032"], 0x24}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0x7, {0x7, 0xd, "db2dc7b9ae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = socket(0x4, 0x80000, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="426c6f675f77616b6575705f636e743d303030303030303030303030303030302c726c6f675f70616765733d30303030303030303030303030303030303030352c0000000000ed952df17de772357bb2354e5b5e7e2a7288e3088540e1b40a1718346b53b3ee20acb24041a7fadf5e708f6f77c626c24e77497d67d8c66cf68ac7a93ba8c05fe4eb6b3b3fa74d528e54b5d82431de396efe13806fef41360884fb14b8f3c1fb44eda13066adddc3b36e7c45e01c96098af4fae60a15ef"]) mknodat$loop(r5, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000240)='./file1\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280), &(0x7f0000000380)=0xc) 0s ago: executing program 5 (id=1354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x80000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="f010a398168bbf", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="cd09c3", 0x3}], 0x1, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x2, 0x14008094) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x06\x00\x00\x13\x1f\x00x\x92\x12\xac\x06^\xbewV\xf7\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xc7\xc6\x81O\xde\xca\xa5\x16\x98\x81\xb5:\xb0\xcb{\xb0\x06\x00\x00\x00Q\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17\x83\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4c \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99\xf2\xbd\xc7\xc9_\x19\x92\xea\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11j\xee\x12R\x19\xae\x1c\xbb\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8f\xa2ly\x17\\\xaf\xac\x9d\x12\xc5\x1dC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\x84\xd9|&\xf8\x8e\x03\xa9\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfT\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd\n/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\x82\x92B\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xf7\af\xcc/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}h\xfd\x00\xc8~\x10\x04\x0fur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x14\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xec\xe9\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b_[D~\x00\x00\x00\x00\x00\x00\x00es\x9a\xcd\xd0*~G\'\x16\x97\a},\x9e\xa7\x90/3\xa2$\xa9\xddC\xda\x81V\xd9\xbf\xdb\x8d\xb0E\xac\n\x1f\xe3(u\xa1I\xc2\xee\x9a,\xb7\x82\x05`%hv\r^\xa5iZI\xfe\xb5B\bd3 \t\x0e\xc5Y\x04ko\xf3\xd1l\xf2\a\xf5_\xc6~\x03~\x018\x17\xdc\x9b\xee\xfeF1\xadF6!\xe0\x15]\x85\x7f\xecF\xa9\xb5S\xb6X\x00\x00\x00\x00\x00\x001\v\x91\x81\xdfub\x04\xd0\xcd\x97\xe6c\xbc\xc1A2!\xa8h\xc7\x97&\x92\xcfT\xc4\a\xef\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x001\xf7\xf8\xa1\xadXA\xb9\xb6\xe2V`\x80\xdb\xce\x1d/\x9fl\xa4\xa8O\x15\x01\x00\x00\x00\x1b\x15\x85\xe5v\x91\xdd\x13e\xbfo\b\xbc\xde\xcdXR\xe0\xa78U\xc5|\x9bH\x99v\b\xebm\xab\xf9/ \xa7\xaf\xb5$\xb4\xdc\xb4\x8e\x19\x92>\x93tSI\xf7;c\xdc\x82T\xc3\xd9\x95\x02\xbc\xc8\x82\xf4\xa9S\x80\xa9\xbe\x1e#1\x12\xe3\xc7\xaa\x97\xcb\x952\x1d\xf3=#\xd99\xbc\r8\xa76\t\xc8!/!\xe2\xb5\xd5\xd1\xe7\xb9\xad`\xc9\xc0b\x96\xc7\xce\xebb\x85\xc9\xaa\x95M@\x8f\a\x80\xe2\xa7\x01-cF\x11\xfb\xf3') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=182432,\x00'/33]) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): "incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.141602][ T13] bridge_slave_1: left allmulticast mode [ 51.147421][ T13] bridge_slave_1: left promiscuous mode [ 51.153299][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.161032][ T13] bridge_slave_0: left allmulticast mode [ 51.166722][ T13] bridge_slave_0: left promiscuous mode [ 51.172460][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.265608][ T36] audit: type=1400 audit(1756982086.694:289): avc: denied { mounton } for pid=997 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.281167][ T329] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 51.310253][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.312921][ T329] usb 4-1: device descriptor read/8, error -71 [ 51.317442][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.330706][ T997] bridge_slave_0: entered allmulticast mode [ 51.336915][ T997] bridge_slave_0: entered promiscuous mode [ 51.343153][ T13] tipc: Left network mode [ 51.347766][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.354887][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.362029][ T997] bridge_slave_1: entered allmulticast mode [ 51.368339][ T997] bridge_slave_1: entered promiscuous mode [ 51.375625][ T13] veth1_macvtap: left promiscuous mode [ 51.381271][ T13] veth0_vlan: left promiscuous mode [ 51.462684][ T329] usb 4-1: device descriptor read/8, error -71 [ 51.465967][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.475887][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.483168][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.490193][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.513110][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.520931][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.529986][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.537040][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.545691][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.552741][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.576788][ T997] veth0_vlan: entered promiscuous mode [ 51.586802][ T997] veth1_macvtap: entered promiscuous mode [ 51.640582][ T1015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 51.640612][ T1015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:6 [ 51.692544][ T1019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3484950563 (55759209008 ns) > initial count (50642361344 ns). Using initial count to start timer. [ 51.730174][ T329] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.731138][ T1019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.737990][ T1019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 51.761168][ T329] usb 4-1: device descriptor read/8, error -71 [ 51.897689][ T1026] Zero length message leads to an empty skb [ 51.911343][ T329] usb 4-1: device descriptor read/8, error -71 [ 52.030537][ T329] usb usb4-port1: unable to enumerate USB device [ 52.052599][ T1046] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.696375][ T1073] tipc: Started in network mode [ 52.701313][ T1073] tipc: Node identity 9607fe397e2f, cluster identity 4711 [ 52.708521][ T1073] tipc: Enabled bearer , priority 0 [ 52.715668][ T1073] syzkaller0: entered promiscuous mode [ 52.721145][ T1073] syzkaller0: entered allmulticast mode [ 52.728094][ T1073] tipc: Resetting bearer [ 52.735032][ T1073] tipc: Disabling bearer [ 52.817600][ T1084] netlink: 393 bytes leftover after parsing attributes in process `syz.3.244'. [ 52.896789][ T1095] netlink: 'syz.2.248': attribute type 16 has an invalid length. [ 52.904558][ T1095] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.248'. [ 53.120151][ T31] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 53.205172][ T394] cdc_ncm 1-1:1.0: bind() failure [ 53.216475][ T394] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 53.223318][ T394] cdc_ncm 1-1:1.1: bind() failure [ 53.229277][ T394] usb 1-1: USB disconnect, device number 7 [ 53.271222][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 53.279938][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.290040][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.304955][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.305633][ T1127] netlink: 'syz.0.260': attribute type 4 has an invalid length. [ 53.314061][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.330401][ T31] usb 5-1: Product: syz [ 53.334589][ T31] usb 5-1: Manufacturer: syz [ 53.340159][ T31] usb 5-1: SerialNumber: syz [ 53.357077][ T1134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.357220][ T1134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.363726][ T1134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 53.454199][ T1139] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 53.750495][ T31] usb 5-1: 0:2 : does not exist [ 54.260184][ T402] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 54.351972][ T1091] rust_binder: Error while translating object. [ 54.352000][ T1091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.358182][ T1091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 54.372062][ T31] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 54.390197][ T402] usb 4-1: device descriptor read/64, error -71 [ 54.402491][ T31] usb 5-1: USB disconnect, device number 2 [ 54.408489][ T1157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.520366][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 54.520382][ T36] audit: type=1400 audit(1756982089.944:300): avc: denied { getopt } for pid=1165 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.521050][ T1166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.526993][ T36] audit: type=1400 audit(1756982089.954:301): avc: denied { append } for pid=1165 comm="syz.0.273" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.636947][ T1175] rust_binder: Write failure EFAULT in pid:145 [ 54.650171][ T402] usb 4-1: device descriptor read/64, error -71 [ 54.896879][ T1188] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.904610][ T402] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 54.919738][ T1190] fuse: Bad value for 'group_id' [ 54.924722][ T1190] fuse: Bad value for 'group_id' [ 55.040557][ T402] usb 4-1: device descriptor read/64, error -71 [ 55.280215][ T402] usb 4-1: device descriptor read/64, error -71 [ 55.390231][ T402] usb usb4-port1: attempt power cycle [ 55.730168][ T394] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 55.737736][ T402] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 55.761157][ T402] usb 4-1: device descriptor read/8, error -71 [ 55.829242][ T1210] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.287'. [ 55.839923][ T36] audit: type=1400 audit(1756982091.264:302): avc: denied { read } for pid=1209 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.891278][ T402] usb 4-1: device descriptor read/8, error -71 [ 55.901381][ T394] usb 1-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config [ 55.911683][ T394] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 55.922571][ T394] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 55.936449][ T394] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.945530][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.953551][ T394] usb 1-1: SerialNumber: syz [ 55.959858][ T394] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 55.967750][ T394] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 55.974216][ T394] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 56.130205][ T402] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 56.151312][ T402] usb 4-1: device descriptor read/8, error -71 [ 56.161055][ T1199] rust_binder: Write failure EFAULT in pid:155 [ 56.161613][ T329] usb 1-1: USB disconnect, device number 8 [ 56.281379][ T402] usb 4-1: device descriptor read/8, error -71 [ 56.390238][ T402] usb usb4-port1: unable to enumerate USB device [ 56.735490][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.764359][ T36] audit: type=1400 audit(1756982092.194:303): avc: denied { append } for pid=1230 comm="syz.3.295" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.767980][ T1234] overlayfs: failed to clone upperpath [ 56.802168][ T36] audit: type=1400 audit(1756982092.234:304): avc: denied { mount } for pid=1238 comm="syz.2.297" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.844302][ T36] audit: type=1400 audit(1756982092.274:305): avc: denied { setopt } for pid=1244 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.952575][ T1259] netlink: 'syz.3.304': attribute type 4 has an invalid length. [ 56.988819][ T1259] syzkaller0: entered promiscuous mode [ 56.994383][ T1259] syzkaller0: entered allmulticast mode [ 57.000203][ T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 57.080694][ T1262] SELinux: security_context_str_to_sid (c) failed with errno=-22 [ 57.156025][ T1279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1279 comm=syz.3.309 [ 57.169651][ T31] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.183501][ T1279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.309'. [ 57.192391][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 57.198989][ T31] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 57.217504][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.226336][ T31] usb 1-1: config 0 descriptor?? [ 57.286681][ T1297] bridge0: entered allmulticast mode [ 57.292498][ T1297] bridge0: left allmulticast mode [ 57.349579][ T1306] rust_binder: Error while translating object. [ 57.349627][ T1306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.355919][ T1306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:44 [ 57.452249][ T13] bridge_slave_1: left allmulticast mode [ 57.466955][ T13] bridge_slave_1: left promiscuous mode [ 57.473147][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.482237][ T13] bridge_slave_0: left allmulticast mode [ 57.487883][ T13] bridge_slave_0: left promiscuous mode [ 57.493775][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.595638][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.602861][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.609932][ T1328] bridge_slave_0: entered allmulticast mode [ 57.616383][ T1328] bridge_slave_0: entered promiscuous mode [ 57.623404][ T13] veth1_macvtap: left promiscuous mode [ 57.628926][ T13] veth0_vlan: left promiscuous mode [ 57.637574][ T31] betop 0003:20BC:5500.0007: hidraw0: USB HID v1.01 Device [HID 20bc:5500] on usb-dummy_hcd.0-1/input0 [ 57.650275][ T31] betop 0003:20BC:5500.0007: no inputs found [ 57.683920][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.691062][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.698145][ T1328] bridge_slave_1: entered allmulticast mode [ 57.704776][ T1328] bridge_slave_1: entered promiscuous mode [ 57.761052][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.768100][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.777665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.784799][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.806636][ T1328] veth0_vlan: entered promiscuous mode [ 57.816124][ T1328] veth1_macvtap: entered promiscuous mode [ 57.824435][ T1335] netlink: 'syz.3.326': attribute type 4 has an invalid length. [ 57.893684][ T36] audit: type=1400 audit(1756982093.324:306): avc: denied { watch } for pid=1349 comm="syz.4.329" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.897549][ T1350] rust_binder: Write failure EFAULT in pid:8 [ 57.920472][ T36] audit: type=1400 audit(1756982093.324:307): avc: denied { watch_reads } for pid=1349 comm="syz.4.329" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.957629][ T36] audit: type=1400 audit(1756982093.354:308): avc: denied { bind } for pid=1349 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.051029][ T1369] binder: Bad value for 'max' [ 58.305897][ T36] audit: type=1400 audit(1756982093.734:309): avc: denied { create } for pid=1382 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.628150][ T1422] tipc: Enabling of bearer rejected, failed to enable media [ 58.749429][ T1429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 58.793129][ T1429] rust_binder: 23: no such ref 1 [ 58.798224][ T1429] rust_binder: 23: no such ref 1 [ 58.803231][ T1429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 58.959621][ T1436] fuse: Bad value for 'fd' [ 59.024095][ T1447] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 59.200729][ T1461] rust_binder: 1458 RLIMIT_NICE not set [ 59.213864][ T394] rust_binder: 1457: removing orphan mapping 0:4232 [ 59.573039][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 59.573054][ T36] audit: type=1400 audit(1756982095.004:314): avc: denied { search } for pid=1470 comm="syz.2.371" name="/" dev="configfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.610554][ T36] audit: type=1400 audit(1756982095.004:315): avc: denied { read } for pid=1470 comm="syz.2.371" name="/" dev="configfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.690199][ T36] audit: type=1400 audit(1756982095.004:316): avc: denied { open } for pid=1470 comm="syz.2.371" path="/" dev="configfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.720322][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 59.729106][ T1476] erspan0: default FDB implementation only supports local addresses [ 59.764511][ T329] usb 1-1: USB disconnect, device number 9 [ 59.779810][ T1481] rust_binder: Error while translating object. [ 59.779844][ T1481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.810188][ T1481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 59.863693][ T36] audit: type=1400 audit(1756982095.294:317): avc: denied { shutdown } for pid=1485 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.930747][ T36] audit: type=1400 audit(1756982095.294:318): avc: denied { setattr } for pid=1485 comm="syz.0.375" name="HCI" dev="sockfs" ino=11020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.977386][ T36] audit: type=1400 audit(1756982095.404:319): avc: denied { name_bind } for pid=1487 comm="syz.2.376" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 60.011049][ T1490] tipc: Started in network mode [ 60.015941][ T1490] tipc: Node identity ac14140f, cluster identity 4711 [ 60.029195][ T1490] tipc: New replicast peer: 255.255.255.255 [ 60.050379][ T1490] tipc: Enabled bearer , priority 10 [ 60.062598][ T1490] overlayfs: failed to clone upperpath [ 60.161422][ T36] audit: type=1326 audit(1756982095.594:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.2.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f908af8ebe9 code=0x0 [ 60.291154][ T1466] rust_binder: Error in use_page_slow: ESRCH [ 60.291177][ T1466] rust_binder: use_range failure ESRCH [ 60.297248][ T1466] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 60.303045][ T1466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.311249][ T1466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:54 [ 60.363413][ T1505] rust_binder: Write failure EINVAL in pid:327 [ 60.388002][ T1508] rust_binder: Error in use_page_slow: ESRCH [ 60.388062][ T1508] rust_binder: use_range failure ESRCH [ 60.394131][ T36] audit: type=1400 audit(1756982095.814:321): avc: denied { append } for pid=1510 comm="syz.4.381" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 60.420369][ T1513] rust_binder: Write failure EFAULT in pid:60 [ 60.422995][ T1508] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 60.429650][ T1508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.437791][ T1508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:169 [ 60.469702][ T1518] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 60.488288][ T36] audit: type=1400 audit(1756982095.914:322): avc: denied { setopt } for pid=1520 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.900385][ T402] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 61.000469][ T1527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 61.039644][ T36] audit: type=1400 audit(1756982096.464:323): avc: denied { bind } for pid=1528 comm="syz.2.390" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.059753][ T402] usb 1-1: Using ep0 maxpacket: 32 [ 61.060928][ T402] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 61.074479][ T402] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 61.083439][ T402] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 61.092641][ T1531] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 61.100761][ T1531] netlink: 'syz.2.391': attribute type 4 has an invalid length. [ 61.108600][ T402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.123885][ T402] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 61.133645][ T402] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 61.146847][ T402] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 61.157432][ T402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.166803][ T402] usb 1-1: config 0 descriptor?? [ 61.180164][ T31] tipc: Node number set to 2886997007 [ 61.217159][ T1544] netlink: 72 bytes leftover after parsing attributes in process `syz.3.396'. [ 61.379053][ T402] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 61.391439][ T402] usb 1-1: USB disconnect, device number 10 [ 61.398258][ T402] usblp0: removed [ 61.406271][ T1566] binder: Bad value for 'max' [ 61.790551][ T402] rust_binder: 1568: removing orphan mapping 0:4120 [ 61.820158][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 61.849104][ T1572] netlink: 1 bytes leftover after parsing attributes in process `syz.3.409'. [ 61.950366][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.190216][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.206051][ T1581] random: crng reseeded on system resumption [ 62.440160][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 62.470194][ T329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.570485][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.620196][ T329] usb 5-1: Using ep0 maxpacket: 32 [ 62.625791][ T329] usb 5-1: too many configurations: 139, using maximum allowed: 8 [ 62.635905][ T329] usb 5-1: config index 0 descriptor too short (expected 17315, got 36) [ 62.646950][ T329] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 200 [ 62.655667][ T329] usb 5-1: can't read configurations, error -22 [ 62.790243][ T329] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.810162][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.811142][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 62.827223][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 62.920271][ T9] usb usb1-port1: attempt power cycle [ 62.940173][ T329] usb 5-1: Using ep0 maxpacket: 32 [ 62.945663][ T329] usb 5-1: too many configurations: 139, using maximum allowed: 8 [ 62.954816][ T329] usb 5-1: config index 0 descriptor too short (expected 17315, got 36) [ 62.963173][ T329] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 200 [ 62.976280][ T329] usb 5-1: can't read configurations, error -22 [ 62.982720][ T329] usb usb5-port1: attempt power cycle [ 63.260163][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 63.281128][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.320171][ T329] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.340528][ T329] usb 5-1: Using ep0 maxpacket: 32 [ 63.346049][ T329] usb 5-1: too many configurations: 139, using maximum allowed: 8 [ 63.354587][ T329] usb 5-1: config index 0 descriptor too short (expected 17315, got 36) [ 63.362970][ T329] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 200 [ 63.371747][ T329] usb 5-1: can't read configurations, error -22 [ 63.411167][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.500180][ T329] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 63.520672][ T329] usb 5-1: Using ep0 maxpacket: 32 [ 63.526314][ T329] usb 5-1: too many configurations: 139, using maximum allowed: 8 [ 63.535555][ T329] usb 5-1: config index 0 descriptor too short (expected 17315, got 36) [ 63.544844][ T329] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 200 [ 63.553686][ T329] usb 5-1: can't read configurations, error -22 [ 63.560031][ T329] usb usb5-port1: unable to enumerate USB device [ 63.650438][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 63.650602][ T1622] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 63.665727][ T1622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.426'. [ 63.671173][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.689150][ T1624] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 63.697314][ T1624] rust_binder: 178: no such ref 1 [ 63.702495][ T1624] rust_binder: 178: no such ref 1 [ 63.707593][ T1624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 63.750021][ T1636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.430'. [ 63.810645][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.930240][ T9] usb usb1-port1: unable to enumerate USB device [ 64.066427][ T1652] 9pnet_fd: Insufficient options for proto=fd [ 64.120087][ T1664] overlayfs: failed to clone upperpath [ 64.120132][ T1663] overlayfs: failed to clone upperpath [ 64.220161][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 64.370183][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 64.376812][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.385349][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.396840][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 64.405924][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.413930][ T9] usb 1-1: Product: syz [ 64.418089][ T9] usb 1-1: Manufacturer: syz [ 64.422698][ T9] usb 1-1: SerialNumber: syz [ 64.428074][ T9] usb 1-1: config 0 descriptor?? [ 64.754581][ T1692] overlayfs: failed to resolve './file1': -2 [ 64.778620][ T1695] /dev/loop0: Can't lookup blockdev [ 64.829044][ T31] usb 1-1: USB disconnect, device number 15 [ 65.274160][ T1698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.274190][ T1698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81 [ 65.297559][ T1703] rust_binder: 84: no such ref 1 [ 65.308769][ T1706] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.311648][ T1703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 65.334822][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 65.334839][ T36] audit: type=1400 audit(1756982100.764:349): avc: denied { mount } for pid=1707 comm="syz.4.456" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 65.385699][ T1710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.385755][ T1710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 65.422725][ T1710] rust_binder: 88: no such ref 2 [ 65.440142][ T36] audit: type=1400 audit(1756982100.804:350): avc: denied { watch } for pid=1707 comm="syz.4.456" path="/32/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.447846][ T1720] overlayfs: failed to clone upperpath [ 65.468145][ T1710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 65.576864][ T36] audit: type=1400 audit(1756982101.004:351): avc: denied { mount } for pid=1726 comm="syz.2.464" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.608965][ T1727] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 65.626397][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 65.680288][ T1740] binder: Unknown parameter 'dmfcn’|01777777777777777777777' [ 65.694716][ T1740] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 65.704081][ T1742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.710326][ T1743] netlink: 108 bytes leftover after parsing attributes in process `syz.2.466'. [ 65.874621][ T36] audit: type=1400 audit(1756982101.304:352): avc: denied { create } for pid=1761 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 65.900984][ T402] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 65.925275][ T36] audit: type=1400 audit(1756982101.304:353): avc: denied { sys_admin } for pid=1761 comm="syz.0.473" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.044052][ T36] audit: type=1400 audit(1756982101.474:354): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.061178][ T402] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.081573][ T402] usb 4-1: config 1 interface 0 has no altsetting 0 [ 66.089537][ T1772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.089567][ T1772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 66.090266][ T402] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.40 [ 66.099362][ T1772] rust_binder: 213: no such ref 2 [ 66.108511][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.117385][ T1772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213 [ 66.130159][ T402] usb 4-1: Product: ‐畐᥄⇭齇ꃸ曨簥홨波趙킔쬳ᬆ븁莗ꌗ烽囌햤檱렴욧됿驹꿢Ꮚ伺ꕑꀱ⯔櫯ᨉ䛁꿴鉸ꉴ耷桢⸀媦养⋫촫睜ྑߴ骡辴콴唂똽鈉稓種䦁ﳕ蒜訛麽逵両ῴ㋕피筴᭢᪠倚᜙斚춱Ɬ툷䑲份瑖ᣇ⚓┢鄼ꕏ栐Ჰ顽Ν欣퉎ꢽ낆両뮆儿農㩠壞ᣌ쵇Ɫ댢﫜酜 [ 66.130194][ T402] usb 4-1: Manufacturer: ⸅簳˹㠝吥⃑잊ᢐ吇 [ 66.130209][ T402] usb 4-1: SerialNumber: syz [ 66.192185][ T1772] batadv_slave_0: mtu less than device minimum [ 66.339790][ T36] audit: type=1400 audit(1756982101.764:355): avc: denied { bind } for pid=1782 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.359805][ T36] audit: type=1400 audit(1756982101.764:356): avc: denied { append } for pid=1782 comm="syz.0.480" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.388295][ T402] usbhid 4-1:1.0: can't add hid device: -71 [ 66.394505][ T402] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 66.404157][ T402] usb 4-1: USB disconnect, device number 17 [ 66.650156][ T329] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 66.701138][ T1791] overlayfs: failed to clone upperpath [ 66.707250][ T1791] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 66.801432][ T329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.812531][ T329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 66.823703][ T329] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.841759][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.850959][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.858951][ T329] usb 1-1: SerialNumber: syz [ 66.868797][ T1785] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.877711][ T329] hub 1-1:1.0: bad descriptor, ignoring hub [ 66.885275][ T329] hub 1-1:1.0: probe with driver hub failed with error -5 [ 66.900626][ T1802] loop7: detected capacity change from 0 to 7 [ 66.915653][ T1811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:371 [ 66.942849][ T1816] overlayfs: failed to clone upperpath [ 66.945367][ T36] audit: type=1400 audit(1756982102.374:357): avc: denied { nlmsg_read } for pid=1815 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.963186][ T1820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.989082][ T1820] rust_binder: Error in use_page_slow: ESRCH [ 67.001414][ T1820] rust_binder: use_range failure ESRCH [ 67.007874][ T36] audit: type=1400 audit(1756982102.374:358): avc: denied { read } for pid=1815 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.024537][ T1820] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 67.033562][ T1820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 67.041478][ T1820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:378 [ 67.080501][ T1785] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.135144][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 67.144953][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 67.256394][ T1832] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.256418][ T1832] rust_binder: Read failure Err(EFAULT) in pid:386 [ 67.499786][ T329] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 67.983411][ T329] usb 1-1: USB disconnect, device number 16 [ 67.990245][ T329] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 68.226327][ T1893] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 68.233393][ T1893] rust_binder: 113: no such ref 1 [ 68.276371][ T1897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.277253][ T1897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.292201][ T1897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.300150][ T402] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 68.451318][ T402] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 68.459473][ T402] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.470994][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.481885][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.493011][ T402] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.505902][ T402] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.514934][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.520147][ T329] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.526289][ T402] usb 4-1: config 0 descriptor?? [ 68.535619][ T1869] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.627141][ T1903] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 68.680559][ T329] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 68.695512][ T329] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 68.704891][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.713365][ T329] usb 5-1: Product: syz [ 68.717601][ T329] usb 5-1: Manufacturer: syz [ 68.722672][ T329] usb 5-1: SerialNumber: syz [ 68.729728][ T329] usb 5-1: config 0 descriptor?? [ 68.735997][ T329] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 68.751456][ T329] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 68.756498][ T402] usbhid 4-1:0.0: can't add hid device: -71 [ 68.761271][ T329] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 68.770838][ T402] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 68.801376][ T402] usb 4-1: USB disconnect, device number 18 [ 68.916493][ T1927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.916515][ T1927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 68.936244][ T394] usb 5-1: USB disconnect, device number 8 [ 68.969868][ T1935] overlayfs: failed to clone upperpath [ 69.090181][ T402] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 69.200161][ T329] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 69.241457][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.249136][ T402] usb 4-1: too many configurations: 223, using maximum allowed: 8 [ 69.258150][ T402] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 69.265765][ T402] usb 4-1: can't read configurations, error -61 [ 69.360173][ T329] usb 1-1: Using ep0 maxpacket: 8 [ 69.366578][ T329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.374919][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.385070][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.393947][ T329] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.408388][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.410191][ T402] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 69.417489][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.433062][ T329] usb 1-1: Product: syz [ 69.437240][ T329] usb 1-1: Manufacturer: syz [ 69.441838][ T329] usb 1-1: SerialNumber: syz [ 69.551001][ T1945] netlink: 37 bytes leftover after parsing attributes in process `syz.4.522'. [ 69.561241][ T1945] rust_binder: Write failure EFAULT in pid:122 [ 69.571795][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.574969][ T472] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 69.577982][ T402] usb 4-1: too many configurations: 223, using maximum allowed: 8 [ 69.602119][ T402] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 69.609688][ T402] usb 4-1: can't read configurations, error -61 [ 69.610240][ T472] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.617458][ T402] usb usb4-port1: attempt power cycle [ 69.655795][ T329] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 69.669611][ T329] cdc_ncm 1-1:1.0: bind() failure [ 69.677067][ T329] usb 1-1: USB disconnect, device number 17 [ 69.740932][ T1967] /dev/rnullb0: Can't open blockdev [ 69.746631][ T1968] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.754751][ T1970] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.907996][ T1978] overlayfs: missing 'lowerdir' [ 70.047335][ T1985] netlink: 'syz.0.531': attribute type 13 has an invalid length. [ 70.401431][ T1992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 70.469675][ T2002] netlink: 428 bytes leftover after parsing attributes in process `syz.2.538'. [ 70.616912][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.617022][ T2006] binder: Bad value for 'stats' [ 70.630034][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.641255][ T2006] binder: Bad value for 'stats' [ 70.646759][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.647039][ T2006] binder: Bad value for 'stats' [ 70.654989][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.659460][ T2006] binder: Bad value for 'stats' [ 70.667562][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.672006][ T402] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 70.680285][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.687405][ T2006] binder: Bad value for 'stats' [ 70.695469][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.700135][ T2006] binder: Bad value for 'stats' [ 70.708138][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.712697][ T2006] binder: Bad value for 'stats' [ 70.720626][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.725512][ T2006] binder: Bad value for 'stats' [ 70.733261][ T2005] netlink: 'syz.4.539': attribute type 32 has an invalid length. [ 70.738713][ T2006] binder: Bad value for 'stats' [ 70.750601][ T2006] binder: Bad value for 'stats' [ 70.755514][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.755611][ T2006] binder: Bad value for 'stats' [ 70.763245][ T402] usb 4-1: too many configurations: 223, using maximum allowed: 8 [ 70.768130][ T2006] binder: Bad value for 'stats' [ 70.777166][ T402] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 70.780773][ T2006] binder: Bad value for 'stats' [ 70.788509][ T402] usb 4-1: can't read configurations, error -61 [ 70.793175][ T2006] binder: Bad value for 'stats' [ 70.804207][ T2006] binder: Bad value for 'stats' [ 70.809127][ T2006] binder: Bad value for 'stats' [ 70.814077][ T2006] binder: Bad value for 'stats' [ 70.818986][ T2006] binder: Bad value for 'stats' [ 70.823944][ T2006] binder: Bad value for 'stats' [ 70.828840][ T2006] binder: Bad value for 'stats' [ 70.833782][ T2006] binder: Bad value for 'stats' [ 70.838680][ T2006] binder: Bad value for 'stats' [ 70.843605][ T2006] binder: Bad value for 'stats' [ 70.848506][ T2006] binder: Bad value for 'stats' [ 70.853476][ T2006] binder: Bad value for 'stats' [ 70.858405][ T2006] binder: Bad value for 'stats' [ 70.863353][ T2006] binder: Bad value for 'stats' [ 70.868281][ T2006] binder: Bad value for 'stats' [ 70.873224][ T2006] binder: Bad value for 'stats' [ 70.878121][ T2006] binder: Bad value for 'stats' [ 70.883052][ T2006] binder: Bad value for 'stats' [ 70.887960][ T2006] binder: Bad value for 'stats' [ 70.892903][ T2006] binder: Bad value for 'stats' [ 70.920169][ T402] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 70.941766][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.949468][ T402] usb 4-1: too many configurations: 223, using maximum allowed: 8 [ 70.958426][ T402] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 70.966075][ T402] usb 4-1: can't read configurations, error -61 [ 70.972471][ T402] usb usb4-port1: unable to enumerate USB device [ 71.802262][ T2059] vlan0: entered promiscuous mode [ 71.807435][ T2059] vlan0: entered allmulticast mode [ 71.812768][ T2059] veth0_vlan: entered allmulticast mode [ 72.150164][ T402] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 72.300149][ T402] usb 4-1: Using ep0 maxpacket: 32 [ 72.306352][ T402] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.319320][ T402] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 72.328619][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.336777][ T402] usb 4-1: Product: syz [ 72.341134][ T402] usb 4-1: Manufacturer: syz [ 72.345730][ T402] usb 4-1: SerialNumber: syz [ 72.351716][ T402] usb 4-1: config 0 descriptor?? [ 72.358634][ T402] cdc_ether 4-1:0.0: skipping garbage [ 72.364948][ T402] usb 4-1: bad CDC descriptors [ 72.369926][ T402] usb 4-1: unsupported MDLM descriptors [ 72.561387][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 72.561403][ T36] audit: type=1400 audit(1756982107.994:385): avc: denied { create } for pid=2060 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.738520][ T402] usb 4-1: USB disconnect, device number 23 [ 73.440148][ T402] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 73.530128][ T36] audit: type=1400 audit(1756982108.954:386): avc: denied { audit_control } for pid=2070 comm="syz.4.564" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.571490][ T12] bridge_slave_1: left allmulticast mode [ 73.588300][ T12] bridge_slave_1: left promiscuous mode [ 73.601637][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.610895][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.621116][ T402] usb 4-1: not running at top speed; connect to a high speed hub [ 73.633387][ T12] bridge_slave_0: left allmulticast mode [ 73.639053][ T12] bridge_slave_0: left promiscuous mode [ 73.645791][ T402] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 73.656218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.665776][ T402] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 73.674510][ T36] audit: type=1400 audit(1756982109.104:387): avc: denied { accept } for pid=2075 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 73.686147][ T402] usb 4-1: can't read configurations, error -22 [ 73.695748][ T2076] rust_binder: Write failure EFAULT in pid:142 [ 73.838254][ T12] tipc: Left network mode [ 73.850140][ T2074] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.860138][ T402] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 73.865362][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.875277][ T2074] bridge_slave_0: entered allmulticast mode [ 73.881358][ T36] audit: type=1400 audit(1756982109.304:388): avc: denied { ioctl } for pid=2094 comm="syz.4.570" path="socket:[13673]" dev="sockfs" ino=13673 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.890618][ T2074] bridge_slave_0: entered promiscuous mode [ 73.906968][ T36] audit: type=1400 audit(1756982109.334:389): avc: denied { read } for pid=2094 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.932161][ T36] audit: type=1400 audit(1756982109.344:390): avc: denied { setattr } for pid=2094 comm="syz.4.570" path="socket:[13673]" dev="sockfs" ino=13673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.955892][ T2074] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.956250][ T36] audit: type=1400 audit(1756982109.354:391): avc: denied { connect } for pid=2094 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.977881][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.992493][ T2074] bridge_slave_1: entered allmulticast mode [ 74.002247][ T2074] bridge_slave_1: entered promiscuous mode [ 74.011470][ T12] veth1_macvtap: left promiscuous mode [ 74.017069][ T12] veth0_vlan: left promiscuous mode [ 74.026285][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.035078][ T402] usb 4-1: not running at top speed; connect to a high speed hub [ 74.048575][ T402] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 74.071709][ T402] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 74.083161][ T402] usb 4-1: can't read configurations, error -22 [ 74.090391][ T402] usb usb4-port1: attempt power cycle [ 74.102986][ T2101] veth1_to_bond: mtu less than device minimum [ 74.187685][ T2074] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.194760][ T2074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.202062][ T2074] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.209090][ T2074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.252581][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.260187][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.275295][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.282377][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.291731][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.298781][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.311800][ T36] audit: type=1400 audit(1756982109.744:392): avc: denied { accept } for pid=2115 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.338259][ T2074] veth0_vlan: entered promiscuous mode [ 74.355208][ T2074] veth1_macvtap: entered promiscuous mode [ 74.405977][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 74.440219][ T402] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 74.471751][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.479905][ T402] usb 4-1: not running at top speed; connect to a high speed hub [ 74.489001][ T402] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 74.498123][ T402] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 74.507042][ T402] usb 4-1: can't read configurations, error -22 [ 74.563902][ T36] audit: type=1400 audit(1756982109.994:393): avc: denied { watch watch_reads } for pid=2125 comm="syz.4.580" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.626555][ T36] audit: type=1400 audit(1756982110.054:394): avc: denied { accept } for pid=2128 comm="syz.2.581" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.646717][ T402] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 74.670508][ T472] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.673118][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.678398][ T2135] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.690214][ T2137] rust_binder: 178: no such ref 1 [ 74.696703][ T402] usb 4-1: not running at top speed; connect to a high speed hub [ 74.716035][ T402] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 74.724683][ T402] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 74.735147][ T402] usb 4-1: can't read configurations, error -22 [ 74.741670][ T402] usb usb4-port1: unable to enumerate USB device [ 74.850144][ T472] usb 6-1: Using ep0 maxpacket: 16 [ 74.856413][ T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 74.867973][ T472] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 74.877045][ T472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.885700][ T472] usb 6-1: config 0 descriptor?? [ 75.000169][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 75.151900][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 75.160384][ T9] usb 5-1: config 1 has an invalid interface number: 185 but max is 0 [ 75.168548][ T9] usb 5-1: config 1 has no interface number 0 [ 75.174663][ T9] usb 5-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 75.185640][ T9] usb 5-1: config 1 interface 185 has no altsetting 0 [ 75.193898][ T9] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=9f.80 [ 75.202982][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.211243][ T9] usb 5-1: Product: syz [ 75.215444][ T9] usb 5-1: Manufacturer: syz [ 75.220016][ T9] usb 5-1: SerialNumber: syz [ 75.297069][ T472] lua 0003:1E7D:2C2E.0009: hidraw0: USB HID v20.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0 [ 75.496346][ T472] usb 6-1: USB disconnect, device number 2 [ 76.230407][ T2150] veth1: entered allmulticast mode [ 76.236646][ T2149] veth1: left allmulticast mode [ 76.300157][ T402] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.310038][ T2153] rust_binder: 2152 RLIMIT_NICE not set [ 76.450172][ T402] usb 6-1: Using ep0 maxpacket: 32 [ 76.462150][ T402] usb 6-1: descriptor type invalid, skip [ 76.467859][ T402] usb 6-1: descriptor type invalid, skip [ 76.474502][ T402] usb 6-1: config 1 interface 0 has no altsetting 0 [ 76.482634][ T402] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.492072][ T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.500149][ T402] usb 6-1: Product: syz [ 76.504392][ T402] usb 6-1: Manufacturer: syz [ 76.508998][ T402] usb 6-1: SerialNumber: syz [ 76.921944][ T402] usbhid 6-1:1.0: can't add hid device: -71 [ 76.928817][ T402] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 76.938931][ T402] usb 6-1: USB disconnect, device number 3 [ 77.174192][ T2159] binder: Bad value for 'stats' [ 77.442996][ T2161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.680146][ T402] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 77.819539][ T9] usb 5-1: unknown interface protocol 0x6c, assuming v1 [ 77.826606][ T9] usb 5-1: cannot find UAC_HEADER [ 77.830183][ T402] usb 6-1: device descriptor read/64, error -71 [ 77.833133][ T9] snd-usb-audio 5-1:1.185: probe with driver snd-usb-audio failed with error -22 [ 77.852816][ T9] usb 5-1: USB disconnect, device number 9 [ 77.862429][ T674] udevd[674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.185/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.940169][ T329] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 78.070183][ T402] usb 6-1: device descriptor read/64, error -71 [ 78.090200][ T329] usb 4-1: Using ep0 maxpacket: 32 [ 78.096360][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.107293][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.117108][ T329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 78.130078][ T329] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 78.139146][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.147603][ T329] usb 4-1: config 0 descriptor?? [ 78.250622][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 78.310238][ T402] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.318342][ T36] audit: type=1400 audit(1756982113.744:395): avc: denied { map } for pid=2202 comm="syz.2.604" path="socket:[15108]" dev="sockfs" ino=15108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 78.326690][ T2205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=2205 comm=syz.2.605 [ 78.359008][ T329] wacom 0003:056A:00BA.000A: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 78.369526][ T329] wacom 0003:056A:00BA.000A: hidraw0: USB HID v0.00 Device [HID 056a:00ba] on usb-dummy_hcd.3-1/input0 [ 78.382305][ T329] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BA.000A/input/input10 [ 78.405439][ T2214] validate_nla: 23 callbacks suppressed [ 78.405458][ T2214] netlink: 'syz.2.607': attribute type 16 has an invalid length. [ 78.418966][ T2214] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.607'. [ 78.428758][ T2214] netlink: 37 bytes leftover after parsing attributes in process `syz.2.607'. [ 78.438790][ T9] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 78.449189][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.449366][ T2216] overlayfs: failed to clone upperpath [ 78.458337][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.477816][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.480143][ T402] usb 6-1: device descriptor read/64, error -71 [ 78.490265][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.501344][ T9] usb 5-1: Product: syz [ 78.505510][ T9] usb 5-1: Manufacturer: syz [ 78.511454][ T9] usb 5-1: SerialNumber: syz [ 78.730394][ T402] usb 6-1: device descriptor read/64, error -71 [ 78.842907][ T402] usb usb6-port1: attempt power cycle [ 79.082789][ T36] audit: type=1400 audit(1756982114.514:396): avc: denied { module_load } for pid=2234 comm="syz.2.615" path="/243/file0" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 79.082824][ T2235] Invalid ELF header len 1 [ 79.110994][ T9] cdc_ncm 5-1:1.0: skipping garbage [ 79.117499][ T9] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 79.124213][ T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 79.131054][ T9] cdc_ncm 5-1:1.0: bind() failure [ 79.141796][ T9] usb 5-1: USB disconnect, device number 10 [ 79.155396][ T2247] netlink: 'syz.2.619': attribute type 6 has an invalid length. [ 79.164380][ T2248] veth1: entered allmulticast mode [ 79.170044][ T2246] veth1: left allmulticast mode [ 79.183258][ T36] audit: type=1400 audit(1756982114.614:397): avc: denied { ioctl } for pid=2250 comm="syz.2.620" path="socket:[15154]" dev="sockfs" ino=15154 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.207888][ T402] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.225742][ T2253] fuse: Bad value for 'fd' [ 79.231427][ T402] usb 6-1: device descriptor read/8, error -71 [ 79.307156][ T2270] overlayfs: failed to resolve './file0': -2 [ 79.322542][ T36] audit: type=1400 audit(1756982114.754:398): avc: denied { accept } for pid=2273 comm="syz.2.628" path="socket:[15191]" dev="sockfs" ino=15191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.361180][ T402] usb 6-1: device descriptor read/8, error -71 [ 79.600212][ T402] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 79.621201][ T402] usb 6-1: device descriptor read/8, error -71 [ 79.643951][ T36] audit: type=1400 audit(1756982115.074:399): avc: denied { create } for pid=2280 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 79.723333][ T36] audit: type=1400 audit(1756982115.154:400): avc: denied { setopt } for pid=2287 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.761104][ T402] usb 6-1: device descriptor read/8, error -71 [ 79.809673][ T36] audit: type=1400 audit(1756982115.234:401): avc: denied { associate } for pid=2295 comm="syz.4.634" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.870256][ T402] usb usb6-port1: unable to enumerate USB device [ 79.953206][ T46] bridge_slave_1: left allmulticast mode [ 79.962404][ T46] bridge_slave_1: left promiscuous mode [ 79.968068][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.986610][ T46] bridge_slave_0: left allmulticast mode [ 80.006895][ T46] bridge_slave_0: left promiscuous mode [ 80.014024][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.117261][ T2305] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.124329][ T2305] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.131414][ T2305] bridge_slave_0: entered allmulticast mode [ 80.137532][ T2305] bridge_slave_0: entered promiscuous mode [ 80.144429][ T2305] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.151534][ T2305] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.158611][ T2305] bridge_slave_1: entered allmulticast mode [ 80.164869][ T2305] bridge_slave_1: entered promiscuous mode [ 80.174516][ T46] veth1_macvtap: left promiscuous mode [ 80.180023][ T46] veth0_vlan: left promiscuous mode [ 80.242927][ T2305] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.249981][ T2305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.257252][ T2305] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.264279][ T2305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.286328][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.293823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.303636][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.310694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.319374][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.326433][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.348312][ T2305] veth0_vlan: entered promiscuous mode [ 80.358397][ T2305] veth1_macvtap: entered promiscuous mode [ 80.374981][ T2316] netlink: 37 bytes leftover after parsing attributes in process `syz.2.641'. [ 80.476388][ T2325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.476418][ T2325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 80.495777][ T36] audit: type=1400 audit(1756982115.924:402): avc: denied { name_bind } for pid=2327 comm="syz.6.645" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 80.527577][ T36] audit: type=1400 audit(1756982115.924:403): avc: denied { name_bind } for pid=2327 comm="syz.6.645" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 80.555452][ T2328] netlink: 'syz.6.645': attribute type 11 has an invalid length. [ 80.564563][ T2328] tmpfs: Unsupported parameter 'mpol' [ 80.570393][ T2332] tmpfs: Unsupported parameter 'mpol' [ 80.665442][ T2337] No source specified [ 80.667419][ T36] audit: type=1400 audit(1756982116.094:404): avc: denied { mounton } for pid=2336 comm="syz.5.648" path="/8/bus" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.708477][ T2335] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.715561][ T2335] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.722837][ T2335] bridge_slave_0: entered allmulticast mode [ 80.729558][ T402] usb 4-1: USB disconnect, device number 28 [ 80.730734][ T2335] bridge_slave_0: entered promiscuous mode [ 80.743537][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.750986][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.759999][ T2335] bridge_slave_1: entered allmulticast mode [ 80.767471][ T2335] bridge_slave_1: entered promiscuous mode [ 80.809997][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.817060][ T2335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.824341][ T2335] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.831400][ T2335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.844646][ T2351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.845290][ T2351] rust_binder: Error in use_page_slow: ESRCH [ 80.851956][ T2351] rust_binder: use_range failure ESRCH [ 80.857955][ T2351] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 80.858033][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.863463][ T2351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 80.878621][ T2351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:431 [ 80.879941][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.906361][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.913408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.922769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.929796][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.933553][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.962955][ T2335] veth0_vlan: entered promiscuous mode [ 80.980607][ T2335] veth1_macvtap: entered promiscuous mode [ 80.997729][ T2357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.997760][ T2357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 81.100166][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 81.144639][ T31] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 81.160158][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.168657][ T31] usb 7-1: Product: syz [ 81.172840][ T31] usb 7-1: Manufacturer: syz [ 81.177426][ T31] usb 7-1: SerialNumber: syz [ 81.183850][ T31] r8152-cfgselector 7-1: Unknown version 0x0000 [ 81.190229][ T31] r8152-cfgselector 7-1: config 0 descriptor?? [ 81.603452][ T394] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 81.760158][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.910585][ T31] usb 6-1: too many configurations: 208, using maximum allowed: 8 [ 81.919495][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 81.935683][ T61] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 81.955076][ T31] usb 6-1: can't read configurations, error -61 [ 82.100479][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 82.120180][ T61] usb 4-1: Using ep0 maxpacket: 32 [ 82.131768][ T61] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 82.144341][ T2438] overlay: filesystem on ./bus not supported as upperdir [ 82.154512][ T2441] netlink: 'syz.7.674': attribute type 1 has an invalid length. [ 82.167362][ T2441] netlink: 'syz.7.674': attribute type 2 has an invalid length. [ 82.176870][ T61] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.40 [ 82.192660][ T2443] __vm_enough_memory: pid: 2443, comm: syz.6.675, bytes: 18014402804453376 not enough memory for the allocation [ 82.205380][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.220825][ T61] usb 4-1: Product: syz [ 82.224997][ T61] usb 4-1: Manufacturer: ф [ 82.235897][ T61] usb 4-1: SerialNumber: syz [ 82.270484][ T31] usb 6-1: too many configurations: 208, using maximum allowed: 8 [ 82.279261][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.287144][ T31] usb 6-1: can't read configurations, error -61 [ 82.293742][ T31] usb usb6-port1: attempt power cycle [ 82.448765][ T61] usbhid 4-1:1.0: can't add hid device: -71 [ 82.454740][ T61] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 82.461156][ T2453] kvm: pic: non byte write [ 82.463899][ T61] usb 4-1: USB disconnect, device number 29 [ 82.640164][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 82.660874][ T31] usb 6-1: too many configurations: 208, using maximum allowed: 8 [ 82.669696][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.677324][ T31] usb 6-1: can't read configurations, error -61 [ 82.820173][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 82.851402][ T31] usb 6-1: too many configurations: 208, using maximum allowed: 8 [ 82.860398][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.868059][ T31] usb 6-1: can't read configurations, error -61 [ 82.874746][ T31] usb usb6-port1: unable to enumerate USB device [ 82.994662][ T2474] rust_binder: 446: no such ref 1 [ 82.999764][ T2474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:446 [ 83.073233][ T2478] netlink: 'syz.3.687': attribute type 4 has an invalid length. [ 83.103703][ T2483] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 83.103740][ T2483] rust_binder: Error while translating object. [ 83.113633][ T2483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.119871][ T2483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:450 [ 83.150777][ T2499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.172471][ T2499] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 83.196958][ T2499] rust_binder: Write failure EINVAL in pid:452 [ 83.207703][ T2503] FAT-fs (rnullb0): bogus number of reserved sectors [ 83.221519][ T2503] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 83.271907][ T2511] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 83.707318][ T2521] cgroup: Unknown subsys name 'measure' [ 83.744208][ T2523] fuse: Bad value for 'fd' [ 83.757255][ T2525] fuse: Unknown parameter '18446744073709551615pQTxG?p1O0f`VXy'!MPScX1p41Q' [ 83.864786][ T2539] 9pnet_fd: Insufficient options for proto=fd [ 84.179770][ T2545] 9pnet_fd: Insufficient options for proto=fd [ 84.228166][ T2552] rust_binder: 472: no such ref 0 [ 84.314312][ T36] kauditd_printk_skb: 330 callbacks suppressed [ 84.314327][ T36] audit: type=1326 audit(1756982119.744:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333b78ebe9 code=0x7fc00000 [ 84.329207][ T2562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.401204][ T2563] rust_binder: Error in use_page_slow: ESRCH [ 84.407707][ T2563] rust_binder: use_range failure ESRCH [ 84.414033][ T2563] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 84.419645][ T2563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 84.427657][ T2563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:482 [ 84.636200][ T2575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 84.645324][ T2575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72 [ 84.870383][ T36] audit: type=1326 audit(1756982120.304:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.5.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ae838ebe9 code=0x0 [ 85.479020][ T2591] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.488775][ T2591] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.496854][ T2591] bridge_slave_0: entered allmulticast mode [ 85.503736][ T2591] bridge_slave_0: entered promiscuous mode [ 85.510843][ T2591] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.518162][ T2591] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.525469][ T2591] bridge_slave_1: entered allmulticast mode [ 85.531925][ T2591] bridge_slave_1: entered promiscuous mode [ 85.594588][ T2591] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.601639][ T2591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.608896][ T2591] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.615949][ T2591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.641367][ T2492] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.648785][ T2492] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.657088][ T2625] netlink: 108 bytes leftover after parsing attributes in process `syz.6.736'. [ 85.670871][ T2490] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.677932][ T2490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.685727][ T2490] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.692789][ T2490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.714910][ T2591] veth0_vlan: entered promiscuous mode [ 85.725064][ T2591] veth1_macvtap: entered promiscuous mode [ 85.774144][ T36] audit: type=1400 audit(1756982121.204:737): avc: denied { mounton } for pid=2635 comm="syz.8.740" path="/1/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 85.816554][ T2646] fuseblk: Unknown parameter 'f?+0x0000000000000004' [ 86.010222][ T472] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 86.161244][ T472] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.171765][ T472] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.181320][ T472] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.190416][ T472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.198475][ T472] usb 9-1: SerialNumber: syz [ 86.404321][ T36] audit: type=1400 audit(1756982121.834:738): avc: denied { remount } for pid=2635 comm="syz.8.740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.404325][ T2637] cgroup2: Unknown parameter 'uid' [ 86.431063][ T472] usb 9-1: 0:2 : does not exist [ 86.437312][ T472] usb 9-1: USB disconnect, device number 2 [ 86.892887][ T2679] rust_binder: Failed copying into alloc: EFAULT [ 86.892905][ T2679] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 86.899256][ T2679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 86.907554][ T2679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:86 [ 86.912034][ T36] audit: type=1400 audit(1756982122.334:739): avc: denied { getopt } for pid=2680 comm="syz.6.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.917498][ T2675] netlink: 'syz.7.751': attribute type 16 has an invalid length. [ 87.005736][ T2675] rust_binder: 81: no such ref 1 [ 87.015348][ T2675] rust_binder: 81: no such ref 1 [ 87.340163][ T472] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 87.490163][ T472] usb 9-1: Using ep0 maxpacket: 16 [ 87.496331][ T472] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 87.506572][ T472] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.517464][ T472] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.527300][ T472] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.541069][ T472] usb 9-1: config 7 interface 0 has no altsetting 0 [ 87.547701][ T472] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 87.556838][ T472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.609495][ T2718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2718 comm=syz.6.765 [ 87.767013][ T472] hid (null): global environment stack underflow [ 87.779940][ T472] hid (null): global environment stack underflow [ 87.786337][ T472] hid (null): report_id 1954328033 is invalid [ 87.792643][ T472] hid (null): invalid report_count 63865 [ 87.802438][ T472] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.000B/input/input14 [ 87.817516][ T472] kye 0003:0458:5010.000B: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 87.831740][ T472] usb 9-1: USB disconnect, device number 3 [ 87.842606][ T2721] fido_id[2721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 87.854127][ T2723] random: crng reseeded on system resumption [ 88.160162][ T472] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 88.310145][ T472] usb 9-1: Using ep0 maxpacket: 32 [ 88.316328][ T472] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.327273][ T472] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.337028][ T472] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.346241][ T472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.354726][ T472] usb 9-1: config 0 descriptor?? [ 88.361866][ T472] hub 9-1:0.0: USB hub found [ 88.560643][ T472] hub 9-1:0.0: 1 port detected [ 88.760962][ T36] audit: type=1400 audit(1756982124.194:740): avc: denied { ioctl } for pid=2722 comm="syz.8.766" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 89.610955][ T472] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 89.617340][ T472] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 89.625896][ T472] usbhid 9-1:0.0: can't add hid device: -32 [ 89.631893][ T472] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 89.670623][ T472] usb 9-1: USB disconnect, device number 4 [ 89.847536][ T2745] netlink: 'syz.7.774': attribute type 1 has an invalid length. [ 89.859525][ T2747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.859551][ T2747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.909521][ T472] rust_binder: 2742: removing orphan mapping 0:4232 [ 89.994053][ T2761] netlink: 83 bytes leftover after parsing attributes in process `syz.6.779'. [ 90.168168][ T36] audit: type=1400 audit(1756982125.594:741): avc: denied { write } for pid=2769 comm="syz.5.783" name="ptype" dev="proc" ino=4026532557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.244497][ T2778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 90.244528][ T2778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:112 [ 90.460192][ T61] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 90.530518][ T394] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 90.621192][ T61] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.631311][ T61] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.641016][ T61] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 90.650066][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.658261][ T61] usb 9-1: SerialNumber: syz [ 90.664607][ T61] usb 9-1: 0:2 : does not exist [ 90.680125][ T394] usb 6-1: Invalid ep0 maxpacket: 64 [ 90.810187][ T394] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 90.960149][ T394] usb 6-1: Invalid ep0 maxpacket: 64 [ 90.965545][ T394] usb usb6-port1: attempt power cycle [ 91.066886][ T329] usb 9-1: USB disconnect, device number 5 [ 91.310236][ T394] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 91.330496][ T394] usb 6-1: Invalid ep0 maxpacket: 64 [ 91.460187][ T394] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 91.480519][ T394] usb 6-1: Invalid ep0 maxpacket: 64 [ 91.485895][ T394] usb usb6-port1: unable to enumerate USB device [ 91.591809][ T36] audit: type=1400 audit(1756982127.024:742): avc: denied { nlmsg_read } for pid=2804 comm="syz.8.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.147918][ T2815] random: crng reseeded on system resumption [ 92.218997][ T2816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2816 comm=syz.8.798 [ 92.475623][ T36] audit: type=1400 audit(1756982127.904:743): avc: denied { execute } for pid=2825 comm="syz.6.802" path="/dev/rnullb0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.515657][ T36] audit: type=1326 audit(1756982127.944:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.6.803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e1db8ebe9 code=0x0 [ 93.230139][ T394] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 93.356265][ T2837] tipc: Started in network mode [ 93.361330][ T2837] tipc: Node identity , cluster identity 4711 [ 93.367546][ T2837] tipc: Failed to obtain node identity [ 93.373109][ T2837] tipc: Enabling of bearer rejected, failed to enable media [ 93.382998][ T394] usb 9-1: unable to get BOS descriptor or descriptor too short [ 93.391485][ T394] usb 9-1: config index 0 descriptor too short (expected 4310, got 145) [ 93.399834][ T394] usb 9-1: config 193 has too many interfaces: 103, using maximum allowed: 32 [ 93.408775][ T394] usb 9-1: config 193 has an invalid descriptor of length 0, skipping remainder of the config [ 93.419063][ T394] usb 9-1: config 193 has 3 interfaces, different from the descriptor's value: 103 [ 93.428437][ T394] usb 9-1: config 193 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.443078][ T394] usb 9-1: config 193 interface 1 has no altsetting 0 [ 93.452501][ T394] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.461637][ T394] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.469622][ T394] usb 9-1: Product: syz [ 93.474953][ T394] usb 9-1: Manufacturer: syz [ 93.479623][ T394] usb 9-1: SerialNumber: syz [ 93.502426][ T2846] netlink: 16 bytes leftover after parsing attributes in process `syz.7.810'. [ 93.511947][ T2846] rust_binder: 100: no such ref 0 [ 93.517320][ T2846] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 93.524657][ T2846] rust_binder: 100: no such ref 0 [ 93.625471][ T2852] rust_binder: Error while translating object. [ 93.625519][ T2852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.631791][ T2852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:103 [ 93.846788][ T394] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 93.865620][ T394] snd-usb-audio 9-1:193.0: probe with driver snd-usb-audio failed with error -22 [ 93.876497][ T394] usb 9-1: USB disconnect, device number 6 [ 93.883289][ T2426] udevd[2426]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:193.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.162509][ T2873] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 94.181688][ T2878] 9pnet_fd: Insufficient options for proto=fd [ 94.377465][ T2891] binder: Unknown parameter 'posixacl' [ 94.406102][ T2899] veth0_to_hsr: mtu less than device minimum [ 94.415447][ T36] audit: type=1400 audit(1756982129.844:745): avc: denied { getopt } for pid=2898 comm="syz.8.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.451991][ T2913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.465617][ T2913] rust_binder: Write failure EFAULT in pid:51 [ 94.465723][ T2912] rust_binder: Write failure EFAULT in pid:51 [ 94.472538][ T36] audit: type=1400 audit(1756982129.904:746): avc: denied { getopt } for pid=2918 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.510210][ T2929] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 94.513130][ T2930] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 94.551977][ T2939] exFAT-fs (rnullb0): invalid boot record signature [ 94.558979][ T2939] exFAT-fs (rnullb0): failed to read boot sector [ 94.566023][ T2939] exFAT-fs (rnullb0): failed to recognize exfat type [ 94.643543][ T2958] 9pnet_fd: Insufficient options for proto=fd [ 94.677526][ T2961] 9pnet_fd: Insufficient options for proto=fd [ 94.778655][ T2981] incfs_lookup_dentry err:-13 [ 94.783431][ T2981] incfs: Can't find or create .index dir in ./bus [ 94.792995][ T2981] incfs: mount failed -13 [ 94.798778][ T2980] /dev/nullb0: Can't lookup blockdev [ 94.838150][ T2991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 95.060174][ T61] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 95.085232][ T36] audit: type=1400 audit(1756982130.514:747): avc: denied { map } for pid=2996 comm="syz.5.854" path="socket:[19163]" dev="sockfs" ino=19163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.167895][ T2999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 95.178176][ T3002] rust_binder: Error while translating object. [ 95.187397][ T3002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.193914][ T3002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:187 [ 95.220130][ T61] usb 9-1: Using ep0 maxpacket: 16 [ 95.235602][ T61] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.246487][ T61] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.247720][ T36] audit: type=1400 audit(1756982130.674:748): avc: denied { setopt } for pid=3009 comm="syz.5.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.256209][ T61] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.301565][ T61] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.302797][ T36] audit: type=1400 audit(1756982130.704:749): avc: denied { bind } for pid=3009 comm="syz.5.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.312648][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.330924][ T36] audit: type=1400 audit(1756982130.704:750): avc: denied { setattr } for pid=3009 comm="syz.5.859" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.350175][ T61] usb 9-1: Product: syz [ 95.372431][ T61] usb 9-1: Manufacturer: syz [ 95.380137][ T61] usb 9-1: SerialNumber: syz [ 95.415239][ T3010] ip6tnl0: entered allmulticast mode [ 95.790381][ T61] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 95.940149][ T394] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 96.090166][ T394] usb 6-1: Using ep0 maxpacket: 8 [ 96.096890][ T394] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 64 [ 96.106701][ T394] usb 6-1: config 1 interface 0 has no altsetting 0 [ 96.114655][ T394] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 96.123739][ T394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.131753][ T394] usb 6-1: Product: 嫁᧺虝숖嗣Ĭ펢㰬踦ꚝ꿰㒫솅鈸帯ᤑ嫦茶ꮺﶋ蚍ু硿ᾓ裗촕郫恉﹍幢䔫큚晱뫔惸㑡େ咬咴㪘঱辎擸ĵ昤䨄쀚觟褰츨䁛ឝᘽ顔꾝穅ඐ뺽뜋茑齯ⷆ쪡枕ꕄ큁鋤 [ 96.155056][ T394] usb 6-1: SerialNumber: syz [ 96.160422][ T394] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 96.169138][ T394] usb 6-1: no configuration chosen from 1 choice [ 96.792326][ T2987] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 96.800644][ T2987] rust_binder: Write failure EINVAL in pid:72 [ 96.808472][ T61] usb 9-1: USB disconnect, device number 7 [ 97.304547][ T3030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 97.417560][ T3038] netlink: 'syz.7.866': attribute type 4 has an invalid length. [ 97.434627][ T3041] netlink: 36 bytes leftover after parsing attributes in process `syz.8.868'. [ 98.155285][ T3074] veth0: entered promiscuous mode [ 98.161984][ T3074] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 98.649029][ T329] usb 6-1: USB disconnect, device number 16 [ 98.660145][ T472] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 98.810131][ T472] usb 9-1: Using ep0 maxpacket: 32 [ 98.816703][ T472] usb 9-1: unable to get BOS descriptor or descriptor too short [ 98.825107][ T472] usb 9-1: config 0 has an invalid interface number: 238 but max is 0 [ 98.833303][ T472] usb 9-1: config 0 has no interface number 0 [ 98.839375][ T472] usb 9-1: config 0 interface 238 has no altsetting 0 [ 98.847529][ T472] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.16 [ 98.856767][ T472] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.864781][ T472] usb 9-1: Product: syz [ 98.868956][ T472] usb 9-1: Manufacturer: syz [ 98.873555][ T472] usb 9-1: SerialNumber: syz [ 98.878639][ T472] usb 9-1: config 0 descriptor?? [ 98.980127][ T329] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 98.987458][ T3073] veth0: left promiscuous mode [ 99.085099][ T3080] rust_binder: Error while translating object. [ 99.085147][ T3080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 99.091617][ T3080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:113 [ 99.103162][ T472] usb 9-1: MBOX3: Invalid descriptor size=18. [ 99.119492][ T472] usb 9-1: USB disconnect, device number 8 [ 99.131135][ T329] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.139415][ T329] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.149687][ T329] usb 6-1: config 220 has no interface number 2 [ 99.156028][ T329] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.169240][ T329] usb 6-1: config 220 interface 0 has no altsetting 0 [ 99.176186][ T329] usb 6-1: config 220 interface 76 has no altsetting 0 [ 99.183083][ T329] usb 6-1: config 220 interface 1 has no altsetting 0 [ 99.191111][ T329] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.200224][ T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.208205][ T329] usb 6-1: Product: syz [ 99.212391][ T329] usb 6-1: Manufacturer: syz [ 99.216986][ T329] usb 6-1: SerialNumber: syz [ 99.425175][ T329] usb 6-1: selecting invalid altsetting 0 [ 99.431023][ T329] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 99.437371][ T329] usb 6-1: No valid video chain found. [ 99.444860][ T329] usb 6-1: USB disconnect, device number 17 [ 99.813893][ T36] audit: type=1400 audit(1756982135.244:751): avc: denied { shutdown } for pid=3097 comm="syz.8.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.040065][ T3110] netlink: 104 bytes leftover after parsing attributes in process `syz.5.887'. [ 100.180158][ T329] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 100.331369][ T329] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.341500][ T329] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.351066][ T329] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.360148][ T329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.368111][ T329] usb 9-1: SerialNumber: syz [ 100.622596][ T329] usb 9-1: 0:2 : does not exist [ 100.629030][ T329] usb 9-1: USB disconnect, device number 9 [ 101.152393][ T3112] kvm: pic: single mode not supported [ 101.152438][ T3112] kvm: pic: non byte read [ 101.162441][ T3112] kvm: pic: non byte read [ 101.166935][ T3112] kvm: pic: non byte read [ 101.171465][ T3112] kvm: pic: single mode not supported [ 101.171478][ T3112] kvm: pic: level sensitive irq not supported [ 101.176910][ T3112] kvm: pic: non byte read [ 101.187518][ T3112] kvm: pic: non byte read [ 101.192056][ T3112] kvm: pic: non byte read [ 101.196512][ T3112] kvm: pic: non byte read [ 101.200991][ T3112] kvm: pic: single mode not supported [ 101.201038][ T3112] kvm: pic: non byte read [ 101.202890][ T3114] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 101.206605][ T3112] kvm: pic: non byte read [ 101.222640][ T3112] kvm: pic: non byte read [ 101.227438][ T3112] kvm: pic: single mode not supported [ 101.227566][ T3112] kvm: pic: level sensitive irq not supported [ 101.233477][ T3112] kvm: pic: level sensitive irq not supported [ 101.320679][ T3116] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.335527][ T3116] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.472333][ T36] audit: type=1326 audit(1756982136.904:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3124 comm="syz.8.892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c9858ebe9 code=0x0 [ 102.316912][ T3131] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 102.342642][ T3133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 102.342673][ T3133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:152 [ 102.997944][ T3138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.138160][ T3157] tipc: Started in network mode [ 103.143329][ T3157] tipc: Node identity 7f000001, cluster identity 4711 [ 103.150758][ T3157] tipc: Enabled bearer , priority 10 [ 103.270457][ T36] audit: type=1400 audit(1756982138.704:753): avc: denied { setattr } for pid=3168 comm="syz.8.907" name="NFC_LLCP" dev="sockfs" ino=20335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.297852][ T3169] rust_binder: Error while translating object. [ 103.297888][ T3169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.304091][ T3169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 103.415443][ T36] audit: type=1400 audit(1756982138.844:754): avc: denied { sqpoll } for pid=3180 comm="syz.8.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.498697][ T36] audit: type=1400 audit(1756982138.924:755): avc: denied { accept } for pid=3186 comm="syz.8.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.791237][ T36] audit: type=1400 audit(1756982139.224:756): avc: denied { create } for pid=3196 comm="syz.5.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.840188][ T31] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 103.992795][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 103.999097][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 104.010396][ T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.023229][ T31] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 104.032332][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.043405][ T31] usb 9-1: config 0 descriptor?? [ 104.108480][ T36] audit: type=1400 audit(1756982139.534:757): avc: denied { getopt } for pid=3241 comm="syz.5.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.150139][ T394] tipc: Node number set to 2130706433 [ 104.453247][ T31] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 104.651426][ T31] playstation 0003:054C:0DF2.000C: Invalid reportID received, expected 9 got 53 [ 104.660581][ T31] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 104.669852][ T31] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 104.678797][ T31] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 104.687593][ T31] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 104.689884][ T3261] overlayfs: failed to clone lowerpath [ 104.716076][ T3263] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 106.212600][ T3270] __vm_enough_memory: pid: 3270, comm: syz.7.935, bytes: 18014402804453376 not enough memory for the allocation [ 106.282128][ T3274] rust_binder: 137: no such ref 0 [ 106.854107][ T3301] rust_binder: Error while translating object. [ 106.854146][ T3301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.860381][ T3301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 106.879932][ T3304] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 106.890130][ T748] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.897453][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 106.912407][ T329] usb 9-1: USB disconnect, device number 10 [ 106.936420][ T3306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.948433][ T3309] rust_binder: Write failure EFAULT in pid:185 [ 106.955286][ T3309] rust_binder: Write failure EFAULT in pid:185 [ 106.981541][ T3311] tipc: Started in network mode [ 106.992668][ T3311] tipc: Node identity ea3bafa9ea05, cluster identity 4711 [ 106.999886][ T3311] tipc: Enabled bearer , priority 0 [ 107.061936][ T3311] tipc: Disabling bearer [ 107.146980][ T3319] netlink: 8 bytes leftover after parsing attributes in process `syz.8.950'. [ 107.161172][ T3319] erspan0: default FDB implementation only supports local addresses [ 107.183139][ T3319] netlink: 36 bytes leftover after parsing attributes in process `syz.8.950'. [ 107.884750][ T3340] netlink: 28 bytes leftover after parsing attributes in process `syz.5.957'. [ 108.012495][ T36] audit: type=1400 audit(1756982143.444:758): avc: denied { read } for pid=3345 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.961957][ T36] audit: type=1400 audit(1756982144.394:759): avc: denied { execute_no_trans } for pid=3364 comm="syz.5.965" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9256F1A65E0202864656C6574656429 dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.962685][ T3365] 9pnet_fd: Insufficient options for proto=fd [ 109.356461][ T3375] netlink: 28 bytes leftover after parsing attributes in process `syz.8.967'. [ 109.404985][ T3375] rust_binder: 199: no such ref 1 [ 109.410109][ T3375] rust_binder: 199: no such ref 1 [ 109.415155][ T3375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 109.482702][ T3383] rust_binder: Error while translating object. [ 109.491928][ T3383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.498107][ T3383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 109.517164][ T3385] netlink: 292 bytes leftover after parsing attributes in process `syz.8.970'. [ 110.435504][ T3405] netlink: 28 bytes leftover after parsing attributes in process `syz.7.979'. [ 110.498703][ T3405] rust_binder: 180: no such ref 1 [ 110.503955][ T3405] rust_binder: 180: no such ref 1 [ 110.511495][ T3405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 110.560292][ T3410] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.579403][ T3410] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.586976][ T3410] bridge_slave_0: entered allmulticast mode [ 110.593482][ T3410] bridge_slave_0: entered promiscuous mode [ 110.600617][ T3410] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.607758][ T3410] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.615882][ T3410] bridge_slave_1: entered allmulticast mode [ 110.624799][ T3410] bridge_slave_1: entered promiscuous mode [ 110.631777][ T36] audit: type=1400 audit(1756982146.064:760): avc: denied { append } for pid=3419 comm="syz.7.982" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.655295][ T36] audit: type=1400 audit(1756982146.064:761): avc: denied { ioctl } for pid=3419 comm="syz.7.982" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.733046][ T3410] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.740125][ T3410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.747396][ T3410] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.754438][ T3410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.783497][ T2491] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.791138][ T2491] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.800011][ T2492] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.807064][ T2492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.815747][ T2491] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.822788][ T2491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.830166][ T31] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 110.849355][ T3410] veth0_vlan: entered promiscuous mode [ 110.859320][ T3410] veth1_macvtap: entered promiscuous mode [ 110.928563][ T36] audit: type=1400 audit(1756982146.354:762): avc: denied { read } for pid=3438 comm="syz.9.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.980151][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 110.995529][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.018325][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.045103][ T31] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.056796][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.065330][ T31] usb 9-1: Product: syz [ 111.069494][ T31] usb 9-1: Manufacturer: syz [ 111.074288][ T31] usb 9-1: SerialNumber: syz [ 111.217438][ T3460] netlink: 80 bytes leftover after parsing attributes in process `syz.7.993'. [ 111.354149][ T3469] 9pnet_fd: p9_fd_create_unix (3469): problem connecting socket: ./file0: -111 [ 111.385289][ T3467] rust_binder: Write failure EINVAL in pid:22 [ 111.385469][ T3467] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 111.399404][ T3467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 111.405619][ T61] rust_binder: 3466: removing orphan mapping 0:24 [ 111.478277][ T3478] tmpfs: Bad value for 'nr_blocks' [ 111.537480][ T36] audit: type=1400 audit(1756982146.964:763): avc: denied { map } for pid=3475 comm="syz.9.998" path="socket:[22622]" dev="sockfs" ino=22622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.948046][ T3497] fuseblk: Bad value for 'fd' [ 112.323771][ T3502] rust_binder: Error while translating object. [ 112.323823][ T3502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 112.330047][ T3502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 112.363632][ T3507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.385479][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 112.401663][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 112.569912][ T3531] 9pnet_fd: Insufficient options for proto=fd [ 112.592694][ T3533] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 112.604601][ T3534] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 112.616452][ T3533] overlayfs: missing 'lowerdir' [ 112.622392][ T3534] overlayfs: missing 'lowerdir' [ 112.627863][ T3533] overlayfs: failed to clone upperpath [ 113.478203][ T3568] netlink: 'syz.5.1028': attribute type 12 has an invalid length. [ 113.561162][ T3583] netlink: 'syz.5.1034': attribute type 4 has an invalid length. [ 113.575698][ T31] usb 9-1: 0:2 : does not exist [ 113.605322][ T31] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 113.608273][ T3587] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 113.633963][ T31] usb 9-1: USB disconnect, device number 11 [ 113.655204][ T2426] udevd[2426]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.675752][ T3595] __vm_enough_memory: pid: 3595, comm: syz.9.1040, bytes: 18014402804453376 not enough memory for the allocation [ 113.702922][ T3600] binder: Unknown parameter 'defcontext01777777777777777777777' [ 113.731924][ T36] audit: type=1400 audit(1756982149.164:764): avc: denied { watch } for pid=3603 comm="syz.8.1043" path="pipe:[22405]" dev="pipefs" ino=22405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 113.782575][ T36] audit: type=1400 audit(1756982149.184:765): avc: denied { map } for pid=3603 comm="syz.8.1043" path="pipe:[22405]" dev="pipefs" ino=22405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 113.973641][ T3633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 114.029787][ T3634] kvm: kvm [3631]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 114.038487][ T3634] kvm: kvm [3631]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 114.440141][ T329] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 114.496452][ T3642] netlink: 'syz.5.1053': attribute type 12 has an invalid length. [ 114.526239][ T3651] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1056'. [ 114.590136][ T329] usb 10-1: Using ep0 maxpacket: 32 [ 114.596406][ T329] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.607701][ T329] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.617578][ T329] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.626717][ T329] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.635376][ T329] usb 10-1: config 0 descriptor?? [ 114.641279][ T329] hub 10-1:0.0: USB hub found [ 114.765720][ T3661] rust_binder: 243: no such ref 0 [ 114.776914][ T3664] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 114.777706][ T3663] tipc: Started in network mode [ 114.784496][ T3664] rust_binder: 243: no such ref 0 [ 114.803070][ T3663] tipc: Node identity 4, cluster identity 4 [ 114.809056][ T3663] tipc: Node number set to 4 [ 114.841395][ T329] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 114.868581][ T3670] rust_binder: Write failure EFAULT in pid:213 [ 114.962930][ T36] audit: type=1400 audit(1756982150.394:766): avc: denied { ioctl } for pid=3671 comm="syz.8.1063" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 115.020766][ T3680] rust_binder: 259: no such ref 2 [ 115.031487][ T3680] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 115.031509][ T3680] rust_binder: Read failure Err(EFAULT) in pid:259 [ 115.048435][ T3680] rust_binder: 259: no such ref 1 [ 115.056530][ T329] usbhid 10-1:0.0: can't add hid device: -71 [ 115.066477][ T329] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 115.099617][ T3680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 115.101945][ T329] usb 10-1: USB disconnect, device number 2 [ 115.403708][ T36] audit: type=1400 audit(1756982150.834:767): avc: denied { append } for pid=3705 comm="syz.8.1072" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.593651][ T3707] netlink: 324 bytes leftover after parsing attributes in process `syz.8.1072'. [ 115.621268][ T3711] binder: Unknown parameter 'sJA\s;Atats' [ 115.632777][ T3711] binder: Unknown parameter 'sJA\s;Atats' [ 115.689458][ T3714] rust_binder: Write failure EFAULT in pid:75 [ 115.741126][ T3716] rust_binder: Error while translating object. [ 115.747240][ T3716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.777574][ T3716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 115.830158][ T36] audit: type=1400 audit(1756982151.254:768): avc: denied { write } for pid=3721 comm="syz.9.1077" name="/" dev="configfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.928817][ T3734] rust_binder: 3729 RLIMIT_NICE not set [ 115.935004][ T394] rust_binder: 3728: removing orphan mapping 0:4248 [ 115.961566][ T36] audit: type=1400 audit(1756982151.394:769): avc: denied { connect } for pid=3741 comm="syz.9.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.986571][ T36] audit: type=1326 audit(1756982151.414:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.9.1083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0f8f8ebe9 code=0x0 [ 115.994362][ T3745] netlink: 'syz.8.1084': attribute type 4 has an invalid length. [ 116.243078][ T3755] netlink: 'syz.8.1086': attribute type 29 has an invalid length. [ 116.251274][ T3755] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.1086'. [ 116.334248][ T36] audit: type=1400 audit(1756982151.764:771): avc: denied { map } for pid=3759 comm="syz.8.1088" path="socket:[23999]" dev="sockfs" ino=23999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.338329][ T3763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3763 comm=syz.7.1089 [ 116.390790][ T3763] __vm_enough_memory: pid: 3763, comm: syz.7.1089, bytes: 18014402804453376 not enough memory for the allocation [ 116.564121][ T36] audit: type=1400 audit(1756982151.994:772): avc: denied { create } for pid=3776 comm="syz.5.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.589959][ T36] audit: type=1400 audit(1756982152.014:773): avc: denied { ioctl } for pid=3778 comm="syz.5.1094" path="socket:[24013]" dev="sockfs" ino=24013 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.690853][ T3784] fuse: Unknown parameter '0xffffffffffffffff' [ 116.801193][ T3792] rust_binder: 3793 RLIMIT_NICE not set [ 116.804188][ T394] rust_binder: 3791: removing orphan mapping 0:24 [ 116.810983][ T3798] netlink: 'syz.9.1100': attribute type 4 has an invalid length. [ 117.138499][ T3806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.138523][ T3806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:306 [ 117.262817][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 117.590667][ T3860] /dev/loop0: Can't lookup blockdev [ 118.078738][ T3868] rust_binder: 315: no such ref 1 [ 118.083885][ T3868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 118.083907][ T3870] rust_binder: 315: no such ref 1 [ 118.098186][ T3870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 118.990665][ T3923] Restarting kernel threads ... done. [ 119.060012][ T3931] overlayfs: failed to clone lowerpath [ 119.337910][ T2492] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.579682][ T3949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3949 comm=syz.5.1154 [ 119.618685][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1153'. [ 119.640567][ T3956] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 119.647965][ T3956] rust_binder: Write failure EINVAL in pid:232 [ 120.116157][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 120.116174][ T36] audit: type=1400 audit(1756982155.544:782): avc: denied { read } for pid=3963 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.214625][ T3978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=3978 comm=syz.5.1164 [ 121.370162][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 121.370254][ T748] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.510088][ T36] audit: type=1400 audit(1756982156.934:783): avc: denied { connect } for pid=4037 comm="syz.8.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.870148][ T472] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 122.021162][ T472] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.031325][ T472] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.040875][ T472] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.049942][ T472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.057952][ T472] usb 9-1: SerialNumber: syz [ 122.265417][ T472] usb 9-1: 0:2 : does not exist [ 122.270342][ T472] usb 9-1: unit 5 not found! [ 122.276397][ T472] usb 9-1: USB disconnect, device number 12 [ 122.780061][ T4059] input: syz1 as /devices/virtual/input/input16 [ 122.816164][ T4061] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1189'. [ 122.973676][ T4070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 123.691796][ T4081] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 123.701078][ T4081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 123.710753][ T4081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:373 [ 123.965938][ T4103] rust_binder: Read failure Err(EAGAIN) in pid:390 [ 124.240156][ T31] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 124.291052][ T4119] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1210'. [ 124.300639][ T4119] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1210'. [ 124.380332][ T31] usb 9-1: device descriptor read/64, error -71 [ 124.620171][ T31] usb 9-1: device descriptor read/64, error -71 [ 124.860190][ T31] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 124.988351][ T4155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4155 comm=syz.5.1222 [ 124.990172][ T31] usb 9-1: device descriptor read/64, error -71 [ 125.007348][ T4155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4155 comm=syz.5.1222 [ 125.240149][ T31] usb 9-1: device descriptor read/64, error -71 [ 125.350278][ T31] usb usb9-port1: attempt power cycle [ 125.690166][ T31] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 125.711097][ T31] usb 9-1: device descriptor read/8, error -71 [ 125.841124][ T31] usb 9-1: device descriptor read/8, error -71 [ 125.951870][ T36] audit: type=1400 audit(1756982161.384:784): avc: denied { getattr } for pid=4190 comm="syz.5.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.979765][ T4193] 9pnet_fd: Insufficient options for proto=fd [ 126.080163][ T31] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 126.101182][ T31] usb 9-1: device descriptor read/8, error -71 [ 126.231171][ T31] usb 9-1: device descriptor read/8, error -71 [ 126.299219][ T4076] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.340232][ T31] usb usb9-port1: unable to enumerate USB device [ 126.438209][ T4210] tipc: Enabled bearer , priority 0 [ 126.445101][ T4210] syzkaller0: entered promiscuous mode [ 126.450630][ T4210] syzkaller0: entered allmulticast mode [ 126.457327][ T4210] tipc: Resetting bearer [ 126.469673][ T4210] tipc: Disabling bearer [ 126.490719][ T4212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=4212 comm=syz.5.1241 [ 126.552647][ T4223] sit0: entered promiscuous mode [ 126.561234][ T4223] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1246'. [ 126.594863][ T4225] futex_wake_op: syz.5.1247 tries to shift op by 144; fix this program [ 126.663732][ T4230] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 126.674793][ T4230] rust_binder: Error while translating object. [ 126.674860][ T4230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 126.685520][ T4230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:251 [ 126.964967][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.981633][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.989144][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.996670][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.004010][ T61] rtc rtc0: __rtc_set_alarm: err=-22 [ 127.063641][ T4244] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 127.063662][ T4244] rust_binder: Read failure Err(EFAULT) in pid:394 [ 127.111566][ T4250] usb usb8: selecting invalid altsetting 6 [ 127.143509][ T36] audit: type=1400 audit(1756982162.574:785): avc: denied { accept } for pid=4252 comm="syz.8.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.168769][ T4259] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.188298][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 127.230264][ T4276] pim6reg1: entered promiscuous mode [ 127.235590][ T4276] pim6reg1: entered allmulticast mode [ 127.242818][ T4276] can: request_module (can-proto-0) failed. [ 127.321816][ T4286] batadv_slave_1: entered promiscuous mode [ 127.331187][ T4289] batadv_slave_1: left promiscuous mode [ 127.369275][ T36] audit: type=1400 audit(1756982162.794:786): avc: denied { accept } for pid=4298 comm="syz.9.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 127.408724][ T36] audit: type=1326 audit(1756982162.834:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.9.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8f8ebe9 code=0x7ffc0000 [ 127.432142][ T36] audit: type=1326 audit(1756982162.834:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.9.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0f8f8ebe9 code=0x7ffc0000 [ 127.455617][ T36] audit: type=1326 audit(1756982162.834:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.9.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8f8ebe9 code=0x7ffc0000 [ 127.480104][ T36] audit: type=1326 audit(1756982162.834:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.9.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8f8ebe9 code=0x7ffc0000 [ 127.503499][ T36] audit: type=1326 audit(1756982162.834:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.9.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd0f8f8ebe9 code=0x7ffc0000 [ 127.526778][ T36] audit: type=1326 audit(1756982162.834:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.9.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8f8ebe9 code=0x7ffc0000 [ 127.550306][ T36] audit: type=1326 audit(1756982162.834:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.9.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8f8ebe9 code=0x7ffc0000 [ 127.575590][ T4316] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1281'. [ 127.586403][ T4316] overlayfs: failed to clone lowerpath [ 127.851579][ T4318] 9pnet_fd: p9_fd_create_unix (4318): problem connecting socket: ./file0: -5 [ 127.856746][ T4319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:414 [ 128.130138][ T61] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 128.290155][ T61] usb 9-1: Using ep0 maxpacket: 32 [ 128.296669][ T61] usb 9-1: unable to get BOS descriptor or descriptor too short [ 128.305141][ T61] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 128.313428][ T61] usb 9-1: config 7 has an invalid interface descriptor of length 4, skipping [ 128.322296][ T61] usb 9-1: config 7 has an invalid descriptor of length 208, skipping remainder of the config [ 128.332562][ T61] usb 9-1: config 7 has no interface number 0 [ 128.338635][ T61] usb 9-1: config 7 interface 128 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 128.351676][ T61] usb 9-1: config 7 interface 128 has no altsetting 0 [ 128.359948][ T61] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 128.368997][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.376998][ T61] usb 9-1: Product: syz [ 128.381169][ T61] usb 9-1: Manufacturer: syz [ 128.385746][ T61] usb 9-1: SerialNumber: syz [ 129.172219][ T4372] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1302'. [ 129.629685][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1305'. [ 129.927624][ T4398] netlink: 'syz.5.1309': attribute type 4 has an invalid length. [ 129.935574][ T4398] netlink: 'syz.5.1309': attribute type 4 has an invalid length. [ 130.158301][ T4415] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1314'. [ 130.907158][ T61] usb 9-1: MIDIStreaming interface descriptor not found [ 130.918747][ T4420] rust_binder: Error in use_page_slow: ESRCH [ 130.918764][ T4420] rust_binder: use_range failure ESRCH [ 130.930042][ T4421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 130.931447][ T61] usb 9-1: USB disconnect, device number 17 [ 130.935783][ T4420] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 130.952623][ T4420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 130.961906][ T4420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:421 [ 130.989909][ T4427] rust_binder: Write failure EFAULT in pid:270 [ 131.118748][ T4432] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1320'. [ 131.796747][ T4459] overlayfs: failed to resolve './file0': -2 [ 131.842129][ T4468] binder: Bad value for 'max' [ 131.856523][ T4471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 131.856547][ T4471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:434 [ 132.433355][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 132.433371][ T36] audit: type=1400 audit(1756982167.864:804): avc: denied { setattr } for pid=4472 comm="syz.5.1333" name="NETLINK" dev="sockfs" ino=26737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.589264][ T4480] 9pnet_fd: Insufficient options for proto=fd [ 132.764442][ T4501] pim6reg1: entered promiscuous mode [ 132.769742][ T4501] pim6reg1: entered allmulticast mode [ 132.969088][ T36] audit: type=1400 audit(1756982168.394:805): avc: denied { create } for pid=4508 comm="syz.8.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 132.974027][ T4509] binder: Bad value for 'stats' [ 133.240125][ T394] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 133.390129][ T394] usb 9-1: Using ep0 maxpacket: 8 [ 133.396169][ T394] usb 9-1: unable to get BOS descriptor set [ 133.402964][ T394] usb 9-1: config 8 has an invalid interface number: 112 but max is 0 [ 133.411157][ T394] usb 9-1: config 8 has an invalid interface number: 112 but max is 0 [ 133.419305][ T394] usb 9-1: config 8 has no interface number 0 [ 133.425384][ T394] usb 9-1: config 8 interface 112 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 133.436332][ T394] usb 9-1: config 8 interface 112 altsetting 15 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 133.447357][ T394] usb 9-1: config 8 interface 112 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 133.460541][ T394] usb 9-1: config 8 interface 112 altsetting 22 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 133.472150][ T394] usb 9-1: config 8 interface 112 altsetting 22 has 3 endpoint descriptors, different from the interface descriptor's value: 21 [ 133.485385][ T394] usb 9-1: config 8 interface 112 has no altsetting 0 [ 133.492168][ T394] usb 9-1: config 8 interface 112 has no altsetting 1 [ 133.500976][ T394] usb 9-1: string descriptor 0 read error: -22 [ 133.507180][ T394] usb 9-1: Dual-Role OTG device on HNP port [ 133.513379][ T394] usb 9-1: New USB device found, idVendor=1d2a, idProduct=0801, bcdDevice=72.c7 [ 133.522457][ T394] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.538382][ T4533] overlayfs: failed to clone upperpath [ 133.545421][ T36] audit: type=1400 audit(1756982168.974:806): avc: denied { create } for pid=4532 comm="syz.9.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 133.545911][ T4533] incfs: Options parsing error. -22 [ 133.570226][ T4533] incfs: mount failed -22 [ 133.737995][ T394] asix 9-1:8.112 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 133.748180][ T394] asix 9-1:8.112: probe with driver asix failed with error -71 [ 133.757019][ T394] usb 9-1: USB disconnect, device number 18 [ 133.884997][ T4536] ------------[ cut here ]------------ [ 133.890501][ T4536] WARNING: CPU: 1 PID: 4536 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 133.899892][ T4536] Modules linked in: [ 133.903903][ T4536] CPU: 1 UID: 0 PID: 4536 Comm: syz.5.1354 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 133.915477][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.925575][ T4536] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 133.931548][ T4536] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d9 43 ee 05 00 0f 85 be 00 00 00 c6 05 cc 43 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 133.951194][ T4536] RSP: 0018:ffffc9000d3bf880 EFLAGS: 00010246 [ 133.957265][ T4536] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 0000000000000000 [ 133.965254][ T4536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3bf938 [ 133.973267][ T4536] RBP: ffffc9000d3bf9a8 R08: ffffc9000d3bf937 R09: 0000000000000000 [ 133.981269][ T4536] R10: ffffc9000d3bf920 R11: fffff52001a77f27 R12: ffffc9000d3bf8c0 [ 133.989237][ T4536] R13: dffffc0000000000 R14: 1ffff92001a77f14 R15: 0000000000000000 [ 133.997244][ T4536] FS: 00007f9ae925c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 134.006195][ T4536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.012814][ T4536] CR2: 00007f9ae925bf98 CR3: 0000000118e6c000 CR4: 00000000003526b0 [ 134.020857][ T4536] Call Trace: [ 134.024124][ T4536] [ 134.027060][ T4536] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.033157][ T4536] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 134.038881][ T4536] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 134.044525][ T4536] ___kmalloc_large_node+0xb5/0x250 [ 134.049734][ T4536] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 134.055388][ T4536] __kmalloc_large_node_noprof+0x1e/0xe0 [ 134.061058][ T4536] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 134.066687][ T4536] __kmalloc_noprof+0x26d/0x450 [ 134.071566][ T4536] incfs_realloc_mount_info+0xa7/0x4d0 [ 134.077026][ T4536] ? incfs_add_sysfs_node+0x118/0x240 [ 134.082420][ T4536] incfs_alloc_mount_info+0x479/0x600 [ 134.087799][ T4536] incfs_mount_fs+0x3ca/0x960 [ 134.092529][ T4536] ? __cfi_incfs_mount_fs+0x10/0x10 [ 134.097735][ T4536] ? vfs_parse_fs_string+0x102/0x170 [ 134.103039][ T4536] ? selinux_capable+0x38/0x50 [ 134.107811][ T4536] legacy_get_tree+0x106/0x1b0 [ 134.112592][ T4536] ? __cfi_incfs_mount_fs+0x10/0x10 [ 134.117794][ T4536] vfs_get_tree+0xa1/0x290 [ 134.122222][ T4536] do_new_mount+0x251/0xb40 [ 134.126725][ T4536] ? security_capable+0xcf/0xf0 [ 134.131632][ T4536] path_mount+0x688/0x1050 [ 134.136052][ T4536] ? putname+0x113/0x150 [ 134.140308][ T4536] __se_sys_mount+0x2bd/0x480 [ 134.145007][ T4536] ? __x64_sys_mount+0xf0/0xf0 [ 134.149779][ T4536] ? __kasan_check_write+0x18/0x20 [ 134.154908][ T4536] ? fpregs_restore_userregs+0x11d/0x260 [ 134.160570][ T4536] __x64_sys_mount+0xc3/0xf0 [ 134.165160][ T4536] x64_sys_call+0x2021/0x2ee0 [ 134.169830][ T4536] do_syscall_64+0x58/0xf0 [ 134.174267][ T4536] ? clear_bhb_loop+0x50/0xa0 [ 134.178948][ T4536] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.184868][ T4536] RIP: 0033:0x7f9ae838ebe9 [ 134.189291][ T4536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.208940][ T4536] RSP: 002b:00007f9ae925c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.217379][ T4536] RAX: ffffffffffffffda RBX: 00007f9ae85c6090 RCX: 00007f9ae838ebe9 [ 134.225382][ T4536] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 134.233381][ T4536] RBP: 00007f9ae8411e19 R08: 0000200000000280 R09: 0000000000000000 [ 134.241396][ T4536] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 134.249371][ T4536] R13: 00007f9ae85c6128 R14: 00007f9ae85c6090 R15: 00007ffffcd91458 [ 134.257399][ T4536] [ 134.260443][ T4536] ---[ end trace 0000000000000000 ]--- [ 134.265947][ T4536] incfs: Error allocating mount info. -12 [ 134.271769][ T4536] incfs: mount failed -12