last executing test programs: 12m45.770153943s ago: executing program 32 (id=456): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000001800)=0xff, 0x4) sync_file_range(r1, 0x4, 0x488d, 0x1) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000001c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\\]}%+(', 0x3a, '(]#', 0x3a, './bus', 0x3a, [0x43, 0x4f]}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r0, 0xe6680000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x4000010) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x8901}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) fcntl$setlease(r4, 0x400, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f0000000bc0)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000200)={0x3c, @empty, 0xd0c, 0x4, 'rr\x00', 0x0, 0x4, 0x48}, 0x2c) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) pidfd_getfd(r8, r3, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10m51.845417215s ago: executing program 4 (id=1845): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r1, r0, 0x0, 0x80000000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:cron_log_t:s0\x00', 0x20) 10m51.836406665s ago: executing program 4 (id=1846): r0 = socket(0x1e, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) 10m51.78388906s ago: executing program 4 (id=1847): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') openat$rnullb(0xffffffffffffff9c, 0x0, 0x1a73c3, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x141a03, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) (async) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async, rerun: 64) lsm_set_self_attr(0x66, &(0x7f0000000380)={0x65, 0x0, 0x66, 0x46, "4b0d814e10e14464ab3517e8b7d3513391426bd994796298cff0d3adfca373d0ffbf84012c9d7efad43b6333981f70086f9ab9cdbad06650d7d2b83632f2f94169ae115ddd0a"}, 0x66, 0x0) (async, rerun: 64) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) setreuid(0x0, 0xee01) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) mlockall(0x2) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 32) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={r4, r5/1000+10000}, 0x10) 10m51.7833945s ago: executing program 4 (id=1848): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x16, 0x0, &(0x7f0000000000)=[@free_buffer, @clear_death={0x400c630f, 0x3}, @register_looper], 0x0, 0x1000000, 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0xffffffff) 10m51.78109579s ago: executing program 4 (id=1850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m51.698835636s ago: executing program 4 (id=1851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x541002, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xc}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x40051) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10m51.65324665s ago: executing program 33 (id=1851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x541002, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xc}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x40051) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m4.150032638s ago: executing program 2 (id=2906): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840d, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000300)={{0x6000, 0x8000000, 0xf, 0xf, 0xe, 0xf9, 0x19, 0x1, 0x80, 0x9, 0xd}, {0x100000, 0x5000, 0xa, 0x80, 0x6, 0x7f, 0x10, 0x9, 0x5, 0x0, 0x3, 0x80}, {0xdddd0000, 0x1, 0xb, 0x8, 0x6, 0xa4, 0x5, 0x4, 0x5, 0x9, 0x40, 0x9}, {0xeeef0000, 0xdddd0000, 0xf, 0x6, 0x9, 0x6, 0x9, 0x8, 0x7, 0x1, 0x66, 0xef}, {0x6000, 0x1000, 0x8, 0xff, 0x9, 0x7, 0xa, 0xd2, 0x8, 0xd8, 0x2, 0x6}, {0xdddd0000, 0x0, 0x10, 0xff, 0x1, 0x6, 0x4a, 0x9, 0xe, 0xfb, 0x70, 0x7}, {0xeeef0000, 0x80a5000, 0x0, 0x6, 0x55, 0x5d, 0x8, 0x2, 0xc, 0x4, 0x6}, {0x10000, 0xeeee8000, 0xe, 0x12, 0x7, 0x3, 0xe2, 0x66, 0xf, 0xc, 0x5c, 0x6}, {0x4000, 0x3eb9}, {0xdddd0000}, 0x40000008, 0x0, 0x4, 0x101, 0x1, 0x2000, 0x5000, [0x2, 0x3ff, 0x7fff, 0x9]}) 9m4.021202378s ago: executing program 2 (id=2908): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) recvmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/161, 0xa1}], 0x5, &(0x7f0000000480)=""/239, 0xef}, 0x100) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r1 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000340)={0xffffef03, 0x6, 0x1e1, 0x4, 0x4, "65abe401feff800000000000006564db6600", 0x41, 0x1ff}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x6) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) ioctl$ASHMEM_GET_NAME(r4, 0x40047703, 0x0) 9m4.019149698s ago: executing program 2 (id=2909): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810220000000000905820220000000000905030208"], 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r0, 0xb485c000) 9m2.799995116s ago: executing program 2 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)={0x1, 0x0, [{0x40000097}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) read$FUSE(r5, &(0x7f0000001140)={0x2020}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd7000000000000800000001"], 0x28}], 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) 9m2.797756026s ago: executing program 2 (id=2911): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='\\\x00', &(0x7f0000000080)='./file1\x00', r2) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = socket$tipc(0x1e, 0x2, 0x0) dup3(r3, r0, 0x0) 9m2.678282205s ago: executing program 2 (id=2914): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00006656a3731170a0f7105e2fd7918572466f07acd79877b109cdc63ca568c68278327ea311786ca77745034f4f319e67dd04ef41c04114ed266c92dd7a6645028691", @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000000000006,\x00']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x3d13, 0x0) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r4, r3, 0x0, 0x80000000) 9m2.608247271s ago: executing program 34 (id=2914): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00006656a3731170a0f7105e2fd7918572466f07acd79877b109cdc63ca568c68278327ea311786ca77745034f4f319e67dd04ef41c04114ed266c92dd7a6645028691", @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000000000006,\x00']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x3d13, 0x0) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r4, r3, 0x0, 0x80000000) 6m40.484027644s ago: executing program 5 (id=4487): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e000fff04fcff", 0x58}], 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x1, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000000)=0x7) (async) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) (async) r4 = socket$inet(0x2, 0x6, 0x8000) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r4, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x87, 0xa7, 0x0, 0x40, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x17, 0x0, 0x2, 0x44, 0xb1, 0xb6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfe}}]}}]}}]}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r1, 0xb085c000) 6m38.771920391s ago: executing program 5 (id=4496): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000009c0)={r2, r3/1000+10000}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000ff}]}) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003fbf88a2081070500050001020301090600000000000000090420020094398080"], &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)={0x2, 0x5, 0xb, 0x9, 0x10, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbbc4}}, @sadb_lifetime={0x4, 0x3, 0x9, 0xd2a, 0x4, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}}]}, 0x80}}, 0x84) syz_usb_control_io$lan78xx(r8, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x40, 0x23, 0x81, {0x81, 0x30, "bdd01a8f7004870dc6097cdb411b8b03f499b52f5f47bfeb1205324a728f0bcec436181a369905449fa7d179009271969969efe5f054202ee5c80f3616ca9350ef374904257f70d08b781f1a5da9ea1e8ad2c14028400b5a271f193b92dd63e1d81f8bc041cf563c111ab7b525d9bd1ae91f9da7c726ad5ae8265de88eb89a"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="4017885ccbea9db336247cd5d05e6b0a23556e605978d51965a6283adf5ff66af35f85000000000000"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f00000008c0)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000900)={0xc0, 0xa2, 0x2f, "a71d6a4df41e25e76f4a7c03c9af8645f19c0dfe382e8101775b56a97fe7354a701e7d568fd0d40142f8d48969c3af"}}) r11 = ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x4000, 0x8000}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r12, &(0x7f0000000180), 0x3ef, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0xc0086202, &(0x7f0000000440)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x8, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x9, 0xffffffff, 0x1, 0x2, 0x5, 0x3e, 0x7, 0x6, 0xa, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0x10001, 0xa, 0x2, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1ff, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8004, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x2, 0xaaed, 0x4, 0xff], [0x10, 0xbb32, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m35.774017291s ago: executing program 5 (id=4509): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001100)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0), 0x22000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x1f9f) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f00000000c0)={0xa, 0x4e22, 0xbf, @empty, 0x7fffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xf) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x220c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) 6m32.687450379s ago: executing program 5 (id=4525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff2f, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0}}, @register_looper], 0x25, 0x0, 0x0}) 6m32.658306141s ago: executing program 5 (id=4526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capget(&(0x7f0000002040)={0x19980330}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r4) r5 = getpid() userfaultfd(0x801) r6 = syz_pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead9591", 0x19, 0x20000000, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="baf80c66b8665a0f8366efbafc0cec660f3265f6eff30fa7d0260f01c22664834b000006660f388272dd0f2b5c6a3e0f01cf", 0x32}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES16=r8], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'xfrm0\x00', 0x0}) sendto$packet(r12, &(0x7f00000005c0)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000200)={0x11, 0x19, r13, 0x1, 0xdd, 0x6, @remote}, 0x14) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 6m32.542454611s ago: executing program 5 (id=4527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x80}, {r0, 0xb0}, {r0, 0x210a}, {r0, 0xa2}, {r0, 0x400}], 0x5, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x7fff]}, 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6m32.506531683s ago: executing program 35 (id=4527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x80}, {r0, 0xb0}, {r0, 0x210a}, {r0, 0xa2}, {r0, 0x400}], 0x5, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x7fff]}, 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m18.80868924s ago: executing program 6 (id=6856): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001600cd1140ef86b582a12c410a"], 0x14}}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 3m18.796855521s ago: executing program 6 (id=6857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000140)="bd85f0b4b1720755c1e6a8e417524e79fb03ef748d024362b09d7783ce5e5423ba34da47a01481685963fc53e0dee23633d9b0e7de89d2a9832c2fb19cd61a6124dd6d333828e10f2a9c137d9909a039d0686385052e2b6728837c4a61fa3fdedeb17a4a40c4f55df6d4764e928757c356cc8b76a0f5f5d58135680114528680944031ee181dd141f4b244d77624b2c8a5df528b975dced8ca6cf1464c3191eea1033b1c229477200447377446112d9415fea2380b32fdc257a3a8ad96ae06563d344f5115e34b5bbea413", 0xcb, 0x4000, &(0x7f0000000240)={0xa, 0x4e24, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f00000002c0)) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000300)={@rand_addr=0x64010101, @multicast1, 0x0, "eb5982aea8938b5e2cb3f625b6c488e70d22d39871e599b3e56977575602c9b7", 0x7fff, 0x6, 0x78dcac7c, 0x5}, 0x3c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000380)=0xc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x4) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r6, 0xaea3) setresuid(r3, r3, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x5, &(0x7f0000000440)=[{0x8, 0x5, 0x2a, 0x40f}, {0x8, 0x40, 0x0, 0x4}, {0x5, 0x2, 0x8, 0x7}, {0x8, 0x1, 0x41, 0x4}, {0x401, 0x1b, 0x2, 0x100}]}) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000004c0)=0x9, &(0x7f0000000500)=0x2) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000540)=[@cpuid={0x14, 0x18, {0x7, 0x7ab9}}], 0x18}) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f00000005c0)=0x2) r8 = gettid() r9 = getgid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={r8, r3, r9}, 0xc) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000640)=0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r11, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}}, 0x4008804) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r12, 0x40045402, &(0x7f0000000800)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000840)={0x1, 0xc0}) 3m18.739963996s ago: executing program 6 (id=6858): syz_usb_connect$uac1(0x5, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x35e4, 0x3180, 0x1, 0x40024e}, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x80000001, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f0000000040)={0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x5, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x7c}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m18.209917348s ago: executing program 6 (id=6879): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x4a4b80, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x4a4b80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, &(0x7f0000000080)=0x3e) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000005, 0x1010, r1, 0x789a5000) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 3m18.17672074s ago: executing program 6 (id=6880): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async, rerun: 64) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) (rerun: 64) 3m18.115987005s ago: executing program 6 (id=6881): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77666401fd80381c6d71abf9063ade3316a502003d", @ANYRESHEX=r2, @ANYBLOB=',cache=fscache,\x00']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x26008890) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}, {@cachetag={'cachetag', 0x3d, '![\xc8$-:!%]:[\\'}}, {@version_L}, {@nodevmap}, {@aname={'aname', 0x3d, './binderfs/binder1\x00'}}, {@access_uid={'access', 0x3d, r5}}], [{@fowner_gt={'fowner>', r5}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '\xf3,'}}, {@obj_user={'obj_user', 0x3d, 'TIPCv2\x00'}}, {@obj_user={'obj_user', 0x3d, ':h'}}, {@fsname}, {@obj_user={'obj_user', 0x3d, '/dev/fuse\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'cache=fscache'}}]}}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r10, &(0x7f0000000300)="3083ab7c", 0x4) syz_usb_connect(0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3m2.190668612s ago: executing program 36 (id=6881): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77666401fd80381c6d71abf9063ade3316a502003d", @ANYRESHEX=r2, @ANYBLOB=',cache=fscache,\x00']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x26008890) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}, {@cachetag={'cachetag', 0x3d, '![\xc8$-:!%]:[\\'}}, {@version_L}, {@nodevmap}, {@aname={'aname', 0x3d, './binderfs/binder1\x00'}}, {@access_uid={'access', 0x3d, r5}}], [{@fowner_gt={'fowner>', r5}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '\xf3,'}}, {@obj_user={'obj_user', 0x3d, 'TIPCv2\x00'}}, {@obj_user={'obj_user', 0x3d, ':h'}}, {@fsname}, {@obj_user={'obj_user', 0x3d, '/dev/fuse\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'cache=fscache'}}]}}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r10, &(0x7f0000000300)="3083ab7c", 0x4) syz_usb_connect(0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1m9.347888529s ago: executing program 7 (id=8650): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@broadcast, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@multicast1}, {@private}, {@initdev}]}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) connect$vsock_stream(r5, &(0x7f0000000440), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r7 = accept4$unix(r6, 0x0, 0x0, 0x80800) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x4, 0x0, 0x5, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x50) recvmmsg$unix(r7, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000005740)=""/254, 0xfe}], 0x1}}], 0x1, 0x10122, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r10 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.34327447s ago: executing program 7 (id=8651): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x3, 0x7f}, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x130, 0x0, 0x3ff, {0x2, 0x7, 0x0, '\x00', {0x7ff, 0xad3, 0x8, 0x808, 0x0, r4, 0xc000, '\x00', 0xffffffffffff7ffc, 0x0, 0x100000000, 0x7, {0x6, 0x7}, {0x20000000000004}, {0x100000000, 0xc}, {0x10000, 0xa06}, 0x4, 0x5, 0x1, 0x5200}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x0, 0x6}}, 0x50) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00003f3000/0x4000)=nil) 1m9.330496941s ago: executing program 7 (id=8652): prctl$PR_SVE_GET_VL(0x33, 0x1065c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m9.266451236s ago: executing program 7 (id=8653): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x2010, r0, 0xe6684000) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000000c0)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdff9bfff, 0x1800, 0x5, 0x3}, 0x20) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) futex(&(0x7f000000cffc)=0x1, 0x2, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x12, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 'veth0_virt_wifi\x00'}) fallocate(r0, 0x8, 0x3, 0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f00000001c0)=0xf, 0x25) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001400010023bd70000001000005"], 0x14}}, 0x24000084) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m9.111954028s ago: executing program 7 (id=8654): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) (async) pipe(&(0x7f0000000040)) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) (async) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) 1m9.08123192s ago: executing program 7 (id=8655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='id_legacy\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x5, 0x10, 0x1, 0x0, 0x5f, 0x4, 0x0, 0xa6, 0x3, 0x7, 0x1}, {0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x7fffffffffffffe}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4, 0x36}], 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x80}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x408, 0x0, 0x110, 0x0, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @broadcast, 0x4}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x16, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="d82d6bab2c9c", {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz1\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0xffffffff, 0x8, 0x80000001]}, &(0x7f0000000200)=0x44) readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) socket$igmp6(0xa, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.038018374s ago: executing program 37 (id=8655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='id_legacy\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x5, 0x10, 0x1, 0x0, 0x5f, 0x4, 0x0, 0xa6, 0x3, 0x7, 0x1}, {0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x7fffffffffffffe}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4, 0x36}], 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x80}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x408, 0x0, 0x110, 0x0, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @broadcast, 0x4}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x16, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="d82d6bab2c9c", {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz1\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0xffffffff, 0x8, 0x80000001]}, &(0x7f0000000200)=0x44) readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) socket$igmp6(0xa, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 56.286467917s ago: executing program 1 (id=8768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000057c0)='./file0\x00', 0x11) lsetxattr$system_posix_acl(&(0x7f0000005b80)='./file0\x00', &(0x7f0000005bc0)='system.posix_acl_access\x00', &(0x7f0000005c80)={{}, {0x1, 0x1}, [{}], {}, [], {}, {0x20, 0x6}}, 0x2c, 0x3) chmod(&(0x7f0000005e80)='./file0\x00', 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a805001600080014"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 56.140061709s ago: executing program 1 (id=8769): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "506ac1"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000f09000/0x3000)=nil, 0x3000}, 0x1}) (async) readv(r0, &(0x7f0000000040), 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 56.138249279s ago: executing program 1 (id=8770): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fb8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) close_range(r3, 0xffffffffffffffff, 0x0) 56.110405501s ago: executing program 1 (id=8771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x5}]}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 56.034593477s ago: executing program 1 (id=8772): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) membarrier(0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240), 0x12) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0xc, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xe, 0x0, 0x2, 0x7, 0x4, 0x5, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x2, 0x44, 0xe, 0xc}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0xe1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xf8}, {0x6000, 0x1000, 0x6, 0x9d, 0x3, 0x0, 0xfd, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xe6e5f000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x1, 0x5, 0xc5]}) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x19, r6, 0xd, 0x4) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000140)="0700a2", 0x3}, {&(0x7f0000000280)="552f1a54", 0x4}, {&(0x7f00000003c0)="99ae23717a0f085124fb13d63202885d6c357c057c8965bc8935c7fa1204d0fdb5bb0229d6dd9e2861f4270ae6d6bac770431cc5c5b6e43733f192db50b5d2ec7f2a348eddd2a98f7bf920a4f18092e55928720332597f4951926f323b6b65f65cacacc2c0c08c17d99f0f6df6f179de", 0x70}], 0x4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)) read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) 55.904085447s ago: executing program 1 (id=8773): mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000300)=0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x140000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6f) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000380)=[@dead_binder_done, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9c, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b"}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) 40.65781651s ago: executing program 38 (id=8773): mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000300)=0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x140000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6f) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000380)=[@dead_binder_done, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9c, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b"}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) 11.426450454s ago: executing program 0 (id=9044): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() r3 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESDEC=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303031303030306ead7c0043646036ebee52bebba675302c757365725f69643d42e03a3a91eb6de3fd989c3d7a4e087f8ed43f354ba80ddde9ef1540cfed05", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r4, @ANYRESOCT=r3]) (async, rerun: 64) mlock2(&(0x7f0000ca4000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa00090582024000000040"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="2001b7000000f9a11d67015d64cb47f2d60b7f31c2ebd8794acf491607"], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="600100000000"], 0x0}) (async) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x88101, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_open_dev$MSR(0x0, 0x0, 0x0) (async, rerun: 64) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000140)={0x2}) r8 = syz_open_procfs(r3, &(0x7f0000000100)='net/sco\x00') fchdir(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (rerun: 32) 8.168965765s ago: executing program 0 (id=9073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a80), 0x1, 0x0) flistxattr(r2, &(0x7f0000001ac0)=""/1, 0x1) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) (async) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7.748027789s ago: executing program 0 (id=9074): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x32, 0x8, 0x0, 0xb, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00', @mcast2]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2f, 0x3, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10000fb}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe}}], 0xa0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000360000001101000000000000c2040000000901010000000000000000282200000000000029000000370000000801000000000000000100c204000000050000000000000088000000000000002900000039000000010e060600000000fe80000000000000000000000000003dfe80000000000000000000000000001bfc010000000000000000000000000001fe8000000000000000000000000000aa2001000000000000000000000000000200000000000000000000ffffac1414aa00000000000000000000000000000001"], 0xd8}}], 0x3, 0x400ff97) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001727000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0xe, 0x4, '\"098'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000600)={0x20, 0xf, 0x4, ' 1JV'}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x2}, 0x0}) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x0, 0x0, 0x7f, 0x10, 0x4, 0x60, 0x8}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 4.414643196s ago: executing program 0 (id=9092): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="5c6d200a0656f1b646a6af00bd864f49a15e37d9774b33fcad2634409262094f43507e80782c3d939d0bbe43f32f80877e1f1394e75c7b4e2e4ffe5dc73917084384b03a75b7d6374e1824efbb82883454774e0c2383b8cb8b56f7ac677b99535a4fc01e5811e400e29edeea0f1e7ab89bbeb3da6c4642edb9fb213c754476638af72a626a3ad884e80b2794a43ee5af3ddfb9d5b746a68fa5b3a6691b25d02b97ad17c82b4d5d75de4eb20963c019e40b6f21d85e72af97b212f7b76fac2d52067e3ff7f9484178d199c5fac23e075877c45d7732c38c7433bf6b7ca830c865d0e2d260452bca8b1555"]) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffe, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf, 0x2, 0x1}}}}}]}}]}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)="2769d8f5c0d2d1a79d9085ea7b591370b2309fddb01ea550ad6acb3bd1115cfccbf5aa11d2bb3937eb90bc38317a5ea1648ed08cd75be785a483aae1081e4f7aeb97100fdbfa0797e2c6a1f9df88ce7a5710101a694b9f49c01b89386288402ceb679db175558096d1f14a522ec3a13f5fd426daaceb2a9ba17e62e83ec72f85aad147ed814fdf563f6731902904d440dc3df7a0d11f39f3374ebae8ae6dedeff5fc82599814714b7db95876f41357081f0f34aa5110d162ebc2efcb641173bef45b9dc2b4", 0xc5}, {&(0x7f0000000200)="355ab9d0198b13841fb29df7e172a4a4eebfa4ba34ce9f80f9d60cbb72c842e9d7515f6e45bc6530", 0x28}, {&(0x7f0000000400)="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", 0x1000}], 0x3) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"]) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x9, "670575e3"}, @global=@item_4={0x3, 0x1, 0x4, "a28f6fae"}]}}, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.916137406s ago: executing program 3 (id=9097): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 3.909920027s ago: executing program 3 (id=9099): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x200001) ioctl$TIOCCONS(r0, 0x541d) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfff, @remote, 0x5, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)="3ebaa594f6d8b49406d75170f928601ea3b99a17aa5980f7fe59e1807835d9f15a38481cee5913d06ee59c72d210c5e2f1e3e96e0bde3b7dc855733a3e815e41a48262d5ce29d3e0fdf273f0b18fb34cde287ac0fb1184d444d87b037775774358e144d8a670303391b02add0762d39c05621c984e5bb8727a18087db2c42e48651dda04fa5ae894f462a57b221e12f6e6e54345b35d04b6cd7057b0a1ba0b574a93076415be940fa9dbe8bb4292d9401a5c7e3550d437f53393aa402cd299dbb439c3104ecd3f245a2e2fd94b827564130b10986fdf4e66892e7a09e1c17efcaa0e17ee2bc122f845847025", 0xec}, {&(0x7f00000001c0)="fc912308be13973662dbfb1ca7b6f31f1720105418d7bcbcd24837c600a8b57193ef7b0535d4b0050d3fb015270854b8a89433e28364ec3aa96786cb3f21a8cf7674684b13bff6b5dc36634f703139ddc2b506fde3da4dd85fa04e9b068b1aecfb9b60d7914fc247d7e13292da1ecd11739fc820428807dcabbd48705f048379b275e82da0c65b3e8b551f94e3da9abb39b6c62177bf9878e77b00cc044e1b3c31901a9ac647dfc4db8fd6eb2eb51b4ff626dfce869183cda7aff7d03b80caeec30cdecf", 0xc4}, {&(0x7f00000002c0)="521f816e86c4f1832ac1d2c5048e8cac741dc85ff3b9747bd6c3f52407f7642bd68debe6c8113ab3fabab11ee85e97f5b700fbea2e42c8e0702ad689167f0e3ead6917e8e8a769e42cb1d11e0ab0a31b4cba033d5876b95a6c62bb64441f42fa26f2c82d51956cf44f0eb3037b04ee6ec41a1f9811a45b47b9eed42d8b8e0f0e7edbc5c1ada6dc5b6018c53c48ce8050e2b6c82cbca1d9a1111ed3d30e", 0x9d}, {&(0x7f0000000380)="83c0d3c56f0069aa072ab641f4ce6903574daf32a28c027eebb42c39dfca9c08ffdb049fc9e894dd74d4eabd041bf9d92bac71f19266f3a07cac1c9f342d55fa15403dee3b0a85ad5ce1b4f2f068f01abfc2ce03c79cbd69672e1ea1a0c998155711802afa48b1f70d47a551b676928fd1e4d0ab4b8e27c51f3023ee5d52ea441fef36d1dca67ea2c43be1cf2801524cc0cbf09062eb2f4caae09ff4649cbb9cab8571529bd0fdd337bbbedeed2b3ea34e5645ffa32a3a4324460e50535a84db107f4ead7d84495336209c7f7592ec811f", 0xd1}], 0x4}, 0x40000) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) write$P9_RSTATu(r0, &(0x7f00000005c0)={0x56, 0x7d, 0x2, {{0x0, 0x3b, 0x0, 0x867, {0x1, 0x4, 0x8}, 0x28000000, 0x9, 0x958b, 0x200, 0x5, '#-#-$', 0x1, '\x00', 0x1, '\x00', 0x1, '\x00'}, 0x6, '(&{&\x9f/', 0xee00, 0x0, r1}}, 0x56) r2 = syz_usb_connect$uac1(0x1, 0xcb, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x5, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x9}, [@extension_unit={0x7, 0x24, 0x8, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x2}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x8000, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x5, 0x1, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x0, 0x4, "e0"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x10, 0x9baa, 0x9, "9aa9fb"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xb, 0x1, 0x4, 0xa, "623c66b1ef35"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0xea, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf7, 0x9, 0x4, {0x7, 0x25, 0x1, 0x0, 0x5, 0x3804}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0xfe, 0x1007}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x36, 0xb, "95c45b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x4, 0x1, {0x7, 0x25, 0x1, 0x0, 0x1, 0x4}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x40, 0x3, 0xd9, 0xff, 0x5f}, 0xb0, &(0x7f0000000780)={0x5, 0xf, 0xb0, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "6300e64713666802b4950ca3a10d90d2"}, @generic={0x76, 0x10, 0x4, "e7ca2aecff5af912ae0f40105c9ee4b8e81fe16a09c7b21762613ff7351fe31e5df1a8aca384cae7c740178f37af22421aafffd85d541a83672e42cd9a8bd66c17fd1bc057e336b297920e698231283bcb12f8009a0c608d4d7a5a6b5328d74236f83bedea72b632427df231cd8115de15cc85"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0a3583ce59a28b6e4b864f2c50c0d831"}]}, 0x3, [{0xf1, &(0x7f0000000840)=@string={0xf1, 0x3, "19b17390de86e04dce30da5ae1dab9d0ccb3aa7adcbd6614e69df0b2efe1c4d34c2a50fa28083a921318ade3e5207d9a3118745a45a7fd72621002ca6b8ec4f62f679b6be5c5f6be0a37ea6d41375aaf71e904d6c9ec3edfdec949a639d3a59353ecba52f520e99b79a65a8c6156d6afc8f5ff67be591c7b7dae21beee0df991947992a31f89f984f0c430f772249520a01c64da13381ae7854992d0e43667438684dfb4cb6ef60a5b5fc10d4e545bfe4b4dc1cf640cf5ff8aee59b0b6c11c435edd04bbad1cecd9a032311cdb635d69e04e146fbac893431f16664310b338d166b57ca9d7bad9d8943f198d2d5396"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x81a}}, {0xa4, &(0x7f0000000980)=@string={0xa4, 0x3, "83d80ec38cfb295d7517b7e1079f50d0ba49043eddbfc83cf361f757166927ba43229a53d7624968323f14e28ee83401d96b157bf20389f60fe17a558d03a2af268f2808cf40ed12c41782d9246acde5a10eccebb0015320ee29d540340a4384bea501bfa7cf334deb70d0a2b499775e8e019d907f76dc37564dc8fafcc4643c7d98f6cda4f690e311425aa06b37e24e3ce127b063ce111b8a888599d7cf89c98653"}}]}) syz_usb_control_io(r2, &(0x7f0000000c80)={0x2c, &(0x7f0000000a80)={0x40, 0x1, 0x8e, {0x8e, 0x23, "9f736e66ea6d4e09a1cac9f01d0a6e021eabf240b7346da33a6ed4a717ed4f99a8ece0ff62bbcead6751a1b6c0677349ab12137facfbfd1447171dadc78645a911aa3f0e3d7eb3976a2f9e108a2bd227f7af85bea61d7e8efd0b2d346cd052692edf24019fab10f2cff1110602fcc6f76faa40de1a082d7d67d4e76a899a53e93524c0be0dd2969deb16b6c0"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000b80)={0x0, 0xf, 0x58, {0x5, 0xf, 0x58, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7, 0x30, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x0, 0x11f00, 0x7af6, [0x3f00, 0x3f0f, 0x3fff, 0xf0]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xb, 0xf00, 0x4, [0xc0c0, 0xff3f00, 0xffc000, 0x3fc0, 0xfff0, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x5, 0x1, "e746fb18", "de649d6e"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x20, 0xb0, 0x5, 0x1, 0x6}}}, &(0x7f0000001180)={0x84, &(0x7f0000000cc0)={0x0, 0xb, 0xdc, "c9b9d01defd09c354fecd746e3c8d23f15777895951c86ca11faa590fb3a590addfcd5f4a6e67d077d334a1dda3555d97d5ec10a164e4a542b295c949148b36a57662975a2524d39013068d582e6206cb7c9df15d41b2225139474ca437d5e0f1b9fbc088dc7e3db8d453bc5e9d86cfd90560662dfa526347de90e0cb7bc07fefe8d36bec02a5ce53f099d6bf73e55084e8053c6920eb9f110edf79d4dded833e126d549ce515604de4e57cb6d926604790b2751709a22a5725f29f40b4a853dad51cf0fb0728b19ac7dc5b46e4cbf1c2a43bfff63a8e08dc69aef0f"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f80)={0x40, 0xf, 0x2}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001000)={0x40, 0x17, 0x6, @local}, &(0x7f0000001040)={0x40, 0x19, 0x2, "8f4b"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x200}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x32}}) r3 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x600, 0x7, 0x7, 0xfa}, {0x9, 0x5, 0x0, 0x2, 0x3ff, 0xe, 0x0, 0x2}, {0x9, 0x5, 0x4, 0x3, 0x0, 0x6b, 0x4, 0xf3}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x0, 0x2, 0xc9, {0xc9, 0xe, "aea74c2627c81ca0a4087e3bc3f05b50af06cb7280c4799c9c8830e541ed7d7891ea06e721e7d0f23b9021fe069f3ae5f07967fda20e50d9a62647d7f146c5aff2b265073533d71c82190cef4d5602cf96ca5b2800963e2176579e266bb9598a3f154c2ad568d7dee28c1cbe0cdb4a15edd790f12d165f21450c297e96552330ed7e34cc64cf82924b8a27946c44447ec63576e3c512299ca62e01343a7bcf2e51521c395ecbe3cff4291d0f69ea57d2102bad9249c2fd2dcff9bf1649fd299c7f3101f26d77bd"}}, &(0x7f0000001380)={0x0, 0x3, 0x9, @string={0x9, 0x3, "de0d9a41a2860d"}}}, &(0x7f00000018c0)={0x1c, &(0x7f0000001400)={0x20, 0x9, 0x1c, "931bde8e559a8d2dfd0f1bdb1dc15fdd4613dfb22b7ddb96515b2d98"}, &(0x7f0000001440)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001880)={0x21, 0x0, 0x4, "602ca1d3"}}) modify_ldt$write(0x1, &(0x7f0000001900)={0x6, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008800}, 0x4) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001b00), 0x80002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001b40)={0x0, 0x0}) ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f0000001bc0)=r8) r9 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000001c00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x3f, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x1, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x3, 0x1}}]}}}]}}]}}, &(0x7f0000002000)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x0, 0xff, 0x6, 0x1, 0xff, 0x40}, 0x19, &(0x7f0000001c80)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0xff}]}, 0x9, [{0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x5c41}}, {0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0xc04}}, {0x4d, &(0x7f0000001dc0)=@string={0x4d, 0x3, "481ba5f27b465b80c5c85671d675b63459fbd0016eba1f049dcd5c576d8bbdca76f4d3807fbdacf45ec3f717abe79e75355c221a4eb3390f98e355d45cd2e4a929eaf3fd2b8fe8492d7b58"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x44e}}, {0xf9, &(0x7f0000001ec0)=@string={0xf9, 0x3, "5342903de2617cd5042e201c536b57e5fe9b2fdc9efcdbaeef932f2c87453a8da38893a219a19b919622df9f5aaa1075d498a308c8628e960527affa7288d34db4b50b04fc31f04335dd8a484e39852d97b140370de55975fdd987e7f04ba2ab440b97e9c28a8df9b4655770ae1a4481137281f72671507835f173fade1fafb800568a2db52bf60c118026bcd1bd9a1be8cae6bca72be5f15ee923a7151217c6e8601b9b6222567de961dbe36e810ff3d4ff3d87467ac81d3dfe29ce087b3efd09793f2373bbea30ad41f8c60325cf2e94447f1b9f674c2237df616ff6ff41c0a2a0e7689aec29c2070bc73928d7d7c91b1fb261ae3584"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$printer(r9, &(0x7f0000002180)={0x14, &(0x7f00000020c0)={0x40, 0xcd5fb64c3030a611, 0x5b, {0x5b, 0x22, "5a70e1650c9d31da4e7fb60ba7c305fc797c2e7aaa18311a040577d016f0f78d8848077297dfc34cb0e7e0d845ed835eeafa8a12069ad23e411df03c6f790dfe3db58110830728e82418d6a10686b41c74cd2f000be1076a32"}}, &(0x7f0000002140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}}, &(0x7f0000002480)={0x34, &(0x7f00000021c0)={0x40, 0x17, 0xf6, "6d567b987e27ba27c0e140d349ae94e1d13e308e4385ff24df12fa72fbba711050dbb19a2f7e367f2a211eebe0bac491274a70ff928a726263f79a548a7bbe3305ac4d1d5dc294b31c3c3bb122c2e269acb1c5b1ad3e86dbd7fe19188d2a82d77113044321ff03612bff8235572fc0552d1c69a34ec484926b7da0b880ccc13ecad348673172703a80997a4308f0b7c9ebf73d3dbc7a28efa4c474898c2780b1f0d83f25915600d08f396299eb64a3309c212c5d47f4b1a8f5d9d1d3d5717c6ca71775e3d01622f9d5e67926a14fff7b6cb008c4a0c0e98a64f91c04c123da1f7459ccca2fe8800445e1577f268808423271b71d6397"}, &(0x7f00000022c0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000002300)={0x0, 0x8, 0x1, 0x74}, &(0x7f0000002340)={0x20, 0x0, 0xa9, {0xa7, "9b8cd8cdf6dc48bb0a31a48224eb1804161d5e91fcce66fed6e2ce7b93e47e5410d4f9e3abbcb3fb1fbd311941c10c24d683435068dfd6a85ee38189b1e3b2db2c8cc78559dde2beada3a78b78c0aa294dbcd7df939f04c79a909769e6b2c1c85d033b354095ef38fc645fbc6125b8a9e9e3113a9d416420f069e1d60bfe5b89ba9fe14ed43c7cc7dcc2a654e52c25b146bc3bcff4dc98198c82bdd81a903bc7fc54ebfb1d80f3"}}, &(0x7f0000002400)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000002440)={0x20, 0x0, 0x1, 0x98}}) syz_usb_control_io$uac1(r2, &(0x7f0000002580)={0x14, &(0x7f00000024c0)={0x0, 0x7, 0x75, {0x75, 0x6, "9b380a1b05c4c8c71f539ca3d376e260028409bcb16e6f1d15918b3ae34ffc27e42b644e20236cc28efed39118bc74f7dc26bf0efd0b06e5cb3491cacb8e38cd6b4804efa51ca412ae709b95fee1c3d6e5c54c6a4b6b55f6db8fcf48cb151f0decf7076883663d7246f9c1182af3ffc019db79"}}, &(0x7f0000002540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000002840)={0x44, &(0x7f00000025c0)={0x40, 0x17, 0x95, "6a6cc065de3455dd15968ec5c5bb3a59beac459071a0d22ce3963c8c46d794c99ed5ccc58cd42083f453386ef6f5dd451aa081dae9c9e53a853b0802686062697e1e38a08e5ecb39c144b3f18f55df8a7e6ed38f94f8f59bdf105b1ceb7b87989c217ab99871098b0f943b0f63cec0e7ef10f6865e361f08824e8fe2fbf28cf5ecdb1422512a8cd28f8ac140fd7ea491eb4979102c"}, &(0x7f0000002680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000026c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000002700)={0x20, 0x81, 0x1, "b7"}, &(0x7f0000002740)={0x20, 0x82, 0x3, "d0d905"}, &(0x7f0000002780)={0x20, 0x83, 0x3, "e92e35"}, &(0x7f00000027c0)={0x20, 0x84, 0x2, "d297"}, &(0x7f0000002800)={0x20, 0x85, 0x3, "349e5b"}}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x30008081}, 0x1) r10 = syz_usb_connect$cdc_ecm(0x1, 0x5c, &(0x7f00000029c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0xf8, 0xa0, 0x60, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9d, 0x6, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x42}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x9, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x80, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000002bc0)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x201, 0x3, 0x7, 0x6, 0x18, 0x8}, 0x16, &(0x7f0000002a80)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x0, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0xdc, 0x553}]}, 0x4, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x200a}}, {0x2d, &(0x7f0000002b40)=@string={0x2d, 0x3, "95dafb3e6ec8766541e52b18f9394257a67e11311b5fb13383984a610076bb98deb7622681b1034e2092c1"}}, {0xc, &(0x7f0000002b80)=@string={0xc, 0x3, "c138ef79379d9d294d87"}}]}) r11 = syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f0000002c40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x9, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'ej'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x6, 0x4, 0xff}, {0x6, 0x24, 0x1a, 0x3, 0x22}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xfa}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0x8, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x80, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0x6, 0xf}}}}}}}]}}, &(0x7f0000003140)={0xa, &(0x7f0000002cc0)={0xa, 0x6, 0x250, 0x2, 0x2, 0x1, 0x40, 0x2}, 0x37, &(0x7f0000002d00)={0x5, 0xf, 0x37, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x10, 0x1, 0x7, 0xfb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xd8, 0x2, 0xcd1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x81, 0x80}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0xb, 0xff00, 0x0, [0xff3f0f]}]}, 0x8, [{0xcf, &(0x7f0000002d40)=@string={0xcf, 0x3, "ce1430a564646268f6eb40862af4b744fb36d5937d86e402a5254c387f3e05edb1ce4755c1a43f3bf8a219128fd2220e0f715719d38af9054383d5c2586c7874fe6fc1401c61202ae7bb506e7fb8683f34286dde960bdee6e18b36bc4dec783d3ab58d1722162fdca7e7a1b6e853ed84d442160cbd17b6885f8e02572954f34dc6b8ee3fe562de9d1b3eb3ebd2a5539b7a6a4133ac3fae347fa290b01dde7c19059bfe05ba23003ef5278a22cca0dcf53972de288ee2aeb5b29ab5c0e8b9d7fdb740aca874fc64eb82400347dd"}}, {0x95, &(0x7f0000002e40)=@string={0x95, 0x3, "7686f9ab01f52fa998baf92d047209af2bceefbb714b79b75834057cc18543ab07555683c7d5b8aeff97a1e23735b28331b6f9a493ebd5823d4e19d4041fc6742b79e7e7ff491c42b192ab1da0cdf35d22fef70f8fc2f5f99ef1ed8cc7c0aac38520554b9d450c53edfea102b00520c3bfe96ae51204f9309b64669c297220e3fc195043c887e1876e0c8e63652548fbd8a44c"}}, {0x4, &(0x7f0000002f00)=@lang_id={0x4, 0x3, 0x861}}, {0xe5, &(0x7f0000002f40)=@string={0xe5, 0x3, "ea2a2b98a11ddf18281568fbc0421bee64031154f466b1c7d801d872d900b2a13e80944868f70cd14481b40631ab13c307e9b8c1742be9ba00594ac0dbe729a536c812c80489adec29bfc69b13ee324eb93a95fef7622f15fd0aebfb26ef5c455ea7b92e9490348cd3a9da2808d1c3706043fd463a7c4797ae65380d2632002ce609964c1d063a8cd4e6c1ff8c044221acbe4560e3d4ff16bf42d2d0459acad2d777d9ed6ea0ae645ea870a8d6d3f91c171421e9d41a3bf282db65eae24199ae8750090e51d2a104edbd919c88b62a3117d491c3e7936b299fe1618fff2409f0b7b3f1"}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000003080)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000030c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000003100)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io$cdc_ncm(r11, &(0x7f0000003300)={0x14, &(0x7f00000031c0)={0x20, 0x21, 0xf2, {0xf2, 0x5, "b2c12b9de6304117d8dbfae0f6df8457640e0a15d2d2ed11731282ab0d3a3cc1de445b489c591f1ab27e0409a9146df26e6970579f2bcc2c461ee12e52c1f599e63ad5f79734161e7402c8551cabc31c0667ae3dcad6853b3d0fd814041f46cb866979fe7e18b039ac6e721dd476976a71c418dcf4a369c3fcbd68886d288646e2e5da9ed64fdea9ff0e314a22c15d8d13dbe88aafd0e2fea1f7b83e0c62e2c574f56d86058283a9d52f19991714abc9492ab0ac1eb0bbe75f73976fcec53de8b184fda5db6f9d21910034dd408e124f6675ead08e32ecb65a8098183e1732ff58906127a107402569362382aef0a2b2"}}, &(0x7f00000032c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000035c0)={0x44, &(0x7f0000003340)={0x40, 0x7, 0x8c, "7dfec2742f5f7311d6500f07447cc87bb194c7ab601c8a73f802c29b611b35427cc964b8fb09b6d483f33236d16c15f34c41ba0edfc0af3982913a967b1d5aeddcf5d3f6d77ce50390f27442f7857b4072119f37e886faaa1f404a0ca4e53534d4d9840228f059b93a884c92033fc5cbf847a3f9437ab0205730cef4d66929a5ba191f78f5c3f0b8aa537cbe"}, &(0x7f0000003400)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000003440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003480)={0x20, 0x80, 0x1c, {0xffff, 0x7, 0x2, 0x80, 0x7, 0xaca4, 0x7c, 0x3ff, 0x8, 0x817, 0x200, 0xfffe}}, &(0x7f00000034c0)={0x20, 0x85, 0x4, 0xe}, &(0x7f0000003500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003540)={0x20, 0x87, 0x2, 0x70}, &(0x7f0000003580)={0x20, 0x89, 0x2, 0x1}}) statx(r0, &(0x7f0000003640)='./file0\x00', 0x800, 0x1, &(0x7f0000003680)) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000003880)={0x14, &(0x7f0000003780)={0x40, 0x23, 0xa5, {0xa5, 0x11, "1e7bdc5046d9b170ccd8363c87d270aa1d9b0e930d739fbeccb2681e3a13f21364a64d1324d2cad5ceb63bc1f71c44ec9ac5b98b39e78f18fac247caae9bcf3e1179028dd68cff41e0d4d03b09afd3fe807d979829828fd095eebde4f1725ded845467c1101a669a58f6de9afba9841d2f66bb2bf18501edb9ad4138c72c6db4f33ab4ece6562a6e9a7593858d99d5219720660d5a19bb4e2724da520ebb4c2e1a3d3e"}}, &(0x7f0000003840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003a40)={0x1c, &(0x7f00000038c0)={0x0, 0x16, 0xec, "fc755b76d4faf0b0bff6ae80a3b4f971cffa1a4b6b3fafdb7e741db3e717f1bcd7dcdc9775d286725af97e38a45f231c4c28d6bddd605232df96432a288efb9aa4301ccee31035c2493373e54d2b9dc10cb95e3aee8c1a592653cbf66d08809a0e1d8e82c4aff7eb8cf5dd06013e1fa6a6190d5581a2fe32dd89b92e41576fdbdf58e2dbd033e76041ae3e84927d6022dd4183f0f1e398cecf463bfce46c3c5305c54348e56cbff1195661759f2af0586d5a8c6b1f5a0bb6987eaf59336ae268c5c678604802ed9503151ee4084e6952633b95b0f3adf24672e8ca85592fac79bf32fc90e099a51fbbccc454"}, &(0x7f00000039c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000003a00)={0x0, 0x8, 0x1, 0x5}}) syz_usb_connect$uac1(0x1, 0xd7, &(0x7f0000003a80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x40, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0x2, 0x9, 0x6, 0x3, 0xa], 0xa4}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0xb3, "12cb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x81, 0x3, "", '.'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x8, 0x2, 0x1, "68000bde"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x48, 0x6, 0x2, {0x7, 0x25, 0x1, 0x80, 0x40, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf3, 0x3, 0x1, 0x9}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x2, 0x9e, 0x9, "1b7e163df62b22"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x3, 0x7e, "da0a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6, 0xf9, "", "81e9"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1b, 0x1, 0x80, {0x7, 0x25, 0x1, 0x3, 0x6}}}}}}}]}}, &(0x7f0000004100)={0xa, &(0x7f0000003b80)={0xa, 0x6, 0x110, 0x3, 0x1, 0x6, 0xff, 0xd3}, 0x5c, &(0x7f0000003bc0)={0x5, 0xf, 0x5c, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x1, 0x2, 0x4, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x4, 0xf0f, 0x80b, [0x0, 0x30, 0x3fc0, 0xcf, 0x0]}, @generic={0x2c, 0x10, 0xa, "5a46712bccc5a359ef67b86b6a6f5c4d473c170ff6d79b4adddee9026fa993247fbca49aed5abb97b0"}]}, 0x9, [{0xd1, &(0x7f0000003c40)=@string={0xd1, 0x3, "aeaf18366a0f9fb0000813a759a6bb8950d5ae1b71a3c1f8d143065264c716f400b59697fbeb210da5c8652169709ca3fd2d63bf0aff87d7db8b2027647b1d78b7ecd2fe63ebd9624d4426cb93a91f6b599d1ae6f14c9017bd3aba42ff527c945ced61cf125d54c30bcf2f080b9ffbf42c19f63e7035e92626c42ab3aa152e370f869f16e65ac2b601647cf8eb30968848cbf6a8a0f2c0c8419ae0cee052b42a709985113ec210638250d377e9344c5d491c9cf7dc8e452de73be8af8552c1e5a3415e7f6f4b02838678f3a66e693b"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x1004}}, {0xb2, &(0x7f0000003e00)=@string={0xb2, 0x3, "d86d58e72cfd1ec002b082ca9346a09e1851153bd3b55d2af099500655c0a75690ff299474079f4d0013c5b7b3906f0da3426303a0137d4be0b3952b51873322b53f77c02a1791149b9dfe1b34add4f116431eca76525bbe4ade85239a7e0b46575850acdd9bdb15898a2ad01ae85456c6e371ca30b0be77d9a631e16097e4187125d5fc5b62c524eb9ffb0c1d906a8270f5c98cb9e8faedddca98baa4ec1cf41973da56c5c87faef2994941f20e67b8"}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x1028}}, {0xb1, &(0x7f0000003f00)=@string={0xb1, 0x3, "885ba42a9298ddf98ba8117a7fa179c1138d7f92256112afb8f61fdc74c8a97f87f37440448ff757b2d348b6b56912551288ce51d8a189255e857a70c3a34aa25c208708b473152e14d2fb2728214e41b3e553b06678f052eef76d89283595ed2ce4e68c3f2bfa42c9f7677596e4041ee93c163f92fba95b234bc1381750aa9dcce82c261d1ca0a76c0edb9c7c54f9c50e2fde7995810171e9e43a3243a3ac8d6120fdb478c104516e5e41c8356b66"}}, {0xc5, &(0x7f0000003fc0)=@string={0xc5, 0x3, "ffe27ca5383a420684f8f306c6ec85728a577a01297ce0fdd23ba6114369dc4ec029db18eb5592a4187b8b9015bd2ead23599791dbf8fc7aafeba4ccf4fefb7d2a449c27aa861b4055fa401bfe11cf5a8fc7f2f7d169b5ed8059e4d025c215e629e4157155790ae08cdcf53dcce3bd889ec45d07dbd2ed5d4daab2cfa54c1e28ea5abe2f6638735f9d0f2bc8577704c73c0937116e2a7b2210b66413e4f70056e907283f9fad570c66eb31b2c304b8cb9a9ac54d9b0b936566b77bc3d467cd961291ec"}}, {0x6, &(0x7f00000040c0)=@string={0x6, 0x3, "e4e2e787"}}]}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004200), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000004380)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004340)={&(0x7f0000004240)={0xd8, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffc2e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x15e}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10008000}, 0x44004) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000004780)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004740)={&(0x7f00000046c0)={0x7c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}}, 0x2000c000) 2.028204478s ago: executing program 8 (id=9108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x101080, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0x400448e7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.028016618s ago: executing program 8 (id=9109): socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x567342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1.99196312s ago: executing program 8 (id=9110): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x6400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000001, 0x1, 0x7, 0x6, 0x3ff, 0x1, 0x7}, 0x1c) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000001640)=@pptp={0x18, 0x2, {0x2, @private=0xa010100}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001480)="36d76ba995393e38691367d86e04b10327fc4751dc90f8db689ab86eaa5098592c02df0f6fed22c99e580b91a5d9e124fa2b713be914db49df2e45384ef677b23055bbddb39569d93023ccb650d78e0ec8f339547a269b483cbdee7bad4786acb0ed9622593c2461c507c6b31bdbe9c3f87835ba9754c43f3579a75055f9d3eb339a9470a94c5e0d5d595786c542c7dda7d98646256687f81f8f6403033b0234f6b6dbdaf2537e194f9a55fd9bf518d6431ce047b19f3ca195006f81ad6de6", 0xbf}, {&(0x7f0000000200)="2e8c0df6ee72edbc1a83738cddc52fad9926fc1565072556e7e567496608a21367a5bc149f13a5341d3ba7fec6b5a9a9a4acbeb7c8362fc2", 0x38}, {&(0x7f0000000340)="edc1e4014fc9d257ad260bcc34388c33c53a2017ed3ed83c22984c2b882b1562e5677b39e3c5b767c69502fcd343", 0x2e}, {&(0x7f0000001900)="83be675be428b4b8a669e6c1d345f84cbed9952762b61ceb60e941cbfea0109d954b32c8abdb0f12a40ff87d6d91f54eb16ae4292bdfa8d6376a8a94a03aa3b5d9f4ee767cc7e9c7cdf25fd6bc70f569d97f1d927ec014a6d7645ce253213925403d893a8f54f0c8c71900afa118e5c75dc60c2cb8d0c75b8c1cf0c62df0e602d1667263cef2e25ed95e8b0b58a2bb53138dde3ecbe9bc01fd0b780a4a7718c3b07e00dffd8586f177a6e5cfcb515a106bd03d876571d2d81d8dd4f73cd8885202681894c9a82cc0bdfa47a14e3c936b7911416bceb310afbe4bab0083d73a83d92eee4aa3b85ac91f341016e0c196cd68dfd2", 0xf3}], 0x4, &(0x7f0000001800)=[{0x100, 0x101, 0x60, "1171a30a24f21b56ca692de4004ef75be8318d0d224cb93ff05ae769d6fd9b810ae1c4a7bcffbc41c6a48ea591235dcc229d7240154e4a0e226056db95a752d8672c7a076fa1b19f0542024a8a3c0e06f6ce85ecb40b916b4a6b67614ad78dd4aa8fce67d4f0f0b692a21ba117b0d87192451843e959a1f73ccc65f2ef73d626b9468032f662a4c9d9df42db386daf81540986282f06bf9f6652bf737da5160b0513f8623d81403385205aa071ecaee319944fa6d2e4fed5003d56919321ee12aac3cd8bd85ad03c1c39fb40148b86f91ff36ebbfcaada0c959c9eea32ac41bd2e21b37f534c51544b1b81304421"}], 0x100}}], 0x1, 0x20000014) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xff, 0x5}}}}}]}}]}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000016c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x3, 0x3, {0x3, 0x8, '<'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x453, 0x400, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000280), 0x8019, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r9, @ANYRES16=r10, @ANYRES32=r0]) read$FUSE(r10, 0x0, 0x0) sendfile(r10, r0, 0x0, 0x7ffff000) 1.063824915s ago: executing program 9 (id=9118): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{0x0, 0xb63, 0x7, 0xff, 0x81, 0x5, 0x1, 0x300, 0x7fffffff, 0xfffff8bb, 0x9, 0x5, 0x10, 0x5, 0x5}}) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001040)=""/208, 0xd0}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/56, 0x38}, {&(0x7f00000011c0)=""/197, 0xc5}], 0x4) r1 = open(&(0x7f0000001300)='./file0\x00', 0xa0101, 0x12) r2 = openat$cgroup_type(r1, &(0x7f0000001340), 0x2, 0x0) sendfile(r1, r2, &(0x7f0000001380)=0x3, 0x0) removexattr(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)=@random={'user.', '\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000001440)) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001480), &(0x7f00000014c0)=0x4) r3 = getpid() getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001500), 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000001540)) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000001580)={0x2c, @rand_addr=0x64010102, 0x4e20, 0x1, 'ovf\x00', 0x21, 0x5, 0x55}, 0x2c) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000015c0)={0x1, 0x2, 0x0, 0x7, 0x7f}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) statx(r1, &(0x7f0000003940)='./file0/file0\x00', 0x81aafbe9a439a5d3, 0x200, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000003a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000005b40)='./file0\x00', &(0x7f0000005b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000005dc0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005e00)={0x0, 0x0, 0x0}, &(0x7f0000005e40)=0xc) fstat(r0, &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000005f00)='./file0\x00', 0x1000, 0x1, &(0x7f0000005f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006040)={0x0, 0x0, 0x0}, &(0x7f0000006080)=0xc) lstat(&(0x7f00000060c0)='./file0\x00', &(0x7f0000006100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000006180)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00]) lstat(&(0x7f00000061c0)='./file0\x00', &(0x7f0000006200)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getegid() r18 = getuid() syz_fuse_handle_req(r4, &(0x7f0000001640)="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", 0x2000, &(0x7f00000089c0)={&(0x7f0000003640)={0x50, 0x0, 0x8, {0x7, 0x2b, 0xd, 0x10000000, 0x5, 0x2, 0x8000, 0x1, 0x0, 0x0, 0xd93c12ad4f0e41a2, 0x6}}, &(0x7f00000036c0)={0x18, 0xfffffffffffffffe, 0x9, {0x8}}, &(0x7f0000003700)={0x18, 0x0, 0x400, {0x2}}, &(0x7f0000003740)={0x18, 0x0, 0xb7d1, {0xd}}, &(0x7f0000003780)={0x18, 0x0, 0x40}, &(0x7f00000037c0)={0x28, 0x0, 0x40, {{0x7, 0x9096, 0x0, r3}}}, &(0x7f0000003800)={0x60, 0x0, 0x1, {{0x6, 0x2, 0x4, 0xf, 0x4, 0x48, 0xffffffd7, 0xfffffff8}}}, &(0x7f0000003880)={0x18, 0x0, 0x100000001, {0x2}}, &(0x7f00000038c0)={0x1c, 0xffffffffffffffda, 0x0, {'cgroup.type\x00'}}, &(0x7f0000003900)={0x20, 0x0, 0x7, {0x0, 0x10}}, &(0x7f0000005ac0)={0x78, 0x0, 0x6, {0x824, 0x1, 0x0, {0x0, 0xb, 0x7, 0x9, 0x1, 0x822, 0x4, 0x7, 0x9, 0x2000, 0x7fffffff, r5, r6, 0x9, 0x4}}}, &(0x7f0000005c00)={0x90, 0x0, 0x5377a5af, {0x4, 0x3, 0x8, 0xe, 0x0, 0x3, {0x5, 0xffffffffffffffff, 0x5, 0xdf6, 0x2, 0x0, 0x2, 0x5, 0x1, 0xa000, 0x4fd, r7, r8, 0x401, 0x6}}}, &(0x7f0000005cc0)={0xf8, 0x0, 0x7, [{0x4, 0xc9, 0x2, 0x7, '],'}, {0x6, 0x7, 0xb, 0x8001, '^+]({%%o{\'!'}, {0x5, 0x7, 0x1, 0x8, '\x00'}, {0x1, 0x80000001, 0x0, 0x1}, {0x3, 0x3, 0xc, 0x7, 'cgroup.type\x00'}, {0x2, 0x4057, 0x1, 0x8, '\x00'}, {0x0, 0x7, 0x5, 0x8, 'user.'}]}, &(0x7f0000006280)={0x3e8, 0x0, 0x5, [{{0x3, 0x1, 0x80000001, 0x0, 0x2, 0x4, {0x4, 0x3, 0x5, 0x7, 0xa, 0xf, 0x92e2, 0x7, 0x0, 0xa000, 0x8, r9, r10, 0x4, 0x8}}, {0x2, 0x30b, 0x10, 0x6, 'memory.pressure\x00'}}, {{0x6, 0x0, 0x1, 0x9, 0x3ff, 0x1, {0x2, 0x2, 0x3, 0x0, 0x80, 0x7f, 0xfffffffa, 0xfffffffa, 0x4c01, 0xa000, 0x1, 0x0, r11, 0x3, 0x8f8}}, {0x2, 0xffff, 0xc, 0x0, 'cgroup.type\x00'}}, {{0x1, 0x2, 0x4800000000, 0xec1, 0x4, 0x4, {0x2, 0x8, 0x2, 0x1, 0x6, 0x3, 0xc, 0x1, 0x22, 0xc000, 0x80, r12, r13, 0x4, 0x2}}, {0x5, 0x2, 0x1, 0x6, '*'}}, {{0x3, 0x3, 0x5, 0xfffffffffffffff0, 0x800, 0x24, {0x5, 0x4, 0x1, 0x2, 0x800, 0x1, 0x9, 0x8, 0x90, 0xc000, 0x4, r14, r15, 0x80, 0xc}}, {0x5, 0xe, 0x4, 0x31, '(\\{}'}}, {{0x0, 0x2, 0xfffffffffffffffb, 0x4, 0x91, 0x8, {0x6, 0x7, 0xb, 0xb94, 0x69, 0x7, 0x3, 0xc, 0x147, 0xb000, 0x5, r16, r17, 0x90, 0xffff}}, {0x4, 0x8, 0x4, 0x10, '*[$('}}, {{0x3, 0x1, 0xffffffffffffffff, 0x5dd, 0x200, 0xcb1, {0x6, 0x1, 0xfffffffffffff974, 0x5, 0x9, 0x7, 0x1a1, 0x5, 0x8, 0x8000, 0x40, 0xee00, 0x0, 0xb, 0x9}}, {0x1, 0x2, 0xc, 0x9, 'cgroup.type\x00'}}]}, &(0x7f00000086c0)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0x6, 0x412, 0xee, 0x13, {0x6, 0xb7c, 0x0, 0x1, 0x8000000000000000, 0xc5, 0xb, 0x0, 0x3, 0x4000, 0x6c1, r18, 0x0, 0x9, 0xc}}, {0x0, 0x4}}}, &(0x7f0000008780)={0x20, 0x0, 0x3, {0x800, 0x0, 0x0, 0x5751}}, &(0x7f0000008880)={0x130, 0x0, 0x8, {0x4, 0x4, 0x0, '\x00', {0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x4000, '\x00', 0x6, 0xffffffffffffffbf, 0x6, 0x4, {0x2, 0x2}, {0x9, 0xa}, {0x1, 0x1}, {0x8, 0x7}, 0x1, 0x7, 0x8001, 0x2000}}}}) 1.063213995s ago: executing program 0 (id=9119): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) mmap(&(0x7f0000a6b000/0x2000)=nil, 0x2000, 0x7, 0x110, r0, 0xe306e000) mmap(&(0x7f0000a58000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0xc9b81000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f000016c000/0x1000)=nil, 0x1000, 0xe) mprotect(&(0x7f00001a1000/0x2000)=nil, 0x2000, 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 980.754461ms ago: executing program 9 (id=9120): r0 = syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) close(r0) setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) 895.755259ms ago: executing program 9 (id=9121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = gettid() kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) memfd_create(&(0x7f0000000080)='/dev/rnullb0\x00', 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/84, 0x0, 0x7, 0x1f}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x36}}, &(0x7f00000000c0)}, 0x1000}], 0xffffffffffffffbe, 0x0, 0x0}) 844.103252ms ago: executing program 0 (id=9122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 789.894067ms ago: executing program 9 (id=9123): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="5f89157f35da95e4e4d3af140103b9714cff89d44d4e016cd1be864a3a5112c5722340e52c26b7ac22d9ca2ef0aa5e7976c027b809d43e7cdff26b75f217a3b47e7606ece3aab7c732fdda7b5d299fb6ff23bae6ef85b3281a023867cb81f63a1e1ea78abe42d8d2002181e362b2afd006655161ad1069a3eb16df070e45928e6720fe2ae6f699ed41d3cc09bf46c8983159bfbeb4681ee1251bf180aaafdd6ad20e27fd7fe48bff538386b3f65b252e666944fe62d1cdb1b66048b7e38ef6ad66c115df", 0xc4, 0x4000010, 0x0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000140)={0x7, 0x79, 0x2}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x800, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000001c0)) getsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) bind$bt_sco(r1, &(0x7f0000000280)={0x1f, @none}, 0x8) (async) setsockopt$inet6_int(r2, 0x29, 0x52, &(0x7f00000002c0)=0xfffffffd, 0x4) (async, rerun: 64) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000300)=""/54, &(0x7f0000000340)=0x36) (async, rerun: 64) r4 = open(&(0x7f0000000380)='./file0\x00', 0x800, 0x40) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000500)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/215, 0xd7}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x40080) (async) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000680)=0x3) write$P9_RLERROR(r2, &(0x7f00000006c0)={0x13, 0x7, 0x2, {0xa, '/:[$%@}-:.'}}, 0x13) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c704746}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000980), 0x10001, 0x842) (rerun: 64) sendto$inet6(r3, &(0x7f00000009c0)="9c1ef7c638c276f9b55b46d92d91c2f50ed9109fbb57ea68bfb398465bf9013d24258b6919dadeb1b18031b006aa384b4c5994d662d459675ec7b24d7ded4914c53647743c67b89c16d82ecc7ef0", 0x4e, 0x40010, &(0x7f0000000a40)={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000a80)="18006205614cff9ff7caf44ec1b75b486116dee85c53ccc2d727ef18e0779fad4705dfecaa57d9631b9559ea9c71d7861a0b1fc99123439ec7bc1f7689") (async) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000ac0)=0x1) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b00)={'\x00', 0x1, 0xfffffffb, 0x0, 0x2e, 0x7fff, 0x0}) ioprio_get$pid(0x2, r9) (async) setns(r4, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r5, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0xe}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) 685.021035ms ago: executing program 9 (id=9124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) unshare(0x2040600) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffffe4, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 620.10182ms ago: executing program 3 (id=9125): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000091000040"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x80000001}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5e, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b"}) 618.34599ms ago: executing program 9 (id=9126): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x521201, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41a100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x55}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x22c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4cfe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8354}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7e2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcf}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4010}, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c800) sendfile(r2, r4, &(0x7f0000000080)=0x2, 0x8000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x74) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0xffffff7f) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 588.347173ms ago: executing program 3 (id=9127): ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0x9, 0x8001, 0x0, 0x1}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x4, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$BLKSSZGET(r1, 0x1268, &(0x7f0000000200)) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000240)={0x6}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x400) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) fsync(r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r2, 0x823260d3ed81a249, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x631}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc45}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xfffffff7}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x124, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000090}, 0x44001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x40}}, 0x800c) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4) r5 = openat$cgroup_int(r1, &(0x7f0000000900)='rdma.max\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000940)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000980)={0x2, 0x0, 0x2, 0x54}, 0x10) utimensat(r0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x100) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000e40)={{'\x00', 0x1}, {0x1}, 0x4, 0x0, 0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)="190f9055ef4205f61c9ed76c38f490c0bc62f1533457b1920131087f915c891bf565eb2b3174aeb50bd88c5c16f17073abc2cc1ad3327df50fe3bcdeed56c316d12e7add73f27ddbeb2b3b8196071d19f57c648893ab8346466ebf64a6a5166b54f5be6fd4d64a9e73b68dd4bd547320f64b39c4c3246a3e5226ced2180959e9695e009d7bdd29b19bea2e8d9dcc0e319d80225b42b238e8757bfc958c9978603f720c90ae5c57b90a5e0d02022a9324560ab3ed0f7f6d73677c726d89f7d543baff0c32802d1ec2daadbb666bb96919b569fec11c3e7f20fe99a90dfc699b743ee06a77f2240e29ddc330ecc263c00b2fe0a959b98c6eb18a11eb761ed5ef5a5a3a0be8efbf37231fcd7c83ba6769bf4f19c73e96e4d77e4a56ced2a06ac90a6b9824c8000c32c7ace406652f80c2dfd09470b750d34fcfc42dcea859fbc9a974b8e9b59651058498c4b4eb5608800f2085493532e106a64ce29e5952c1b87ff0fc961e6d1b1a009dd677dbbd395c5c7a61cb7b0bd16013f2fc91af1e2d4306fa937e8f7faf18", 0x187, 0x0, &(0x7f0000000c80)={0x2, 0x175, {0x0, 0xc, 0x97, "6be07968d3374b5591abe6d0d2aea941938d1a481c39a94bfbc9c9b922c20de18d6b2d9fda611f019d9dca4d980c575da7cff22fb231210e6a8cf863136e03d9aca2279763dc387700a863208b1529df669d46509cc9be4a383a3f0e5bb40f770f45338b62e229fb044924e2a9d00043480e3de9b0b3cf7299a599d2cde00aced33d51ba1bf6d2bf4b9fa18b9edb538e3fe492374618c1", 0xd1, "2e5f851e0651fe9ed2130430a384545144917db29cdfbb52766bd350949e4caf95c70c0ad38ae7ccaff51768b68febe9a1ceb3aa50236f3a991fb1db387737d72245234fd64de38175e1e14fcb751fae1b32a6560937475552c2668dfdefba866bec7f58a7a08ea0efc8c6ad51c2fda52868f87337c9e9ae3c0ff4454729c8307dd6215269b5c75b890a7ed1afe52c924138891dc967234de260eb0fae376aa0105458215660cb7e9d1a2cf475558c4dbdb2c7352b785cc316012834deba62299c9391ad28e13710041d68acde7cf633ae"}, 0x3b, "a4e74d87d74eb8401b103e80b40ea832e4abfa93679f18f1d7c0323ce601220c4056d8df128e3c5dec9b23f181264d5df20995bca8f54e91f96257"}, 0x1bc}) read$FUSE(r1, &(0x7f0000000f00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002f40)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002f80)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000003140)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003100)={&(0x7f0000002fc0)={0x118, r2, 0xc08, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x85}, 0x20008000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000003180)={0x1, 'ip6tnl0\x00', {}, 0x4}) syz_open_dev$hiddev(&(0x7f00000031c0), 0x0, 0x0) getsockname$tipc(r1, &(0x7f0000003200), &(0x7f0000003240)=0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffff}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) 500.4096ms ago: executing program 3 (id=9128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 315.925645ms ago: executing program 3 (id=9129): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0xf2d8, 0x13090, 0x0, 0x382}, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/148, 0x94, 0xfffffffffffffffd, 0x1c}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e"}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="48b801b8973400000000989823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f011c244d0fc708c74424002a010000c744240227000000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8c4e1b45702f341f4c4017d10e548b8c0770c90f03a5f340f23c80f20e035004000000f22e035080000000f23f8", 0x8f}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r6, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 261.657619ms ago: executing program 8 (id=9130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='/dev/kvm\x00', 0xfffffffffffffffc) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "ed27fbb569b69dc51dc5c32930bd5b7586785b9c975fe54da42154c59a884c54b5ffc33cd3314f7903005e590fec690adc00", 0x2f}, 0x48, 0x0) keyctl$unlink(0x9, r4, r4) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000140)=0x4, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x4b, &(0x7f0000000180)={0x200000000000001}, 0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) dup(r2) (async) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='/dev/kvm\x00', 0xfffffffffffffffc) (async) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "ed27fbb569b69dc51dc5c32930bd5b7586785b9c975fe54da42154c59a884c54b5ffc33cd3314f7903005e590fec690adc00", 0x2f}, 0x48, 0x0) (async) keyctl$unlink(0x9, r4, r4) (async) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) (async) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000140)=0x4, 0x4) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) (async) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$sock_linger(r5, 0x1, 0x4b, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 170.907496ms ago: executing program 8 (id=9131): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10008, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = getuid() r3 = getuid() lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x400, 0x1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x1, r4}, {0x8, 0x0, r5}, {0x8, 0x1, r6}], {}, {0x20, 0x5}}, 0x54, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000680), 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(r7, 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000040)={0x0, 0x5}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) pipe(&(0x7f0000000180)) 0s ago: executing program 8 (id=9132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000580)={{r2}, 0x0, 0x4, @unused=[0x5, 0x6, 0x6a8000000, 0x4], @subvolid=0x3c5}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getgroups(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0xffffffff, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B\v', 0x2}], 0x1}}], 0x1, 0x400c404) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ftruncate(r4, 0xb) exit(0xfe) sendmmsg$inet6(r5, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): onfigurations: 9, using maximum allowed: 8 [ 751.021813][T26711] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.030501][ T437] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 751.036711][T26711] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.051580][T26711] bridge_slave_0: entered allmulticast mode [ 751.057561][ T437] usb 9-1: can't read configurations, error -61 [ 751.063879][T26711] bridge_slave_0: entered promiscuous mode [ 751.066290][ T437] usb usb9-port1: unable to enumerate USB device [ 751.070388][T18242] tipc: Left network mode [ 751.077969][T26711] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.087507][T26711] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.094592][T26711] bridge_slave_1: entered allmulticast mode [ 751.100943][T26711] bridge_slave_1: entered promiscuous mode [ 751.107923][T18242] veth1_macvtap: left promiscuous mode [ 751.113425][T18242] veth0_vlan: left promiscuous mode [ 751.183790][T26711] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.190914][T26711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.198217][T26711] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.205401][T26711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.227273][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.234536][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.243855][T18231] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.251058][T18231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.260504][T18234] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.267568][T18234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.290495][T26711] veth0_vlan: entered promiscuous mode [ 751.296193][T24243] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 751.303662][T26711] veth1_macvtap: entered promiscuous mode [ 751.455437][T24243] usb 2-1: Using ep0 maxpacket: 16 [ 751.461629][T24243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 751.470952][T24243] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 751.480644][T24243] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 751.490637][T24243] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 751.500401][T24243] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 751.510174][T24243] usb 2-1: config 1 interface 0 has no altsetting 0 [ 751.516899][T24243] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 751.526161][T24243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.536096][T24243] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 751.736266][T24243] scsi host1: usb-storage 2-1:1.0 [ 751.815105][T26753] rust_binder: 23: no such ref 2 [ 752.052492][T26768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 752.052606][T26768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 752.059213][T26768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 752.085507][T26718] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 200, size: 4096) [ 752.094733][T26718] rust_binder: Error while translating object. [ 752.105999][T26718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 752.112185][T26718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:897 [ 752.796257][T18234] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 752.826927][T26781] rust_binder: Error while translating object. [ 752.826970][T26781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 752.833282][T26781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 753.021751][T26751] sddr09: could not read card info [ 753.036217][T24243] usb 2-1: USB disconnect, device number 85 [ 753.055706][T26788] rust_binder: Write failure EFAULT in pid:42 [ 753.075475][T18235] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 753.096756][T18235] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 753.107856][T18235] sd 1:0:0:0: [sdb] Write Protect is off [ 753.113717][T18235] sd 1:0:0:0: [sdb] Asking for cache data failed [ 753.123747][T18235] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 753.134019][T26797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 753.134103][T26797] rust_binder: 684: no such ref 2 [ 753.140330][T18235] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 753.175066][T25204] udevd[25204]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 753.192129][T26800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:684 [ 753.201502][T26800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:684 [ 753.205408][T25204] udevd[25204]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 753.515312][ T497] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 753.657608][T26819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 753.658284][T26819] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 753.669303][ T497] usb 10-1: config index 0 descriptor too short (expected 2304, got 36) [ 753.670939][T26819] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true [ 753.677662][ T497] usb 10-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 753.690777][T26819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 753.694072][ T497] usb 10-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 753.702708][T26819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:909 [ 753.712256][ T497] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 753.741076][ T497] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 753.750267][ T497] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.759071][ T497] usb 10-1: config 0 descriptor?? [ 753.784583][T26821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8686'. [ 753.791144][T26822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 753.844266][T26821] rust_binder: Error in use_page_slow: ESRCH [ 753.850784][T26821] rust_binder: use_range failure ESRCH [ 753.856813][T26821] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 753.862383][T26821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 753.870302][T26821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:911 [ 753.895165][ T45] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 754.056306][ T45] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 754.067925][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 754.079078][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 754.090262][ T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 754.103232][ T45] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 754.112343][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.121098][ T45] usb 9-1: config 0 descriptor?? [ 754.128928][T26817] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 754.505142][ T497] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 754.538345][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.545867][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.553271][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.560743][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.568161][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.575579][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.582964][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.590370][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.597779][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.605191][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.612614][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.620036][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.627587][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.635526][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.643783][ T45] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 754.651399][ T45] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 754.660248][ T45] plantronics 0003:047F:FFFF.0044: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 754.665063][ T497] usb 4-1: Using ep0 maxpacket: 8 [ 754.679233][ T497] usb 4-1: no configurations [ 754.683850][ T497] usb 4-1: can't read configurations, error -22 [ 754.815147][ T497] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 754.856618][ T45] usb 9-1: USB disconnect, device number 34 [ 754.965074][ T497] usb 4-1: Using ep0 maxpacket: 8 [ 754.970582][ T497] usb 4-1: no configurations [ 754.975336][ T497] usb 4-1: can't read configurations, error -22 [ 754.981752][ T497] usb usb4-port1: attempt power cycle [ 755.325044][ T497] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 755.345375][ T497] usb 4-1: Using ep0 maxpacket: 8 [ 755.350904][ T497] usb 4-1: no configurations [ 755.355864][ T497] usb 4-1: can't read configurations, error -22 [ 755.406515][T26860] rust_binder: 1234: no such ref 0 [ 755.411885][T26860] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 755.495068][ T497] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 755.525574][ T497] usb 4-1: Using ep0 maxpacket: 8 [ 755.533672][ T497] usb 4-1: no configurations [ 755.539635][ T497] usb 4-1: can't read configurations, error -22 [ 755.546576][ T497] usb usb4-port1: unable to enumerate USB device [ 756.282889][T26875] binder: Unknown parameter 'contextÀ' [ 756.394991][T24243] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 756.418020][T26884] rust_binder: Write failure EINVAL in pid:1251 [ 756.497834][ T437] usb 10-1: USB disconnect, device number 2 [ 756.526735][T24243] usb 2-1: device descriptor read/64, error -71 [ 756.597233][T26896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26896 comm=syz.9.8707 [ 756.610049][T26896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=254 sclass=netlink_route_socket pid=26896 comm=syz.9.8707 [ 756.684816][ T497] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 756.784819][T24243] usb 2-1: device descriptor read/64, error -71 [ 756.836517][ T497] usb 9-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 756.846784][ T497] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.859877][ T497] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 756.868953][ T497] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.877794][ T497] usb 9-1: config 0 descriptor?? [ 756.883644][ T497] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 756.944808][ T8433] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 757.024794][T24243] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 757.096017][ T8433] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 757.107058][ T8433] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.119979][ T8433] usb 10-1: config 0 interface 0 has no altsetting 0 [ 757.126728][ T8433] usb 10-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 757.135866][ T8433] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.144489][ T8433] usb 10-1: config 0 descriptor?? [ 757.149839][T26908] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 757.154781][T24243] usb 2-1: device descriptor read/64, error -71 [ 757.280788][ T36] kauditd_printk_skb: 536 callbacks suppressed [ 757.280805][ T36] audit: type=1400 audit(2016778537.292:63344): avc: denied { setattr } for pid=26909 comm="syz.3.8712" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 757.394808][T24243] usb 2-1: device descriptor read/64, error -71 [ 757.504813][T24243] usb usb2-port1: attempt power cycle [ 757.565860][ T8433] sunplus 0003:04FC:05D8.0045: hidraw0: USB HID v1.01 Device [HID 04fc:05d8] on usb-dummy_hcd.9-1/input0 [ 757.664737][ T497] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 757.766098][T25021] usb 10-1: USB disconnect, device number 3 [ 757.791019][T26913] overlay: Unknown parameter 'appraise' [ 757.814767][ T497] usb 4-1: Using ep0 maxpacket: 8 [ 757.821494][ T497] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 757.829808][ T497] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 757.838581][ T497] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 757.847678][T24243] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 757.855309][ T497] usb 4-1: config 250 has no interface number 0 [ 757.862038][ T497] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 757.873687][ T497] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 757.884227][ T497] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 513 [ 757.894726][ T497] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 757.908327][ T497] usb 4-1: config 250 interface 228 has no altsetting 0 [ 757.916166][T24243] usb 2-1: device descriptor read/8, error -71 [ 757.922736][ T497] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 757.931920][ T497] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 757.940210][ T497] usb 4-1: Product: syz [ 757.944364][ T497] usb 4-1: SerialNumber: syz [ 757.951072][ T497] hub 4-1:250.228: bad descriptor, ignoring hub [ 757.957405][ T497] hub 4-1:250.228: probe with driver hub failed with error -5 [ 757.969405][T26908] tmpfs: Unknown parameter 'no' [ 757.974914][T26908] rust_binder: 76: no such ref 0 [ 758.045763][T24243] usb 2-1: device descriptor read/8, error -71 [ 758.151162][ T497] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 118 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 758.284664][T24243] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 758.305725][T24243] usb 2-1: device descriptor read/8, error -71 [ 758.435742][T24243] usb 2-1: device descriptor read/8, error -71 [ 758.544741][T24243] usb usb2-port1: unable to enumerate USB device [ 759.044744][T26910] usb 4-1: reset high-speed USB device number 118 using dummy_hcd [ 759.359354][ T36] audit: type=1400 audit(2016778539.362:63345): avc: denied { append } for pid=26930 comm="syz.9.8719" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 759.387230][ T36] audit: type=1400 audit(2016778539.362:63346): avc: denied { ioctl } for pid=26930 comm="syz.9.8719" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 759.417633][ C1] usblp0: nonzero read bulk status received: -71 [ 759.428068][ T497] usb 9-1: USB disconnect, device number 35 [ 759.473774][T26934] overlayfs: missing 'workdir' [ 759.554626][ T8433] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 759.575250][T26944] rust_binder: Write failure EFAULT in pid:1260 [ 759.634574][ T45] usb 4-1: USB disconnect, device number 118 [ 759.647467][ T45] usblp0: removed [ 759.704497][ T8433] usb 2-1: Using ep0 maxpacket: 16 [ 759.710810][ T8433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.721761][ T8433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.731615][ T8433] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 759.744530][ T8433] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 759.753567][ T8433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.762211][ T8433] usb 2-1: config 0 descriptor?? [ 760.014468][T25021] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 760.148601][T26959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 760.164406][T25021] usb 9-1: Using ep0 maxpacket: 16 [ 760.180369][T25021] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 760.183275][ T8433] microsoft 0003:045E:07DA.0046: ignoring exceeding usage max [ 760.192353][T25021] usb 9-1: config 0 has no interface number 0 [ 760.199745][ T8433] microsoft 0003:045E:07DA.0046: usage index exceeded [ 760.203189][T25021] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.208999][ T8433] microsoft 0003:045E:07DA.0046: item 0 1 2 0 parsing failed [ 760.220250][T25021] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.227346][ T8433] microsoft 0003:045E:07DA.0046: parse failed [ 760.237244][T25021] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 760.243499][ T8433] microsoft 0003:045E:07DA.0046: probe with driver microsoft failed with error -22 [ 760.252386][T25021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.268435][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8730'. [ 760.272680][T25021] usb 9-1: config 0 descriptor?? [ 760.386842][ T497] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 760.387307][ T45] usb 2-1: USB disconnect, device number 90 [ 760.545453][ T497] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 760.555630][ T497] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 760.566890][ T497] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 760.576090][ T497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.584089][ T497] usb 4-1: Product: syz [ 760.588280][ T497] usb 4-1: Manufacturer: syz [ 760.592872][ T497] usb 4-1: SerialNumber: syz [ 760.598357][ T497] usb 4-1: config 0 descriptor?? [ 760.603878][T26957] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 760.611126][T26957] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 760.819529][T26957] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 760.826899][T26957] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 760.885945][T25021] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.0047/input/input78 [ 760.898866][T25021] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.0047/input/input79 [ 760.912623][T25021] uclogic 0003:28BD:0071.0047: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1 [ 760.950301][T26969] netlink: 'syz.1.8732': attribute type 1 has an invalid length. [ 761.034300][ T8433] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 761.048689][T26981] fuse: Bad value for 'user_id' [ 761.053820][T26981] fuse: Bad value for 'user_id' [ 761.074713][T26983] overlayfs: failed to resolve './file1': -2 [ 761.195736][ T8433] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 761.214271][ T8433] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.235017][ T8433] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 761.250535][ T8433] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 761.259112][ T497] Error reading MAC address [ 761.272366][ T8433] usb 10-1: Product: syz [ 761.277346][ T8433] usb 10-1: Manufacturer: syz [ 761.285058][ T8433] hub 10-1:4.0: USB hub found [ 761.471031][ T437] usb 4-1: USB disconnect, device number 119 [ 761.488110][ T8433] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 761.524812][ T8433] usb 10-1: USB disconnect, device number 4 [ 761.774226][ T497] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 761.924200][ T497] usb 2-1: Using ep0 maxpacket: 32 [ 761.930373][ T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.941325][ T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.951201][ T497] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 761.960261][ T497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.968840][ T497] usb 2-1: config 0 descriptor?? [ 761.974780][ T497] hub 2-1:0.0: USB hub found [ 762.070600][T27020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 762.081686][T27023] tmpfs: Unknown parameter '' [ 762.083188][T27020] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 762.125720][T27040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 762.134288][T27040] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 762.148778][T27042] syz.3.8754: attempt to access beyond end of device [ 762.148778][T27042] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 762.150748][T27043] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 762.157371][T27042] FAT-fs (loop3): unable to read boot sector [ 762.183844][ T497] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 762.209866][ T437] rust_binder: 27027: removing orphan mapping 0:112 [ 762.393685][ T497] hid-generic 0003:046D:C31C.0048: item fetching failed at offset 0/1 [ 762.402165][ T497] hid-generic 0003:046D:C31C.0048: probe with driver hid-generic failed with error -22 [ 762.464155][ T437] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 762.615257][ T437] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 762.624553][ T437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.633498][ T437] usb 10-1: config 0 descriptor?? [ 762.644501][T25021] usb 9-1: USB disconnect, device number 36 [ 762.704193][ T497] usb 2-1: USB disconnect, device number 91 [ 762.954079][T25021] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 763.104066][T25021] usb 9-1: Using ep0 maxpacket: 16 [ 763.119886][T25021] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 763.132992][T27058] overlayfs: failed to resolve './file0': -2 [ 763.139166][T25021] usb 9-1: config 0 has no interface number 0 [ 763.145369][T27058] fuse: Unknown parameter 'vd' [ 763.149192][T25021] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 763.162238][T25021] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 763.172529][T25021] usb 9-1: config 0 interface 41 has no altsetting 0 [ 763.185232][T25021] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 763.194471][T25021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.202549][T25021] usb 9-1: Product: syz [ 763.206816][T25021] usb 9-1: Manufacturer: syz [ 763.211767][T25021] usb 9-1: SerialNumber: syz [ 763.221458][T25021] usb 9-1: config 0 descriptor?? [ 763.226902][T27055] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 763.237449][T27055] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 763.358223][T27065] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 763.387381][T27067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8762'. [ 763.447199][T27055] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 763.455685][T27055] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 763.471028][ T36] audit: type=1400 audit(2016778543.473:63347): avc: granted { setsecparam } for pid=27074 comm="syz.1.8764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 763.512513][T27080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.530101][T27080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.567467][T27087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.578439][T27086] rust_binder: Got transaction with invalid offset. [ 763.578508][T27086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 763.585853][T27088] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 763.602928][T27086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:739 [ 763.657871][ T437] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 763.668119][ T437] asix 10-1:0.0: probe with driver asix failed with error -71 [ 763.680135][ T437] usb 10-1: USB disconnect, device number 5 [ 763.693859][T27090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 763.693895][T27090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:999 [ 763.782998][T27092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8769'. [ 763.891872][T25021] Error reading MAC address [ 763.896749][T27055] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 763.904027][T27055] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 763.941376][ T36] audit: type=1400 audit(2016778543.943:63348): avc: denied { write } for pid=27103 comm="syz.1.8772" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 763.965643][T27104] 9pnet_fd: Insufficient options for proto=fd [ 764.238004][ T36] audit: type=1400 audit(2016778544.243:63349): avc: denied { read write } for pid=26711 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.267372][ T36] audit: type=1400 audit(2016778544.243:63350): avc: denied { open } for pid=26711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.293366][ T36] audit: type=1400 audit(2016778544.243:63351): avc: denied { ioctl } for pid=26711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.328489][ T36] audit: type=1400 audit(2016778544.273:63352): avc: denied { read write } for pid=27106 comm="syz.9.8774" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 764.357736][ T36] audit: type=1400 audit(2016778544.273:63353): avc: denied { open } for pid=27106 comm="syz.9.8774" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 764.386798][ T36] audit: type=1400 audit(2016778544.293:63354): avc: denied { map } for pid=27106 comm="syz.9.8774" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 764.420931][ T36] audit: type=1400 audit(2016778544.293:63355): avc: denied { execute } for pid=27106 comm="syz.9.8774" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 764.450744][ T36] audit: type=1400 audit(2016778544.323:63356): avc: denied { execute } for pid=27106 comm="syz.9.8774" path="/39/blkio.bfq.io_merged" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 764.544294][T27055] rust_binder: Fixups oob 156 120 160 164 [ 764.544321][T27055] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 764.550137][T27055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 764.562922][T27110] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 764.576312][T27055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1269 [ 764.623388][ T633] rust_binder: 27108: removing orphan mapping 0:112 [ 764.644481][T25021] sr9700 9-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet, 2a:ce:69:92:98:80 [ 764.682951][T25021] usb 9-1: USB disconnect, device number 37 [ 764.704311][T25021] sr9700 9-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet [ 764.921548][T18242] Bluetooth: hci0: Frame reassembly failed (-84) [ 765.043824][ T633] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 765.183786][ T633] usb 4-1: device descriptor read/64, error -71 [ 765.416740][T27135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=27135 comm=syz.8.8784 [ 765.423795][ T633] usb 4-1: device descriptor read/64, error -71 [ 765.683767][ T633] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 765.843747][ T633] usb 4-1: device descriptor read/64, error -71 [ 766.093704][ T633] usb 4-1: device descriptor read/64, error -71 [ 766.204465][ T633] usb usb4-port1: attempt power cycle [ 766.563673][ T633] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 766.596463][ T633] usb 4-1: device descriptor read/8, error -71 [ 766.747881][ T633] usb 4-1: device descriptor read/8, error -71 [ 766.953794][ T766] Bluetooth: hci0: command 0x1003 tx timeout [ 766.959868][T24487] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 766.993616][ T633] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 767.016165][ T633] usb 4-1: device descriptor read/8, error -71 [ 767.146625][ T633] usb 4-1: device descriptor read/8, error -71 [ 767.254312][ T633] usb usb4-port1: unable to enumerate USB device [ 767.753484][ T497] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 767.784086][T27164] tipc: Enabling of bearer rejected, failed to enable media [ 767.915843][ T497] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 767.929163][ T497] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 767.945486][ T497] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 767.986935][ T497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.001328][ T497] usb 9-1: Product: syz [ 768.011033][ T497] usb 9-1: Manufacturer: syz [ 768.017388][ T497] usb 9-1: SerialNumber: syz [ 768.024546][ T497] usb 9-1: config 0 descriptor?? [ 768.031700][T27156] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 768.040598][T27156] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 768.203436][T25021] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 768.266222][T27156] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 768.286483][T27156] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 768.363412][T25021] usb 4-1: Using ep0 maxpacket: 16 [ 768.375127][T25021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.386108][T25021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.401817][T25021] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 768.411602][T25021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.422018][T25021] usb 4-1: config 0 descriptor?? [ 768.500841][ T36] kauditd_printk_skb: 460 callbacks suppressed [ 768.500860][ T36] audit: type=1400 audit(2016778548.503:63817): avc: denied { ioctl } for pid=27155 comm="syz.8.8791" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.504393][T27183] 9pnet_fd: Insufficient options for proto=fd [ 768.518124][ T36] audit: type=1400 audit(2016778548.503:63818): avc: denied { ioctl } for pid=27155 comm="syz.8.8791" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.536186][ T497] Error reading MAC address [ 768.573402][ T36] audit: type=1400 audit(2016778548.503:63819): avc: denied { ioctl } for pid=27155 comm="syz.8.8791" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.639112][ T36] audit: type=1400 audit(2016778548.513:63820): avc: denied { mounton } for pid=27182 comm="syz.9.8798" path="/50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 768.670270][T27186] netlink: 5 bytes leftover after parsing attributes in process `syz.9.8799'. [ 768.733417][ T36] audit: type=1400 audit(2016778548.513:63821): avc: denied { ioctl } for pid=27155 comm="syz.8.8791" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.758528][ T36] audit: type=1400 audit(2016778548.513:63822): avc: denied { ioctl } for pid=27155 comm="syz.8.8791" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.783867][ T36] audit: type=1400 audit(2016778548.513:63823): avc: denied { ioctl } for pid=27155 comm="syz.8.8791" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.809620][ T36] audit: type=1400 audit(2016778548.593:63824): avc: denied { read write } for pid=26711 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 768.834285][ T36] audit: type=1400 audit(2016778548.593:63825): avc: denied { read write open } for pid=26711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 768.848462][T25021] hid-multitouch 0003:1FD2:6007.0049: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 768.868812][T27177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 768.943341][ T497] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 768.943537][T25021] usb 9-1: USB disconnect, device number 38 [ 769.052533][ T633] usb 4-1: USB disconnect, device number 124 [ 769.116101][ T497] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 769.143370][ T497] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.161404][ T497] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 769.180799][ T497] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 769.203319][ T497] usb 10-1: Product: syz [ 769.207616][ T497] usb 10-1: Manufacturer: syz [ 769.226718][ T497] hub 10-1:4.0: USB hub found [ 769.311317][T27195] rust_binder: Error in use_page_slow: ESRCH [ 769.311334][T27195] rust_binder: use_range failure ESRCH [ 769.323332][T27195] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 769.328840][T27195] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 769.337374][T27195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1301 [ 769.429543][ T497] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 769.488180][ T497] usb 10-1: USB disconnect, device number 6 [ 769.635827][T27203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 769.640622][T27203] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 769.662427][T27204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 770.002907][T27215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 770.009443][ T633] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 770.043227][T27215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:167 [ 770.197561][ T633] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.253237][ T633] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.318769][ T633] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 770.331076][ T633] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 770.351575][ T633] usb 9-1: Product: syz [ 770.363892][T27231] netlink: 140 bytes leftover after parsing attributes in process `syz.9.8810'. [ 770.373022][ T633] usb 9-1: Manufacturer: syz [ 770.384916][ T633] hub 9-1:4.0: USB hub found [ 770.601088][ T633] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 770.643573][ T633] usb 9-1: USB disconnect, device number 39 [ 770.923106][ T8433] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 771.095704][ T8433] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 771.106067][ T8433] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 771.126335][ T8433] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 771.141171][ T8433] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.163081][ T8433] usb 10-1: Product: syz [ 771.167364][ T8433] usb 10-1: Manufacturer: syz [ 771.172049][ T8433] usb 10-1: SerialNumber: syz [ 771.188030][ T8433] usb 10-1: config 0 descriptor?? [ 771.196440][T27245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1312 [ 771.203440][T27243] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.240566][T27243] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.473604][T27243] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.481097][T27243] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.735822][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.736173][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.742940][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.756759][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.764319][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.771133][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.779081][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.786659][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.796073][T27259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.833012][ T766] Bluetooth: hci1: command 0x1003 tx timeout [ 771.845557][T24487] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 771.922653][ T8433] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 771.941260][T27264] overlayfs: invalid origin (0000) [ 771.987621][T27268] binder: Bad value for 'defcontext' [ 772.125610][T27243] __vm_enough_memory: pid: 27243, comm: syz.9.8813, bytes: 18014402804453376 not enough memory for the allocation [ 772.155158][ T8433] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 772.179669][ T8433] usb 10-1: USB disconnect, device number 7 [ 773.002867][ T8433] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 773.132847][T25021] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 773.175210][ T8433] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.186170][ T8433] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.196137][ T8433] usb 9-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 773.205257][ T8433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.214971][ T8433] usb 9-1: config 0 descriptor?? [ 773.282838][T25021] usb 10-1: device descriptor read/64, error -71 [ 773.519472][ T36] kauditd_printk_skb: 748 callbacks suppressed [ 773.519489][ T36] audit: type=1400 audit(2016778553.524:64569): avc: denied { read write } for pid=27305 comm="syz.3.8833" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 773.533425][T25021] usb 10-1: device descriptor read/64, error -71 [ 773.582780][ T36] audit: type=1400 audit(2016778553.564:64570): avc: denied { read open } for pid=27305 comm="syz.3.8833" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 773.627195][ T8433] sony 0003:054C:0268.004A: item fetching failed at offset 1/5 [ 773.637003][ T36] audit: type=1400 audit(2016778553.564:64571): avc: denied { map } for pid=27305 comm="syz.3.8833" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 773.669704][ T8433] sony 0003:054C:0268.004A: parse failed [ 773.682025][ T8433] sony 0003:054C:0268.004A: probe with driver sony failed with error -22 [ 773.706319][ T36] audit: type=1400 audit(2016778553.564:64572): avc: denied { execmem } for pid=27305 comm="syz.3.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 773.745190][ T36] audit: type=1400 audit(2016778553.564:64573): avc: denied { read execute } for pid=27305 comm="syz.3.8833" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 773.774398][ T36] audit: type=1400 audit(2016778553.564:64574): avc: denied { read write } for pid=27305 comm="syz.3.8833" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 773.799326][ T36] audit: type=1400 audit(2016778553.564:64575): avc: denied { read write open } for pid=27305 comm="syz.3.8833" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 773.812847][T25021] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 773.842760][ T36] audit: type=1400 audit(2016778553.564:64576): avc: denied { read } for pid=27305 comm="syz.3.8833" dev="nsfs" ino=4026533095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 773.890676][ T36] audit: type=1400 audit(2016778553.564:64577): avc: denied { read open } for pid=27305 comm="syz.3.8833" path="net:[4026533095]" dev="nsfs" ino=4026533095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 773.936966][ T36] audit: type=1400 audit(2016778553.564:64578): avc: denied { create } for pid=27305 comm="syz.3.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.963627][ T8433] usb 9-1: USB disconnect, device number 40 [ 773.992932][T25021] usb 10-1: device descriptor read/64, error -71 [ 774.233139][T25021] usb 10-1: device descriptor read/64, error -71 [ 774.343187][T25021] usb usb10-port1: attempt power cycle [ 774.702672][T25021] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 774.725244][T25021] usb 10-1: device descriptor read/8, error -71 [ 774.865504][T25021] usb 10-1: device descriptor read/8, error -71 [ 775.026629][T27321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 775.043198][ T437] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 775.102643][T25021] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 775.152018][T25021] usb 10-1: device descriptor read/8, error -71 [ 775.206066][ T437] usb 9-1: unable to get BOS descriptor or descriptor too short [ 775.216137][ T437] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 775.236829][ T437] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 775.246444][ T437] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 775.296496][T25021] usb 10-1: device descriptor read/8, error -71 [ 775.413171][T25021] usb usb10-port1: unable to enumerate USB device [ 775.480520][ T437] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 775.492593][ T8433] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 775.665162][ T8433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.682531][ T8433] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 775.691653][ T8433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.724227][ T8433] usb 4-1: config 0 descriptor?? [ 775.898200][T25021] usb 9-1: USB disconnect, device number 41 [ 775.922937][T25021] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 776.407678][T27356] rust_binder: Write failure EINVAL in pid:205 [ 776.647605][T27372] rust_binder: Error while translating object. [ 776.661618][T27372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 776.686556][T27372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1365 [ 776.725399][T27372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 776.872395][ T633] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 777.275090][T27394] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8851'. [ 777.284671][T27394] rust_binder: 1383: no such ref 0 [ 777.289814][T27394] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 777.298913][T27394] rust_binder: 1383: no such ref 0 [ 777.343276][T27396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 777.343550][T27396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 777.350288][T27396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 777.527915][T27403] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8854'. [ 777.613451][T27403] netlink: 1 bytes leftover after parsing attributes in process `syz.9.8854'. [ 777.822305][ T8433] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 777.992258][ T8433] usb 9-1: Using ep0 maxpacket: 16 [ 778.023515][ T8433] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 778.032154][ T8433] usb 9-1: config 0 has no interface number 0 [ 778.038797][ T8433] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.050964][ T8433] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.061682][ T8433] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 778.071516][ T8433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.082272][ T8433] usb 9-1: config 0 descriptor?? [ 778.198349][ T500] usb 4-1: USB disconnect, device number 125 [ 778.278109][T27407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 778.280782][T27407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 778.291686][T27408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 778.342575][T27412] /dev/rnullb0: Can't open blockdev [ 778.522226][ T36] kauditd_printk_skb: 947 callbacks suppressed [ 778.522245][ T36] audit: type=1400 audit(2016778558.525:65526): avc: denied { read write } for pid=23694 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 778.579289][ T36] audit: type=1400 audit(2016778558.525:65527): avc: denied { read write open } for pid=23694 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 778.625268][T27420] incfs_lookup_dentry err:-13 [ 778.629996][T27420] incfs: Can't find or create .index dir in ./bus [ 778.632172][ T36] audit: type=1400 audit(2016778558.525:65528): avc: denied { ioctl } for pid=23694 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 778.672215][T27420] incfs: mount failed -13 [ 778.680883][T27420] 9pnet_fd: Insufficient options for proto=fd [ 778.681668][T27422] rust_binder: Error while translating object. [ 778.697257][T27422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 778.717295][ T36] audit: type=1400 audit(2016778558.545:65529): avc: denied { write } for pid=27416 comm="syz.9.8858" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 778.732251][T27422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:813 [ 778.782204][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 778.800533][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 778.810660][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 778.819859][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 778.827730][ T109] loop2: unable to read partition table [ 778.842197][ T8433] usbhid 9-1:0.1: can't add hid device: -71 [ 778.852205][ T8433] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 778.864189][ T36] audit: type=1400 audit(2016778558.545:65530): avc: denied { write } for pid=27416 comm="syz.9.8858" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 778.889856][ T8433] usb 9-1: USB disconnect, device number 42 [ 778.896544][ T36] audit: type=1400 audit(2016778558.545:65531): avc: denied { map } for pid=27416 comm="syz.9.8858" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 778.934704][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 778.943910][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 778.961491][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 778.970766][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 778.979305][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 778.981977][ T36] audit: type=1400 audit(2016778558.615:65532): avc: denied { read write } for pid=27416 comm="syz.9.8858" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 778.988515][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 779.021122][ T36] audit: type=1400 audit(2016778558.615:65533): avc: denied { read write open } for pid=27416 comm="syz.9.8858" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 779.047012][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 779.056175][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 779.082112][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 779.091297][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 779.109844][ T36] audit: type=1400 audit(2016778558.615:65534): avc: denied { mounton } for pid=27418 comm="syz.3.8859" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.162122][ T36] audit: type=1400 audit(2016778558.635:65535): avc: denied { read write } for pid=27416 comm="syz.9.8858" name="binder0" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 779.334610][T27430] rust_binder: Write failure EFAULT in pid:224 [ 779.352122][ T437] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 779.486411][T18234] macsec0: left allmulticast mode [ 779.491644][T18234] veth1_macvtap: left allmulticast mode [ 779.499624][T18234] macsec0: left promiscuous mode [ 779.506046][T18234] bridge0: port 3(macsec0) entered disabled state [ 779.513304][T18234] bridge_slave_1: left allmulticast mode [ 779.518952][T18234] bridge_slave_1: left promiscuous mode [ 779.524758][ T437] usb 4-1: Using ep0 maxpacket: 32 [ 779.530401][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.539149][T18234] bridge_slave_0: left allmulticast mode [ 779.545640][ T437] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 779.562459][T18234] bridge_slave_0: left promiscuous mode [ 779.572093][ T437] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 779.591575][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.609654][ T437] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 779.634144][ T437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.642863][ T437] usb 4-1: Product: syz [ 779.652055][ T437] usb 4-1: Manufacturer: Ñ• [ 779.662102][ T437] usb 4-1: SerialNumber: syz [ 779.674911][T27426] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.701512][T27426] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.742935][T18234] tipc: Left network mode [ 779.749246][T18234] veth1_macvtap: left promiscuous mode [ 779.756318][T18234] veth0_vlan: left promiscuous mode [ 779.851477][T27433] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.862038][T27433] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.882390][T27433] bridge_slave_0: entered allmulticast mode [ 779.889327][T27433] bridge_slave_0: entered promiscuous mode [ 779.902763][T27433] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.913409][T27433] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.933224][ T437] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 779.944341][T27433] bridge_slave_1: entered allmulticast mode [ 779.951778][ T437] usb 4-1: USB disconnect, device number 126 [ 779.964031][T27433] bridge_slave_1: entered promiscuous mode [ 779.982032][ T437] usblp0: removed [ 780.167494][T27433] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.174581][T27433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.181871][T27433] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.188943][T27433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.249601][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.258749][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.274767][T18235] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.281867][T18235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.294707][T18234] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.301800][T18234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.401325][T27433] veth0_vlan: entered promiscuous mode [ 780.459458][T27433] veth1_macvtap: entered promiscuous mode [ 780.791041][T27466] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 780.832133][ T8433] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 781.011974][ T8433] usb 9-1: Using ep0 maxpacket: 32 [ 781.017823][ T8433] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 781.035449][ T8433] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 781.051901][ T8433] usb 9-1: can't read configurations, error -61 [ 781.111909][ T500] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 781.191921][ T8433] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 781.281858][ T500] usb 10-1: Using ep0 maxpacket: 16 [ 781.293245][ T500] usb 10-1: unable to get BOS descriptor or descriptor too short [ 781.305407][ T500] usb 10-1: config 3 has an invalid interface number: 220 but max is 0 [ 781.314161][ T500] usb 10-1: config 3 has no interface number 0 [ 781.320456][ T500] usb 10-1: config 3 interface 220 has no altsetting 0 [ 781.331551][ T500] usb 10-1: New USB device found, idVendor=04f1, idProduct=3008, bcdDevice=a2.1c [ 781.341406][ T500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.349847][ T500] usb 10-1: Product: syz [ 781.355025][ T500] usb 10-1: Manufacturer: syz [ 781.359890][ T500] usb 10-1: SerialNumber: syz [ 781.364783][ T8433] usb 9-1: Using ep0 maxpacket: 32 [ 781.371238][ T8433] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 781.385307][ T8433] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 781.394613][ T8433] usb 9-1: can't read configurations, error -61 [ 781.402039][ T8433] usb usb9-port1: attempt power cycle [ 781.731917][ T633] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 781.751855][ T8433] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 781.770242][ T500] asix 10-1:3.220 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 781.781615][ T8433] usb 9-1: Using ep0 maxpacket: 32 [ 781.786838][ T500] asix 10-1:3.220: probe with driver asix failed with error -71 [ 781.795645][ T500] usb 10-1: USB disconnect, device number 13 [ 781.805466][ T8433] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 781.816247][ T8433] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 781.824282][ T8433] usb 9-1: can't read configurations, error -61 [ 781.881817][ T633] usb 4-1: Using ep0 maxpacket: 32 [ 781.889454][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.901130][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.911059][ T633] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 781.920264][ T633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.929704][ T633] usb 4-1: config 0 descriptor?? [ 781.937025][ T633] hub 4-1:0.0: USB hub found [ 781.951825][ T8433] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 781.982569][ T8433] usb 9-1: Using ep0 maxpacket: 32 [ 781.989635][ T8433] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 782.000431][ T8433] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 782.008094][ T8433] usb 9-1: can't read configurations, error -61 [ 782.014586][ T8433] usb usb9-port1: unable to enumerate USB device [ 782.138392][ T633] hub 4-1:0.0: 1 port detected [ 782.551735][ T437] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 782.703721][ T437] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 782.712941][ T437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.722967][ T437] usb 10-1: config 0 descriptor?? [ 782.749473][ T633] hub 4-1:0.0: activate --> -90 [ 783.159421][ T500] usb 4-1: USB disconnect, device number 127 [ 783.159578][ T633] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 783.535945][ T36] kauditd_printk_skb: 481 callbacks suppressed [ 783.535963][ T36] audit: type=1400 audit(2016778563.545:66017): avc: denied { ioctl } for pid=27482 comm="syz.9.8876" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.568091][ T36] audit: type=1400 audit(2016778563.545:66018): avc: denied { ioctl } for pid=27482 comm="syz.9.8876" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.677337][ T36] audit: type=1400 audit(2016778563.685:66019): avc: denied { read write } for pid=23694 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.701713][ T36] audit: type=1400 audit(2016778563.685:66020): avc: denied { read write open } for pid=23694 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.732420][ T36] audit: type=1400 audit(2016778563.685:66021): avc: denied { ioctl } for pid=23694 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.791343][ T36] audit: type=1400 audit(2016778563.765:66022): avc: denied { name_bind } for pid=27484 comm="syz.3.8877" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 783.839360][ T36] audit: type=1400 audit(2016778563.765:66023): avc: denied { node_bind } for pid=27484 comm="syz.3.8877" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 783.847138][T27488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.863054][T27490] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.871544][T27488] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 784.146135][T27500] fuse: Unknown parameter '1844674407370955161500000000000000000000003' [ 784.176724][T27500] rust_binder: Fixups oob 164 166 363 196 [ 784.176747][T27500] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 784.184622][T27501] input: syz1 as /devices/virtual/input/input86 [ 784.199290][T27500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 784.199325][T27500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 784.241512][ T633] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 784.300610][T27504] batadv0: tun_chr_ioctl cmd 1074025678 [ 784.306359][T27504] batadv0: group set to 801 [ 784.364190][T27505] rust_binder: 27504 RLIMIT_NICE not set [ 784.364649][T27505] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 784.401629][ T633] usb 4-1: Using ep0 maxpacket: 16 [ 784.415435][ T633] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 784.424637][ T633] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.434763][ T633] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.448903][ T633] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.450687][ T500] rust_binder: 0: removing orphan mapping 0:4248 [ 784.458450][ T633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.472572][ T633] usb 4-1: Product: syz [ 784.476754][ T633] usb 4-1: Manufacturer: syz [ 784.481363][ T633] usb 4-1: SerialNumber: syz [ 784.590124][T27483] rust_binder: Failed copying remainder into alloc: EFAULT [ 784.590147][T27483] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 784.598989][T27483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 784.608733][T27483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:243 [ 784.619757][ T437] usb 10-1: Cannot set autoneg [ 784.648793][ T437] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 784.662526][ T437] usb 10-1: USB disconnect, device number 14 [ 784.846527][T27524] overlayfs: failed to resolve './file1': -2 [ 784.896939][ T633] usb 4-1: 0:2 : does not exist [ 784.937703][T27530] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 784.937735][T27530] rust_binder: Error in use_page_slow: EFAULT [ 784.971409][T27530] rust_binder: use_range failure EFAULT [ 784.971721][T27533] rust_binder: Write failure EINVAL in pid:1407 [ 784.977517][T27530] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 784.977539][T27530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 785.023938][T27530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:42 [ 785.308478][T27547] input: syz1 as /devices/virtual/input/input88 [ 785.319166][T27545] rust_binder: Error in use_page_slow: ESRCH [ 785.319188][T27545] rust_binder: use_range failure ESRCH [ 785.325292][T27545] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 785.330849][T27545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 785.338676][T27545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:245 [ 785.431445][T24243] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 785.581367][T24243] usb 9-1: device descriptor read/64, error -71 [ 785.583142][ T633] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 785.603281][ T633] usb 4-1: USB disconnect, device number 2 [ 785.636958][T25204] udevd[25204]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 785.831382][T24243] usb 9-1: device descriptor read/64, error -71 [ 786.071636][T24243] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 786.118041][T27553] bridge0: entered allmulticast mode [ 786.125292][T27553] bridge0: left allmulticast mode [ 786.169153][T27558] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 786.235761][T24243] usb 9-1: device descriptor read/64, error -71 [ 786.471460][ T633] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 786.501981][T24243] usb 9-1: device descriptor read/64, error -71 [ 786.611761][T24243] usb usb9-port1: attempt power cycle [ 786.643562][ T633] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 786.656580][ T633] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.668696][ T633] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 786.678169][ T633] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 786.686673][ T633] usb 10-1: Product: syz [ 786.690950][ T633] usb 10-1: Manufacturer: syz [ 786.699515][ T633] hub 10-1:4.0: USB hub found [ 786.781252][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 786.901602][ T633] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 786.920332][ T45] usb 4-1: device descriptor read/64, error -71 [ 786.941309][ T633] usb 10-1: USB disconnect, device number 15 [ 786.961205][T24243] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 786.983069][T24243] usb 9-1: device descriptor read/8, error -71 [ 787.113135][T24243] usb 9-1: device descriptor read/8, error -71 [ 787.161244][ T45] usb 4-1: device descriptor read/64, error -71 [ 787.351383][T24243] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 787.373239][T24243] usb 9-1: device descriptor read/8, error -71 [ 787.401166][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 787.512728][T24243] usb 9-1: device descriptor read/8, error -71 [ 787.551141][ T45] usb 4-1: device descriptor read/64, error -71 [ 787.621255][T24243] usb usb9-port1: unable to enumerate USB device [ 787.791115][ T45] usb 4-1: device descriptor read/64, error -71 [ 787.831136][ T8433] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 787.901182][ T45] usb usb4-port1: attempt power cycle [ 787.981158][ T8433] usb 10-1: Using ep0 maxpacket: 32 [ 787.988910][ T8433] usb 10-1: unable to get BOS descriptor or descriptor too short [ 788.000432][ T8433] usb 10-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 788.010788][ T8433] usb 10-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 788.023945][ T8433] usb 10-1: config 1 interface 0 has no altsetting 0 [ 788.034288][ T8433] usb 10-1: string descriptor 0 read error: -22 [ 788.040569][ T8433] usb 10-1: New USB device found, idVendor=ee25, idProduct=a4a7, bcdDevice= 0.40 [ 788.050093][ T8433] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.241081][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 788.264549][T27577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 788.283581][ T45] usb 4-1: device descriptor read/8, error -71 [ 788.285810][ T8433] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 106 proto 1 vid 0xEE25 pid 0xA4A7 [ 788.326349][ T8433] usb 10-1: USB disconnect, device number 16 [ 788.335414][ T8433] usblp0: removed [ 788.423559][ T45] usb 4-1: device descriptor read/8, error -71 [ 788.525924][T27587] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 788.541437][ T36] kauditd_printk_skb: 846 callbacks suppressed [ 788.541454][ T36] audit: type=1400 audit(2016778568.556:66771): avc: denied { ioctl } for pid=27574 comm="syz.3.8904" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.594900][ T36] audit: type=1400 audit(2016778568.586:66772): avc: denied { read write } for pid=21720 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.619304][ T36] audit: type=1400 audit(2016778568.586:66773): avc: denied { read write open } for pid=21720 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.644903][ T36] audit: type=1400 audit(2016778568.586:66774): avc: denied { ioctl } for pid=21720 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.672893][ T36] audit: type=1400 audit(2016778568.596:66775): avc: denied { ioctl } for pid=27574 comm="syz.3.8904" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.720988][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 788.738129][ T36] audit: type=1400 audit(2016778568.636:66776): avc: denied { read write } for pid=27433 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.774540][ T45] usb 4-1: device descriptor read/8, error -71 [ 788.786604][ T36] audit: type=1400 audit(2016778568.636:66777): avc: denied { read write open } for pid=27433 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.849202][ T36] audit: type=1400 audit(2016778568.636:66778): avc: denied { ioctl } for pid=27433 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.885147][ T36] audit: type=1400 audit(2016778568.666:66779): avc: denied { read write } for pid=21720 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.911027][ T36] audit: type=1400 audit(2016778568.666:66780): avc: denied { read write open } for pid=21720 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.913306][ T45] usb 4-1: device descriptor read/8, error -71 [ 789.051089][ T45] usb usb4-port1: unable to enumerate USB device [ 789.071017][ T329] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 789.222790][ T329] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.235413][ T329] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 789.244901][ T329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.252954][ T329] usb 9-1: Product: syz [ 789.257097][ T329] usb 9-1: Manufacturer: syz [ 789.261723][ T437] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 789.269419][ T329] usb 9-1: SerialNumber: syz [ 789.275892][ T329] usb 9-1: config 0 descriptor?? [ 789.287646][ T329] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 789.330270][T25204] udevd[25204]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 789.421601][ T437] usb 10-1: too many configurations: 173, using maximum allowed: 8 [ 789.431954][ T437] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 789.439630][ T437] usb 10-1: can't read configurations, error -61 [ 789.496510][T24243] usb 9-1: USB disconnect, device number 51 [ 789.570921][ T437] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 790.532820][T27622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1440 [ 790.674815][ T437] usb 10-1: too many configurations: 173, using maximum allowed: 8 [ 790.698112][ T437] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 790.710276][T27627] tipc: Started in network mode [ 790.715530][ T437] usb 10-1: can't read configurations, error -61 [ 790.721956][T27627] tipc: Node identity 100, cluster identity 4711 [ 790.730186][ T437] usb usb10-port1: attempt power cycle [ 790.735641][T27627] tipc: Node number set to 256 [ 790.788311][T27633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 790.801203][T27633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:863 [ 790.830257][T27635] rust_binder: 1448: no such ref 3 [ 791.105846][ T437] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 791.143760][ T437] usb 10-1: too many configurations: 173, using maximum allowed: 8 [ 791.154828][ T437] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 791.162524][ T437] usb 10-1: can't read configurations, error -61 [ 791.303116][ T437] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 791.314338][T27651] kvm: kvm [27650]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 791.325912][ T437] usb 10-1: too many configurations: 173, using maximum allowed: 8 [ 791.336653][ T437] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 791.339245][T27651] rust_binder: 1459: no such ref 0 [ 791.344974][ T437] usb 10-1: can't read configurations, error -61 [ 791.350337][T24243] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 791.356405][ T437] usb usb10-port1: unable to enumerate USB device [ 791.364969][T27651] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 791.476504][T27654] rust_binder: 1462: no such ref 3 [ 791.540763][T24243] usb 4-1: No LPM exit latency info found, disabling LPM. [ 791.550214][T24243] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 791.562407][T24243] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.579021][T24243] usb 4-1: string descriptor 0 read error: -22 [ 791.585270][T24243] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 791.594350][T24243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.606596][T27647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 791.835682][T27647] /dev/rnullb0: Can't open blockdev [ 791.843086][T24243] usbhid 4-1:1.0: can't add hid device: -71 [ 791.852745][T24243] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 791.862792][T24243] usb 4-1: USB disconnect, device number 7 [ 792.205007][T27671] rust_binder: Error while translating object. [ 792.205043][T27671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 792.213106][T27671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:64 [ 792.379663][T27677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 792.434848][T27680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 792.485268][T27685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 792.496378][T27685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 792.505530][T27685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:875 [ 792.671187][ T437] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 792.743195][T27705] /dev/nullb0: Can't lookup blockdev [ 792.763101][T27705] netlink: 168 bytes leftover after parsing attributes in process `syz.8.8952'. [ 792.855442][ T437] usb 10-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 792.865989][ T437] usb 10-1: config 230 has 0 interfaces, different from the descriptor's value: 1 [ 792.875246][ T437] usb 10-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 792.884440][ T437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.077602][T24243] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 793.237970][T24243] usb 9-1: Using ep0 maxpacket: 16 [ 793.245792][T24243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.257729][T24243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.267600][T24243] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 793.276665][T24243] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.286586][T24243] usb 9-1: config 0 descriptor?? [ 793.342802][T27678] rust_binder: 265: no such ref 1 [ 793.348435][T27711] rust_binder: 265: no such ref 3 [ 793.353542][T27678] rust_binder: 265: no such ref 3 [ 793.403164][T27677] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 793.410530][T27677] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 793.731969][T24243] playstation 0003:054C:05C4.004C: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.8-1/input0 [ 793.784315][ T36] kauditd_printk_skb: 846 callbacks suppressed [ 793.784334][ T36] audit: type=1400 audit(2016778829.594:67627): avc: denied { create } for pid=27718 comm="syz.3.8957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 793.836808][ T36] audit: type=1400 audit(2016778829.631:67628): avc: denied { setopt } for pid=27718 comm="syz.3.8957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 793.863357][ T36] audit: type=1400 audit(2016778829.631:67629): avc: denied { write } for pid=27718 comm="syz.3.8957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 793.886632][ T36] audit: type=1400 audit(2016778829.640:67630): avc: denied { read write } for pid=23694 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.916750][ T36] audit: type=1400 audit(2016778829.640:67631): avc: denied { read write open } for pid=23694 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.941950][ T36] audit: type=1400 audit(2016778829.640:67632): avc: denied { ioctl } for pid=23694 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.968916][ T36] audit: type=1400 audit(2016778829.687:67633): avc: denied { read write } for pid=27721 comm="syz.3.8958" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 793.998520][ T36] audit: type=1400 audit(2016778829.687:67634): avc: denied { read open } for pid=27721 comm="syz.3.8958" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 794.028532][ T36] audit: type=1400 audit(2016778829.687:67635): avc: denied { map } for pid=27721 comm="syz.3.8958" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 794.057252][ T36] audit: type=1400 audit(2016778829.687:67636): avc: denied { execmem } for pid=27721 comm="syz.3.8958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 794.162220][T27729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 794.163012][T27730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 794.178589][T27729] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 794.185196][T27729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 794.193206][T27729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:901 [ 794.213436][T24243] playstation 0003:054C:05C4.004C: Invalid reportID received, expected 163 got 60 [ 794.233038][T24243] playstation 0003:054C:05C4.004C: Failed to retrieve DualShock4 firmware info: -22 [ 794.244241][T24243] playstation 0003:054C:05C4.004C: Failed to get firmware info from DualShock4 [ 794.253225][T24243] playstation 0003:054C:05C4.004C: HW/FW version data in sysfs will be invalid. [ 794.442836][T24243] playstation 0003:054C:05C4.004C: Failed to retrieve feature with reportID 2: -71 [ 794.462854][T24243] playstation 0003:054C:05C4.004C: Retrying DualShock 4 get calibration report (0x02) request [ 794.464988][T27738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 794.484374][T24243] playstation 0003:054C:05C4.004C: Failed to retrieve feature with reportID 2: -71 [ 794.508442][T24243] playstation 0003:054C:05C4.004C: Retrying DualShock 4 get calibration report (0x02) request [ 794.519643][T24243] playstation 0003:054C:05C4.004C: Failed to retrieve feature with reportID 2: -71 [ 794.530720][T24243] playstation 0003:054C:05C4.004C: Failed to retrieve DualShock4 calibration info: -71 [ 794.545675][T24243] playstation 0003:054C:05C4.004C: Invalid gyro calibration data for axis (3), disabling calibration. [ 794.558479][T24243] playstation 0003:054C:05C4.004C: Invalid gyro calibration data for axis (4), disabling calibration. [ 794.569694][T24243] playstation 0003:054C:05C4.004C: Invalid gyro calibration data for axis (5), disabling calibration. [ 794.580739][T24243] playstation 0003:054C:05C4.004C: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 794.593090][T24243] playstation 0003:054C:05C4.004C: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 794.605412][T24243] playstation 0003:054C:05C4.004C: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 794.617804][T24243] playstation 0003:054C:05C4.004C: Failed to get calibration data from DualShock4 [ 794.627013][T24243] playstation 0003:054C:05C4.004C: Gyroscope and accelerometer will be inaccurate. [ 794.637118][T24243] input: HID 054c:05c4 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.004C/input/input91 [ 794.650051][T24243] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.004C/input/input92 [ 794.668324][T24243] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.004C/input/input93 [ 794.722546][T24243] playstation 0003:054C:05C4.004C: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 794.756593][T24243] usb 9-1: USB disconnect, device number 52 [ 794.852723][ T329] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 795.017028][ T329] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 795.028119][ T329] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.041698][ T329] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 795.051662][ T329] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 795.060862][ T329] usb 4-1: Product: syz [ 795.065199][ T329] usb 4-1: Manufacturer: syz [ 795.074521][ T329] hub 4-1:4.0: USB hub found [ 795.295785][ T329] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 795.324179][ T329] usb 4-1: USB disconnect, device number 8 [ 795.581459][T27752] netlink: 'syz.0.8965': attribute type 13 has an invalid length. [ 795.785196][ T437] usb 10-1: string descriptor 0 read error: -71 [ 795.793286][ T437] usb 10-1: USB disconnect, device number 21 [ 796.138925][T27769] binder: Unknown parameter 'defcontext01777777777777777777777' [ 796.512487][T27785] rust_binder: Error in use_page_slow: ESRCH [ 796.514719][T27785] rust_binder: use_range failure ESRCH [ 796.536324][T27785] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 796.542363][T27787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 796.551045][T27785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 796.564241][T27785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:280 [ 796.895286][ T437] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 797.066334][ T437] usb 10-1: Using ep0 maxpacket: 16 [ 797.073792][ T437] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 797.084158][ T437] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 797.093939][ T437] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 797.105200][ T437] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 797.114660][ T437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 797.122776][ T437] usb 10-1: SerialNumber: syz [ 797.131430][T27796] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 797.364913][T27796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.373500][T27796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.391213][ T437] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -12 [ 797.409258][ T437] usb 10-1: USB disconnect, device number 22 [ 797.603875][T27808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 797.659217][T27809] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 798.039489][T24243] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 798.199917][T24243] usb 4-1: Invalid ep0 maxpacket: 32 [ 798.338909][T24243] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 798.510164][T24243] usb 4-1: Invalid ep0 maxpacket: 32 [ 798.515691][T24243] usb usb4-port1: attempt power cycle [ 798.734596][ T497] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 798.884447][T24243] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 798.896964][ T497] usb 9-1: no configurations [ 798.901592][ T497] usb 9-1: can't read configurations, error -22 [ 798.939647][T24243] usb 4-1: Invalid ep0 maxpacket: 32 [ 798.993096][T27836] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 798.993122][T27836] rust_binder: Error while translating object. [ 799.001808][T27836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 799.008238][T27836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 799.044706][ T497] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 799.076776][T24243] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 799.098972][T24243] usb 4-1: Invalid ep0 maxpacket: 32 [ 799.105227][T24243] usb usb4-port1: unable to enumerate USB device [ 799.130817][T27840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 799.130848][T27840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 799.141878][ T36] kauditd_printk_skb: 543 callbacks suppressed [ 799.141894][ T36] audit: type=1400 audit(2016778834.606:68180): avc: denied { create } for pid=27839 comm="syz.9.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.178022][ T36] audit: type=1400 audit(2016778834.606:68181): avc: denied { write } for pid=27839 comm="syz.9.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.194719][T27840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 799.200001][T27841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 799.206108][ T36] audit: type=1400 audit(2016778834.606:68182): avc: denied { read } for pid=27839 comm="syz.9.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.206570][T27841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 799.216871][ T36] audit: type=1400 audit(2016778834.606:68183): avc: denied { read } for pid=27839 comm="syz.9.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.269284][ T36] audit: type=1400 audit(2016778834.662:68184): avc: denied { ioctl } for pid=27839 comm="syz.9.8995" path="/dev/binderfs/binder1" dev="binder" ino=43 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 799.298329][ T497] usb 9-1: no configurations [ 799.300794][ T36] audit: type=1400 audit(2016778834.662:68185): avc: denied { read } for pid=27839 comm="syz.9.8995" name="binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 799.304606][ T497] usb 9-1: can't read configurations, error -22 [ 799.327769][ T36] audit: type=1400 audit(2016778834.662:68186): avc: denied { read open } for pid=27839 comm="syz.9.8995" path="/dev/binderfs/binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 799.341099][ T497] usb usb9-port1: attempt power cycle [ 799.376889][ T36] audit: type=1400 audit(2016778834.662:68187): avc: denied { ioctl } for pid=27839 comm="syz.9.8995" path="/dev/binderfs/binder1" dev="binder" ino=43 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 799.403081][ T36] audit: type=1400 audit(2016778834.662:68188): avc: denied { call } for pid=27839 comm="syz.9.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 799.422675][ T36] audit: type=1400 audit(2016778834.727:68189): avc: denied { ioctl } for pid=27831 comm="syz.8.8991" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 799.707750][ T633] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 799.739864][ T497] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 799.795044][ T497] usb 9-1: no configurations [ 799.799681][ T497] usb 9-1: can't read configurations, error -22 [ 799.846715][ T633] usb 10-1: device descriptor read/64, error -71 [ 799.942998][ T497] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 799.966153][ T497] usb 9-1: no configurations [ 799.970840][ T497] usb 9-1: can't read configurations, error -22 [ 799.989606][ T497] usb usb9-port1: unable to enumerate USB device [ 800.010901][T27853] fuse: Bad value for 'fd' [ 800.016829][T27853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9000'. [ 800.146168][ T633] usb 10-1: device descriptor read/64, error -71 [ 800.402819][ T633] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 800.541824][ T633] usb 10-1: device descriptor read/64, error -71 [ 800.798530][ T633] usb 10-1: device descriptor read/64, error -71 [ 800.916808][ T633] usb usb10-port1: attempt power cycle [ 801.065272][T27857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 801.279699][ T633] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 801.313684][ T633] usb 10-1: device descriptor read/8, error -71 [ 801.452713][ T633] usb 10-1: device descriptor read/8, error -71 [ 801.708797][ T633] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 801.773808][ T633] usb 10-1: device descriptor read/8, error -71 [ 801.913547][ T633] usb 10-1: device descriptor read/8, error -71 [ 801.985218][T27864] rust_binder: Write failure EFAULT in pid:956 [ 802.030817][ T633] usb usb10-port1: unable to enumerate USB device [ 802.113848][T24243] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 802.286926][T24243] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 802.298321][T24243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.309211][T24243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.319022][T24243] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 802.334171][T24243] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 802.343677][T24243] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 802.352052][T24243] usb 9-1: Manufacturer: syz [ 802.359375][T24243] usb 9-1: config 0 descriptor?? [ 802.370498][ T633] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 802.533869][ T633] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.543362][ T633] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 802.551551][ T633] usb 4-1: config 4 has no interface number 0 [ 802.558218][ T633] usb 4-1: config 4 interface 109 has no altsetting 0 [ 802.568302][ T633] usb 4-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=da.49 [ 802.577819][ T633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.585839][ T633] usb 4-1: Product: syz [ 802.590086][ T633] usb 4-1: Manufacturer: syz [ 802.594675][ T633] usb 4-1: SerialNumber: syz [ 802.830325][T27866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.843722][T27866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.857349][T27866] binder: Bad value for 'max' [ 802.868793][ T633] usb 4-1: bad CDC descriptors [ 802.878022][ T633] usb 4-1: USB disconnect, device number 13 [ 802.903019][T24243] usbhid 9-1:0.0: can't add hid device: -71 [ 802.910291][T24243] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 802.931048][T24243] usb 9-1: USB disconnect, device number 57 [ 803.332939][ T8433] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 803.462191][T27889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9014'. [ 803.509969][ T8433] usb 10-1: Using ep0 maxpacket: 16 [ 803.538482][ T8433] usb 10-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 803.559963][ T8433] usb 10-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 803.571740][ T8433] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.580740][ T8433] usb 10-1: Product: syz [ 803.595835][ T8433] usb 10-1: Manufacturer: syz [ 803.604942][ T8433] usb 10-1: SerialNumber: syz [ 803.851336][ T633] usb 10-1: USB disconnect, device number 27 [ 804.524468][ T36] kauditd_printk_skb: 536 callbacks suppressed [ 804.524486][ T36] audit: type=1400 audit(2016778839.637:68726): avc: denied { map } for pid=27919 comm="syz.9.9025" path="/dev/binderfs/binder0" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 804.555616][ T36] audit: type=1400 audit(2016778839.637:68727): avc: denied { read } for pid=27919 comm="syz.9.9025" path="/dev/binderfs/binder0" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 804.579746][ T36] audit: type=1400 audit(2016778839.637:68728): avc: denied { ioctl } for pid=27919 comm="syz.9.9025" path="/dev/binderfs/binder0" dev="binder" ino=42 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 804.605310][ T36] audit: type=1400 audit(2016778839.637:68729): avc: denied { call } for pid=27919 comm="syz.9.9025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 805.359167][ T36] audit: type=1400 audit(2016778840.413:68730): avc: denied { read write } for pid=26711 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 805.383580][ T36] audit: type=1400 audit(2016778840.413:68731): avc: denied { read write open } for pid=26711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 805.418013][T18231] Bluetooth: hci1: Frame reassembly failed (-84) [ 805.418109][ T36] audit: type=1400 audit(2016778840.413:68732): avc: denied { ioctl } for pid=26711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 805.450396][ T36] audit: type=1400 audit(2016778840.469:68733): avc: denied { read write } for pid=27923 comm="syz.9.9026" name="binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 805.473977][ T36] audit: type=1400 audit(2016778840.469:68734): avc: denied { read write open } for pid=27923 comm="syz.9.9026" path="/dev/binderfs/binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 805.499104][ T36] audit: type=1400 audit(2016778840.469:68735): avc: denied { read write } for pid=27923 comm="syz.9.9026" name="binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 806.746031][T24243] rust_binder: 27926: removing orphan mapping 0:24 [ 806.885903][T27938] overlayfs: conflicting lowerdir path [ 807.440248][T27952] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 807.449147][T27952] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 807.459356][T27952] overlayfs: conflicting options: metacopy=off,verity=on [ 807.559250][T27954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 807.567671][ T766] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 807.580237][T24487] Bluetooth: hci1: command 0x1003 tx timeout [ 807.899151][ T329] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 807.920534][ T633] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 807.972581][T27961] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9038'. [ 808.061871][T27964] netlink: 'syz.0.9040': attribute type 27 has an invalid length. [ 808.070322][ T329] usb 10-1: Using ep0 maxpacket: 16 [ 808.087176][ T329] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 808.112213][T27964] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 808.120528][ T329] usb 10-1: config 0 has no interface number 0 [ 808.126852][ T633] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 808.145200][ T329] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 808.155330][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.176151][ T329] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 808.186270][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.196108][ T329] usb 10-1: config 0 interface 41 has no altsetting 0 [ 808.202921][ T633] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 808.220012][ T633] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 808.230728][ T633] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 808.238981][ T633] usb 4-1: Manufacturer: syz [ 808.259194][ T329] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 808.276545][ T633] usb 4-1: config 0 descriptor?? [ 808.284242][ T329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.292410][ T329] usb 10-1: Product: syz [ 808.316196][ T329] usb 10-1: Manufacturer: syz [ 808.326944][ T329] usb 10-1: SerialNumber: syz [ 808.335501][ T329] usb 10-1: config 0 descriptor?? [ 808.349895][T27956] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 808.357539][T27956] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 808.453641][T27971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 808.453955][T27971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 808.551596][T24243] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 808.587485][T27956] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 808.605854][T27956] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 808.722603][T24243] usb 9-1: device descriptor read/64, error -71 [ 808.731490][ T633] appleir 0003:05AC:8243.004D: unknown main item tag 0x0 [ 808.740281][ T633] appleir 0003:05AC:8243.004D: No inputs registered, leaving [ 808.753375][ T633] appleir 0003:05AC:8243.004D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 808.979245][T24243] usb 9-1: device descriptor read/64, error -71 [ 809.012833][ T633] usb 4-1: USB disconnect, device number 14 [ 809.069926][T27990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 809.084247][T27990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:990 [ 809.192324][T27998] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 809.221244][T27998] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 809.236018][T24243] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 809.249205][T27998] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 809.277083][ T329] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 809.406999][T24243] usb 9-1: device descriptor read/64, error -71 [ 809.506284][ T329] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 809.530297][ T329] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 809.562042][ T329] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 809.583311][ T329] usb 10-1: USB disconnect, device number 28 [ 809.664348][T24243] usb 9-1: device descriptor read/64, error -71 [ 809.792127][T24243] usb usb9-port1: attempt power cycle [ 810.051494][ T36] kauditd_printk_skb: 430 callbacks suppressed [ 810.051511][ T36] audit: type=1400 audit(2016778844.808:69166): avc: denied { read write } for pid=26711 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.082767][ T36] audit: type=1400 audit(2016778844.808:69167): avc: denied { read write open } for pid=26711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.124905][ T36] audit: type=1400 audit(2016778844.808:69168): avc: denied { ioctl } for pid=26711 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.150706][ T36] audit: type=1400 audit(2016778844.874:69169): avc: denied { ioctl } for pid=27968 comm="syz.8.9041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 810.176554][ T36] audit: type=1400 audit(2016778844.920:69170): avc: denied { create } for pid=28012 comm="syz.9.9053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 810.187730][T24243] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 810.204895][ T36] audit: type=1400 audit(2016778844.948:69171): avc: denied { write } for pid=28012 comm="syz.9.9053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 810.224513][ T36] audit: type=1400 audit(2016778844.948:69172): avc: denied { read write } for pid=28012 comm="syz.9.9053" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.249040][ T36] audit: type=1400 audit(2016778844.948:69173): avc: denied { read open } for pid=28012 comm="syz.9.9053" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.279955][T24243] usb 9-1: device descriptor read/8, error -71 [ 810.310203][ T36] audit: type=1400 audit(2016778844.948:69174): avc: denied { create } for pid=28012 comm="syz.9.9053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.331715][ T36] audit: type=1400 audit(2016778844.948:69175): avc: denied { write } for pid=28012 comm="syz.9.9053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.440162][T24243] usb 9-1: device descriptor read/8, error -71 [ 810.492095][T28024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 810.492377][T28024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 810.586046][T28029] 9pnet_fd: Insufficient options for proto=fd [ 810.605838][T28032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 810.700940][T24243] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 810.735626][T24243] usb 9-1: device descriptor read/8, error -71 [ 810.874003][T24243] usb 9-1: device descriptor read/8, error -71 [ 810.990251][T24243] usb usb9-port1: unable to enumerate USB device [ 811.039262][T28038] rust_binder: Error while translating object. [ 811.039293][T28038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 811.045566][T28038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:348 [ 811.056643][T28039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 811.107299][T28043] rust_binder: Write failure EINVAL in pid:353 [ 811.219650][T28047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 811.226272][T28047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 811.485707][T28058] cgroup2: Unknown parameter 'net_cls' [ 811.532145][T28061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 811.553948][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.558099][T28056] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 811.577615][T28056] rust_binder: Write failure EINVAL in pid:366 [ 811.588580][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.597814][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.631393][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.631750][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.640256][T28064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 811.646322][T28064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:369 [ 811.675090][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.689848][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.694037][T28066] rust_binder: Error while translating object. [ 811.697512][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.705143][T28066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 811.712158][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.717827][T28066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 811.727899][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.745056][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.761246][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.761594][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.777326][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.777675][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.794914][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.795216][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.810560][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.813078][ T497] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 811.846752][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.855019][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.855339][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.896770][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.897106][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.914635][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.914986][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.929463][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.929839][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.946648][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.947018][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.961479][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.961842][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.976343][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.976705][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.991151][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 811.991487][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 811.994859][ T497] usb 4-1: Using ep0 maxpacket: 32 [ 811.997772][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.011392][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.030229][ T497] usb 4-1: unable to get BOS descriptor or descriptor too short [ 812.048861][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.049154][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.050151][ T497] usb 4-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 812.055454][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.055768][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.085656][ T497] usb 4-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.102572][ T497] usb 4-1: config 1 interface 0 has no altsetting 0 [ 812.117077][ T497] usb 4-1: string descriptor 0 read error: -22 [ 812.124374][ T497] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 812.133885][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.134270][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.136203][ T497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.140533][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.144605][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.190914][T28061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.199470][T28061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.243830][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.244126][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.258609][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.258913][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.311977][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.312367][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.331686][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.332062][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.347673][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.347960][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.362482][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.363017][T28059] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 812.377595][T28059] rust_binder: Write failure EINVAL in pid:1530 [ 812.427879][T28061] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 812.448652][ T497] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 812.462575][ T497] usb 4-1: USB disconnect, device number 15 [ 812.477117][ T497] usblp0: removed [ 813.620342][ T633] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 813.791441][ T633] usb 10-1: Using ep0 maxpacket: 16 [ 813.799447][ T633] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.821826][ T633] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.842605][ T633] usb 10-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 813.862613][ T633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.876354][ T633] usb 10-1: config 0 descriptor?? [ 813.909084][ T329] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 813.971441][T28102] __vm_enough_memory: pid: 28102, comm: syz.3.9083, bytes: 18014402804453376 not enough memory for the allocation [ 814.026118][T28104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 814.032955][T28104] rust_binder: Got transaction with invalid offset. [ 814.039977][T28104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 814.046853][T28104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1022 [ 814.090865][ T329] usb 9-1: Using ep0 maxpacket: 16 [ 814.145861][ T329] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 814.161230][ T329] usb 9-1: config 0 has no interface number 0 [ 814.174474][ T329] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.206348][ T329] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.216199][ T329] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 814.225268][ T329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.234873][ T329] usb 9-1: config 0 descriptor?? [ 814.326760][ T633] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.004E/input/input95 [ 814.339942][ T633] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.004E/input/input96 [ 814.357966][ T633] kye 0003:0458:5012.004E: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.9-1/input0 [ 814.422381][ T500] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 814.547526][T28094] rust_binder: Write failure EFAULT in pid:387 [ 814.595588][ T500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 814.612729][ T500] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.625641][ T500] usb 4-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 814.634681][ T500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.644440][ T500] usb 4-1: config 0 descriptor?? [ 814.651058][T28112] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 814.893819][ T329] uclogic 0003:28BD:0071.004F: pen parameters not found [ 814.901051][ T329] uclogic 0003:28BD:0071.004F: interface is invalid, ignoring [ 814.923492][ T329] usb 9-1: USB disconnect, device number 62 [ 815.089934][ T497] usb 10-1: USB disconnect, device number 29 [ 815.100130][ T500] wacom 0003:056A:0020.0050: unknown main item tag 0x0 [ 815.107756][ T500] wacom 0003:056A:0020.0050: item fetching failed at offset 3/5 [ 815.115881][ T500] wacom 0003:056A:0020.0050: parse failed [ 815.123658][ T500] wacom 0003:056A:0020.0050: probe with driver wacom failed with error -22 [ 815.199964][T28115] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9088'. [ 815.328742][T28112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.342624][T28112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.409241][ T329] usb 4-1: USB disconnect, device number 16 [ 815.491048][ T36] kauditd_printk_skb: 723 callbacks suppressed [ 815.491067][ T36] audit: type=1400 audit(2016778849.886:69899): avc: denied { read write } for pid=21720 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.563885][ T36] audit: type=1400 audit(2016778849.886:69900): avc: denied { read write open } for pid=21720 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.619367][ T36] audit: type=1400 audit(2016778849.886:69901): avc: denied { ioctl } for pid=21720 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.670600][ T36] audit: type=1400 audit(2016778849.951:69902): avc: denied { create } for pid=28120 comm="syz.8.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 815.703395][ T36] audit: type=1400 audit(2016778849.961:69903): avc: denied { create } for pid=28120 comm="syz.8.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 815.741861][ T36] audit: type=1400 audit(2016778849.961:69904): avc: denied { write } for pid=28120 comm="syz.8.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 815.790556][ T36] audit: type=1400 audit(2016778849.961:69905): avc: denied { read write } for pid=27433 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.815778][ T36] audit: type=1400 audit(2016778849.961:69907): avc: denied { read } for pid=28120 comm="syz.8.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 815.837071][ T36] audit: type=1400 audit(2016778849.961:69908): avc: denied { read } for pid=28120 comm="syz.8.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 815.866116][ T36] audit: type=1400 audit(2016778849.961:69906): avc: denied { read write open } for pid=27433 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.390030][ T329] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 816.561123][ T329] usb 4-1: Invalid ep0 maxpacket: 32 [ 816.700155][ T329] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 816.881947][ T329] usb 4-1: Invalid ep0 maxpacket: 32 [ 816.888347][ T329] usb usb4-port1: attempt power cycle [ 816.959850][ T500] rust_binder: 28148: removing orphan mapping 0:24 [ 816.995762][T28152] x_tables: unsorted underflow at hook 2 [ 817.006291][T28152] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 817.006314][T28152] rust_binder: Read failure Err(EFAULT) in pid:1551 [ 817.256257][ T329] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 817.289249][ T329] usb 4-1: Invalid ep0 maxpacket: 32 [ 817.427430][ T329] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 817.449327][ T329] usb 4-1: Invalid ep0 maxpacket: 32 [ 817.455242][ T329] usb usb4-port1: unable to enumerate USB device [ 817.772264][ T500] rust_binder: 28156: removing orphan mapping 0:24 [ 817.778960][ T500] rust_binder: 0: removing orphan mapping 24:1024 [ 817.844484][T28162] bridge0: entered promiscuous mode [ 817.849722][T28162] bridge0: entered allmulticast mode [ 818.250752][ T329] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 818.416264][ T329] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 818.429781][ T329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.441429][ T329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 818.455420][ T329] usb 9-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 818.464931][ T329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.474150][ T329] usb 9-1: config 0 descriptor?? [ 818.788294][T28190] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 818.795619][T28190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:430 [ 818.796184][T28190] rust_binder: 430: no such ref 0 [ 818.928998][ T329] elecom 0003:056E:00FE.0051: item fetching failed at offset 0/3 [ 818.960967][ T329] elecom 0003:056E:00FE.0051: probe with driver elecom failed with error -22 [ 819.122900][T18234] Bluetooth: hci1: Frame reassembly failed (-84) [ 819.138021][T28204] rust_binder: Write failure EFAULT in pid:440 [ 819.155945][ T500] usb 9-1: USB disconnect, device number 63 [ 819.301954][T28210] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 819.301981][T28210] rust_binder: Error while translating object. [ 819.314255][T28210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 819.320460][T28210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 819.504139][T28218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 819.581520][T28218] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 819.619556][ T500] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 819.705525][T28221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 819.707424][T28220] rust_binder: Error in use_page_slow: ESRCH [ 819.713976][T28220] rust_binder: use_range failure ESRCH [ 819.720087][T28220] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 819.725632][T28220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 819.733620][T28220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1042 [ 819.809825][ T500] usb 10-1: not running at top speed; connect to a high speed hub [ 819.824948][T28229] incfs: Unexpected inode type [ 819.854952][ T500] usb 10-1: config 95 has an invalid interface number: 1 but max is 0 [ 819.857214][T28229] overlayfs: upper fs does not support tmpfile. [ 819.863161][ T500] usb 10-1: config 95 has no interface number 0 [ 819.863189][ T500] usb 10-1: config 95 interface 1 has no altsetting 0 [ 819.893822][ T500] usb 10-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 819.903504][ T500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.911683][ T500] usb 10-1: Product: syz [ 819.916023][ T500] usb 10-1: Manufacturer: syz [ 819.920788][ T500] usb 10-1: SerialNumber: syz [ 819.964276][T25437] ------------[ cut here ]------------ [ 819.969788][T25437] WARNING: CPU: 1 PID: 25437 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 819.977952][T25437] Modules linked in: [ 819.981860][T25437] CPU: 1 UID: 0 PID: 25437 Comm: syz.8.8252 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 819.993538][T25437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.003656][T25437] RIP: 0010:drop_nlink+0xce/0x110 [ 820.008731][T25437] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 820.028577][T25437] RSP: 0018:ffffc9000384f860 EFLAGS: 00010293 [ 820.034663][T25437] RAX: ffffffff81edc76e RBX: ffff888153bfa958 RCX: ffff888137321300 [ 820.042759][T25437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 820.050778][T25437] RBP: ffffc9000384f888 R08: 0000000000000003 R09: 0000000000000004 [ 820.058853][T25437] R10: dffffc0000000000 R11: fffff52000709efc R12: dffffc0000000000 [ 820.066835][T25437] R13: 1ffff1102a77f534 R14: ffff888153bfa9a0 R15: 0000000000000000 [ 820.074854][T25437] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 820.083816][T25437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.090439][T25437] CR2: 00007fce284e8710 CR3: 000000011c3ea000 CR4: 00000000003526b0 [ 820.098435][T25437] Call Trace: [ 820.101737][T25437] [ 820.104681][T25437] shmem_rmdir+0x5f/0x90 [ 820.108939][T25437] vfs_rmdir+0x3e0/0x560 [ 820.113304][T25437] incfs_kill_sb+0x109/0x230 [ 820.117909][T25437] deactivate_locked_super+0xd5/0x2a0 [ 820.123329][T25437] deactivate_super+0xb8/0xe0 [ 820.128012][T25437] cleanup_mnt+0x3f1/0x480 [ 820.132438][T25437] __cleanup_mnt+0x1d/0x40 [ 820.136880][T25437] task_work_run+0x1e3/0x250 [ 820.141484][T25437] ? __cfi_task_work_run+0x10/0x10 [ 820.146646][T25437] ? free_nsproxy+0x223/0x290 [ 820.151337][T25437] do_exit+0x9bc/0x2630 [ 820.155536][T25437] ? __sched_text_start+0x10/0x10 [ 820.160578][T25437] ? __cfi_do_exit+0x10/0x10 [ 820.165231][T25437] ? __kasan_check_write+0x18/0x20 [ 820.170371][T25437] ? _raw_spin_lock_irq+0x8d/0x120 [ 820.175508][T25437] ? __kasan_check_read+0x15/0x20 [ 820.180601][T25437] ? cgroup_update_frozen+0x160/0x990 [ 820.186083][T25437] do_group_exit+0x22a/0x300 [ 820.190762][T25437] ? cgroup_leave_frozen+0x16c/0x2b0 [ 820.196059][T25437] get_signal+0x139d/0x14f0 [ 820.200619][T25437] ? __perf_event_task_sched_in+0x116e/0x1340 [ 820.206703][T25437] arch_do_signal_or_restart+0x96/0x720 [ 820.212311][T25437] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 820.218519][T25437] ? _raw_spin_lock_irq+0x8d/0x120 [ 820.223663][T25437] ? __kasan_check_write+0x18/0x20 [ 820.226433][T28214] kvm: kvm [28213]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x1 [ 820.228806][T25437] ? recalc_sigpending+0x185/0x1d0 [ 820.228832][T25437] ? _raw_spin_unlock_irq+0x45/0x70 [ 820.237494][T28214] kvm: kvm [28213]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x1 [ 820.242363][T25437] ? calculate_sigpending+0x81/0x90 [ 820.250293][T28214] kvm: kvm [28213]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x1 [ 820.255986][T25437] syscall_exit_to_user_mode+0x58/0xb0 [ 820.264353][T28214] kvm: kvm [28213]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x1 [ 820.269675][T25437] ret_from_fork+0x3a/0xa0 [ 820.269717][T25437] ret_from_fork_asm+0x1a/0x30 [ 820.281141][T28214] kvm: kvm [28213]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x1 [ 820.283730][T25437] RIP: 0033:0x7fce2778ebe9 [ 820.290925][T28214] kvm_intel: kvm [28213]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x1 [ 820.292885][T25437] Code: Unable to access opcode bytes at 0x7fce2778ebbf. [ 820.292904][T25437] RSP: 002b:00007fce28552fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 820.330434][T25437] RAX: 0000000000000000 RBX: 00007fce279b5fa0 RCX: 00007fce2778ebe9 [ 820.338548][T25437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 820.346545][T25437] RBP: 00007fce27811e19 R08: 0000000000000000 R09: 0000000000000000 [ 820.354739][T25437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.362843][T25437] R13: 00007fce279b6038 R14: 00007fce279b5fa0 R15: 00007ffc74a7c838 [ 820.370860][T25437] [ 820.373896][T25437] ---[ end trace 0000000000000000 ]--- [ 820.380027][T25437] ================================================================== [ 820.388099][T25437] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 820.394421][T25437] Write of size 4 at addr 0000000000000168 by task syz.8.8252/25437 [ 820.402412][T25437] [ 820.404753][T25437] CPU: 0 UID: 0 PID: 25437 Comm: syz.8.8252 Tainted: G W syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 820.404778][T25437] Tainted: [W]=WARN [ 820.404784][T25437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.404794][T25437] Call Trace: [ 820.404800][T25437] [ 820.404807][T25437] __dump_stack+0x21/0x30 [ 820.404830][T25437] dump_stack_lvl+0x10c/0x190 [ 820.404855][T25437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 820.404875][T25437] print_report+0x3d/0x70 [ 820.404891][T25437] kasan_report+0x163/0x1a0 [ 820.404907][T25437] ? ihold+0x24/0x70 [ 820.404923][T25437] ? _raw_spin_unlock+0x45/0x60 [ 820.404941][T25437] ? ihold+0x24/0x70 [ 820.404956][T25437] kasan_check_range+0x299/0x2a0 [ 820.404972][T25437] __kasan_check_write+0x18/0x20 [ 820.404993][T25437] ihold+0x24/0x70 [ 820.405008][T25437] vfs_rmdir+0x26a/0x560 [ 820.405026][T25437] incfs_kill_sb+0x109/0x230 [ 820.405047][T25437] deactivate_locked_super+0xd5/0x2a0 [ 820.405067][T25437] deactivate_super+0xb8/0xe0 [ 820.405085][T25437] cleanup_mnt+0x3f1/0x480 [ 820.405102][T25437] __cleanup_mnt+0x1d/0x40 [ 820.405117][T25437] task_work_run+0x1e3/0x250 [ 820.405135][T25437] ? __cfi_task_work_run+0x10/0x10 [ 820.405152][T25437] ? free_nsproxy+0x223/0x290 [ 820.405172][T25437] do_exit+0x9bc/0x2630 [ 820.405191][T25437] ? __sched_text_start+0x10/0x10 [ 820.405211][T25437] ? __cfi_do_exit+0x10/0x10 [ 820.405229][T25437] ? __kasan_check_write+0x18/0x20 [ 820.405248][T25437] ? _raw_spin_lock_irq+0x8d/0x120 [ 820.405266][T25437] ? __kasan_check_read+0x15/0x20 [ 820.405286][T25437] ? cgroup_update_frozen+0x160/0x990 [ 820.405301][T25437] do_group_exit+0x22a/0x300 [ 820.405318][T25437] ? cgroup_leave_frozen+0x16c/0x2b0 [ 820.405333][T25437] get_signal+0x139d/0x14f0 [ 820.405352][T25437] ? __perf_event_task_sched_in+0x116e/0x1340 [ 820.405372][T25437] arch_do_signal_or_restart+0x96/0x720 [ 820.405394][T25437] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 820.405414][T25437] ? _raw_spin_lock_irq+0x8d/0x120 [ 820.405432][T25437] ? __kasan_check_write+0x18/0x20 [ 820.405452][T25437] ? recalc_sigpending+0x185/0x1d0 [ 820.405467][T25437] ? _raw_spin_unlock_irq+0x45/0x70 [ 820.405485][T25437] ? calculate_sigpending+0x81/0x90 [ 820.405500][T25437] syscall_exit_to_user_mode+0x58/0xb0 [ 820.405515][T25437] ret_from_fork+0x3a/0xa0 [ 820.405535][T25437] ret_from_fork_asm+0x1a/0x30 [ 820.405555][T25437] RIP: 0033:0x7fce2778ebe9 [ 820.405569][T25437] Code: Unable to access opcode bytes at 0x7fce2778ebbf. [ 820.405577][T25437] RSP: 002b:00007fce28552fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 820.405594][T25437] RAX: 0000000000000000 RBX: 00007fce279b5fa0 RCX: 00007fce2778ebe9 [ 820.405607][T25437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 820.405617][T25437] RBP: 00007fce27811e19 R08: 0000000000000000 R09: 0000000000000000 [ 820.405627][T25437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.405637][T25437] R13: 00007fce279b6038 R14: 00007fce279b5fa0 R15: 00007ffc74a7c838 [ 820.405652][T25437] [ 820.405658][T25437] ================================================================== [ 820.721357][T25437] Disabling lock debugging due to kernel taint [ 820.727941][T25437] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 820.735785][T25437] #PF: supervisor write access in kernel mode [ 820.741850][T25437] #PF: error_code(0x0002) - not-present page [ 820.748082][T25437] PGD 0 P4D 0 [ 820.751530][T25437] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 820.757614][T25437] CPU: 1 UID: 0 PID: 25437 Comm: syz.8.8252 Tainted: G B W syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086 [ 820.770914][T25437] Tainted: [B]=BAD_PAGE, [W]=WARN [ 820.775944][T25437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.786002][T25437] RIP: 0010:ihold+0x2a/0x70 [ 820.790523][T25437] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 820.810179][T25437] RSP: 0018:ffffc9000384f8a0 EFLAGS: 00010246 [ 820.816257][T25437] RAX: ffff888137321300 RBX: 0000000000000000 RCX: ffff888137321300 [ 820.824243][T25437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 820.832227][T25437] RBP: ffffc9000384f8b0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 820.840302][T25437] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff888153bfa964 [ 820.848375][T25437] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 820.856394][T25437] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 820.865320][T25437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.871901][T25437] CR2: 0000000000000168 CR3: 0000000121af4000 CR4: 00000000003526b0 [ 820.879877][T25437] Call Trace: [ 820.883159][T25437] [ 820.886100][T25437] vfs_rmdir+0x26a/0x560 [ 820.890382][T25437] incfs_kill_sb+0x109/0x230 [ 820.894992][T25437] deactivate_locked_super+0xd5/0x2a0 [ 820.900380][T25437] deactivate_super+0xb8/0xe0 [ 820.905064][T25437] cleanup_mnt+0x3f1/0x480 [ 820.909477][T25437] __cleanup_mnt+0x1d/0x40 [ 820.913883][T25437] task_work_run+0x1e3/0x250 [ 820.918476][T25437] ? __cfi_task_work_run+0x10/0x10 [ 820.923595][T25437] ? free_nsproxy+0x223/0x290 [ 820.928277][T25437] do_exit+0x9bc/0x2630 [ 820.932439][T25437] ? __sched_text_start+0x10/0x10 [ 820.937507][T25437] ? __cfi_do_exit+0x10/0x10 [ 820.942093][T25437] ? __kasan_check_write+0x18/0x20 [ 820.947206][T25437] ? _raw_spin_lock_irq+0x8d/0x120 [ 820.952333][T25437] ? __kasan_check_read+0x15/0x20 [ 820.957413][T25437] ? cgroup_update_frozen+0x160/0x990 [ 820.962796][T25437] do_group_exit+0x22a/0x300 [ 820.967383][T25437] ? cgroup_leave_frozen+0x16c/0x2b0 [ 820.972656][T25437] get_signal+0x139d/0x14f0 [ 820.977163][T25437] ? __perf_event_task_sched_in+0x116e/0x1340 [ 820.983216][T25437] arch_do_signal_or_restart+0x96/0x720 [ 820.988765][T25437] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 820.994926][T25437] ? _raw_spin_lock_irq+0x8d/0x120 [ 821.000141][T25437] ? __kasan_check_write+0x18/0x20 [ 821.005265][T25437] ? recalc_sigpending+0x185/0x1d0 [ 821.010390][T25437] ? _raw_spin_unlock_irq+0x45/0x70 [ 821.015600][T25437] ? calculate_sigpending+0x81/0x90 [ 821.020887][T25437] syscall_exit_to_user_mode+0x58/0xb0 [ 821.026380][T25437] ret_from_fork+0x3a/0xa0 [ 821.030806][T25437] ret_from_fork_asm+0x1a/0x30 [ 821.035580][T25437] RIP: 0033:0x7fce2778ebe9 [ 821.039980][T25437] Code: Unable to access opcode bytes at 0x7fce2778ebbf. [ 821.046981][T25437] RSP: 002b:00007fce28552fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 821.055411][T25437] RAX: 0000000000000000 RBX: 00007fce279b5fa0 RCX: 00007fce2778ebe9 [ 821.063406][T25437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.071489][T25437] RBP: 00007fce27811e19 R08: 0000000000000000 R09: 0000000000000000 [ 821.079515][T25437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.087592][T25437] R13: 00007fce279b6038 R14: 00007fce279b5fa0 R15: 00007ffc74a7c838 [ 821.095639][T25437] [ 821.098668][T25437] Modules linked in: [ 821.102573][T25437] CR2: 0000000000000168 [ 821.106731][T25437] ---[ end trace 0000000000000000 ]--- [ 821.112274][T25437] RIP: 0010:ihold+0x2a/0x70 [ 821.116777][T25437] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 821.136734][T25437] RSP: 0018:ffffc9000384f8a0 EFLAGS: 00010246 [ 821.142804][T25437] RAX: ffff888137321300 RBX: 0000000000000000 RCX: ffff888137321300 [ 821.150796][T25437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.158797][T25437] RBP: ffffc9000384f8b0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 821.166783][T25437] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff888153bfa964 [ 821.174779][T25437] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 821.182756][T25437] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 821.191783][T25437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.198416][T25437] CR2: 0000000000000168 CR3: 0000000121af4000 CR4: 00000000003526b0 [ 821.206417][T25437] Kernel panic - not syncing: Fatal exception [ 821.212821][T25437] Kernel Offset: disabled [ 821.217139][T25437] Rebooting in 86400 seconds..