last executing test programs: 3m59.365945228s ago: executing program 32 (id=520): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000020101040000000062a30000020000040c0019"], 0x20}, 0x1, 0x0, 0x0, 0x40055}, 0x24008844) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') 2m49.107733377s ago: executing program 33 (id=1860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x4}, 0x38) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 2m36.486468859s ago: executing program 4 (id=2423): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x100000001, 0xa08}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000400)={[0x8]}) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000280)=""/94, 0x62}, {&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f00000019c0)=""/14}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/156, 0xf9}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000016c0)=""/79, 0x4f}, {&(0x7f0000001740)=""/130, 0x82}, {&(0x7f0000001800)=""/124, 0x7c}, {&(0x7f00000003c0)=""/43, 0x2b}], 0xe) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 2m36.470368371s ago: executing program 4 (id=2425): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3142, 0x0) (async, rerun: 64) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x50000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000940)={@private2, 0x4, 0x0, 0x1, 0x9, 0x81, 0x8}, &(0x7f0000000980)=0x20) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000740)={0x1f, @none}, 0x8) (async) listen(r2, 0x2) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x7, 0x6, 0x9, 0x97}, {0xf382, 0xd, 0xe, 0x7}, {0x1, 0x0, 0xff, 0xb4}, {0x8001, 0x2, 0x3, 0x5}, {0x0, 0x8, 0x8, 0x5}]}, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840000095030400108008001540", @ANYRESHEX=r6], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2m36.417881655s ago: executing program 4 (id=2427): r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) finit_module(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 2m36.380420788s ago: executing program 4 (id=2428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) fcntl$dupfd(r2, 0x406, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x80010, r2, 0xcdc2000) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0}) syz_usb_connect(0x0, 0x53, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x77, 0xf1, 0xc9, 0x10, 0xc72, 0xc, 0xf659, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x5, 0xd3, 0x1a, 0x3a, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x4}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, [@generic={0x2}]}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 32) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x3a, "a35949788442d8384c5dd16892d351379b05e2157a4d3640214cbfc413db3f0fc935f318dc2676dc3f481c134d689b18490417ecc2ce63cae829"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m35.856848741s ago: executing program 4 (id=2434): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=@newsa={0x1a4, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x20}, {0x0, 0x9}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x6c, 0x14, {{'cmac(aes)\x00'}, 0x100, 0x0, "3f428239b08fff7f316957bf12bd4456c11c4f7bf84bdc84615a7514a60ba832"}}]}, 0x1a4}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@arp={@remote, @rand_addr=0x64010100, 0xff, 0x0, 0xf, 0xa, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4000, 0x6, 0xb, 0xc41, 0x6, 0x7, 'team0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x34d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x8}, @fda={0x66646185, 0x1, 0x2, 0x36}, @fda={0x66646185, 0x8, 0x2, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m35.74520459s ago: executing program 4 (id=2437): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001080000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='8\t\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="0300000000000000da5d1c7c000000000a000000ff0300006d6f756e74696e666f00000000000000"], 0x38) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x781645b50f23b455}) write$tun(r9, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572010000000000000000000000000000000000000000000000000007"], &(0x7f0000000200)=0x2f) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000440007ffff0000000001"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r11, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}, 0x0) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 2m20.767494005s ago: executing program 34 (id=2437): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001080000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='8\t\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="0300000000000000da5d1c7c000000000a000000ff0300006d6f756e74696e666f00000000000000"], 0x38) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x781645b50f23b455}) write$tun(r9, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572010000000000000000000000000000000000000000000000000007"], &(0x7f0000000200)=0x2f) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000440007ffff0000000001"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r11, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}, 0x0) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 2m14.145051777s ago: executing program 2 (id=2782): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xb}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff01}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x670}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dd}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4044850}, 0x48040) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLERROR(r3, &(0x7f0000000240)={0x11, 0x7, 0x2, {0x8, 'nl80211\x00'}}, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000006f00)=[{{&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/224, 0xe0}], 0x3, &(0x7f0000000540)=""/95, 0x5f}}, {{&(0x7f00000005c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000640)=""/53, 0x35}, {&(0x7f0000000680)=""/126, 0x7e}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/184, 0xb8}, {&(0x7f0000000800)=""/139, 0x8b}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/47, 0x2f}, {&(0x7f0000001900)=""/64, 0x40}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/247, 0xf7}], 0xa, &(0x7f0000001c00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002c00)=@phonet, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/72, 0x48}, {&(0x7f0000002d00)=""/16, 0x10}], 0x2, &(0x7f0000002d80)=""/4096, 0x1000}, 0x5383b323}, {{&(0x7f0000003d80)=@x25, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/4096, 0x1000}], 0x3, &(0x7f0000006e40)=""/154, 0x9a}, 0xfffffffa}], 0x4, 0x40000000, &(0x7f0000007000)) clock_gettime(0x0, &(0x7f000000ae40)={0x0, 0x0}) recvmmsg(r4, &(0x7f000000ac40)=[{{&(0x7f0000007040)=@in, 0x80, &(0x7f00000083c0)=[{&(0x7f00000070c0)=""/109, 0x6d}, {&(0x7f0000007140)=""/128, 0x80}, {&(0x7f00000071c0)=""/140, 0x8c}, {&(0x7f0000007280)=""/25, 0x19}, {&(0x7f00000072c0)=""/153, 0x99}, {&(0x7f0000007380)=""/62, 0x3e}, {&(0x7f00000073c0)=""/4096, 0x1000}], 0x7, &(0x7f0000008440)=""/213, 0xd5}, 0x2}, {{&(0x7f0000008540)=@ethernet={0x0, @local}, 0x80, &(0x7f0000008840)=[{&(0x7f00000085c0)=""/229, 0xe5}, {&(0x7f00000086c0)=""/90, 0x5a}, {&(0x7f0000008740)=""/197, 0xc5}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000008880)=""/194, 0xc2}], 0x1, &(0x7f00000089c0)=""/196, 0xc4}, 0x4000}, {{&(0x7f0000008ac0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000008c40)=[{&(0x7f0000008b40)=""/199, 0xc7}], 0x1, &(0x7f0000008c80)=""/62, 0x3e}, 0x9}, {{&(0x7f0000008cc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008d40)=""/219, 0xdb}, {&(0x7f0000008e40)=""/66, 0x42}, {&(0x7f0000008ec0)=""/233, 0xe9}, {&(0x7f0000008fc0)=""/67, 0x43}, {&(0x7f0000009040)=""/120, 0x78}, {&(0x7f00000090c0)=""/142, 0x8e}], 0x6, &(0x7f0000009200)=""/194, 0xc2}, 0x1}, {{&(0x7f0000009300), 0x80, &(0x7f0000009480)=[{&(0x7f0000009380)=""/200, 0xc8}], 0x1, &(0x7f00000094c0)=""/222, 0xde}, 0x2}, {{&(0x7f00000095c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000009740)=[{&(0x7f0000009640)=""/212, 0xd4}], 0x1, &(0x7f0000009780)=""/88, 0x58}, 0x3}, {{&(0x7f0000009800)=@can={0x1d, 0x0}, 0x80, &(0x7f000000ab00)=[{&(0x7f0000009880)=""/4096, 0x1000}, {&(0x7f000000a880)=""/136, 0x88}, {&(0x7f000000a940)=""/221, 0xdd}, {&(0x7f000000aa40)=""/186, 0xba}], 0x4, &(0x7f000000ab40)=""/215, 0xd7}, 0x1}], 0x8, 0x40022042, &(0x7f000000ae80)={r7, r8+60000000}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f000000af00), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f000000b080)={&(0x7f000000aec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000b040)={&(0x7f000000af40)={0xe4, r11, 0x204, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8050}, 0xc004) r12 = syz_genetlink_get_family_id$devlink(&(0x7f000000b100), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f000000b280)={&(0x7f000000b0c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000b240)={&(0x7f000000b140)={0xcc, r12, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0xfffa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xea}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1081}, 0x40081) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f000000b300), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f000000b3c0)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b380)={&(0x7f000000b340)={0x1c, r13, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000b440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f000000b500)={&(0x7f000000b400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000b4c0)={&(0x7f000000b480)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x2, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) (async) r15 = accept4(r5, &(0x7f000000b540)=@in={0x2, 0x0, @empty}, &(0x7f000000b5c0)=0x80, 0x0) ioctl$sock_netdev_private(r15, 0x89f0, &(0x7f000000b600)="0a2f64abc3acd4d109c9337447acc9ac7f1a6184684ffc0e19c46d987c4c843e6af2d874ac15c8b47d128f352df1d35f4bd4163a2fdd8eeffe30cc06bd2acbf5fca751b98a24a47339f81aec8384ea58f3f69bc222b9bc77739dfe9644b5f70058a050eb69fca873d87d3292cffb92f66df45e4e94a3fc6477acd7f20d56115f7119c4ea8876f395d89149ca51c77f11776e8807422659db1b8054bdd3ca1a10398ba9b770283135139c354f6c2c9695814b5d04d1ae26d9fe") (async) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f000000b780)={&(0x7f000000b6c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b740)={&(0x7f000000b700)={0x30, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x10, 0x7, 0x1, 0x0, "a9f9b2635baddd63a3b31afb"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20088010}, 0x40000) (async) r16 = syz_open_dev$evdev(&(0x7f000000b7c0), 0x8, 0x54c02) ioctl$EVIOCGNAME(r16, 0x80404506, &(0x7f000000b800)=""/163) ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f000000b900)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f000000b9c0)={&(0x7f000000b8c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000b980)={&(0x7f000000b940)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4000801) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r18, &(0x7f000000bb80)={&(0x7f000000ba00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000bb40)={&(0x7f000000ba40)={0xe8, r11, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb6, 0x5, "a785b8ac036a174a6093d0b15a750df0eb633659fc340c121865c84784c74c3e97eacbea161e6a6b326ca0326d572bca439cdcf28d582a1912dc5c7c9c60ecdc5a156a1d9e6328c3e8ee955bc2a00ee0a26ecb055a99c8ec4a0a0d967834ba3f4fd2ed140c256987c0f98dcbc9436148d24b6947652fc6f6572baad7d856fe6229a62a470e36452dcea43e4d52999f983b290d289abd1fc4a7df579896f175ebc995f71b268adfbd7d5ecc23b467a5fbc2f1"}, @ETHTOOL_A_BITSET_MASK={0x17, 0x5, "7249862ac0ad701b81e4a1e48f5a20b00797fc"}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x40400c4) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f000000bbc0), &(0x7f000000bc00)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f000000bc80)={0x8, &(0x7f000000bc40)=[{0x7, 0x8, 0x3, 0x3}, {0x1, 0x4, 0xfa, 0x10000}, {0x0, 0x5, 0x81, 0x7}, {0x9, 0x4f, 0x0, 0x5}, {0x1, 0xd, 0x4, 0x100}, {0x10, 0x7, 0xf8, 0x5}, {0xba, 0x4, 0x1, 0x6}, {0x3, 0x42, 0x4, 0x7}]}) 2m14.076011823s ago: executing program 2 (id=2783): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000380)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8a800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000580)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003340)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}], 0x20}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x4040000, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/230, 0xffffffffffffff4e, 0x2, 0x4}, @ptr={0x70742a85, 0x1, 0xfffffffffffffffd, 0x0, 0x1, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffffe4, 0x1, 0x32}}, &(0x7f00000001c0)={0x0, 0x8b, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m14.025888127s ago: executing program 2 (id=2784): prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) 2m14.025262697s ago: executing program 2 (id=2785): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x18, 0x11, 0xf7, &(0x7f0000000200)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x957acd2f5556811e}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0x7, 0x7, 0x7, 0x1, 0xaa8b, 0x0, 0x5, 0x4, 0x0, 0x9, 0x9, 0x0, 0x100000000, 0x8}, 0x10, [0x0, 0x0]}) 2m13.997534589s ago: executing program 2 (id=2786): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x9f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, 0x0, &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r7 = accept(0xffffffffffffffff, &(0x7f0000003280)=@pptp, &(0x7f0000003300)=0x80) sendmmsg$sock(r5, &(0x7f0000003580)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)="1a187b9568a616e49912c5bd815f79a8037aa911660f429576df3b620b6966ee65bd5f8ed6477eed79013c9329a15e6b1d6c2e847ba3aaaaad46070fa250462c9a478fecd5e501dd706f2fd2fe228d362ecb64ff164a8c4fb5507d3c7563095af7196dd2c774179fee9507aea483f1592bf821051ebd07851156db", 0x7b}, {&(0x7f00000003c0)="99dbf32e2b327fadfd66cd1ee7c91982c9e5b73fa5e70ea8ef6cc7111a36a3db8f71481ffc4ade884f1db3568f4b24e9d91a65bcbd0b9b75648c62d7500054d4129670ea18055139958feb62472d8552222514c5e7df32ae9024247787579627b2bf847724a1133c2e63b94e9a0739c02d151c64479e6746e4d160681976eb472dc6ae33714647b9f77874b7a3d56078c81fbbc885b9258b495fcf0cf5a6c80f64bdc3ec9c09e9b1115d45b41bfd077743d26f4e6b993b4a3594df5c64aa0ead4cb191398f83f3d7ee8b900597e26c908a487b056ba4bf1db21a6ea97120ad", 0xdf}, {&(0x7f0000000100)='>', 0x1}, {&(0x7f0000000540)="bff769d2ef9adaa1f28c10d2227793a183b72d7b2b005ab89531317a39fc2b57969b66f065b54f15bd2e6c6e923494f91723457dc4d66edbe42d54e80747cf058679c2d4c4952a3210ad88ac958723c77335f1ab928d588e354fb9c5a88c0bfe61541c3632379eb8354491703ef9", 0x6e}, {&(0x7f0000000600)="48cdb90c4f38c62abd77ed4bf11ac1a9bfc592bb27f28ae904ff7cd85fae33d9efc5bf0acb0ac78e39b08fb16c0d628c94547d4f720f8c31ef87f4912a08d381592812828f93dfe6f5b94869f9802eaec2dac3561056ac38244ddfa6cc932a70068e93e477f714483ffd909815b600bd5ebb29fe78c7ba0937dbc3ba0e1092f2c2fccf7ac895ab9a6f0ba461f69bd34bd6014b2c3366f27f27fd7b", 0x9b}, {&(0x7f00000006c0)="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", 0x1000}], 0x6, &(0x7f0000001740)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff800}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @timestamping={{0x14, 0x1, 0x25, 0x26575fa8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xd8}}, {{&(0x7f0000001840)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x8, 0xf8, "591928cd9915d2af42e65f16761654b03d4a095a88c88cd5b1386fb2a0bd01aa2f5af726c2ec46b940b46c6cdf212cb8c43b6bd2ac86a6139413a07ff7cd6b", 0x10}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="d69045a84b2a194a345fe7edbc92ccd775de7cc81fc164a945d65e1a6a80c9ec405a15dea92547c40c0bd38f86d41b30a9", 0x31}], 0x1, &(0x7f00000018c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}}, {{&(0x7f0000001900)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x4}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)="5eb8ecd66837646772c2a9d683f2315bf7c4c45269a9d12c3563530ef5ee4cc62dab898c1c91734ad2b520b8308146a3688226ab76a6fffced7ec6e4c77354ecd2275f81455ff657856c77ea0c4e8c63188a497ac604", 0x56}, {&(0x7f0000001a00)="ba7a8c64aef4fecc0ab2418b8ab0598d5c8594e190f1b96d349bdd2cca2b5f439ada6c9c70d5b6c0e0dc8288f0e2880dbda96658dd0595a76b7c090beb76954fdad8bc1b2cb72437cde0755213bb27d1a260c085bf766726da4a189b50372065e18482395d5d7e0ac3447db44bee50ddf62edd0bbc5bda3e392b4de21596c3d23d1eb870aed656a5d1350dcb95581a0133e30a7bdaa07f3b4a97dae45726c6d17548df9d67227813fc65075c1ff35088a1d57e029088", 0xb6}], 0x2, &(0x7f0000001b00)=[@timestamping={{0x14, 0x1, 0x25, 0xc}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0x30}}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001bc0)="4b8207cf901285e0b59c8b9ccd013ad1602872a512d53cd67a8c0721afeec4aee2e907882bd65dcd6d9d82b3c50fb8d0053b2e495ba9cba821dc18f478cd0df13637f5d954d9a4aa75c066e51a286aa02ae9c761da9d2e2cea99f873570032f27d45e4f0a0032e9ccffb0b78e645d786c2d05d629d0b", 0x76}, {&(0x7f0000001c40)="f9fd3ed9c392e9405bbc0cbc4611176dd5509f3c759235025cc63d50606c4b8e8229bf694d0f0f0e96edbd64027f5e7b494803b81b23c4fd0f47aa194c7a9bdad22ea4e9a55f8443e9f725c9037953fb87af4c57ca8c7caf0c470928c8b1759ccf12fc8e9213fc4f1034a6c93d7c3a9bbc6f4a057ec3d9eea26eb59f0367e86ead1d23cb6960d8f5e5d25cf42415b1d13d0694c7a3f5f768a35402b61e92994b7e81302c075b49225f3df7ab8547e22698b8aeb86a", 0xb5}, {&(0x7f0000001d00)="40a1f35f94", 0x5}, {&(0x7f0000001d40)="df5f2c894902e92cfd00f39bc4539cd457406b036dbc59b864e37e66706b18f44876869d4aaab044936ced0c50442e29d718be58", 0x34}, {&(0x7f0000001d80)="de506d4472e66325f454678262f39463e9da5ba6dd641044ee6bb478ca3d7186e70d656f4d48d1c270fa32d6331d0684ee7091621b7c2b98abd11c032c06bde4c5cf76ca3fedf361e78907f16911f8295aa57bc3b42438f13029ad076104d116a87ab7d79a1b16357bcd290f0cdc8903e3d6e69221c319e89501b0977ec8f0717a59d479237d", 0x86}, {&(0x7f0000001e40)="78b29e27103b1eb42cdc9a038219feab41ea3bdb3c18372f9bb7076abfb96eccd270e99f427d9676a4eeecdd9a76b9601cf4c90fc96f7dc1365ca3fe07a43b33af398e2cbbfb6c0f3a16b81aededdd3632630480566a5836b4d6f35f08f05a5e750d0a02a4e308dcc0337391eb5020b480e54487d71c0ad9b6387ec34927bebb30f9c7ad1cce556fe6d899", 0x8b}, {&(0x7f0000001f00)="d0c276072d921bc4999f1823b650a80c312106602c46d82fa8bddde7b949f2f24683d6df4cfe9dbd316eb6d16cff49a91531a34574045ef83b2aa9c017ce6e89c25cf301ee364197bbf9b70719cf3fbcedea2e6887cbf3ee12716586741eac32830acc6c65859f128b60a91337f38e0fa76bbfc11ae48dd7fe076816387ba3dc04b4d37c6bb94bd4382efbd7f6e67d1ef3d1dae6d4e13ac15b2027c0800be313b4f67c1fc8b42bbf2ca2bead16b48e10128873", 0xb3}, {&(0x7f0000003700)="23c6be8ef6dd25e07a4240f8a2f93e0cf094ea0e7eefb6bb82d55c8a53552f6ee12f603d0811ca1774bac2976409d4adf79b4cab31c2ea9224859c9f35b1124ce2213f6a17aee4040b2c4d5674deb2329026d39611d9372e2991e7b0", 0x5c}, {&(0x7f0000002040)="769504f0969f0bbf7ba345e188617264990231e70ca05c4e29b40ae78ff95d7d97a84e02c4daa4debc4478d3ed49629d9377e4d78c98ee32fd31937e16c47663e1caa58196555ee57ddf84aa589ea632c43d79d620d6d4d4bcef6ea37d3ca29f828b2400fbf20b2eb41e26ba7987c3ed20a2729cce7d3355256e05c38dbcc5e67db2742fddaabf8b1b1f6f4f1d7fe247d8b35169d6d7ff5b9b21198f82208c2ca53d2fa2028950cfd9ce76a514380a974a4c954118637001a269e5cdb9aa41214e470f4917eb18f238d580819e758e316c86185efbf4107b8ad1e38794084ea8172a8d11f09a1d9f8508dde5b893ffc1dcbc60e376c6baadeba8465ffc90020b6d2dfc350dadc9f4241c06c71a142524e7e1ed3aa56c926ac86cfea456966b74087d0b0ea74014ed397ad5bf68743ee455b3b328b9fd596727e3023303e7110fb961cd54bd65320902b10255f51ef1097ea6644499b90cae8e8910a6b1b9cbec0af4e537b3088f1dc7af36f27a5d89a13c40bc93b7cc5e0b785d34585ebefcc74b19de9d468e9501c4af3161b68eaafb27156d6ee6e5c38ecbd70c5a7d8506ae3ac7c5c2ce5d4b1e07cea5235bee8511ccb7c9904c16c0445ee975e165d552ef24214b9ca92e9ceba47e6d9aa13516fb6d23803e44eee1ff7056c9525c8449706b2de23986bb751b5e9e86d903b3d103d4d65730cf9db0d22e951b6559d1155be5a27aefda53ec9b282ee93e02f6ce0efb02180bb4fd638577fa79901a6f43940516412b43b637aadf822e96095f6a196ba3c9b73f6a2ba611be1675f419868ac776f31e3f67e15e72533159a8e29944a0e0356465979d61329499b27798b0679e8397fae3a5798851d36b9908241d65ef3cdbf2d80f56b9d2d196c6ebd7da204a8b43816d5baa1a50f13022a2c15c903f30f06a3634c19333572e48262df28cc6cd9604c344cb406e508165f824b8caebb49de699a332080e76722260fe8d089cf0b8c4825845746285a4ef6928c3739297bd191add84c15aa942fa57661b93ade1525ee8047afc1edfa5e6d13ecb2223bd97b9118516113d772d08f990e07640037859b9206d8aa0a43b2f9e636860a77ae393524a548e040dfca2e943181d560b4b2ff6ccf09b5af77b1706a9a0b01a1e753c205331c27bc209c39f58088143f9b5b9515c0ab0afefa4cf08f3db6246285a69e5fa14cd07b8b32de9aaee06729c1643112f8bc27d385cb3c69cbc97498cbe3c67760f41f45078c130739825e2fb4a8333edfd8f33a790ff3a2abc2fd4feb3fc7ec7c2d2fe53253409b3d015f20c85add0683dc34435ad2366173671332a1130bed0f359ca7ff7331ec411c3bed1ec51ee29c1f9b74568ec80ea9fca4959836f91e064bed297dd02ae66ef0f8c713404a8afdf48718b0bf989016143a81b503944ab9345d32a39236cd7ec06e9e98065165da41edfe29b88f67fa1ac2d0a94c5707a64cb731686a005f1538d81f2168dc1ee36f80d71a89dd7003e8541d7498f1dd8cb60f22349d79b501a0cddfd58fbf8956f9060019b0d77705bdc589a298457012e3845ca55fea01e4fc005c11834bcd1953cfbf0f7b624b8b9ea088aa8ca4074b402bcf6c977220a31c2ae8ab701f29f21efc423e681219a8c04c9acb289ed5e940f4e491d8519c1b484a6c71cf3645f2634262faccd17a3f870f52771ea456dc97058dde824bc177fd5f5ca25f5d53758452d3618ff573c2901ff9ac4c46044e293ca4e0b54c35a0bea568cdaf1ca3cfbb4af03b97fc30af62e407cdc6a38694212a09fd331267b8e28103f1f147e0fec01965590324825a2d8bb87cf19094865b2945105fc8783883e9ce5ce161db5efc7501705f0c8c864e6243f0c316a46b090a24f6cff04f394ec679435329497d5ea40970a1b1667723dc975b669810ea6ac088d0a949d57e69ce0d0f4e3a5c58ccfdd80f9f362097ff73ae9546a7e10609a4af792e1fa3dd510f553b99f9730100efa380ed021c3ba4be124c7d85524619db1cee686d9291cd0fe7e6604e6f70f43fef3182679f424fbac003101ee782c2dedd95d967705aa6a0d0b6b821ad02f47a8b490aec178afc861b3078c6be5784c95a5f74873f0620cfc491df7b25ed4153b5b4d467e808adfe80a8958b98d0efa07d437c333941fe83bc52aacd3762d87484dc33a495dedc152226fdde47169b7808d89aff659e861a9a7d8be43ca411df7fc3e85e6274ed297205560f78173c15e2e1ab456b8d7f0575943b4e14a8e221cae49f50166373c07b7cd79dd27dda8147abb77f2026e5c274adbccc7252c868fa31600143f0314a67496645e0990ffe56420ffe4b59701ea51761659b4096d0bf3956ae139c216e73fe3d67763910232440fa9203bd09849391fbf6dc5b4c19f4ddb5df63406746a2803be06142f540d53f1b945c8b42abcc434edd383b5281de48f824e30efb3f5b6d5abf6ced3eb3d722bb3b8f23b5d5319b5f92c8dd43c707c2618e3fff52bb9afd30b56466d225f58e06608330430a704fdedb8dfc13429b4a24f662c051510acb06f199de6856430717f52c832e28c771744143cb696ed998ce1eb205ae7fb6d6c3903265e0c6b025101e0f111a45f71121f9cf33523c418aedebe4ce7176d33c47c1e245c2ec2f0e06f718f8e487c27cb4b89ca2974fea5ad039c94db29e4f664e4152dd7c1d894a09d849c7da0fa758bb3194dd0e117eb54e9c7499bbc40f683e15c0a45acbd78f2995d752529aa1c71786e4c4dd29a3d5f261192789a0dffa3a1ce1472bc4fa9e179b4dcd1e7455e0ba98392e30cd4074753c3c4bfef13112fb3fe331d0020afc689bf2340e506ae556ddc07ddce234b424c76733e1c811af10b1e8e2a850a5602004200d0f3aa1fb3b90266896b16777e595a2c2eb031d806eb66e50caf0e864a1955119612217b2fca4048e48f3af5df32f701909496930483298d894c3ce4e2ffd14d2c573119651e97d73b9967b849cf816bd1f9aee8cacbacabed3df7fcdbe273de3523dd98df97f24baba57c852b29cc5f51e06aeb04b0bdf281aa018854a45d84f684d1bcb5a7af564acfbe161a86c4d26e15c04fd582358d0f2e10329faba29f3af21584aa642beb2d625a066ef3ff95b22de178964fa04cf5624c56b452297fef9fe4e8cc6ac6fb9b026065a9f5b8b8f1775bdbc36ab21491c970f5062c095ac5a9418a27896807a129f3b519a7c2823a2824ea85cdd06e09101333f56388460b8755a1da5fd1d24fc9d2e6b4f83548753a1baedeb9ce32ba97be0731c3220f57eb7565c6d96f1c0d29949e08984a44c48cc8f72625981433210266a89824335fe3ad4c8d3010fec9f9c863fdc6ffc779e5060524bc6504fa9bf2481e5103869c78feacd582aa6edf16f19a4c420e78f345d08d08f834d8d10fd5ed047df1ff41de58823019ec73896e438e6940c4b76cf1f23ef6b8cd0d63b5d20f18fb77d677cd87d26f72756bb0d447be115df889b7a725d901c988881aef523a76e0838dde2e54adc41f19c9c0f407fa5951e704a9d39648cde1979ebc739600032e923658ebece78fddb783f5a9b4c5dfce75a417069fc46c8494adb45ea2e64f771ce8ace4459562f41a1d40a44d725906f600e01987f942a973448f9f72b46069d5062fba992757614bb23f8f9e065bf488e1ff6afca519c40c8d1c2dd95a28c8bc8b29cb3a1e64032d76e2576d45b31f0b624fe0fe9f57abbe3a84d450ca6340c6cfba2405b9be2722ee70101371a2797e3137cd5104983b68b71dee9d3bb3a154a58b15c0ff58484018680b04b41ffc7e8293d8725c055aa676bfc553268e3b8ef10f9e0b585d8e8f09a7cb6d1bdf9a6648cf26b5519d1c1d63a8a8d123a0843b2dad94400471f314342d96747d63433fd56e481a595d81129b73c27c5c9eb6d5dd887b904cf07c38e26d7b8ab186c801004b193ac269c46ac6b206db5371816eaf972d8b4a29976fc10f0e6510da4e0dce158d5ddbe402400f7f8dfa02c58286e5a0c501536309a40e46ef051caa1921c67d8b965d910a75dd7bb085a532644f4d8b41f4242e81ccadb710e3f201ea4af6b34db5c0eb34713686f68b63a83b6617e9a582d8fe297e0e0456bb04c399893c0ad5d3e3738d5add852f184435c589d51dac3317dd085775e1b18ca6d4fee51831540ce725f05d743a6a71ad4c432fdd654124ff8d1658706f882951ec8e0207d615a32f14c2938aa49a148c6de22003c1ced38bd4488afd7999421d65affc2f737d2248fda6cce544038379fa554281b3c6cb4b734af59b0ab750e69c636e42cf7bb98704bd899c973f8aa3adfe9e78cdd3eba935df2f1a9bf9c4ecb1690b2557bd068c13b2208ab06249dbf15ddcebfd6a3a21fbfdcc000487875353ac8630b9370dce35fba76182ddef084a3c4f7ab16a72253a488d6b8730766474a70866542a0661a8c22e800c59f6326a1ed3f7dbf8e318b40551b1dad368e46a9e3c4730709ec582726d0dae760b1b6d989fb9f7a4fd2b44be3f996c24357339bda689401a514cdcea9574a3ba0cb46e908a0fe36c7270ea526640cca8af24cc58a67fbe64e17cab4b50dc45bf528d92b35ebd2cdccf615737b0039ab70bb606eb1457d013d26cc73d00a8ec16d5f6beb9548844347c7a913ebe34f149b8a37579d7d6592622d1a51ac0b5615edddf222a547de0dad3171594c73167055b693d14476e9f832589c55342d8c36c1c6570ed97b8ba98c1787f28e64e2025dfad1f30334a3417c498a20d983fc281e3260a298a0fab4983fd4b6edd15dc0c8e76d14b3d9b93ec2ddceaa40f3f716283e7e5e257a093df752ff818843e8f726ad08077ece88438d4c71bf415d13fd5d52e67f084dc0c32c402ce2680b3fdb393b6348f5f1d458d018e35ba9cbb4af1ca67d7880b31ca353e80cda8984c8487ad0d9fb9873d5d992d5ea45c89ec36570b5860326f8f25403de0a5295a553300c416261cef6993ffbf42efb1143633b2fb407b8fc13104042bb0741fb2e15a78bca9f4a4d285dc501ba26beeb2f99f63f605e7a5563d187d25afe7fe8b303d8aafc96e25322b93830ae8d9a91e6bcb7b91c84b5e17083c730efad25051bc71058982146d1d0a35dde0bf1e4c0e2a51a49eda0261b1e710ff6337e298a9a2f613677f89796b598a65d088bbd40a755567af3b746fc40a6f7f9662bc1abfaa39364f3550f108af5d9a6b89e119a234a0d94e5b2e5d62ea53bf59cfc5e7f51958c62928daee213d141a01fafd76880390ecbcdef283091187b8b33bd7c32523ebc0563f0fe0ef5f5cd096e743fc29a5a67ab9172b72b0633640b1e163f60d64c09f3c75f69c79a000c306bf52123708cb3f1b31aec5d5e60e902a03012f4b815b682535fe2218014c5550079b0a93569c662d2b3a7eb4b5f24fc106f4d22e7fa14f88c35d8d2514a1f9f9d1fb38dbd0f09018427ccce25e0762e5611f8aacb823d63298b360b6e81c0edfd537d3f83dd347fb483c69f6613eb25771fddd81ff740a481453d9380b0d33d10851a24d0a00d3f28aaadef64b335d7ce61c8206717ab0d0ed50bcdd648e94095bb5fef28217559bc022e7a9c3471e13ebb2c867c35980866d8b61a796021757fcdd5e27b79a3bed335164fdcc8698184c68db8c650f1f638d292f1f9cfdb5949de0e60397866fa73c216780833fd2008f00c73bb917104a3a8f185b359b0b07ccd679c74c3995cda3667a7986d2c5c5d5e6d3c634bc5ff54fc00ee21a740f1e60be9dea957326d0fdbe0954e2368b", 0x1000}], 0x9}}, {{&(0x7f0000003100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0xffff85d0, @remote, 0x7}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003180)="9f7fac3b53caf673097b3cd1bd2d2270105d56a18fd717fdaee40150fdcd264ebf8b93a6d9289dba2635b77dbd7e88f9d9c2ab4d84e4e33d530b680eacc529de04a1c525e32651f386b79d687cfa4e7fe1f901581416d20fe5259d4eddc5e6cb7928415dbb140a966f0746a8009f7dd9f52deca1f076f23ab39334b071e5a9852357b7a5f7dc048d32f9d8708d33b071f607d60f1390bba4f5ac4066b27b434a", 0xa0}], 0x1}}, {{&(0x7f0000003340)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @remote}, 0x0, 0x1, 0x4, 0x1}}, 0x80, &(0x7f0000003540)=[{&(0x7f00000033c0)="8c163fdbb80d4f446fcf59715d792c5f9c08d5e492b6081150d2885815103aa7ebf3aa004f171543fa20a497699747514735471ee83359d0674624537f9b66b195aea61db34d2d0d5b239f68163ecab14837f64e95b14f1436937059a9201901908ed3f2f977fba552790a90a76207cd41acea1a0e1864c90e4ababbbae0d2ba7cf97976e1fee00ca56204f77cc48d022ce7e5adfa31dc7dae0845a70f5d3a3ad1f7297aacfea9232abf14b41a061b91c4cb483e8f60b2", 0xb7}, {&(0x7f0000003480)="9ffcbedfd5d0bdb2236f7cca2d72f57678e21fa72d179182986f0279ef091fb87b372dd776", 0x25}, {&(0x7f00000034c0)="4285ae5b1fc65e13d3635316a2361547ade5d2bb19c4b1958002acf5d9b94dbd5f6f40baeb67bc2ba4d8c9bf0c1c706c75e8251d70e2de820d7a187692ee8687bf58c73aba4f44f9a7a0ea2afcdb60825fd1df8df1d4561d98cf1be0ff63253f1c7ffccb104de3af422558f983e4bf6f193d1e10ec", 0x75}], 0x3}}], 0x6, 0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f00000000c0)=0x2, 0x8) 2m13.457403783s ago: executing program 2 (id=2790): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) sync() r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) preadv2(r0, &(0x7f0000000080), 0x0, 0xffffffff, 0x8, 0x1c) 1m58.146402196s ago: executing program 35 (id=2790): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) sync() r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) preadv2(r0, &(0x7f0000000080), 0x0, 0xffffffff, 0x8, 0x1c) 1m37.335620742s ago: executing program 5 (id=3485): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000140)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0x10, r1, 0xffffe000) (async) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) (async) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 1m37.335398352s ago: executing program 5 (id=3486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async, rerun: 32) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0xffffffffffffffd6) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00430e000000c50d0000b800c80000c4e2190c15000000000f300fc79d53bf000098e16dd3010f2202", 0x63}], 0x1, 0x4d, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) (async, rerun: 32) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000500)={'/usr/sbin/ntpd', 0x20, 'system_u:object_r:dmesg_exec_t:s0', 0x20, 0x6, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x64) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) (async) r9 = dup3(r8, r7, 0x0) userfaultfd(0x80000) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000480)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/140, 0x8c, 0x0, 0x29}, @fda={0x66646185, 0x2, 0x0, 0x11}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (rerun: 64) 1m37.335200483s ago: executing program 5 (id=3487): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e4f000) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="647b24a5acad4c60ebdc2464f9bfa7a2b7719dd23c9b4558803bb017c77b393277b99713fcdeda224ce8757d61ea02fbea9809a14ef72b6873c02a7ec8ce72737cb7bb252758b6d1bb2491a560a9a984e35506ac7ccbbb6d006d6478dbc1fe3901d94255eb20f05eed8c8cecd096eff6d34b7952f54354f85634db4bd7bc7bd416f5bb9f31fda04200ab4e6ac642b80cf16b3f484d1857fe3f0d1d84052015523dc38a74", 0xa4, r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = add_key$keyring(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r2) request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='*\x00', r2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendto(r4, 0x0, 0x0, 0x200048d1, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) dup2(r3, r5) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, 0x0, &(0x7f0000000040)) keyctl$unlink(0x9, r1, 0xfffffffffffffff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m37.334235282s ago: executing program 5 (id=3488): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f00000002c0)) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20000a4, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20000a4, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580), 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe5d) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffff7, 0x5, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) umount2(&(0x7f0000000000)='./bus\x00', 0x8) (async) umount2(&(0x7f0000000000)='./bus\x00', 0x8) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x40100000000, {0x2, 0x3, 0x716, 0xebb, 0xfffffff8, 0x2c7, {0x1, 0x38000, 0x8, 0x8, 0x1a20, 0xb, 0x5e7, 0x80, 0x9, 0xc000, 0x7, 0x0, r5, 0x9, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m37.274325857s ago: executing program 5 (id=3489): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x6, 0x7fffffff, 0x9, 0x40, 0x2, 0x5, 0x13d3, 0x7, 0x4}}, 0x43) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000100)) write$P9_RLOCK(r1, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x2}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000180)={0x0, 0x80000000, 0x3, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000580)={r3, "16df2a060eb4e71c59a42e9fbae0724d"}) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001600)=[@text16={0x10, &(0x7f0000001580)="66b9600000000f320f01c30fc78ff5ac0f1e0e9e00660fe009baf80c66b89e626e8666efbafc0cec660ffb3166b99b01000066b80078000066ba000000000f30670f00100f06", 0x46}], 0x1, 0x12, &(0x7f0000001640)=[@dstype0={0x6, 0x4}, @efer={0x2, 0x2400}], 0x2) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r5, &(0x7f0000001680), &(0x7f0000001780)=@v3={0x3000000, [{0xba, 0x2}, {0x0, 0x2000000}], r6}, 0x18, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r7, 0x10e, 0xa, &(0x7f00000017c0)=""/8, &(0x7f0000001800)=0x8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000001840)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r9 = memfd_secret(0x80000) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000018c0)={0x3, r9}) r10 = fcntl$dupfd(r0, 0x406, r7) ioctl$RTC_ALM_READ(r10, 0x80247008, &(0x7f0000001900)) tee(r2, r0, 0x8, 0x8) accept4$tipc(r7, 0x0, &(0x7f0000001940), 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x10) ioctl$KVM_IRQ_LINE(r11, 0x4008ae61, &(0x7f00000019c0)={0x1000, 0xfffffff9}) ioctl$FICLONE(r10, 0x40049409, r5) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r6, &(0x7f0000001a00)) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000001a40)={{0x0, 0x0, 0x80, {0x2, 0xf000, 0x2}}, "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", "1b43c101f0c7691182c3f3c47d8d505b16ea38ab4db13a46bc79791d8adb990c4983dbeb42197a796f6a6d880ca17e8b01656a43f84dfdf0feeb330c5233cbed8a371ea1113a94ddf069c11ef0f3781e42c90c727cea87af0df521395452b8d147596a096efa65c30a3b8f3fbb21ba04f435cb97833431ca35bb22308a7a16caa7cbd2c8848d0e244d0acf28e7bb7f039ce8a3d0e9889ccbd574ee82bf50ea0216d5d92350a1a112b02d59ce617c232c8372b6c2785006416316be6239f952bd5f44add9f557964bd5d50281889a9d31791756387a0fe671bf9c9928ac7ac0875af37b641962da58ce86c5420265ce62c540a294d0fd329a77ba32a91d9bd99aee2cd8532ff6589842b2c7e70fdd7826f9089ee11d60cb447725188b706de173ccfb1fa70704afd574c7b7e82185d2db09bdd7389309f7a0330ce89022c498c33575306b51072ad9e28577746cf35103b2c5b317e935b519883b6980e8eb5d5b99fa61415540d766ab2934300f4a31c62e36f60a68dc4b9404f389b492e4ba90ab9c5629caf8c87721fbd70ec50f08fa27af24d8a63f2df18b18875a7a37fc308b2120b64007ed756aae3c07ac2bec625cc8e6553b96a23e49799f08ec73e2589192fdd794e0a8b56478b6a844d99f3cb76d29fec6caa68351418e9fc08ba9c813d0fb17754765178798384836c3dc8c5d41265b9e36590747dba7f0f978039e44807b21cca490743d3c4747318e1e20876777a13167a9503e25a6dca5a6c07106c81367382f57bae3a52642f4440d44cfecdfc5586211f0a61f3d177e6b09f5ce5171edd2756f7ef44f7486668f95b95ce2918c2d5f3d7a17d58cf70a17e86c4774c6a3df524737dd7b00e60e38467445d1a6aff3908793df2546bf0ba8577b490a213823e356bafe717b9555116fbcf616e04e76c8e9c6635408294190fd9231465136123b1d1e5b4d37774df2563ffa98939ca0c7b6fa6b8ce7905965fd34bbc7d1544fa15aad79d8b95b2aa777d78d5d2a800cc6aadd7086a840235ba347078a36ae8cd5eff38d2169755b408f46b1b7a1e49f12133b8b751af79821c5f262376576fc40490a34a1a9086c1da58611fb43f372d3e6f38bfc9f8141834b7d6535416cf9c7b27f2540a62f7642d739885d008d771ea017577dcdd3bdb4cb67374a51f82733bae0766b613f7c4ccdce3570e541eb040fe73826f99221402a84e63535c18286f8802ddebd9cd5833ee275e555e404aa96be5cf5077154efab126f6479aeb4a265fb5b970d6844de8460382143b5421b8489c7e7019d5aeed4a43226823156a1a1cb4cdac9741c9294af58e45d3a6bc755a55ac4ce1f62aa4df0395bd9e9dd782e6224a0bdf6db8b2b2b6ab2d13a319b355fa0038c4c40e5382374e386f479d43ecbd948946d502c55cbf72c62dceebac77b0b147be4ad57701a68d16de2ec8d887ee9c77cc723858322ba498ca00d9f7f9284d4a9967b4f7536190ed3d7d41b884a6b41a4e35ae1bf03eb8e3408379f4b04c0b4df67bb200beb0a847476d5dd3527af8fc60497994129a85da5f02f813b02bc1d5c5bb87feb124fb192b2e67c794d237f6d2a214060b2eb5dd766282cd736a6d4bb624295f444aa884d8d135c657a638338fbb561347aff4f2ad210c5920c1a99ae8cd44ed352b1aa0f152ab19978d93c6e682defa83187c3b2b091931bb8a1d9d2d48c05ffdb231e883d8cb3ff32215aaadc57a81e93c1e00acc79640c0e886b5fc89f330674368ceaf41d875534d01c99e25dafa12e3a5432fdbd629ba120e171d6fe4ebf8611486275180bd822c8428cc8d604976bb3fb6e0eaaa288f30ad158d62c20b93fe98c9edc41684cf96b3d30d33df3270394448edf9e7ef9f9d11482c83ffd28c78e213cc0dd2792d8252a2a3ba84b66bca2ab691488e818c19dc9875e255d8ba3600dd4a230788c70a36626c8795e06fc0e92a50585cd6f0449c200afae6cbdc5e82cc9d12edbabfd764d0332a51acf7da2ab15c4acb373bcf73156f5b080c96cc551485206cba608777cd92ad9a21d09c397ebfa193999d19ed2ce90a858738e67bd853536891449975e75a858cbe874c178038ce722715b2828cbfecc03bb8df73a8ebe6fdf5f67a595d3a4a723943f9679412c0fa1111d1cd2baf4d03254d355bc86889e5e2de87bea568e6992fe176a6f82ce3d6db132e69662ee7224f4d1c68ce54b86d804ac94c7c73461584c24f1bac6cf7777c7edfcf88970b876179be71b3808b3dc4ad2416682d3f494c820f4f1fe2a7aa4a29eeda10ed8921866ce8e108e55a1116601891a91abe4a97f45ededaee142af0b10444dfca118ef95200be16a79200e18db46eea65b906e70a9531c3401707adf6bb156b5bf53b005d9021621eba1e2db224cbd35ed8ff1aa71ca6b4177d341cd6326d3d892aac5b46cba5649d2769387bc510cfdefd0090a5feb3e24ad610ebfba1d53c0b83e4c1092fd0f0616e84d9cd5df61248060017ebbdd210d9f8401eb7a015322a8f27b7646e9a58f6bdea81aea598a3be7e37963dc97076c171cba17cec24ebee394696e2136f3ac0e813da0d28c9173b99791b7b6b1d1595eb092e78c18f390676868cd83b0dcaee357cdac980996dae6205aa451f01918f66a4f7d6bb4b33c8121b31ad9685767163652c66be17969e5dc2a8419cafc1f38f7290471d3e2f0bdcb9ee968d28bc9f04a8fa8774d74203a9540f229649ac008f81907e9f0c9b6e558b936ffcb90dd122803520595dc915d0aba6da8856b2aaad3baa378ecd41c5b4b1a950a7f9e0d71f05fb171c94c9c51f0b0c1c3ff5f5ccf9fe698d07f52bbab5c8ecef28cb50f52890d0b3608218665d20dcab23d12d3b2c95c0994063557d401296d430c2573136a2b0a63f7da7dfb4a0f843addd5a0a9a5777ab9bd281be4405707ca991d3da3a13003ae2c38f616ae7cde309a397f9431f298c8fa589040bd531faff03f8fc93d0ffa8c22ec97378afca763fcf209be8568eac86bc38aab18742ef90d76a1b7549837f9550a42a6141fcb8548eb25a484e784ad024368dc09d1fb4aa5af48a510fcd699399b17511618c2db22985b4168117ca56fd7e5d9b0acdbd9459da274e542ec494f739cab7a21d92af0c9bb57b6cba240a6a4b424767089fbb913c1cbbb3abc2d927d7f0005ca6082f72e805021fc70f6bec6edb54085d1cca469d97dddb7c2debf26ad4b19cd37220fc1b680cd6978bd8dbde0d916d8e7ccc85ffe7594a47f56513c23e6c6ac9b37ae4d9d4754378e3037cf6c27c0ff7b3f9027a8163c2c34cbc5ba17ebed4ab7f209bdcb9eb161eb2102edf03463be0fdb3fa14f68e1cdc778291fd9f0413b0efcd1fede14ca2989fbe0459489b2004291098c5ee867a0534453a6ab6d247c51c501798dbd716b66fa4713eed70f82410178f5faa6e124b9113e75fd006ec087ac1bff0ef838f789ee8cc9027fbae39b73b7d17cb20f14aa853b49bd053355fdccf35d930cc362ada0fd8cf4be5f95fa428157e0f1aa7c3684b91089914efa8953f8d84bb9f5c0ac8f0f833b4a9fef32320ec11ecadfca73bd6bde0083f533ae36666472d197e5a1b2a7750c06044fcc03b3ecd3df841f6e0e9a1e1aea9383816c38f209d12f381d6b2a6e986e005bb61bd6bcbf8ea706a9587cd3215cd882c27a9fedf648fdd4fdb41e8166747abb3c44a7191054abbd97f3428853c3422e704dee135319c4ea61cead80f3db1aaf7f1a224511493fd48c81d55e40de99373a2067a9350360e159116c6f8aebc52b47ebe33e1d2fee751a93323e2a9d53edb3dc3bf8892b997aedb469ceb6bb538d7078ecabc94c073284abda23018c7c61469866c18f021bfadd1548c5f5d67a614e0b429415e8a5fb5b02ab3f3208de2a1a432da6fc65d82f2938c822ec92634a442f03407e5cb5cb59e52a27d4516362ca55ca690386dc5b70e29450b8b12fd10df3d309d85713832ef12644218627de7abdcc6e448aaa265f15b24e43915b1c7f3a80f9bdc40cec65b0e9a96f9e3961deae49560ce08a17fc671e6a8962e2aa4f66e4786ad3ffbfb3bcdacbcd8041b2de4c055e99debd247a24b12361699b29fa39acec89e8be4340b30ad166ba87b5e72e68c08c6581ce04c350428501dd1576cb470fc0723094ad1ecb845a77357d1e50a9aeddce90d9971c8123738d5c63c8f27e8a606af961f216d342bff8f7628a4176cbbf9375912e64f06eadb48cbff34f24c4a9f6a26e3e31bbf3331953cb275085cf5286530bf5a3169916428b202c9338274dde89924068aec6225b53eaf6602f1238b6543fbae5af2ca68e34fed68227471b129b86e0ab2b5255eb062d9d005167159cbac1242b7d1a03801b2220fb14ad5fee06e1aa19253ce0928be4707712ccb3b384b87b753325f40e8d6b93ec706820ecabfdd468461eed7f9591e0b6cb574901b9a1725b32e6d2d2d00eb59138d93e1efd2c331443cb0ef5ed1c96332bb5beb920dbaf6b21a34067153dd1bdeb274e346b2a278097729f5e849f8f15b83e57bd462e48cba032f8d53372c1c669ba02898b28ccdaa5d4e6b5bbcdb0b606d1a425555b2fa097c71dd9a7767cad868814ff68021204c2314d47ebc7df5af85ac809d8fb7faaa046def9459ab60a8fa2ff40fc6e9f27e240376a303efd678bc253e7597646a936658176e8c363e30bf85e40e9d8eb9409b1b823f07b963c44b749360c799b29712029cf4d5539e095664fba9716c4cf6bb022e1ab36654da21112381d301a733b12cf43dcd01474b79028687ede9ea59c0776577057c15e5573effc471bdf69b8fed01d50a285b3bfa4ae5c85e892989f546df9b04acb82ff7c63e9445d41e663865d69126c57162ce97acaa5868b9814904179c8f3ec1a13f708d84b689145ea20d48109d306748d2312577dfaea23976db23a8812bec6240398c0ad064d7dfd073d81dfb6065da28fba6269960f3a72fe81a48f8ea4e46d13ee95ce6dc5634648332b5c6193276ab9ccf89e851a4b2efbbe147663ea5fb86c718f19938b214a55cd93cef8317bf2ec2c4d484b8d1aecf65d78d87204daaecb8cd4d1183ddb03b66545e2e4cbbb00edaeeba54aaa561ca53a7c9b75a5bfafe7eda2c68db9da6982f2ae02d8c99e75f0ef9ccb5d99c9395d6d222ed3314386f0477da838c34ed24396ab5546dae9a571858b8227c70bbc0eead64beea3d61bd540691eaa1310b3a3d4881bd046e0305f6a6acaef7667224419e94e83e469e2df9cff8320fbbebd099fcee55ce05c8333e3b3d620d0d864d89f6a12e98ad1cbd625cbf9f0551d0a693f82493da3f7a0622195ece01b90490cfc2b9e75e931126149da3d180131ddb26697e2604c900cbb4759c0f5ed5dd6e6a7b8caec774c65c2761327e750ba7d27d0f2873829541abbf5fcb7e66d30f5310b89607eaf384d961282a878ec25e209cf05ef551f8b62c3cbf4d6e41c000d51fe500dc23fc415c8f786e625f54b9dfb9e7f16517f3461af28ea1166b59b1ba0ec22ecff3f5560c9d748131207d02ebad456e691b63d3be530315593cdccff8b668727ec831ea0eea792041d51382ce5de372b84ce383d6a8fd87fe2797fc0d68580be811ee8f14398889be562b279f187f5b962f79cfa0b481bdd22c698c634601026a7ba35cf72302bceb68a89d634f5f00c979d49757a33abb38b89f5717763f0cd15c0a373034c66f32ec67f17a7750e97f58b161b8d2bee60c9b116c11e2c2e8bce7b5f87149492c2513bd87daa67b08cd16005"}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000003b00)={0xffffffffffffffff, 0x40, 0x3, r9}) 1m37.272182458s ago: executing program 5 (id=3490): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x797441, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a31000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="e029e64fd9885b02198c10c9bfd9e9b0e31899f50e3e1edf509da5f8e9311fdf58b7dc3a843566e1e243f343420b5d767a240810bd99c82747c69b5dd4a42758786b3baddc09bdb97e41f7348a865f214c95b4ad0cce717cf1a9a68cbf1f6a19a50dbfc1f1342d85bf8502b00cc0bbef84af12a33122758dbbc29ba60b1a"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000a00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xderw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xe9\x13\x1c\x0e\xff\b\xaaF?!\x9f\a-\x03\f\xe94\x1deU\x06zS\xe90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xf3\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x02\x10\n\'B\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\xb1\x83\x00\x00\x00\x00\x00\x17\x94\xdfWgGE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xb1\xf0C\x9c\xabf\x1daCS\x00\x00\f\x00\x1f4\xc8\x0f\x16\n\a\x00\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x14\x80\xbcj\xa7<9d\xf1\xb4\xe1\xf58\x87\x11\x00\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/564, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xd2, 0xf34, 0x4, 0x8, 0xb, "caa7a7aed7a735fd"}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x7) sendfile(r1, r2, 0x0, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x73) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="360f30c44269aa4600430f35420f01c3f08623f3460f1ee266baf80cb88842a183ef66bafc0cb8f5ff0000ef660f38817800b93a0000000f32f3450f09", 0x3d}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 1m21.978651992s ago: executing program 36 (id=3490): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x797441, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a31000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="e029e64fd9885b02198c10c9bfd9e9b0e31899f50e3e1edf509da5f8e9311fdf58b7dc3a843566e1e243f343420b5d767a240810bd99c82747c69b5dd4a42758786b3baddc09bdb97e41f7348a865f214c95b4ad0cce717cf1a9a68cbf1f6a19a50dbfc1f1342d85bf8502b00cc0bbef84af12a33122758dbbc29ba60b1a"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000a00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xderw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xe9\x13\x1c\x0e\xff\b\xaaF?!\x9f\a-\x03\f\xe94\x1deU\x06zS\xe90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xf3\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x02\x10\n\'B\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\xb1\x83\x00\x00\x00\x00\x00\x17\x94\xdfWgGE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xb1\xf0C\x9c\xabf\x1daCS\x00\x00\f\x00\x1f4\xc8\x0f\x16\n\a\x00\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x14\x80\xbcj\xa7<9d\xf1\xb4\xe1\xf58\x87\x11\x00\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/564, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xd2, 0xf34, 0x4, 0x8, 0xb, "caa7a7aed7a735fd"}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x7) sendfile(r1, r2, 0x0, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x73) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="360f30c44269aa4600430f35420f01c3f08623f3460f1ee266baf80cb88842a183ef66bafc0cb8f5ff0000ef660f38817800b93a0000000f32f3450f09", 0x3d}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 50.061113529s ago: executing program 3 (id=4325): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5f875000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x3, 0x7}, 0x0) r1 = syz_io_uring_setup(0x6556, &(0x7f0000000380)={0x0, 0x8892, 0x1000, 0x1, 0x247}, &(0x7f0000000240), &(0x7f0000000400)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) syz_io_uring_setup(0x20d3, &(0x7f0000000280)={0x0, 0x28f09, 0x100, 0x1, 0xc3, 0x0, r1}, 0x0, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0x9, 0x2, 0x2, 0x4, 0x10000, 0x6, 0x7, 0x3}}) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x1, 0x0, 0xc, 0x0, 0x0, 0xfffffffc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0xa0000001}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x60}}, 0x0) 49.910129001s ago: executing program 3 (id=4328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x800, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) (async, rerun: 64) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet6(0x10, 0x3, 0x0) (rerun: 32) sendto$inet6(r1, &(0x7f0000001900)="900000001c001f4d154a817393278bff0a80a578020000000304840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2a724d6e7d8f2bb079fc14cfc33ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x8090, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000180)='\x00') (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x8000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r4 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) fchdir(r5) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000080)) 49.90952618s ago: executing program 3 (id=4329): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/161, 0xa1}], 0x2, 0x9, 0xfffffff7) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) (async) r4 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8) (async) r5 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x41) r6 = getpgrp(0x0) (async) read$FUSE(r3, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) (async) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder-control\x00', 0x800, 0x0) (async) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r13 = geteuid() r14 = getgid() sendmsg$netlink(r3, &(0x7f0000000780)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000880)={0x608, 0x14, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x140, 0x6d, 0x0, 0x1, [@nested={0x4, 0x41}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x11}, @typed={0xf2, 0xd0, 0x0, 0x0, @binary="8980111b268d751636d4b990d46b29a3bf211a2e258e0301c4efd984f35aa235acd7cf7bad095b25645e9550aa59df0c4e16d5d0dbdf26883fa871006c0f714073466130846b41f775ee8171ba480467abe12d3f05914869e43d378b025e0ab4b41e6195687786c7ebe21032aeb9b42db0c6101ae6184a02b18e59818079d90eb2a4b39c91e732ecbc296fc6bdbf7cf6c52bbe1d4e46fc0c05c0235b60eb7c52693a246523ddcbad48bb065c163bdc10f42ce51a23a6c19111d62f16f3bb22688eba19c3fcf8576c2e9ea35ca471653f17feaf385b35f1fdb1de122a9a3c68498996f9dda2c996aba74e95c19d90"}, @typed={0xe, 0x8, 0x0, 0x0, @str='IDLETIMER\x00'}, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @nested={0x102, 0x7a, 0x0, 0x1, [@nested={0x4, 0x8d}, @typed={0x8, 0x6d, 0x0, 0x0, @uid}, @nested={0x4, 0x85}, @nested={0x4, 0xe1}, @generic="0e8a482a5412b67992e8414da8b09918", @nested={0x4, 0x7}, @nested={0x4, 0xe}, @generic="18303f09645d1448cfeffd991d9b4015c80af523fc905440c36dc9c18f089226a351488388f3a7d90dd4a6fc494f9b008dcee0a62d205b57d15562490bbcdfad069fa693f3591f2754dffc06d769b2769f266cf33a70df672c5dc05d1d729e194196949667125d79ef059cde13275e83bc83f7d709b32c1eeac805a9c8e5effcef7204736c6d3ef4dba74f754a3871b8f9b6466d16db4d5021f47496c211d90eece484525d585fc27005f5c19ba799f9a5e3dc72998d6881a82ee45437e37d9fe3cbb30c209832ae54b63c3e4dae67cb8800"]}, @generic="c0c214ff32b69b2ab13750a26a116d3ab14a6a448338447c93ad30272ca4f4baa8035ea3748f906dcea893fc000c4d5fcfe47d6102", @nested={0xf3, 0x144, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x4, 0x105}, @nested={0x4, 0x49}, @nested={0x4, 0x104}, @generic="da0f85821c7363f2d429afb72eff1473d2f9360784afa36951e4635b4fdcb9f82f5c5df1897f7a6cb89b254656b8f1c7fddacb5840c04337052a31053ffe3420ef082edef4eac3eb8bb18d004934895f28615c696269384731c9252754e9cabb4db28f39f224cf1e46cb0b9ec3977df895c70cfa9bef9e3e712fa44c327234361deb928d0e74d81f5449f410fa19726616d67920d60122d81e6d7f60cd1821908ece4ab238ddc2bb673d9d309baea7a8ec8d37ff28474da57a354737126f4d53d4eed09c59da3b567227e37964f48d378372ce3ac029886b7afeee", @nested={0x4, 0xa9}]}, @generic="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", @generic="5875bcc294646a2f768c7c09a9ef3e4e988346e7df75ad0b174799f0f8ba2f4d045de40de1a7ad96042f641f1029b3ea2b291e31b86f54f373b6d2c0381f4633a1ca64cbaf45e41f936a4451668b58e7cf13024567e161181db4ad21e823e37ceed869fd4a2ecda179e63ad701000ca9028348f99ffd4379038bf37ccc49487e34a8b060a2bd84c50813a324ce212c3f6ed5878906806b99cf117c4e0a5dceb85926f2a7b53dde0d681be61c27f232f29a585c156983e6a882f9c2e47aa844052d0ec6af12b75be032cd686b5db63f78af989f4120", @generic="e419193668d6f2e5b9fff19ccf76572e1c60016016436c4a95dee21ba1680a2c29c9af1102ea66eeb0f7eca3965ff9ff0c9be6f65db563cdee79064a90df17a20c3948e347461fdafc402c33741775d55364ec14253ff242bc52b1b9fcb14307713f85d647f4a218dfb960a2a387a9141dfc224cbf2640b2022d290872cabc3ee500e882586482711d48b9c7a808b3257ac92fd4a3050014bc080067a782908876088995e2582f35bbe7dce769150ef7832ec5b869"]}, 0x608}, {&(0x7f0000000300)={0x2e8, 0x3c, 0xb00, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x79, 0x94, 0x0, 0x1, [@nested={0x4, 0x61}, @typed={0x11, 0xbf, 0x0, 0x0, @str='/dev/rnullb0\x00'}, @generic="c28ecadf9086bb3f3723560040038292cb55bee3ea5537a9479514288e20472f780e817b31b2e2e8e7fb539e609efcd612386968a2d30347969008443698424b8b333e629cedb9088636196634972ef87b2c3a8b289d6b79457bcc9222"]}, @nested={0xb7, 0x3335, 0x0, 0x1, [@generic="1bf4642f993d5514ca6c14ba288fd3520571a115e10f551895b8da279abe96425b5eda199457bd0982ae55effdd7b059dad4755c81b2e6aa858eaca45ead97a449be8e1f4aa1dfe8c4d35f7807328e73b971010209c181052819d24ffb1ebcc90761a7b387d21a4118989ca569a5be491182f31b5a0cb01a18dfbd2a8647688cb6308f93494226ca909242c991ae8d82d04e030a8f9fffaa874bc45085b5c0bc79e9e3d0a8bb09ff823ac5670c749ac310f81c"]}, @nested={0x16c, 0xb5, 0x0, 0x1, [@nested={0x4, 0xbf}, @nested={0x4, 0xa3}, @generic="37619699a362cea089f87ad0d5aaef41458ffe4740fa6593283c208a0f0fa574cc9ebd0aec490eb38dea122e0a819d837f066d134551d89170b05b2097a4b0b22a682f5928e06781150e58225a1293525c8ad43db16e8e61ae2114be7cbc1b00d2277ed0a2af2418625c08fd7ecf4b6f258f86772ffcc33008c1927855c8535504638e03331c0c33a230c27169aa8c52097c31a36731534ef185ee3d8e1c9de111c4465d550f8fdec85ba254601de6fdd5826bd8df6944c2131791134f1119ea457ce7b15174897a2619d50d96bdf34e3242ff45e300a5ba9e1b33d2b8a770d016a8acd722ddd7", @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x5d, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x66, 0x0, 0x0, @u32=0x9}, @generic="ad08669f94dcc1f86f8ce469707c7c71b46c777478f5d651371c3b8ca43876c38b374eed4459c2b6365658896264131671ccf823afd7721f621792ebd9542622cb9867b5dbf78122803b8c8e6e17cf6d7d67c9db83f94fec6a22f7ed19"]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r1}, @typed={0x1c, 0x54, 0x0, 0x0, @binary="aea6d6d9769a34b8b453999d19d946267a617d06ed15d9ee"}, @nested={0xc, 0xab, 0x0, 0x1, [@nested={0x4, 0x70}, @nested={0x4, 0x85}]}]}, 0x2e8}], 0x2, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r2, r9, r1]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r10, r11, r4, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}], 0xa8, 0x20004000}, 0x0) (async) r15 = eventfd2(0xffffffff, 0x1) read$eventfd(r15, &(0x7f0000000040), 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r15, 0xc0c89425, &(0x7f0000000080)={"fd06111122b31156326df5758507449a", 0x0, 0x0, {0x4, 0x5}, {0x662d, 0xb2}, 0x8000, [0xe, 0x0, 0xf, 0x29f, 0x3, 0x1000, 0x4, 0xdd40, 0x10001, 0x6, 0x5, 0x8, 0x5, 0x3, 0x8, 0x10]}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001180)={{r15}, r16, 0xc, @inherit={0x48, &(0x7f0000000180)={0x1, 0x2000000000000168, 0x2, 0xd7, {0x9, 0x1, 0x10000, 0x7, 0xffffffffffffffff}}}, @name="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"}) (async) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 49.888546923s ago: executing program 3 (id=4330): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x2fe4) fremovexattr(r1, &(0x7f0000001040)=@known='system.posix_acl_access\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x1, 0x80) getdents64(r2, &(0x7f0000000040)=""/4096, 0x1026) 49.876667593s ago: executing program 3 (id=4331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic='^']}, 0x34}], 0x1}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f00007b4000/0x1000)=nil, 0x1000}}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000080)={0xa, 0x80000001, 0x16b3}) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x19, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic='^']}, 0x34}], 0x1}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f00007b4000/0x1000)=nil, 0x1000}}) (async) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000080)={0xa, 0x80000001, 0x16b3}) (async) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x19, 0x0) (async) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async) 49.774232172s ago: executing program 3 (id=4332): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb}}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x40) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001500010025bd7000fbdbdf250a06"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x450700, 0x0, 0x28}, 0x18) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x1, @random="93c5cea3880b"}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}) r3 = socket$inet(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) sync() setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) write$cgroup_devices(r7, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) r8 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 33.681192421s ago: executing program 37 (id=4332): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb}}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x40) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001500010025bd7000fbdbdf250a06"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x450700, 0x0, 0x28}, 0x18) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x1, @random="93c5cea3880b"}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}) r3 = socket$inet(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) sync() setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) write$cgroup_devices(r7, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) r8 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 32.8223952s ago: executing program 8 (id=4568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x401eb94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000540)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) (async) sendmmsg$inet(r1, 0x0, 0x0, 0x401eb94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000540)) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(r2, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 32.658536003s ago: executing program 8 (id=4570): r0 = socket(0x1000000000000010, 0x1, 0x20000) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfsplus\x00', 0x200000, 0x0) 32.653125144s ago: executing program 8 (id=4571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x70505) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xf42, 0x7}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000020000040"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 32.625741316s ago: executing program 8 (id=4574): mkdir(&(0x7f0000000040)='./file0\x00', 0x44) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) mkdir(&(0x7f0000000040)='./file0\x00', 0x44) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) (async) 32.554433302s ago: executing program 8 (id=4575): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) (async, rerun: 32) pipe2$9p(0x0, 0x0) (async, rerun: 32) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') (async) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) (async) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r3, 0x1, 0x1) getdents(r3, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) (rerun: 32) 32.44624808s ago: executing program 8 (id=4578): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) (async) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) mmap(&(0x7f0000149000/0x2000)=nil, 0x2000, 0xb635773f06ebbee9, 0x80010, 0xffffffffffffffff, 0x7fffffffffffffff) (async) mmap(&(0x7f0000149000/0x2000)=nil, 0x2000, 0xb635773f06ebbee9, 0x80010, 0xffffffffffffffff, 0x7fffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) (async) keyctl$read(0xb, r4, 0x0, 0x0) mmap(&(0x7f000044b000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0xe1d1000) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r5, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 32.439887331s ago: executing program 38 (id=4578): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) (async) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) mmap(&(0x7f0000149000/0x2000)=nil, 0x2000, 0xb635773f06ebbee9, 0x80010, 0xffffffffffffffff, 0x7fffffffffffffff) (async) mmap(&(0x7f0000149000/0x2000)=nil, 0x2000, 0xb635773f06ebbee9, 0x80010, 0xffffffffffffffff, 0x7fffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) (async) keyctl$read(0xb, r4, 0x0, 0x0) mmap(&(0x7f000044b000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0xe1d1000) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r5, &(0x7f0000000400)="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", 0x1f000) 26.686300215s ago: executing program 7 (id=4663): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) read$FUSE(r1, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84800) statx(r1, &(0x7f0000000140)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x80004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}, {@noextend}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@privport}, {@fscache}, {@fscache}, {@access_client}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rnullb0\x00'}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'fscache'}}, {@subj_role={'subj_role', 0x3d, 'setgroups\x00'}}, {@subj_role}, {@smackfstransmute}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x39, 0x36, 0x0, 0x33, 0x34, 0x33, 0x66], 0x2d, [0x38, 0x62, 0x39, 0x66], 0x2d, [0x35, 0x33, 0x61, 0x38], 0x2d, [0x34, 0x35, 0x34, 0x36], 0x2d, [0x32, 0x63, 0x65, 0x65, 0x61, 0x0, 0x30, 0x65]}}}, {@smackfshat={'smackfshat', 0x3d, '*'}}]}}) 26.639987049s ago: executing program 7 (id=4666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) listen(r1, 0x1) (async) listen(r1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="66baf80cb87ec75a80ef66bafc0c66ed66b85b008ee0b80001c0fe0f23d80f21f835c00000000f23f8af0f205c26360ff2402ed8d7b80a0000000f23c80f21f8350c0080000f23f8b988010000b800400000ba000000000f300f30", 0x5b}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.854396003s ago: executing program 7 (id=4669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1516c2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x2000000, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x20008, 0x0, 0x2000, 0x2000, &(0x7f0000001000/0x2000)=nil}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) close(0x4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 24.993355492s ago: executing program 7 (id=4673): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x28082) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x0, 0x6]) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) write$P9_RAUTH(r3, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x20, 0x4, 0x5}}, 0x14) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x1, 0x78) r5 = syz_open_dev$loop(&(0x7f0000000600), 0x5, 0x10b100) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000700)={0x3, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000100)={0x2, 0x9, 0x9, 0x1, 0x18, "6cca6464f7d72518"}) r7 = fsmount(r6, 0x0, 0x86) unlinkat(r7, &(0x7f0000000040)='./bus\x00', 0x200) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x2b, 0x0, 0x101}}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x8000, 0x0, 0x8}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x500, 0x0) mprotect(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="dc45b3335de118128e6ee6c2b121954ef05e28fd7699a27fb46266c8984fe8501b76890000009e03000000000000"]) 24.980027183s ago: executing program 7 (id=4674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x2040400) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1\xce\xae\xb7\x1c\x15\x98A(\xf5\xb5\xed+\x82\x88\x9a\x04\xd8~Xdf3\x13\xc5\xfe\xdd;\x10\xed\x06\xde\x14Gk\x81\x84|\xea\xd2C\xc5\x11\xbb\xa0{gM\xa0\x04\x12p\xe4{l\xabg\x9c+<\xb2\xdf !>\x9e\x84w\\\xfa\x1f(\xa2$\xc0\xf4\xe2\xbd\xfb>\x1e\xe6', 0xfffffffffffffffe) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000001d80)=@ethtool_link_settings={0x2, 0x0, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x8, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x2]}}) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x14000a7e) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) vmsplice(r3, &(0x7f0000000580)=[{&(0x7f00000001c0)="6b912f83f796f0584105351072942f771db9990e811058352b02b6bd85f3", 0x1e}, {&(0x7f0000000200)="d2f969410b10d87016ffa8b94138e7a4c66a934e5bbc52045a56821a4549212f821b051521d38f4f9bb43cb51b33aea70f02d32e086f0d8787e4c260a8c24a10c0ba356faa063930ac471231ae92f3582fba2720eea36e544128860c90ff3ce6a7b7ee97c0db8b853a500ce99693e5e2a4ec8172bf90a5c609c0ca801aef24e7ff713f3b8ba94840a80619dd10cb56c461e2188ed5a50f209ba177d5ecc9de84b7987cb37edf1bcf05112f301fa23d8d", 0xb0}, {&(0x7f00000002c0)="e766593423cb52a61e3949fd9a4eab82ffaccb1814ee4d483ad3fd659c05c3e86630d67e9db66ee48677e1610c820316efbe7abc8a36a80a49545b66b16cf75cf800988b162c72a1a319688faeafa6bedb5b4356114b0d3e8c124f6bde68a4e25e122a580b801e0cdf6b740cab954088e065cd3284e4be92445b277151d14f7db2a6dd03b0345f456d4e9fc9eeef545fbfadd25b56114f9f99afff7b71ffe929e2ee1007515323d794c301a055", 0xad}, {&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000000380)="b5e40e2e2aab37814c1e05fe79e38fdbe0d0e835eff27beb64ae15b8076e95cd7f581aeda4930890e78eff2a180015e22239762f4945832845842592f56185576f42c8db670302ea08ba916910ece36e0c6f85a57b66b082997fadfec8d25cacb1ed35e4b853256db1d2fb1694bc6ab72ab43cf83e8b99c12a2f66db158be00ffe8924c9b85bba7703b4e7ede1ae21b42c3908d83206659bf99fb1fe2877387a27d328a80e9b4e9bdf", 0xa9}, {&(0x7f0000000540)="57272225967a54097036fddf7f6ab3d02c9077179cac4733951575367a60a258a4dd788de0596db20250973c95", 0x2d}], 0x6, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', r9, 0x7, 0x8, 0x2, 0x7, {{0xf, 0x4, 0x3, 0x2, 0x3c, 0x65, 0x0, 0x6, 0x4, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xc3, [@remote, @private=0xa010101, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}]}, @generic={0x82, 0xa, "bd0ac1e139b5c610"}, @noop, @end]}}}}}) 24.858445963s ago: executing program 7 (id=4675): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0xfffffffffffff339, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0x7fff, 0x6, [0x5, 0x8, 0x10, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x6, 0x0, 0x7, 0x1, 0x14, @struct={0x103, 0xf}, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0x2000000000f, 0x2]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0xffffffff, 0x1ff}, 0x1, 0x800, [0x9, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r1, 0xa0e4f000) madvise(&(0x7f0000785000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.176651315s ago: executing program 6 (id=4835): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x180) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) (async) syz_open_dev$loop(0x0, 0x7, 0x180862) r4 = syz_open_dev$loop(0x0, 0xd5d1, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x9]}}) (async) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r2, 0xd3c59000) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffffffff) (async) setsockopt$inet_buf(r1, 0x0, 0x30, 0x0, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_handle={0x77682a85, 0xb}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 14.102314371s ago: executing program 6 (id=4837): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000085b000/0x1000)=nil, 0x1000, 0x2000002, 0x3032, 0xffffffffffffffff, 0xf4d55000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001400)={0x0, 0x100, 0x5, 0x6a90e9aa53aa028f}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) 14.044526116s ago: executing program 6 (id=4839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000003c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0xb0, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/8, 0x8, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/61, 0x3d, 0x2, 0x19}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @decrefs={0x40046307, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x130b}, @flat=@handle={0x73682a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 14.036922407s ago: executing program 6 (id=4840): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x6, 0x0, &(0x7f0000000100)={r0, r1+60000000}, 0x0, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6fa980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r2, 0x56a31000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) (async) write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x12) 13.986307991s ago: executing program 6 (id=4841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 13.985456741s ago: executing program 6 (id=4842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000085804155000000000000109022400010000500109040000010300000009210000050122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xb0, 0x6, [{{0x9, 0x4, 0x0, 0xc3, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x6, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0xc7, 0x4b}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x211, 0x1, 0x7f, 0x5, 0x8, 0x1}, 0x28, &(0x7f0000000240)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x6, 0xf000, 0x9, [0xff3f00, 0xbede, 0x0, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x1, 0xd}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x101, &(0x7f00000002c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0x19, &(0x7f0000000540)=@string={0x19, 0x3, "63125930c10f96d775d0bcdc82303ac9f71ff7ef4efc1e"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x600e}}]}) syz_usb_control_io$printer(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="4008972112614ee698798881b64c58bbdede0ca164b7d51b1473bf7a8b7d041caa430dfa91c09f2699646e85412a1e393933000082fa88675150cd47197072ac65340d39b3dfdeebff327ebcbe8ea0"], 0x0}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x1c}], 0x1}, 0x4000080) openat$rnullb(0xffffffffffffff9c, 0x0, 0xcc042, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sync() sync() r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ac7000/0x2000)=nil, &(0x7f00002b3000/0x3000)=nil, 0x2000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 8.349777186s ago: executing program 39 (id=4675): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0xfffffffffffff339, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0x7fff, 0x6, [0x5, 0x8, 0x10, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x6, 0x0, 0x7, 0x1, 0x14, @struct={0x103, 0xf}, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0x2000000000f, 0x2]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0xffffffff, 0x1ff}, 0x1, 0x800, [0x9, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r1, 0xa0e4f000) madvise(&(0x7f0000785000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.57838182s ago: executing program 1 (id=4914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0xd592, 0x10000, 0x3, 0x0, 0x8000}, 0x1c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000181000/0x1000)=nil, 0x1000}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lsm_list_modules(0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000140)="b2e42e84a298b70dc371a2508c5d7046a67690ceea2fedb81a54a93848589c5421b0c5685ead66b31cd17726fb3b1a0eb732662bda7c1c601d561dbf9b5d5a96ece21ad4a238877ac077f502b80cabee"}) 4.2103786s ago: executing program 9 (id=4916): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x400200, 0x20) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) read(r2, &(0x7f0000000000)=""/185, 0xb9) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 3.677734153s ago: executing program 1 (id=4928): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fchmod(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000080)={0x964, 0x0, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x29b}, 0x13, 0x7, 0x3, 0xdb6, 0x10, 'syz0\x00', "2a4e22eb7715b29e633b4758e1c026f0558d6ed9df70e0be5a3842af7e69c8fd", "8e7e8a6fbfa1c1bcace76e41ad427d94b1afe27f1b63cf0fed7ecb47f1299e84", [{0x3ff, 0x0, {0x3, 0x200}}, {0xf, 0x0, {0x0, 0x9}}, {0x9, 0x7, {0x1, 0x8}}, {0x515b, 0x8, {0x1, 0x5}}, {0xfff7, 0x9, {0x1, 0x1}}, {0xa00, 0x8, {0x2, 0xf}}, {0x40, 0x8d, {0x1}}, {0x0, 0x5, {0x3, 0x6}}, {0x0, 0x8, {0x2, 0x1ff}}, {0x2, 0x1bd4, {0x0, 0x4}}, {0x0, 0x0, {0x0, 0x400}}, {0x2, 0xe, {0x3, 0xc}}, {0x509, 0x0, {0xaf78a8c8733006a, 0x4}}, {0x1, 0x3, {0x1, 0xdebd}}, {0x4143, 0x8, {0x1, 0x8}}, {0x80, 0x9, {0x3}}, {0xd, 0xcf7e, {0x2, 0x1}}, {0xffae, 0x0, {0x3, 0x4}}, {0x1, 0x8, {0x0, 0x7fffffff}}, {0x800, 0x6, {0x0, 0x7}}, {0xfffa, 0x0, {0x2, 0x7}}, {0x2, 0x1, {0x1, 0x5}}, {0x5, 0x5, {0x1, 0xb1}}, {0x5, 0x8, {0x1}}, {0x1ff, 0x0, {0x1, 0x1000}}, {0xffe2, 0x7, {0x3, 0x4}}, {0x9, 0x400, {0x1}}, {0x6, 0xf, {0x3, 0x4}}, {0xfff, 0x1, {0x2, 0x5}}, {0xae5, 0x9, {0x2, 0x80000000}}, {0x3, 0x1, {0x3, 0x1}}, {0x7, 0x81, {0x0, 0x101}}, {0x2, 0x2b4}, {0x200, 0x1, {0x0, 0x3ff}}, {0x100, 0x6, {0x3, 0x6}}, {0x3a, 0x6, {0x2, 0x1}}, {0x1ff, 0xf227}, {0x8000, 0x4, {0x3, 0x234}}, {0x2, 0xff, {0x3, 0x5}}, {0x62, 0x7, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x81, 0x8, 0x4, 0x0, 0x28, 'syz0\x00', "27c2795e0ed3c84ebc25714978094fec0c602de500833392fb1b1bdefae95175", "6fdd040575c54aca7ba1d19d0abc628f2ce092ae4ef3583e4fb920dca8397286", [{0x6, 0xb, {0x0, 0x8}}, {0x8, 0x1, {0x1, 0xd}}, {0x62, 0x6, {0x0, 0x4c52}}, {0x81, 0x73d9, {0x1, 0x2}}, {0x8, 0xfffa, {0x3, 0x4}}, {0x18, 0x4, {0x1, 0xd1}}, {0x5, 0x6, {0x2, 0xffff8000}}, {0x9, 0x6, {0x0, 0x6}}, {0x6, 0xd, {0xc08fd1d5034822f9, 0x2}}, {0x2, 0x0, {0x0, 0x443}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0x5, {0x2, 0x6}}, {0x4, 0x2, {0x1, 0x800}}, {0x4, 0x401, {0x3, 0x200}}, {0x5, 0x3, {0x1, 0x200}}, {0x0, 0x5, {0x2, 0x3}}, {0x2, 0x2, {0x3}}, {0x25, 0x2, {0x2, 0xe81}}, {0x7f, 0x100, {0x0, 0x6}}, {0x4, 0x5, {0x2, 0xfffffffe}}, {0x2, 0x8, {0x3, 0x5}}, {0x4, 0x7, {0x2, 0x5}}, {0x2, 0x9, {0x0, 0xffffffff}}, {0x4, 0x6, {0x3, 0x1bc}}, {0x4, 0x2, {0x0, 0xea33}}, {0x6, 0x2, {0x2, 0x7}}, {0x400, 0x28, {0x1, 0xa270}}, {0x1, 0xf1, {0x2, 0x7}}, {0x101, 0x8, {0x1, 0x4}}, {0x1800, 0x9, {0x1, 0xe}}, {0x2, 0x7, {0x0, 0x9}}, {0xffff, 0x8, {0x0, 0x1}}, {0x6, 0x400, {0x3, 0x3}}, {0x9, 0x3, {0x0, 0x9}}, {0x8, 0x1, {0x0, 0xfffffffe}}, {0x6, 0x400, {0x1, 0x1}}, {0x4, 0x0, {0xf40594a35da1664c, 0x93b}}, {0x1ad, 0xcb, {0x1, 0x3}}, {0x8000, 0x6, {0x2, 0x8}}, {0x7, 0x7, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffff7}, 0x1, 0x0, 0x0, 0x7, 0x0, 'syz1\x00', "21f9f7c9375709cfac497a3683ba4c63778877cc2188d968d1f4bf028e78a8e7", "eedd483cb9de61a8db77545fb6fd837f61d8f70c946ac44caa232910b7f02d39", [{0x4, 0x2, {0x0, 0x4}}, {0x7fff, 0x4, {0x3, 0xffffffff}}, {0x7, 0xfff9, {0x1, 0x2}}, {0xf9, 0x8, {0x3, 0x6}}, {0x3, 0x5, {0x3, 0x81}}, {0x4, 0x7, {0x0, 0x401}}, {0xf, 0x8, {0x2, 0x7}}, {0x4, 0x1, {0x3, 0x1}}, {0x81, 0x8, {0x1, 0x8001}}, {0x5, 0x4, {0x0, 0x3}}, {0x7d14, 0x2, {0x2, 0x8e}}, {0xfff, 0x1, {0x3, 0x7}}, {0x1000, 0x9, {0x2, 0x4}}, {0x5, 0x0, {0x2, 0x1}}, {0x8b, 0x80, {0x0, 0x2}}, {0xfffb, 0x2000, {0x0, 0x7fffffff}}, {0x2, 0xec, {0x0, 0x2}}, {0xff, 0x5, {0x0, 0x5}}, {0xc2, 0x6, {0x3, 0x9}}, {0x81, 0xd034, {0x0, 0x3}}, {0x7, 0x0, {0x3, 0x2}}, {0x9, 0x6, {0x1, 0x9}}, {0x800, 0x1, {0x3, 0x2}}, {0x0, 0x6, {0x0, 0xf1}}, {0xfff, 0x81, {0x2, 0x8}}, {0x1, 0x4, {0x0, 0x200}}, {0x6, 0xec6, {0x2}}, {0x3, 0x39e2, {0x1, 0x6}}, {0x8, 0x9, {0x2, 0x7}}, {0x0, 0x6, {0x1, 0x8}}, {0x8, 0x3, {0x2, 0x6}}, {0x6, 0x9400, {0x2, 0x9}}, {0x8, 0x0, {0x1, 0x6}}, {0x2, 0xca, {0x3, 0x2}}, {0xe31, 0x200, {0x3, 0x9}}, {0x8, 0x8001, {0x2, 0x5}}, {0xf, 0x9, {0x0, 0x4}}, {0x3e, 0x5, {0x2, 0x4}}, {0x9, 0x401, {0x1, 0x100}}, {0x7, 0x2, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0xa, 0x4, 0x4, 0x3, 0x1, 'syz0\x00', "ed4422898e7124a8825d60bb56d23cdd3c60b6ce6f19980aff8660448d4309c0", "1a17adca7eec6dfbdcd2960d50c5e74b918229cc728c686af50959c9d20c8137", [{0x1ff, 0xfffc, {0x3, 0x3}}, {0x14, 0x6, {0x3, 0x200}}, {0x2, 0x8a3, {0x3, 0x400}}, {0x1, 0x2, {0x1, 0x9}}, {0xf, 0xe3, {0x1, 0x100}}, {0x8, 0x1, {0x3, 0x8}}, {0x4, 0x6, {0x0, 0x7ff}}, {0x4, 0x8, {0x1, 0xe0000000}}, {0x5, 0x4, {0x0, 0x4}}, {0x3, 0xf9d9, {0x1, 0xf}}, {0x2, 0x8001, {0x0, 0xfffffffb}}, {0x3, 0x2f6c, {0x2, 0x78}}, {0x2, 0x8, {0x3, 0x7ff}}, {0x7ff, 0x4ca, {0x2, 0xb}}, {0x101, 0xffff, {0x2, 0x2}}, {0x3de, 0x1ff, {0x1, 0x8}}, {0x3ff, 0x9, {0x3, 0x80}}, {0xff81, 0x9, {0x1, 0x2}}, {0x3, 0x3, {0x2}}, {0x0, 0x49, {0x1}}, {0x2, 0x2, {0x0, 0xfffffffb}}, {0x44c9, 0x4, {0x3, 0x4e}}, {0xf0, 0xb, {0x1, 0xfffffffc}}, {0x5, 0x800, {0x2, 0x28}}, {0x1, 0x2b34, {0x1, 0x4c}}, {0x3, 0x4, {0x3, 0x1}}, {0x6, 0xfffe, {0x1, 0x5}}, {0x7, 0x10, {0x2, 0x8}}, {0x9441, 0xfff8, {0x1, 0x2}}, {0x6, 0x0, {0x1, 0x7ab5cb1d}}, {0x1, 0x7, {0x3, 0x62}}, {0x6, 0x4, {0x1, 0x6}}, {0x0, 0x7, {0x0, 0x10}}, {0x7, 0x5, {0x0, 0x1000}}, {0xa161, 0x1f61, {0x0, 0x6}}, {0x100, 0x435a, {0xb66418bac6ad6e6b}}, {0x7, 0xc, {0x1, 0x1}}, {0x0, 0x7, {0x0, 0x3}}, {0xe77, 0x3, {0x0, 0x101}}, {0x5, 0xff, {0x2, 0x3}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x2ae7, 0x4) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040894}, 0x18800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000c40)=""/142, &(0x7f0000000d00)=0x8e) getuid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x190, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x8}, {0x0, 0x7}, {0x5, 0x9}, {0x1, 0x9}, {0x6}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x2, 0x9}, {0x1}, {0x2, 0xa}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x2}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x99f, 0x13f, 0xfffe, 0x9, 0x5, 0x800, 0x6, 0xabf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde, 0x3ff, 0x8, 0x8, 0x9, 0x0, 0x1, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x7, 0x0, 0x0, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc0, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0x8e, 0x3, "fff843a2459d6ccd2c866bd1bdd35365b7538c9866bf19fe69e5d4f67a60829aa00f5275dac33220470d4adb7a49cd6c03913cd7d482e51a21682d7c5e1792560bb6213d98817190c0ae6ac8b1498ab442c19218a4af22ec5e9694b4ebc262b8e7f46ec219c088708d3c7092c7fdad835d26d767becb60092364c6fb465b6a6b6fd613fdd3601f32170b"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x190}}, 0x4004040) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x2303, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x70, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) newfstatat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x1000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000012c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000001300)) recvfrom(r1, &(0x7f0000001340)=""/4096, 0x1000, 0x2002, &(0x7f0000002340)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80) close_range(r0, r6, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000023c0)=0x19) readv(r5, &(0x7f0000002440)=[{&(0x7f0000002400)=""/48, 0x30}], 0x1) write$input_event(r4, &(0x7f0000002480)={{}, 0x3f, 0x7, 0x80}, 0x18) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x30, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x805) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000002600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x8d, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x74, 0x8, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xb, 0x43, 0x4}}]}}}]}}]}}, &(0x7f0000002b40)={0xa, &(0x7f0000002640)={0xa, 0x6, 0x300, 0x9, 0x7, 0xd, 0x1be, 0x2}, 0x12, &(0x7f0000002680)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xff, 0x8, 0x8}]}, 0xa, [{0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x418}}, {0xbe, &(0x7f0000002700)=@string={0xbe, 0x3, "ad887f3338904d92652a47bb1bd6dc6c11e9543db1865106ccd0d603a3e16baca081c6c5038229d7c16e4f9ddf8518d8227a269acd6350c0dac12a1c5f454bcc863605ced0b5e44c217760990eb51dcee9ccb3b4cd481feadbc68bbae6befd5f455d6ecdaf0045f6679c95bce45e55a4a263726db1369bdefdc7b40546b3df0dbd5120946dd5ad702f4625d48640d1224aed292d9a22cc8d1cf8928761bdfb358c1a880199f947bb7daec1d6ddf2892c846aeac7722c158644056640"}}, {0x4, &(0x7f00000027c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0xc1a}}, {0x71, &(0x7f0000002840)=@string={0x71, 0x3, "7cb0a5e99c7a58d9afcd30d0f3d4d8fc705250be959b8601ae94964f5204b37bdfb63797dbbbdbb501acf85c622f4c0abbef9271b8177edc3e7bdd0af01e6adbc9747db9ffaa0bc6db7d43335db65b0e8c5600c16c3cca0c44d59b0c03f232b16e12125a257d4df397418204bb050b"}}, {0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x403}}, {0xb4, &(0x7f0000002900)=@string={0xb4, 0x3, "30ef1213be5e65758fcb6cd23af5744a990f79210b18e7a56bff0fd3b18416b9a51357bc5bce3a8ad6bdd0c56b17354d58fcbd967016448ed6afb150b76e677c3d06483435a8663298da9ce6d535a481e0d2bafa3763519a9c296586a392e25f5e9a7508d26801e267d1e74912ef6c74983ab4d9b91bc805d532db70059cbf595ab36e6ea32d0211438c7fe48605a55848da18a5a8653d7cc6ca53d01cc5b69b2bfa6508f2dd3024da9e5695bd9cdd4430fa"}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x80a}}, {0xff, &(0x7f0000002a40)=@string={0xff, 0x3, "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"}}]}) syz_usb_control_io(r8, &(0x7f0000002e40)={0x2c, &(0x7f0000002c00)={0x0, 0x23, 0x66, {0x66, 0xd, "673abe53a8cc2f1acf55b8d9280bcbd01505763a76c707fd1c0c3f822f2d254ce653e0cb750fd3bed60ab7c9509e4e0314a822342256070e6cbacdb394b978e434f09a1259006ea9d9b2a4de4d30679655a7bbb89d0adc25e10d0ad6965eb4ae5971c006"}}, &(0x7f0000002c80)={0x0, 0x3, 0x95, @string={0x95, 0x3, "84604842270bcfb24192639d9bf5d90d249fd4c3b9bfff303d956139ec79e2feb26cc090d92b99197e281d28f75a86f95dbccb5bdc26a605bac8d392b72efe47b1427f90076b4704a96ce83e642e38054a6d13fbfddea5a5d6ffdeab1015af8f0c730b499f7d233e380f401fb1b3d38d92b36f159497c43898a7b0e8296772488db6d2afb7d5c6107a3fcfef9997f03d949386"}}, &(0x7f0000002d40)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x1, [@generic={0x57, 0x10, 0xa, "9e267d7c4e1e6205fed1a81ba82cf7d6cf415d5bd49d5f2eb02319f01d1be3db0484c3e7600f9ff4e3c178e1b8e8bd523ff79975604c86ed7c92340eac3cd81cdfa3dfd899e0a77836ec305b82e0fd6f6882dfe9"}]}}, &(0x7f0000002dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x40, 0x10, "01c0e4c7", "630f448d"}}, &(0x7f0000002e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x18, 0x62, 0x6, 0xcd, 0x7, 0x8}}}, &(0x7f00000032c0)={0x84, &(0x7f0000002e80)={0x40, 0xb, 0x7a, "5b908703fa5c5fce872ec05375d63e5b4315aa660440c57fe9a8850796dab70155e54cde95a9dc44413d3423880c3a49a2a835301a452286b29a2271004214e92046f7410419a6f46c38273c166adb3c5dd5c29dc8258d8b24792fc58e120097daf473ce1ffbe8380e7f340a053198b404b17a97cb8758e79a34"}, &(0x7f0000002f00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002f40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002f80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000002fc0)={0x20, 0x0, 0x4, {0x800, 0x2}}, &(0x7f0000003000)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000003040)={0x40, 0x9, 0x1, 0x9d}, &(0x7f0000003080)={0x40, 0xb, 0x2, "1c93"}, &(0x7f00000030c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000003100)={0x40, 0x13, 0x6, @remote}, &(0x7f0000003140)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000003180)={0x40, 0x19, 0x2, "7eba"}, &(0x7f00000031c0)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000003200)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000003240)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000003280)={0x40, 0x21, 0x1, 0x6}}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x10, 0x3f2, 0x300, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) openat$cgroup_devices(r4, &(0x7f0000003480)='devices.allow\x00', 0x2, 0x0) 3.254397747s ago: executing program 9 (id=4931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x6a, 0x5b, 0x61, 0x10, 0x582, 0x5, 0x5c87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x9, 0x5, 0x0, 0x3, [{{0x9, 0x4, 0x3f, 0xbd, 0x0, 0x6b, 0x29, 0xec, 0x81}}, {{0x9, 0x4, 0x9f, 0x0, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\\]}%+(', 0x3a, '(]#', 0x3a, './bus', 0x3a, [0x43, 0x4f]}, 0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r2 = socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 2.636997637s ago: executing program 0 (id=4933): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0xfffd, 0x2, 0x20}, {0x7, 0x0, 0x4, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0xfffffc}, {0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x1000000, 0xfffff801}}, 0xe8) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0xfffd, 0x2, 0x20}, {0x7, 0x0, 0x4, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0xfffffc}, {0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x1000000, 0xfffff801}}, 0xe8) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.122318179s ago: executing program 0 (id=4934): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x260140, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0x8600000000000000, 0x4, 0x7, 0x0, 0xe}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001300)={0x60, 0x2, &(0x7f00006b3000/0x4000)=nil, &(0x7f000005c000/0x3000)=nil, 0x81, &(0x7f0000000000)=[{0x9, 0xffff, 0x9}, {0x9, 0x9, 0x401}], 0x2, 0x1ff, 0x2, 0x2, 0x39, 0x20}) 1.068673324s ago: executing program 0 (id=4935): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x10000000004006) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100"}) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1.052326335s ago: executing program 0 (id=4936): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e4f000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000845000/0x4000)=nil, &(0x7f0000137000/0xa000)=nil, 0x4000}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 990.37497ms ago: executing program 0 (id=4937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x116) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x2}], {}, [], {0x10, 0x47261af65e6430a4}}, 0x51, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x7b8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 987.37667ms ago: executing program 0 (id=4938): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x20000000000006) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="75e375", 0x3}], 0x1, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 494.5563ms ago: executing program 1 (id=4939): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040), 0x0) pwrite64(r1, &(0x7f0000000a00)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e64de6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async, rerun: 32) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) (async, rerun: 32) write$cgroup_int(r5, &(0x7f0000000180)=0xfffffffffffff000, 0x12) (rerun: 32) 470.692432ms ago: executing program 1 (id=4940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) lseek(r1, 0x40000000000003, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xdddb5eea00e07dbd, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1, 0xa04, 0xfffffffc, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x3d, 0x2, 0x0, 0x0, "893c4a07f752aca160bbc6c6d30c66138c20424fc5fe757234d02c4dc575b7f4c9e6161d900eae371d2766ec5bc5502ffea8d6f82fcf4a65fd2e1550c4f8493b"}}, 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) (async) lseek(r1, 0x40000000000003, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xdddb5eea00e07dbd, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1, 0xa04, 0xfffffffc, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x3d, 0x2, 0x0, 0x0, "893c4a07f752aca160bbc6c6d30c66138c20424fc5fe757234d02c4dc575b7f4c9e6161d900eae371d2766ec5bc5502ffea8d6f82fcf4a65fd2e1550c4f8493b"}}, 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 398.270308ms ago: executing program 1 (id=4941): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, 0x0, 0x1, 0x81}, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@wr_crn={0x46, 0x20, {0x3, 0x6}}, @wrmsr={0x1e, 0x20, {0x619, 0x5}}, @wr_crn={0x46, 0x20, {0x6, 0xffffffff}}, @code={0xa, 0x78, {"c7442400f9000000c7442402230a0000ff2c24b8010000000f01d9f3420f09660f3838ad08000000f30f1ecfb9800000c00f3235010000000f3066ba430066b888bb66efc744240017000000c74424020a000000ff2c2466460f381427f2410f0f1dbcf1837c1c"}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0x449}}, @uexit={0x0, 0x18}, @rdmsr={0x32, 0x18, {0x24d}}, @code={0xa, 0x65, {"36410f794f11b805000000b950f578920f01d936360f01d10f189c839bcff561c7442400cb000000c744240200000000ff2c2426670f07420fc737b9800000c00f3235000400000f30c4e109ee3f8f087095f900"}}, @wrmsr={0x1e, 0x20, {0x303, 0xa}}, @wr_crn={0x46, 0x20, {0x4, 0x4}}, @rdmsr={0x32, 0x18, {0x82c}}, @cpuid={0x14, 0x18, {0x8, 0x6d}}, @wrmsr={0x1e, 0x20, {0x15b, 0x24e3}}, @code={0xa, 0x85, {"6766420f38813066baf80cb8984e878def66bafc0cb009ee66bad10466ed460fc77c8863420f0648b800700000000000000f23d00f21f835200000080f23f848b8e2f86e2e000000000f23c00f21f835010007000f23f8b805000000b9b30000000f01c1b8010000000f01c1360fc79f10000000"}}, @rdmsr={0x32, 0x18, {0x120}}, @cpuid={0x14, 0x18, {0x3, 0x7}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @code={0xa, 0x5f, {"0f22450f01dc36f042202748b800000000000000000f23c00f21f835000009000f23f83ef3400f09440fc7b629000000b8010000000f01d966baf80cb850e6c68fef66bafc0ced260f01c80f01cf"}}, @cpuid={0x14, 0x18, {0xa40, 0xfffffff8}}, @rdmsr={0x32, 0x18, {0xbf7}}, @rdmsr={0x32, 0x18, {0x2b0}}, @wr_crn={0x46, 0x20, {0x2, 0x5}}, @wrmsr={0x1e, 0x20, {0x24b, 0x45}}, @cpuid={0x14, 0x18, {0x6597, 0xfffffe00}}, @code={0xa, 0x51, {"66b84a000f00d00f01c22ee56c36262e470f32b92e090000b8b4cac78fba8768d06a0f308fa97881e00f01c46564670f70e1000f060f20e035100000000f22e0"}}, @uexit={0x0, 0x18, 0x32a}, @wr_crn={0x46, 0x20, {0x8}}], 0x48a}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2000, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)=0x3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r8, 0x1, 0x200000, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x3c}}, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x9fc, 0x0, 0x8}, {0x270, 0x0, 0x1ff}]}) 319.855764ms ago: executing program 1 (id=4942): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001400)={'vlan1\x00', @remote}) ptrace(0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r2 = userfaultfd(0x80001) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r4 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={0x0}) r6 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)={0x8004, 0x20, 0x1b}, 0x18) syz_clone3(&(0x7f00000003c0)={0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x1f}, &(0x7f0000000280)=""/31, 0x1f, &(0x7f00000002c0)=""/33, &(0x7f0000000300)=[r4, r5], 0x2, {r6}}, 0x58) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2b, 'io'}, {0x2b, 'pids'}, {0x2b, 'memory'}, {0x2b, 'rlimit'}, {0x0, 'net'}, {0x2b, 'net_cls'}, {0x2b, 'cpu'}, {0x2d, 'memory'}, {0x2b, 'cpu'}]}, 0x40) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 71.758534ms ago: executing program 9 (id=4943): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000000e8ffffff"], 0x18}}], 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000095}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) r6 = dup(r4) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r7, 0xd, &(0x7f0000000200)={0x9, 0xa}, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000280)='pids.max\x00', 0x2, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000040)=0x7fffffff, 0x4) write$cgroup_subtree(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r11], 0x27) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) pipe(&(0x7f0000000140)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 1.959259ms ago: executing program 9 (id=4944): r0 = socket$inet6(0xa, 0x2, 0xffff) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000800000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000003c216d67f408f570000000000000000000000800a000000000000feffffffff7f4000020000000000000800000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x5, 0x3, 0x2, 0x4, 0x1, 0xe779}, 0x20) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1.394519ms ago: executing program 9 (id=4945): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='fuseblk\x00', &(0x7f0000000340)='\x10~\x04)qfssebl\x06k', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000000)='\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='&\x00', &(0x7f0000000240)='9\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='{}\x00', &(0x7f00000001c0)='],/(^+\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x10fff9) (async) mmap(&(0x7f00004ae000/0x1000)=nil, 0x1000, 0x7000001, 0x110, r2, 0x0) (async) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/92) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async, rerun: 32) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) (rerun: 32) io_setup(0x10001, &(0x7f00000000c0)=0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async) fchdir(0xffffffffffffffff) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async) io_submit(r4, 0x2, &(0x7f0000000100)=[0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x26, r5, 0x0, 0x0, 0x0, 0x0, 0x3}]) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 0s ago: executing program 9 (id=4946): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x7, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000095e000/0x2000)=nil, 0x2000, &(0x7f0000000080)='./binderfs/binder1\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)=ANY=[], 0x2b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00005c3000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='/dev/fuse\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x15}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): mpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:crond_unit_file_t:s0" [ 193.981267][ T36] audit: type=1400 audit(193.558:783): avc: denied { execute } for pid=10736 comm="syz.6.3464" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:crond_unit_file_t:s0" [ 194.014410][T10745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=10745 comm=syz.3.3467 [ 194.132451][T10769] fuse: Unknown parameter 'd0x0000000000000005' [ 194.220437][T10776] __vm_enough_memory: pid: 10776, comm: syz.6.3478, bytes: 18014402804453376 not enough memory for the allocation [ 194.493062][T10805] overlayfs: failed to clone upperpath [ 194.641451][T10819] fuseblk: Bad value for 'fd' [ 194.809240][T10831] netlink: 'syz.6.3498': attribute type 4 has an invalid length. [ 194.818637][T10831] netlink: 'syz.6.3498': attribute type 4 has an invalid length. [ 195.303903][T10859] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 195.311283][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 195.311302][ T36] audit: type=1400 audit(194.948:785): avc: denied { map } for pid=10856 comm="syz.6.3508" path="/proc/431/net/ip6_tables_matches" dev="proc" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 195.357210][T10858] rust_binder: 431: no such ref 1 [ 196.053571][T10885] incfs: Can't find or create .index dir in ./bus [ 196.060308][T10885] incfs: mount failed -1 [ 196.228476][ T36] audit: type=1400 audit(195.878:786): avc: denied { listen } for pid=10902 comm="syz.3.3523" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.265090][T10913] futex_wake_op: syz.3.3526 tries to shift op by -1; fix this program [ 196.354393][ T426] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 196.506984][ T426] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 196.516193][ T426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.524712][ T426] usb 7-1: Product: syz [ 196.528978][ T426] usb 7-1: Manufacturer: syz [ 196.533780][ T426] usb 7-1: SerialNumber: syz [ 196.800750][T10922] netlink: 'syz.3.3529': attribute type 16 has an invalid length. [ 196.808762][T10922] netlink: 'syz.3.3529': attribute type 25 has an invalid length. [ 196.816720][T10922] __nla_validate_parse: 26 callbacks suppressed [ 196.816735][T10922] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.3529'. [ 196.912736][T10929] fuse: Unknown parameter 'rtode+0V8' [ 197.493798][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.503593][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.515241][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.525807][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.535981][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.546286][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.896170][T10963] TCP: TCP_TX_DELAY enabled [ 198.536017][T10987] overlayfs: failed to clone upperpath [ 198.536017][T10988] overlayfs: failed to clone upperpath [ 198.564990][T10990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=10990 comm=syz.3.3552 [ 198.724025][T11011] netlink: 'syz.3.3560': attribute type 4 has an invalid length. [ 198.735154][T11011] netlink: 'syz.3.3560': attribute type 4 has an invalid length. [ 198.793193][T11019] /dev/loop0: Can't lookup blockdev [ 198.807344][T11022] overlayfs: failed to clone upperpath [ 198.980117][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3577'. [ 199.126570][ T629] usb 7-1: USB disconnect, device number 23 [ 199.137654][ T36] audit: type=1400 audit(198.788:787): avc: denied { map } for pid=11081 comm="syz.6.3587" path="socket:[45593]" dev="sockfs" ino=45593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.162795][T11084] overlayfs: failed to clone lowerpath [ 199.278175][T11096] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 199.604391][ T629] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 199.636769][T11117] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3600'. [ 199.754405][ T629] usb 7-1: Using ep0 maxpacket: 8 [ 199.761071][ T629] usb 7-1: unable to get BOS descriptor or descriptor too short [ 199.769823][ T629] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 199.778165][ T629] usb 7-1: config 0 has no interface number 0 [ 199.784414][ T629] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 199.795417][ T629] usb 7-1: config 0 interface 88 has no altsetting 0 [ 199.804559][ T629] usb 7-1: string descriptor 0 read error: -22 [ 199.810826][ T629] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 199.819915][ T629] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 199.828551][ T629] usb 7-1: config 0 descriptor?? [ 199.835470][ T629] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input24 [ 200.029867][T11122] netlink: 'syz.7.3602': attribute type 2 has an invalid length. [ 200.038291][ T45] usb 7-1: USB disconnect, device number 24 [ 200.121449][ T36] audit: type=1326 audit(199.778:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.7.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e498ebe9 code=0x7fc00000 [ 200.185642][T11137] fuse: Unknown parameter '' [ 200.201498][T11139] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3609'. [ 200.212837][T11139] overlayfs: failed to clone upperpath [ 200.572523][T11162] overlayfs: conflicting lowerdir path [ 200.613715][T11171] overlayfs: failed to clone upperpath [ 200.675901][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3626'. [ 200.815622][T11188] cgroup: fork rejected by pids controller in /syz7 [ 201.037628][T11343] overlayfs: failed to clone upperpath [ 201.121208][T11352] overlayfs: failed to clone upperpath [ 201.173954][T11366] overlayfs: failed to clone upperpath [ 201.509055][T11390] /dev/rnullb0: Can't open blockdev [ 201.547431][T11399] /dev/rnullb0: Can't open blockdev [ 201.652235][ T36] audit: type=1400 audit(201.259:789): avc: denied { ioctl } for pid=11409 comm="syz.6.3663" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:crond_unit_file_t:s0" [ 201.861799][T11420] rust_binder: Failed copying into alloc: EFAULT [ 201.861823][T11420] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 201.868294][T11420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 201.878180][T11420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:505 [ 202.159280][ T45] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 202.324094][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 202.330294][ T45] usb 7-1: no configurations [ 202.335148][ T45] usb 7-1: can't read configurations, error -22 [ 202.352263][ T36] audit: type=1400 audit(201.938:790): avc: denied { connect } for pid=11443 comm="syz.7.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.468221][ T45] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 202.622475][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 202.628428][ T45] usb 7-1: no configurations [ 202.633206][ T45] usb 7-1: can't read configurations, error -22 [ 202.640126][ T45] usb usb7-port1: attempt power cycle [ 202.715182][ C0] ip6_tunnel: B xmit: Local address not yet configured! [ 202.992742][ T45] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 203.013559][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 203.021603][ T45] usb 7-1: no configurations [ 203.026842][ T45] usb 7-1: can't read configurations, error -22 [ 203.050180][T11497] netlink: 'syz.3.3689': attribute type 1 has an invalid length. [ 203.058357][T11497] netlink: 'syz.3.3689': attribute type 2 has an invalid length. [ 203.066534][T11496] netlink: 'syz.3.3689': attribute type 1 has an invalid length. [ 203.074544][T11497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11497 comm=syz.3.3689 [ 203.074741][T11496] netlink: 'syz.3.3689': attribute type 2 has an invalid length. [ 203.167544][ T45] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 203.188334][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 203.194020][ T45] usb 7-1: no configurations [ 203.198695][ T45] usb 7-1: can't read configurations, error -22 [ 203.200390][T11507] overlayfs: failed to clone lowerpath [ 203.205103][ T45] usb usb7-port1: unable to enumerate USB device [ 204.269123][T11556] x_tables: duplicate underflow at hook 2 [ 204.472892][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3721'. [ 204.907675][T11610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=11610 comm=syz.7.3727 [ 205.034414][ T36] audit: type=1326 audit(204.548:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11614 comm="syz.6.3729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad71f8ebe9 code=0x0 [ 205.164623][T11624] batadv_slave_1: entered promiscuous mode [ 205.221179][T11640] overlayfs: failed to resolve './file1': -2 [ 205.234797][T11642] netlink: 'syz.3.3737': attribute type 4 has an invalid length. [ 205.244234][T11642] netlink: 'syz.3.3737': attribute type 4 has an invalid length. [ 205.277586][T11646] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3739'. [ 205.312943][T11653] /dev/loop0: Can't lookup blockdev [ 205.908172][T11664] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 205.908199][T11664] rust_binder: Read failure Err(EFAULT) in pid:514 [ 205.930397][ T36] audit: type=1400 audit(205.427:792): avc: denied { create } for pid=11674 comm="syz.6.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 205.930985][T11675] binder: Unknown parameter '0xffffffffffffffff' [ 205.976764][T11679] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 206.314710][ T426] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 206.371089][T11695] netlink: 'syz.3.3758': attribute type 46 has an invalid length. [ 206.379198][T11695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3758'. [ 206.468163][ T426] usb 7-1: Using ep0 maxpacket: 16 [ 206.468658][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3761'. [ 206.474736][ T426] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 206.493832][ T426] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.507025][ T426] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 206.516288][ T426] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.525361][ T426] usb 7-1: config 0 descriptor?? [ 206.943535][ T426] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 207.149757][ T426] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -71 [ 207.159187][ T426] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -71 [ 207.168628][ T426] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 207.177545][ T426] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 207.185942][ T426] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -71 [ 207.197451][ T426] usb 7-1: USB disconnect, device number 29 [ 207.225952][T11732] netlink: 'syz.3.3769': attribute type 4 has an invalid length. [ 207.234973][T11732] netlink: 'syz.3.3769': attribute type 4 has an invalid length. [ 207.258176][ T36] audit: type=1400 audit(206.728:793): avc: denied { read } for pid=11733 comm="syz.3.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 207.462244][T11738] overlayfs: failed to clone upperpath [ 208.272739][T11760] 9pnet_fd: Insufficient options for proto=fd [ 208.579466][T11807] overlay: filesystem on ./bus not supported as upperdir [ 208.606896][T11816] binder: Bad value for 'defcontext' [ 208.856786][ T426] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 209.012502][ T426] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 209.021911][ T426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.030421][ T426] usb 7-1: Product: syz [ 209.034626][ T426] usb 7-1: Manufacturer: syz [ 209.039321][ T426] usb 7-1: SerialNumber: syz [ 209.439596][T11863] overlayfs: failed to clone upperpath [ 209.490170][ T426] rtl8150 7-1:1.0: couldn't reset the device [ 209.496583][ T426] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 209.508441][ T426] usb 7-1: USB disconnect, device number 30 [ 209.530641][T11867] overlayfs: failed to clone upperpath [ 210.004918][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.012264][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.024933][T11875] bridge_slave_0: entered allmulticast mode [ 210.031810][T11875] bridge_slave_0: entered promiscuous mode [ 210.040804][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.048098][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.057847][T11875] bridge_slave_1: entered allmulticast mode [ 210.066407][T11875] bridge_slave_1: entered promiscuous mode [ 210.074488][T11891] overlayfs: failed to clone lowerpath [ 210.210207][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.217623][T11875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.224978][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.232061][T11875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.236536][T11914] netlink: 'syz.7.3826': attribute type 16 has an invalid length. [ 210.247797][T11914] netlink: 'syz.7.3826': attribute type 2 has an invalid length. [ 210.269615][T11914] netlink: 'syz.7.3826': attribute type 2 has an invalid length. [ 210.299700][T11914] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.3826'. [ 210.357624][T11875] veth0_vlan: entered promiscuous mode [ 210.377563][T11875] veth1_macvtap: entered promiscuous mode [ 210.463709][T11938] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 210.471305][T11939] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 210.514875][T11940] rust_binder: Error in use_page_slow: ESRCH [ 210.514896][T11940] rust_binder: use_range failure ESRCH [ 210.521133][T11940] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 210.527013][T11940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 210.535584][T11940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 210.561737][ T348] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 210.732657][ T348] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 210.742129][ T348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.750818][ T348] usb 7-1: config 0 descriptor?? [ 210.956751][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.965693][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.974211][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.983107][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.991732][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.000347][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.008727][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.017394][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.025810][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.034666][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.046044][ T348] usb 7-1: Cannot read MAC address [ 211.051320][ T348] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 211.063677][ T348] usb 7-1: USB disconnect, device number 31 [ 212.171559][ T2367] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 212.321522][ T2367] usb 9-1: Using ep0 maxpacket: 32 [ 212.327951][ T2367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.339085][ T2367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.349065][ T2367] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.358316][ T2367] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.367010][ T2367] usb 9-1: config 0 descriptor?? [ 212.424155][T11981] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3847'. [ 212.697824][T11995] random: crng reseeded on system resumption [ 212.717713][ T36] audit: type=1400 audit(16777657.126:794): avc: denied { ioctl } for pid=11994 comm="syz.6.3851" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 212.769354][T11996] devpts: called with bogus options [ 212.778480][ T2367] savu 0003:1E7D:2D5A.000A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 212.855736][ T36] audit: type=1400 audit(16777657.266:795): avc: denied { watch } for pid=12000 comm="syz.6.3853" path="pipe:[48125]" dev="pipefs" ino=48125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 212.945089][ T36] audit: type=1400 audit(16777657.356:796): avc: denied { read write } for pid=12002 comm="syz.6.3854" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 212.967928][ T36] audit: type=1400 audit(16777657.356:797): avc: denied { open } for pid=12002 comm="syz.6.3854" path="/176/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 213.255513][T12008] rust_binder: Write failure EFAULT in pid:596 [ 213.378112][ T36] audit: type=1326 audit(16777657.786:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.7.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e498ebe9 code=0x7fc00000 [ 213.407952][T12018] netlink: 'syz.7.3858': attribute type 58 has an invalid length. [ 214.031829][T12040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:614 [ 214.034949][ T348] rust_binder: 12039: removing orphan mapping 0:8 [ 214.049297][T12043] rust_binder: 617: no such ref 16777216 [ 214.051282][ T348] rust_binder: 0: removing orphan mapping 8:1112 [ 214.221563][ T348] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 214.353889][T12055] 9pnet_fd: Insufficient options for proto=fd [ 214.846405][T12057] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 214.855433][T12057] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 215.007974][T12080] __vm_enough_memory: pid: 12080, comm: syz.8.3880, bytes: 18014402804453376 not enough memory for the allocation [ 215.250788][T12112] netlink: 'syz.8.3890': attribute type 4 has an invalid length. [ 215.261961][T12112] netlink: 'syz.8.3890': attribute type 4 has an invalid length. [ 215.618605][T12133] overlayfs: missing 'lowerdir' [ 215.781594][ T348] usb 9-1: device descriptor read/64, error -71 [ 215.885268][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 215.891951][ T348] usb 9-1: device reset changed ep0 maxpacket size! [ 215.901908][ T45] usb 9-1: USB disconnect, device number 2 [ 215.917544][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3903'. [ 215.942710][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3905'. [ 215.951610][T12155] erspan0: default FDB implementation only supports local addresses [ 216.041514][ T45] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 216.077101][T12162] fuseblk: Bad value for 'fd' [ 216.179020][T12177] netlink: 'syz.7.3911': attribute type 1 has an invalid length. [ 216.186901][T12177] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3911'. [ 216.204235][ T45] usb 9-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 216.213857][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.222004][T12186] cgroup: Name too long [ 216.226373][ T45] usb 9-1: Product: syz [ 216.230754][ T45] usb 9-1: Manufacturer: syz [ 216.235449][ T45] usb 9-1: SerialNumber: syz [ 216.503098][ T45] usb 9-1: Found UVC 0.00 device syz (093a:2476) [ 216.511412][ T45] usb 9-1: No valid video chain found. [ 216.520649][ T45] usb 9-1: USB disconnect, device number 3 [ 216.941418][ T36] audit: type=1400 audit(16777661.346:799): avc: denied { connect } for pid=12207 comm="syz.3.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.988954][T12214] tmpfs: Invalid uid '0x00000000ffffffff' [ 217.291552][ T629] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 217.442872][ T629] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 217.456117][ T629] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.465882][ T629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.474606][ T629] usb 9-1: Product: syz [ 217.479043][ T629] usb 9-1: Manufacturer: ἣ混ꑤ䨜종휄啩槦ﴏ屢簫퍙ꕼ社쿍姒שׂ꾀盶⯃륀ꈗ쪑皆닱⚧䮶莔樨䷱ [ 217.492475][ T629] usb 9-1: SerialNumber: syz [ 217.498620][T12221] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 217.908745][ T629] cdc_ncm 9-1:1.0: bind() failure [ 217.915400][ T629] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 217.922690][ T629] cdc_ncm 9-1:1.1: bind() failure [ 217.929372][ T629] usb 9-1: USB disconnect, device number 4 [ 217.985676][T12274] 9pnet_fd: Insufficient options for proto=fd [ 218.427325][T12281] fuseblk: Bad value for 'rootmode' [ 218.462866][T12288] sit0: entered promiscuous mode [ 218.469858][T12288] netlink: 'syz.8.3949': attribute type 1 has an invalid length. [ 218.471801][ T45] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 218.478145][T12288] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3949'. [ 218.632752][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 218.647386][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 218.664859][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 218.675133][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 218.686719][ T45] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 218.696296][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.704331][ T45] usb 7-1: Product: syz [ 218.708671][ T45] usb 7-1: Manufacturer: syz [ 218.713372][ T45] usb 7-1: SerialNumber: syz [ 218.718511][ T45] usb 7-1: config 0 descriptor?? [ 218.724723][ T45] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 218.901698][ T629] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 218.977382][T12306] syz.6.3946: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 218.993301][T12306] CPU: 1 UID: 0 PID: 12306 Comm: syz.6.3946 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 218.993332][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.993342][T12306] Call Trace: [ 218.993348][T12306] [ 218.993355][T12306] __dump_stack+0x21/0x30 [ 218.993388][T12306] dump_stack_lvl+0x10c/0x190 [ 218.993410][T12306] ? __cfi_dump_stack_lvl+0x10/0x10 [ 218.993434][T12306] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 218.993458][T12306] dump_stack+0x19/0x20 [ 218.993479][T12306] warn_alloc+0x1bc/0x2a0 [ 218.993501][T12306] ? stack_depot_save_flags+0x38/0x800 [ 218.993519][T12306] ? __cfi_warn_alloc+0x10/0x10 [ 218.993543][T12306] ? kasan_save_track+0x4f/0x80 [ 218.993563][T12306] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 218.993589][T12306] ? xskq_create+0x68/0x2a0 [ 218.993621][T12306] ? xsk_init_queue+0xb6/0x120 [ 218.993653][T12306] ? xsk_setsockopt+0x43f/0x6f0 [ 218.993683][T12306] ? do_sock_setsockopt+0x26d/0x400 [ 218.993719][T12306] ? __x64_sys_setsockopt+0x1b8/0x250 [ 218.993755][T12306] ? x64_sys_call+0x2adc/0x2ee0 [ 218.993783][T12306] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 218.993807][T12306] __vmalloc_node_range_noprof+0x135/0x1420 [ 218.993838][T12306] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 218.993865][T12306] ? avc_has_perm+0x144/0x220 [ 218.993893][T12306] ? kasan_save_alloc_info+0x40/0x50 [ 218.993918][T12306] ? __kasan_kmalloc+0x96/0xb0 [ 218.993939][T12306] vmalloc_user_noprof+0x77/0x90 [ 218.993965][T12306] ? xskq_create+0xdb/0x2a0 [ 218.993984][T12306] xskq_create+0xdb/0x2a0 [ 218.994002][T12306] xsk_init_queue+0xb6/0x120 [ 218.994030][T12306] xsk_setsockopt+0x43f/0x6f0 [ 218.994058][T12306] ? __cfi_xsk_setsockopt+0x10/0x10 [ 218.994087][T12306] ? do_futex+0x356/0x500 [ 218.994109][T12306] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 218.994135][T12306] ? security_socket_setsockopt+0x33/0xd0 [ 218.994155][T12306] ? __cfi_xsk_setsockopt+0x10/0x10 [ 218.994184][T12306] do_sock_setsockopt+0x26d/0x400 [ 218.994215][T12306] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 218.994246][T12306] __x64_sys_setsockopt+0x1b8/0x250 [ 218.994276][T12306] x64_sys_call+0x2adc/0x2ee0 [ 218.994304][T12306] do_syscall_64+0x58/0xf0 [ 218.994330][T12306] ? clear_bhb_loop+0x50/0xa0 [ 218.994355][T12306] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 218.994375][T12306] RIP: 0033:0x7fad71f8ebe9 [ 218.994396][T12306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.994415][T12306] RSP: 002b:00007fad72d71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.994440][T12306] RAX: ffffffffffffffda RBX: 00007fad721c6090 RCX: 00007fad71f8ebe9 [ 218.994457][T12306] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 218.994472][T12306] RBP: 00007fad72011e19 R08: 0000000000000004 R09: 0000000000000000 [ 218.994487][T12306] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.994502][T12306] R13: 00007fad721c6128 R14: 00007fad721c6090 R15: 00007ffdf49bf2f8 [ 218.994521][T12306] [ 218.994582][T12306] Mem-Info: [ 219.061546][ T629] usb 9-1: Using ep0 maxpacket: 8 [ 219.065138][T12306] active_anon:11875 inactive_anon:8 isolated_anon:0 [ 219.065138][T12306] active_file:12755 inactive_file:11601 isolated_file:0 [ 219.065138][T12306] unevictable:1 dirty:82 writeback:0 [ 219.065138][T12306] slab_reclaimable:5921 slab_unreclaimable:80521 [ 219.065138][T12306] mapped:42507 shmem:3073 pagetables:1252 [ 219.065138][T12306] sec_pagetables:0 bounce:0 [ 219.065138][T12306] kernel_misc_reclaimable:0 [ 219.065138][T12306] free:1468312 free_pcp:6315 free_cma:0 [ 219.082423][ T629] usb 9-1: unable to get BOS descriptor or descriptor too short [ 219.087266][T12306] Node 0 active_anon:47596kB inactive_anon:32kB active_file:51020kB inactive_file:46404kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:170028kB dirty:328kB writeback:0kB shmem:12292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7616kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no [ 219.093526][ T629] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 219.097799][T12306] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965960kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:0kB free_cma:0kB [ 219.104143][ T629] usb 9-1: config 0 has no interface number 0 [ 219.109187][T12306] lowmem_reserve[]: [ 219.116532][ T629] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 219.123897][T12306] 0 [ 219.135039][ T629] usb 9-1: config 0 interface 88 has no altsetting 0 [ 219.154099][T12306] 3921 [ 219.171165][ T629] usb 9-1: string descriptor 0 read error: -22 [ 219.174789][T12306] 3921 [ 219.181549][ T629] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 219.184518][ T45] scsi host1: usb-storage 7-1:0.0 [ 219.200158][ T629] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 219.203690][T12306] [ 219.517844][T12306] Normal free:2909052kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47424kB inactive_anon:32kB active_file:51020kB inactive_file:46408kB unevictable:4kB writepending:228kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:24540kB local_pcp:24036kB free_cma:0kB [ 219.520697][ T45] usb 7-1: USB disconnect, device number 32 [ 219.551602][ T629] usb 9-1: config 0 descriptor?? [ 219.572006][T12306] lowmem_reserve[]: 0 0 0 [ 219.574016][ T629] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input25 [ 219.593021][T12306] [ 219.595530][T12306] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 219.613440][T12306] Normal: 25*4kB (ME) 729*8kB (UME) 696*16kB (UME) 220*32kB (UME) 386*64kB (UME) 189*128kB (UME) 60*256kB (UME) 40*512kB (UME) 58*1024kB (UME) 17*2048kB (UM) 666*4096kB (UM) = 2930988kB [ 219.633403][T12306] 27435 total pagecache pages [ 219.639699][T12306] 8 pages in swap cache [ 219.645983][T12306] Free swap = 124580kB [ 219.651225][T12306] Total swap = 124996kB [ 219.660005][T12306] 2097051 pages RAM [ 219.664580][T12306] 0 pages HighMem/MovableOnly [ 219.669581][T12306] 351531 pages reserved [ 219.675835][T12306] 0 pages cma reserved [ 219.696712][T12306] Memory allocations: [ 219.707006][T12306] 0 B 0 init/main.c:1370 func:do_initcalls [ 219.716237][T12306] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 219.726402][T12306] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 219.735180][T12306] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 219.750726][T12306] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 219.761076][T12306] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 219.771221][T12306] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 219.780166][T12306] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 219.788652][T12306] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 219.797152][T12306] 0 B 0 init/initramfs.c:101 func:find_link [ 219.819096][ T629] usb 9-1: USB disconnect, device number 5 [ 220.345845][T12393] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3980'. [ 220.366909][ T36] audit: type=1326 audit(16777664.776:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.8.3981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0831f8ebe9 code=0x0 [ 220.717736][T12410] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 220.719957][T12410] netlink: 292 bytes leftover after parsing attributes in process `syz.7.3985'. [ 220.771078][T12411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=12411 comm=syz.7.3985 [ 221.013684][T12419] netlink: 'syz.3.3989': attribute type 4 has an invalid length. [ 221.021682][T12419] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3989'. [ 221.040196][T12422] 9pnet_fd: Insufficient options for proto=fd [ 221.168483][T12438] netlink: 'syz.6.3994': attribute type 1 has an invalid length. [ 221.188629][T12440] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3995'. [ 221.207721][T12440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.207766][T12440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 221.218209][T12440] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 221.227593][T12440] rust_binder: Read failure Err(EFAULT) in pid:661 [ 221.274019][T12445] netlink: 308 bytes leftover after parsing attributes in process `syz.6.3997'. [ 221.297510][ T36] audit: type=1400 audit(16777665.706:801): avc: denied { accept } for pid=12442 comm="syz.8.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 221.387090][ T36] audit: type=1400 audit(16777665.796:802): avc: denied { audit_read } for pid=12462 comm="syz.7.4001" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.428822][T12471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.428868][T12471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669 [ 221.439340][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4003'. [ 221.472263][T12480] rust_binder: 671: no such ref 3 [ 221.539901][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.549211][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.610089][T12499] overlayfs: failed to clone lowerpath [ 221.617203][T12499] netlink: 'syz.3.4012': attribute type 4 has an invalid length. [ 221.626008][T12499] netlink: 'syz.3.4012': attribute type 4 has an invalid length. [ 221.649004][T12501] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4013'. [ 221.674729][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4015'. [ 221.686104][T12506] tipc: New replicast peer: 255.255.255.255 [ 221.692600][T12506] tipc: Enabled bearer , priority 10 [ 221.699457][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4015'. [ 221.708634][T12506] tipc: Disabling bearer [ 221.742569][T12513] overlayfs: missing 'lowerdir' [ 221.764846][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4019'. [ 221.781548][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 221.911554][ T9] usb 7-1: device descriptor read/64, error -71 [ 222.128931][T12543] input: syz0 as /devices/virtual/input/input26 [ 222.151581][ T9] usb 7-1: device descriptor read/64, error -71 [ 222.303492][T12546] rust_binder: Error in use_page_slow: ESRCH [ 222.303517][T12546] rust_binder: use_range failure ESRCH [ 222.309596][T12546] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 222.315235][T12546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 222.323301][T12546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:92 [ 222.391574][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 222.551537][ T9] usb 7-1: device descriptor read/64, error -71 [ 222.763300][T12549] netlink: 'syz.3.4030': attribute type 30 has an invalid length. [ 222.791574][ T9] usb 7-1: device descriptor read/64, error -71 [ 222.861158][T12557] netlink: 'syz.3.4032': attribute type 4 has an invalid length. [ 222.872796][T12557] netlink: 'syz.3.4032': attribute type 4 has an invalid length. [ 222.901644][ T9] usb usb7-port1: attempt power cycle [ 223.241596][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 223.262790][ T9] usb 7-1: device descriptor read/8, error -71 [ 223.403413][ T9] usb 7-1: device descriptor read/8, error -71 [ 223.641638][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 223.662874][ T9] usb 7-1: device descriptor read/8, error -71 [ 223.792801][ T9] usb 7-1: device descriptor read/8, error -71 [ 223.902393][ T9] usb usb7-port1: unable to enumerate USB device [ 224.575645][T12584] fuse: Bad value for 'group_id' [ 224.580744][T12584] fuse: Bad value for 'group_id' [ 224.606414][T12591] sock: sock_set_timeout: `syz.6.4041' (pid 12591) tries to set negative timeout [ 224.749877][T12609] overlayfs: failed to clone upperpath [ 225.299535][ T36] audit: type=1326 audit(16777669.706:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.3.4052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea0f8ebe9 code=0x0 [ 225.512238][T12630] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 225.512775][T12631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.563449][ T36] audit: type=1400 audit(16777669.976:804): avc: denied { write } for pid=12640 comm="syz.6.4061" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 225.621594][T12650] overlayfs: failed to clone upperpath [ 225.841609][ T348] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 225.992922][ T348] usb 7-1: unable to get BOS descriptor or descriptor too short [ 226.001028][ T348] usb 7-1: not running at top speed; connect to a high speed hub [ 226.010652][ T348] usb 7-1: config 13 has an invalid interface number: 90 but max is 0 [ 226.019180][ T348] usb 7-1: config 13 has no interface number 0 [ 226.025607][ T348] usb 7-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 226.041258][ T348] usb 7-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 226.051028][ T348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.059215][ T348] usb 7-1: Product: syz [ 226.063706][ T348] usb 7-1: Manufacturer: syz [ 226.068559][ T348] usb 7-1: SerialNumber: syz [ 226.124860][ T36] audit: type=1326 audit(16777670.536:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.8.4074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0831f8ebe9 code=0x0 [ 226.276339][T12648] rust_binder: Error while translating object. [ 226.276387][T12648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 226.301503][T12648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:709 [ 226.342791][ T348] usb 7-1: USB disconnect, device number 37 [ 226.579195][T12700] overlayfs: failed to clone upperpath [ 226.587409][T12700] tmpfs: Unknown parameter 'usrquota' [ 227.141586][ T348] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 227.256831][T12720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=12720 comm=syz.3.4089 [ 227.292580][ T348] usb 9-1: config 0 has an invalid interface number: 23 but max is 0 [ 227.300970][ T348] usb 9-1: config 0 has no interface number 0 [ 227.307224][ T348] usb 9-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 227.317329][ T348] usb 9-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 227.329439][ T348] usb 9-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 227.338690][ T348] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.347130][ T348] usb 9-1: Product: syz [ 227.351533][ T348] usb 9-1: Manufacturer: syz [ 227.356363][ T348] usb 9-1: SerialNumber: syz [ 227.359590][T12727] netlink: 'syz.6.4091': attribute type 4 has an invalid length. [ 227.362017][ T348] usb 9-1: config 0 descriptor?? [ 227.371083][T12727] netlink: 'syz.6.4091': attribute type 4 has an invalid length. [ 227.376816][T12705] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 227.389131][T12705] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 227.397050][ T348] ums-usbat 9-1:0.23: USB Mass Storage device detected [ 227.611588][ T2367] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 227.632968][ T348] ums-usbat 9-1:0.23: probe with driver ums-usbat failed with error -5 [ 227.645682][ T348] usb 9-1: USB disconnect, device number 6 [ 227.711615][T12738] netlink: 'syz.7.4094': attribute type 63 has an invalid length. [ 227.719433][T12738] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4094'. [ 227.728408][T12738] gretap0: entered allmulticast mode [ 227.734022][T12738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 227.762760][ T2367] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 227.770993][ T2367] usb 7-1: config 0 has no interface number 0 [ 227.778858][ T2367] usb 7-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=55.2b [ 227.788072][ T2367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.796606][ T2367] usb 7-1: Product: syz [ 227.800823][ T2367] usb 7-1: Manufacturer: syz [ 227.811211][ T2367] usb 7-1: SerialNumber: syz [ 227.820907][ T2367] usb 7-1: config 0 descriptor?? [ 227.831863][T12742] 9pnet_fd: Insufficient options for proto=fd [ 227.900166][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4097'. [ 228.018897][T12764] netlink: 680 bytes leftover after parsing attributes in process `syz.3.4104'. [ 228.028067][ T2367] rtl8150 7-1:0.51: couldn't find required endpoints [ 228.028133][ T2367] rtl8150 7-1:0.51: probe with driver rtl8150 failed with error -5 [ 228.048277][ T2367] usb 7-1: USB disconnect, device number 38 [ 228.123427][T12774] rust_binder: Error while translating object. [ 228.123456][T12774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.130126][T12774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 228.140759][T12775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.150595][T12776] rust_binder: Error while translating object. [ 228.157385][T12776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.163891][T12776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 228.196434][T12780] rust_binder: Write failure EFAULT in pid:110 [ 228.220151][T12783] random: crng reseeded on system resumption [ 228.369030][T12791] binder: Unknown parameter 'fscontext?}QLQxCmZ.XIXܡ3.J)̱q`;P[b&ɺ<ׯؠDg ge%~[Z`ڞ+~dN Y?'[f]XF*50x0000000000000003' [ 228.619308][T12804] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 228.678951][T12796] SELinux: security_context_str_to_sid (00000000000000000003) failed with errno=-22 [ 228.744675][ T36] audit: type=1400 audit(16777673.156:806): avc: denied { setattr } for pid=12805 comm="syz.6.4118" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:crond_unit_file_t:s0" [ 228.837257][T12814] overlayfs: missing 'lowerdir' [ 228.889934][ T36] audit: type=1400 audit(16777673.296:807): avc: denied { write } for pid=12817 comm="syz.6.4122" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.142546][T12828] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 229.142541][ T36] audit: type=1400 audit(16777673.556:808): avc: denied { relabelfrom } for pid=12827 comm="syz.3.4125" name="CAN_RAW" dev="sockfs" ino=52424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.176301][ T36] audit: type=1400 audit(16777673.586:809): avc: denied { relabelto } for pid=12827 comm="syz.3.4125" name="CAN_RAW" dev="sockfs" ino=52424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=can_socket permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 229.203172][T12834] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4127'. [ 229.326204][T12861] 9pnet_fd: Insufficient options for proto=fd [ 229.781594][ T8520] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 229.818298][T12884] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4143'. [ 229.911538][ T8520] usb 7-1: device descriptor read/64, error -71 [ 229.991021][T12903] rust_binder: Error while translating object. [ 229.991062][T12903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.997619][T12903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 230.025449][T12905] rust_binder: Write failure EFAULT in pid:148 [ 230.151552][ T8520] usb 7-1: device descriptor read/64, error -71 [ 230.401752][ T8520] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 230.421638][ T2367] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 230.531606][ T8520] usb 7-1: device descriptor read/64, error -71 [ 230.571563][ T2367] usb 9-1: Using ep0 maxpacket: 16 [ 230.580096][ T2367] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 230.589474][ T2367] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.597608][ T2367] usb 9-1: Product: syz [ 230.601998][ T2367] usb 9-1: Manufacturer: syz [ 230.606934][ T2367] usb 9-1: SerialNumber: syz [ 230.615173][ T2367] r8152-cfgselector 9-1: Unknown version 0x0000 [ 230.621977][ T2367] r8152-cfgselector 9-1: config 0 descriptor?? [ 230.771592][ T8520] usb 7-1: device descriptor read/64, error -71 [ 230.881658][ T8520] usb usb7-port1: attempt power cycle [ 230.929908][T12918] 9pnet_fd: Insufficient options for proto=fd [ 231.030992][ T45] r8152-cfgselector 9-1: USB disconnect, device number 7 [ 231.099884][ T36] audit: type=1326 audit(16777675.506:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.7.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e498ebe9 code=0x7fc00000 [ 231.221606][ T8520] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 231.242528][ T8520] usb 7-1: device descriptor read/8, error -71 [ 231.372724][ T8520] usb 7-1: device descriptor read/8, error -71 [ 231.611525][ T8520] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 231.642606][ T8520] usb 7-1: device descriptor read/8, error -71 [ 231.792389][ T8520] usb 7-1: device descriptor read/8, error -71 [ 231.839465][ T36] audit: type=1326 audit(16777676.246:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.7.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1e492adb9 code=0x7fc00000 [ 231.882251][ T36] audit: type=1326 audit(16777676.246:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.7.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff1e492ae7f code=0x7fc00000 [ 231.916575][ T8520] usb usb7-port1: unable to enumerate USB device [ 231.928483][ T36] audit: type=1326 audit(16777676.246:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.7.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff1e498ebe9 code=0x7fc00000 [ 232.566679][T12965] rust_binder: Error while translating object. [ 232.566729][T12965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.568599][T12967] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.573222][T12965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:738 [ 232.863573][T13004] binder: Unknown parameter 'fscontext?}' [ 232.892671][T13007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 232.892710][T13007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:167 [ 232.903722][T13004] binder: Unknown parameter 'fscontext?}' [ 232.936172][T13007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 232.970986][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4195'. [ 232.990534][T13019] random: crng reseeded on system resumption [ 233.032859][ T36] audit: type=1326 audit(16777677.446:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.8.4196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0831f8ebe9 code=0x0 [ 233.062131][T13019] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4195'. [ 233.072265][T13019] rust_binder: 761: no such ref 2 [ 233.077698][T13019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:761 [ 233.107080][T13026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.119977][T13026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.127351][T13026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.135513][T13027] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 233.216101][T13031] tipc: Started in network mode [ 233.228968][T13031] tipc: Node identity 100, cluster identity 4711 [ 233.235590][T13031] tipc: Node number set to 256 [ 233.241633][T13031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 233.241658][T13031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:768 [ 233.286371][T13034] loop7: detected capacity change from 0 to 16384 [ 233.437437][T13034] loop7: detected capacity change from 16384 to 16383 [ 233.522989][T13043] overlayfs: failed to clone upperpath [ 233.543930][T13048] overlayfs: empty lowerdir [ 233.627533][T13057] rust_binder: Write failure EFAULT in pid:782 [ 233.691632][T13060] rust_binder: Error while translating object. [ 233.698525][T13060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 233.705118][T13060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:785 [ 233.714662][T13060] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 233.724104][T13060] rust_binder: Read failure Err(EFAULT) in pid:785 [ 234.237957][ T45] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 234.409036][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 234.415934][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.427359][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.437285][ T45] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 234.446972][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.455814][ T45] usb 9-1: config 0 descriptor?? [ 234.642258][T13092] netlink: 'syz.3.4221': attribute type 6 has an invalid length. [ 234.900978][ T45] usbhid 9-1:0.0: can't add hid device: -71 [ 234.907455][ T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 234.919192][ T45] usb 9-1: USB disconnect, device number 8 [ 234.939375][T13100] rust_binder: Error while translating object. [ 234.939428][T13100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 234.946437][T13100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 234.973149][T13102] rust_binder: Error while translating object. [ 234.982631][T13102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 234.988849][T13102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:186 [ 235.170792][T13113] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 156) [ 235.180233][T13113] rust_binder: Error while translating object. [ 235.191791][T13113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.198772][T13113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 235.437289][T13132] rust_binder: Error while translating object. [ 235.446964][T13132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 235.453315][T13132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:791 [ 235.462726][ T45] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 235.638841][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 235.645673][ T45] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 235.656776][ T45] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 235.666074][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.674211][ T45] usb 9-1: Product: syz [ 235.678493][ T45] usb 9-1: Manufacturer: syz [ 235.683631][ T45] usb 9-1: SerialNumber: syz [ 235.688856][ T45] usb 9-1: config 0 descriptor?? [ 235.694888][ T45] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 235.703063][ T45] usb 9-1: Detected FT232R [ 235.756470][ T8520] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 235.887478][T13143] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 235.897958][ T8520] usb 7-1: device descriptor read/64, error -71 [ 235.909059][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 236.132570][ T45] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.153368][ T8520] usb 7-1: device descriptor read/64, error -71 [ 236.408782][ T8520] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 236.547797][ T8520] usb 7-1: device descriptor read/64, error -71 [ 236.654952][T13198] fuse: Unknown parameter 'f\oygrohup_id' [ 236.804491][ T8520] usb 7-1: device descriptor read/64, error -71 [ 236.922216][ T8520] usb usb7-port1: attempt power cycle [ 237.044814][T13212] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.045218][T13212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.051983][T13212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 237.062325][ T36] audit: type=1326 audit(16777681.227:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13184 comm="syz.7.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e498ebe9 code=0x7fc00000 [ 237.096879][T13212] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.096990][T13212] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.141152][T13217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.150846][T13217] rust_binder: Error while translating object. [ 237.158883][T13217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.165349][T13217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 237.260023][T13233] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4266'. [ 237.285665][ T8520] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 237.308171][ T8520] usb 7-1: device descriptor read/8, error -71 [ 237.451810][ T8520] usb 7-1: device descriptor read/8, error -71 [ 237.602553][ T36] audit: type=1326 audit(16777681.732:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.3.4271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea0f8ebe9 code=0x0 [ 237.622946][T13237] cgroup: fork rejected by pids controller in /syz8 [ 237.713419][ T8520] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 237.736810][ T8520] usb 7-1: device descriptor read/8, error -71 [ 237.874897][ T8520] usb 7-1: device descriptor read/8, error -71 [ 237.991654][ T8520] usb usb7-port1: unable to enumerate USB device [ 238.293142][T13344] overlayfs: failed to resolve './file1': -2 [ 238.301693][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4280'. [ 238.311255][ T36] audit: type=1400 audit(16777682.387:817): avc: denied { setattr } for pid=13343 comm="syz.8.4280" name="/" dev="incremental-fs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.311524][T13344] rust_binder: Write failure EFAULT in pid:294 [ 238.419585][ C0] ip6_tunnel: B xmit: Local address not yet configured! [ 238.675824][ T36] audit: type=1400 audit(16777682.733:818): avc: denied { create } for pid=13352 comm="syz.8.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 239.135730][ T2367] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 239.296144][ T2367] usb 7-1: Using ep0 maxpacket: 8 [ 239.302550][ T2367] usb 7-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.315499][ T2367] usb 7-1: config 0 interface 0 has no altsetting 0 [ 239.322320][ T2367] usb 7-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 239.331492][ T2367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.340401][ T2367] usb 7-1: config 0 descriptor?? [ 239.532941][T13368] netlink: 'syz.8.4289': attribute type 29 has an invalid length. [ 239.905657][T13394] binder: Unknown parameter 'defcontext01777777777777777777777' [ 239.946103][T13396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.956507][T13396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.061452][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.070348][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.101141][ T2367] usbhid 7-1:0.0: can't add hid device: -71 [ 240.107471][ T2367] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 240.110512][T13400] rust_binder: Write failure EFAULT in pid:810 [ 240.118099][ T2367] usb 7-1: USB disconnect, device number 47 [ 240.197347][T13407] 9pnet_fd: Insufficient options for proto=fd [ 240.205916][T13407] incfs: Error accessing: ./file1. [ 240.211136][T13407] incfs: mount failed -2 [ 240.516654][T13414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 240.516686][T13414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:324 [ 240.602984][T13420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.613466][T13420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.620476][T13420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:330 [ 240.673520][ T36] audit: type=1326 audit(16777684.603:819): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13426 comm="syz.6.4310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad71f8ebe9 code=0x0 [ 240.933606][ T36] audit: type=1326 audit(16777684.846:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.7.4315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1e498ebe9 code=0x0 [ 240.964894][T11625] batadv_slave_1: left promiscuous mode [ 241.036107][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.043346][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.050939][T13441] bridge_slave_0: entered allmulticast mode [ 241.057465][T13441] bridge_slave_0: entered promiscuous mode [ 241.064211][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.071407][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.079176][T13441] bridge_slave_1: entered allmulticast mode [ 241.085937][T13441] bridge_slave_1: entered promiscuous mode [ 241.129286][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.136525][T13441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.144153][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.151315][T13441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.173349][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.181207][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.190973][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.198146][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.207947][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.215233][ T5666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.240725][T13441] veth0_vlan: entered promiscuous mode [ 241.251634][T13441] veth1_macvtap: entered promiscuous mode [ 241.337261][T13455] rust_binder: Write failure EFAULT in pid:4 [ 241.591090][T13466] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4320'. [ 241.844360][ T36] audit: type=1326 audit(16777685.688:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.8.4322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0831f8ebe9 code=0x0 [ 241.958260][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4331'. [ 241.968205][T13503] input: syz1 as /devices/virtual/input/input29 [ 241.980250][T13503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 241.980287][T13503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:35 [ 241.990602][T13504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.010258][T13508] overlayfs: workdir and upperdir must be separate subtrees [ 242.082054][T13509] netlink: 'syz.3.4332': attribute type 4 has an invalid length. [ 242.093429][T13509] netlink: 'syz.3.4332': attribute type 4 has an invalid length. [ 242.440144][ T2367] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 242.575250][ T36] audit: type=1400 audit(16777686.380:822): avc: denied { search } for pid=13519 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.600580][ T36] audit: type=1400 audit(16777686.380:823): avc: denied { read } for pid=13520 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.632560][ T2367] usb 7-1: Invalid ep0 maxpacket: 64 [ 242.650198][ T36] audit: type=1400 audit(16777686.380:824): avc: denied { open } for pid=13520 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.694619][ T36] audit: type=1400 audit(16777686.380:825): avc: denied { getattr } for pid=13520 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.723160][ T36] audit: type=1400 audit(16777686.380:826): avc: denied { getattr } for pid=13520 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.729777][T13528] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 242.751157][ T36] audit: type=1400 audit(16777686.436:827): avc: denied { read } for pid=13522 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.782288][ T2367] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 242.805571][ T36] audit: type=1400 audit(16777686.436:828): avc: denied { open } for pid=13522 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.837046][T13532] overlayfs: failed to resolve './file1': -2 [ 242.837574][ T36] audit: type=1400 audit(16777686.623:829): avc: denied { write } for pid=13519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.870280][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.880150][ T36] audit: type=1400 audit(16777686.623:830): avc: denied { add_name } for pid=13519 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.905055][T13540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.914806][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.924786][ T36] audit: type=1400 audit(16777686.623:831): avc: denied { create } for pid=13519 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.947829][T13540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.974759][ T2367] usb 7-1: Invalid ep0 maxpacket: 64 [ 242.980607][ T2367] usb usb7-port1: attempt power cycle [ 243.349158][ T2367] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 243.370813][ T2367] usb 7-1: Invalid ep0 maxpacket: 64 [ 243.507712][T13561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.509052][T13561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.515660][ T2367] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 243.516347][T13561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:354 [ 243.545925][ T2367] usb 7-1: Invalid ep0 maxpacket: 64 [ 243.561026][ T2367] usb usb7-port1: unable to enumerate USB device [ 243.623620][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.632283][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.068257][T13590] tipc: Started in network mode [ 244.073137][T13590] tipc: Node identity ac14140f, cluster identity 4711 [ 244.080261][T13590] tipc: New replicast peer: 255.255.255.255 [ 244.087181][T13590] tipc: Enabled bearer , priority 10 [ 244.116718][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4358'. [ 244.288498][T13620] netlink: 'syz.7.4367': attribute type 64 has an invalid length. [ 244.296718][T13620] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4367'. [ 245.158501][T13672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.168216][T13672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.183364][T13675] /dev/loop0: Can't lookup blockdev [ 245.284648][ T8520] tipc: Node number set to 2886997007 [ 245.409459][T13677] 9pnet: Unknown protocol version 9 [ 245.436798][T13679] 9pnet: Unknown protocol version 9 [ 245.724126][T13685] KVM: debugfs: duplicate directory 13685-7 [ 245.790161][T13701] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 245.840719][ T2367] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 246.002219][ T2367] usb 7-1: config 0 has an invalid interface number: 109 but max is 0 [ 246.010541][ T2367] usb 7-1: config 0 has no interface number 0 [ 246.016851][ T2367] usb 7-1: config 0 interface 109 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.028219][ T2367] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 246.037939][ T2367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.047424][ T2367] usb 7-1: config 0 descriptor?? [ 246.460030][T13718] netlink: 'syz.7.4401': attribute type 29 has an invalid length. [ 246.485847][ T2367] uclogic 0003:5543:0522.000B: unbalanced delimiter at end of report description [ 246.509619][ T2367] uclogic 0003:5543:0522.000B: parse failed [ 246.516229][ T2367] uclogic 0003:5543:0522.000B: probe with driver uclogic failed with error -22 [ 246.578972][T13727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.588035][T13727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.725881][ T2367] usb 7-1: USB disconnect, device number 52 [ 247.389449][T13766] rust_binder: Error while translating object. [ 247.389501][T13766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 247.395782][T13766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:844 [ 247.669409][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 247.819116][ T9] usb 7-1: device descriptor read/64, error -71 [ 248.003591][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 248.003607][ T36] audit: type=1326 audit(16777691.458:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.7.4423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7ff1e4985ba7 code=0x0 [ 248.080119][T13787] cgroup2: Unknown parameter 'net_cls' [ 248.097100][ T9] usb 7-1: device descriptor read/64, error -71 [ 248.131134][T13794] rust_binder: Error in use_page_slow: ESRCH [ 248.131155][T13794] rust_binder: use_range failure ESRCH [ 248.137446][T13794] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 248.143198][T13794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 248.151788][T13794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:406 [ 248.364515][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 248.514202][ T9] usb 7-1: device descriptor read/64, error -71 [ 248.771160][ T9] usb 7-1: device descriptor read/64, error -71 [ 248.891684][ T9] usb usb7-port1: attempt power cycle [ 249.244262][T13809] rust_binder: Write failure EFAULT in pid:418 [ 249.253264][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 249.285284][ T9] usb 7-1: device descriptor read/8, error -71 [ 249.445687][ T9] usb 7-1: device descriptor read/8, error -71 [ 249.711928][ T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 249.734402][ T9] usb 7-1: device descriptor read/8, error -71 [ 249.873453][ T9] usb 7-1: device descriptor read/8, error -71 [ 249.990114][ T9] usb usb7-port1: unable to enumerate USB device [ 250.132945][T13837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.032841][T13861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.048187][T13861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.056226][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 251.220905][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.231936][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.243622][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.252726][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.260741][ T9] usb 7-1: Product: syz [ 251.264931][ T9] usb 7-1: Manufacturer: syz [ 251.269588][ T9] usb 7-1: SerialNumber: syz [ 251.655950][T13868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.664675][T13868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.675445][T13868] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 251.683310][T13868] SELinux: failed to load policy [ 252.355815][ T9] cdc_ncm 7-1:1.0: bind() failure [ 252.369588][ T9] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 252.378539][ T9] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 252.391663][ T9] usb 7-1: USB disconnect, device number 57 [ 252.531411][ T36] audit: type=1400 audit(16777695.694:913): avc: denied { mounton } for pid=13892 comm="syz.8.4459" path="/138/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 253.842840][T13916] netlink: 'syz.7.4466': attribute type 32 has an invalid length. [ 253.880401][T13921] overlayfs: failed to clone upperpath [ 255.755786][T13975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.837015][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4492'. [ 255.864685][T13989] binder: Unknown parameter 'defcontext01777777777777777777777' [ 255.896303][T13998] overlayfs: disabling nfs_export due to verity=require [ 255.904189][T13998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.925483][T14001] overlayfs: failed to clone upperpath [ 255.974157][T14015] overlayfs: conflicting options: metacopy=off,verity=on [ 255.974621][T14014] netlink: 'syz.7.4502': attribute type 5 has an invalid length. [ 255.991972][T14014] netlink: 'syz.7.4502': attribute type 5 has an invalid length. [ 256.008447][T14014] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4502'. [ 256.045233][T14023] rust_binder: 481: no such ref 2 [ 256.051690][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4506'. [ 256.233451][ T36] audit: type=1400 audit(16777699.154:914): avc: denied { mount } for pid=14042 comm="syz.8.4512" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 256.285809][ T36] audit: type=1400 audit(16777699.200:915): avc: denied { map } for pid=14048 comm="syz.8.4514" path="socket:[57064]" dev="sockfs" ino=57064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 256.323093][T14045] rust_binder: Write failure EFAULT in pid:902 [ 256.324779][ T36] audit: type=1400 audit(16777699.238:916): avc: denied { connect } for pid=14052 comm="syz.8.4515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 256.371996][T14059] rust_binder: Fixups oob 164 166 363 196 [ 256.372023][T14059] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 256.377891][T14059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.386353][T14059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 256.491211][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.510257][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.655412][ T36] audit: type=1400 audit(16777699.546:917): avc: denied { mount } for pid=14080 comm="syz.7.4524" name="/" dev="incremental-fs" ino=3060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 256.700020][T14090] >: renamed from veth0_vlan (while UP) [ 257.065189][T14094] netlink: 'syz.8.4529': attribute type 12 has an invalid length. [ 257.117722][T14094] rust_binder: Error in use_page_slow: ESRCH [ 257.117752][T14094] rust_binder: use_range failure ESRCH [ 257.124055][T14094] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 257.129558][T14094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 257.138023][T14094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:518 [ 257.345294][T14116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.355108][T14116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.361827][T14117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:914 [ 257.601574][T14135] binder: Unknown parameter '' [ 257.688423][T14146] fuseblk: Unknown parameter 'subj_role' [ 257.774125][T14163] tipc: Enabling of bearer rejected, failed to enable media [ 257.875125][T14170] netlink: 'syz.7.4553': attribute type 6 has an invalid length. [ 257.883035][T14170] netlink: 'syz.7.4553': attribute type 4 has an invalid length. [ 257.890917][T14170] netlink: 'syz.7.4553': attribute type 6 has an invalid length. [ 257.898770][T14170] netlink: 'syz.7.4553': attribute type 13 has an invalid length. [ 257.907054][T14170] netlink: 'syz.7.4553': attribute type 15 has an invalid length. [ 257.914954][T14170] netlink: 'syz.7.4553': attribute type 19 has an invalid length. [ 257.922832][T14170] netlink: 3684 bytes leftover after parsing attributes in process `syz.7.4553'. [ 258.042400][ T348] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 258.207895][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.215234][ T348] usb 7-1: Using ep0 maxpacket: 8 [ 258.215257][T14176] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.221844][ T348] usb 7-1: unable to get BOS descriptor or descriptor too short [ 258.227870][T14176] bridge_slave_0: entered allmulticast mode [ 258.236806][ T348] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 258.242298][T14176] bridge_slave_0: entered promiscuous mode [ 258.251005][ T348] usb 7-1: config 0 has no interface number 0 [ 258.256757][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.262003][ T348] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 258.270373][T14176] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.280260][ T348] usb 7-1: config 0 interface 88 has no altsetting 0 [ 258.287524][T14176] bridge_slave_1: entered allmulticast mode [ 258.300351][ T348] usb 7-1: string descriptor 0 read error: -22 [ 258.300437][T14176] bridge_slave_1: entered promiscuous mode [ 258.311597][ T348] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 258.322224][ T348] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 258.331467][ T348] usb 7-1: config 0 descriptor?? [ 258.342942][ T348] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input30 [ 258.366151][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.375202][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.388990][T14184] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false [ 258.389022][T14184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 258.398598][T14184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:534 [ 258.427162][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.443695][T14176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.450996][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.458024][T14176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.481341][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.491945][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.501720][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.509268][ T5666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.519748][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.527023][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.559579][T14176] veth0_vlan: entered promiscuous mode [ 258.575002][T14176] veth1_macvtap: entered promiscuous mode [ 258.593826][ T36] audit: type=1400 audit(16777701.360:918): avc: denied { mounton } for pid=14176 comm="syz-executor" path="/root/syzkaller.oavips/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 258.635376][ T2367] usb 7-1: USB disconnect, device number 58 [ 258.919487][T14214] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 258.919512][T14214] rust_binder: Read failure Err(EFAULT) in pid:19 [ 258.919767][T14216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:19 [ 258.965375][T14220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.976649][T14220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.983533][T14220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:538 [ 259.093347][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4569'. [ 259.113993][T14229] overlayfs: failed to clone upperpath [ 259.149672][T14233] rust_binder: Write failure EINVAL in pid:547 [ 259.257103][T14237] rust_binder: Write failure EFAULT in pid:966 [ 259.261417][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 259.296271][T14244] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 259.296298][T14244] rust_binder: Read failure Err(EFAULT) in pid:968 [ 259.320095][ T2367] usb 9-1: USB disconnect, device number 9 [ 259.337235][ T2367] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.353206][ T2367] ftdi_sio 9-1:0.0: device disconnected [ 259.393669][ T328] bridge_slave_1: left allmulticast mode [ 259.399578][ T328] bridge_slave_1: left promiscuous mode [ 259.405754][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.413747][ T328] bridge_slave_0: left allmulticast mode [ 259.419771][ T328] bridge_slave_0: left promiscuous mode [ 259.425727][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.446134][ T9] usb 10-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 259.463703][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.472441][ T9] usb 10-1: Product: syz [ 259.476773][ T9] usb 10-1: Manufacturer: syz [ 259.481744][ T9] usb 10-1: SerialNumber: syz [ 259.487248][ T9] usb 10-1: config 0 descriptor?? [ 259.562825][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.570094][T14249] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.577503][T14249] bridge_slave_0: entered allmulticast mode [ 259.584053][T14249] bridge_slave_0: entered promiscuous mode [ 259.591510][ T328] veth1_macvtap: left promiscuous mode [ 259.597367][ T328] veth0_vlan: left promiscuous mode [ 259.648841][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.656140][T14249] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.663400][T14249] bridge_slave_1: entered allmulticast mode [ 259.670546][T14249] bridge_slave_1: entered promiscuous mode [ 259.762966][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.770300][T14249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.777839][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.784899][T14249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.811534][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.819384][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.832221][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.839524][ T5666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.847278][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.854787][ T5666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.885143][T14249] veth0_vlan: entered promiscuous mode [ 259.899503][T14249] veth1_macvtap: entered promiscuous mode [ 260.051091][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4586'. [ 260.339303][T14281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.339663][T14281] rust_binder: Error while translating object. [ 260.346429][ T348] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 260.360868][T14281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 260.361004][T14281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:973 [ 260.524490][ T348] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.541561][T14301] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 260.545034][T14301] rust_binder: Read failure Err(EFAULT) in pid:984 [ 260.545957][ T348] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.570479][ T348] usb 1-1: config 0 interface 0 has no altsetting 0 [ 260.591610][ T348] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 260.604278][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.615322][ T348] usb 1-1: config 0 descriptor?? [ 260.794051][T14222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 260.794120][T14222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23 [ 260.804852][ T9] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 260.824370][ T9] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 260.835748][ T9] asix 10-1:0.0: probe with driver asix failed with error -71 [ 260.847033][ T9] usb 10-1: USB disconnect, device number 2 [ 260.971025][T14327] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4607'. [ 260.982461][T14327] overlayfs: failed to clone upperpath [ 261.004912][ T2367] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 261.007389][T14329] netlink: 'syz.7.4608': attribute type 4 has an invalid length. [ 261.025154][T14330] netlink: 'syz.7.4608': attribute type 4 has an invalid length. [ 261.035072][T14329] netlink: 'syz.7.4608': attribute type 4 has an invalid length. [ 261.054718][ T348] uclogic 0003:28BD:0075.000C: interface is invalid, ignoring [ 261.154316][ T2367] usb 7-1: device descriptor read/64, error -71 [ 261.277090][T14275] rust_binder: Error while translating object. [ 261.277133][T14275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.283576][T14275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 261.293649][ T9] usb 1-1: USB disconnect, device number 10 [ 261.421578][ T2367] usb 7-1: device descriptor read/64, error -71 [ 261.678218][ T2367] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 261.724369][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4612'. [ 261.794233][T14350] overlayfs: failed to clone upperpath [ 261.817250][ T2367] usb 7-1: device descriptor read/64, error -71 [ 262.073912][ T2367] usb 7-1: device descriptor read/64, error -71 [ 262.081837][ T36] audit: type=1400 audit(16777704.624:919): avc: denied { mount } for pid=14364 comm="syz.0.4619" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 262.110066][T14365] netlink: 'syz.0.4619': attribute type 27 has an invalid length. [ 262.161768][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.172713][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.180257][T14363] bridge_slave_0: entered allmulticast mode [ 262.187252][T14363] bridge_slave_0: entered promiscuous mode [ 262.205753][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.212958][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.213035][ T2367] usb usb7-port1: attempt power cycle [ 262.220510][T14363] bridge_slave_1: entered allmulticast mode [ 262.232410][T14363] bridge_slave_1: entered promiscuous mode [ 262.363358][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.370697][T14363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.378464][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.385722][T14363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.395554][T14394] IPv6: Can't replace route, no match found [ 262.428759][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.436198][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.446605][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.453980][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.463803][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.471033][ T5666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.496091][T14363] veth0_vlan: entered promiscuous mode [ 262.513988][T14363] veth1_macvtap: entered promiscuous mode [ 262.561723][T14408] SELinux: security_context_str_to_sid () failed with errno=-22 [ 262.587212][ T2367] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 262.620323][ T2367] usb 7-1: device descriptor read/8, error -71 [ 262.666811][T14426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 262.684507][T14432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.695122][T14431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.701659][T14431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 262.770302][ T2367] usb 7-1: device descriptor read/8, error -71 [ 262.796740][T14436] rust_binder: 21: no such ref 2 [ 262.801806][T14436] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 262.801828][T14436] rust_binder: Read failure Err(EFAULT) in pid:21 [ 262.876412][ T8520] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 262.930299][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4643'. [ 262.962910][T14451] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4645'. [ 263.036498][ T2367] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 263.059203][ T2367] usb 7-1: device descriptor read/8, error -71 [ 263.059558][ T8520] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 263.075048][ T8520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.084102][ T8520] usb 1-1: config 0 descriptor?? [ 263.197785][ T2367] usb 7-1: device descriptor read/8, error -71 [ 263.314722][ T2367] usb usb7-port1: unable to enumerate USB device [ 263.795589][ T2367] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 263.927585][T14459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4648'. [ 263.940467][T14459] 9pnet_fd: Insufficient options for proto=fd [ 263.946786][ T8520] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 263.956866][ T8520] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 263.957275][ T2367] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.978559][ T2367] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.988111][ T8520] asix 1-1:0.0: probe with driver asix failed with error -71 [ 263.992018][ T2367] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.998310][ T8520] usb 1-1: USB disconnect, device number 11 [ 264.018223][ T2367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.027377][ T36] audit: type=1400 audit(16777706.438:920): avc: denied { execute } for pid=14464 comm="syz.7.4649" path="/proc/46/net/vlan/vlan0" dev="proc" ino=4026533971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 264.034174][T14467] fuse: Bad value for 'group_id' [ 264.053460][ T2367] usb 10-1: SerialNumber: syz [ 264.058448][T14467] fuse: Bad value for 'group_id' [ 264.095561][T14474] /dev/sg0: Can't lookup blockdev [ 264.100978][T14474] rust_binder: Write failure EFAULT in pid:1011 [ 264.278745][T14454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.293976][T14454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.366732][ T2367] usb 10-1: 0:2 : does not exist [ 264.381884][ T2367] usb 10-1: USB disconnect, device number 3 [ 264.949941][T14495] tipc: Started in network mode [ 264.954915][T14495] tipc: Node identity d22eb7cb186, cluster identity 4711 [ 264.963091][ T9] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 264.964638][T14495] tipc: Enabled bearer , priority 10 [ 265.108641][T14493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14493 comm=syz.9.4660 [ 265.122150][ T9] usb 7-1: device descriptor read/64, error -71 [ 265.188700][ T36] audit: type=1400 audit(16777707.532:921): avc: denied { listen } for pid=14510 comm="syz.7.4666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.378321][ T9] usb 7-1: device descriptor read/64, error -71 [ 265.645658][ T9] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 265.784649][ T9] usb 7-1: device descriptor read/64, error -71 [ 265.998525][ T348] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 266.041333][ T9] usb 7-1: device descriptor read/64, error -71 [ 266.158912][ T348] usb 1-1: Using ep0 maxpacket: 8 [ 266.158981][ T9] usb usb7-port1: attempt power cycle [ 266.164605][ T8520] tipc: Node number set to 3394156491 [ 266.177104][ T348] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.186023][ T348] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 266.194428][ T348] usb 1-1: config 0 has no interface number 0 [ 266.200828][ T348] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 266.212268][ T348] usb 1-1: config 0 interface 88 has no altsetting 0 [ 266.221512][ T348] usb 1-1: string descriptor 0 read error: -22 [ 266.228249][ T348] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 266.237739][ T348] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 266.255471][ T348] usb 1-1: config 0 descriptor?? [ 266.266151][ T348] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input32 [ 266.448892][T14529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 266.480978][ T348] usb 1-1: USB disconnect, device number 12 [ 266.543918][ T9] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 266.566525][ T9] usb 7-1: device descriptor read/8, error -71 [ 266.705577][ T9] usb 7-1: device descriptor read/8, error -71 [ 266.849906][T14533] sit0: entered promiscuous mode [ 266.860335][T14533] netlink: 'syz.7.4674': attribute type 1 has an invalid length. [ 266.868449][T14533] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4674'. [ 266.960959][ T9] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 266.983426][ T9] usb 7-1: device descriptor read/8, error -71 [ 267.132802][ T9] usb 7-1: device descriptor read/8, error -71 [ 267.147924][T14543] netlink: 'syz.0.4677': attribute type 12 has an invalid length. [ 267.250024][ T9] usb usb7-port1: unable to enumerate USB device [ 267.602579][ T348] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 267.766640][ T348] usb 10-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 267.776090][ T348] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.784441][ T348] usb 10-1: Product: syz [ 267.788925][ T348] usb 10-1: Manufacturer: syz [ 267.793704][ T348] usb 10-1: SerialNumber: syz [ 268.025479][ T348] usb 10-1: USB disconnect, device number 4 [ 268.821680][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 268.970520][T14580] veth0: entered promiscuous mode [ 268.975984][T14580] veth0: left promiscuous mode [ 268.982103][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 268.992792][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.003822][ T9] usb 10-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 269.013553][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 269.025156][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.035613][ T9] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.047222][ T9] usb 10-1: config 1 interface 1 has no altsetting 0 [ 269.057513][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.068113][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.076294][ T9] usb 10-1: Product: syz [ 269.080874][ T9] usb 10-1: Manufacturer: syz [ 269.086000][ T9] usb 10-1: SerialNumber: syz [ 269.270476][T14602] netlink: 'syz.0.4700': attribute type 4 has an invalid length. [ 269.281617][T14602] netlink: 'syz.0.4700': attribute type 4 has an invalid length. [ 269.314159][ T9] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 269.322186][ T9] usb 10-1: 2:1 : format type 9 is not supported yet [ 269.332731][ T9] usb 10-1: USB disconnect, device number 5 [ 269.341821][T12072] udevd[12072]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 269.864166][T14615] overlayfs: conflicting options: userxattr,redirect_dir=on [ 270.065008][ T45] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 270.073611][ T45] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.090617][T14629] fido_id[14629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.147710][ T629] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 270.308112][ T629] usb 10-1: Using ep0 maxpacket: 8 [ 270.314650][ T629] usb 10-1: unable to get BOS descriptor or descriptor too short [ 270.323235][ T629] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 270.331741][ T629] usb 10-1: config 0 has no interface number 0 [ 270.337939][ T629] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 270.349049][ T629] usb 10-1: config 0 interface 88 has no altsetting 0 [ 270.358170][ T629] usb 10-1: string descriptor 0 read error: -22 [ 270.364541][ T629] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 270.373998][ T629] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 270.383334][ T629] usb 10-1: config 0 descriptor?? [ 270.389895][ T629] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input34 [ 270.605130][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.614823][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.623529][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.632369][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.641619][ T348] usb 10-1: USB disconnect, device number 6 [ 270.966135][T14653] rust_binder: Write failure EFAULT in pid:102 [ 271.238497][T14681] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 271.259400][T14684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.429952][T14706] 8021q: VLANs not supported on ip6tnl0 [ 271.449499][T14705] 8021q: VLANs not supported on ip6tnl0 [ 271.539719][T14720] binder: Unknown parameter 'context' [ 271.541510][ T36] audit: type=1400 audit(2000000000.112:922): avc: denied { remount } for pid=14719 comm="syz.0.4741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 271.826675][ T8520] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 271.998967][ T8520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.010402][ T8520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.020649][ T8520] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 272.029723][ T8520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.038572][ T8520] usb 1-1: config 0 descriptor?? [ 272.390890][ T36] audit: type=1400 audit(2000000000.897:923): avc: denied { setattr } for pid=14757 comm="syz.6.4755" name="RAWv6" dev="sockfs" ino=61982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.510670][T14772] fuse: Bad value for 'fd' [ 272.690316][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 272.697744][ T8520] usbhid 1-1:0.0: can't add hid device: -32 [ 272.704098][ T8520] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 272.721099][ T8520] usb 1-1: USB disconnect, device number 13 [ 272.802502][T14809] fuseblk: Bad value for 'fd' [ 273.337751][T14830] SELinux: policydb string length 1836477231 does not match expected length 8 [ 273.346974][T14830] SELinux: failed to load policy [ 273.443535][T14834] netlink: 'syz.0.4782': attribute type 4 has an invalid length. [ 273.452718][T14834] netlink: 'syz.0.4782': attribute type 4 has an invalid length. [ 273.529538][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4784'. [ 273.540737][ T36] audit: type=1400 audit(2000000001.982:924): avc: denied { create } for pid=14840 comm="syz.0.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 273.903950][T14860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 274.126249][T14878] netlink: 'syz.6.4799': attribute type 4 has an invalid length. [ 274.145512][T14878] netlink: 'syz.6.4799': attribute type 4 has an invalid length. [ 274.262663][T14883] 9pnet_fd: Insufficient options for proto=fd [ 274.457754][ T348] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 274.619363][ T348] usb 10-1: config 0 has an invalid interface number: 109 but max is 0 [ 274.627871][ T348] usb 10-1: config 0 has no interface number 0 [ 274.634285][ T348] usb 10-1: config 0 interface 109 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.645887][ T348] usb 10-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 274.655008][ T348] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.663742][ T348] usb 10-1: config 0 descriptor?? [ 275.099139][ T348] uclogic 0003:5543:0522.000E: unbalanced delimiter at end of report description [ 275.117662][ T348] uclogic 0003:5543:0522.000E: parse failed [ 275.123923][ T348] uclogic 0003:5543:0522.000E: probe with driver uclogic failed with error -22 [ 275.290158][T14932] fuse: Bad value for 'rootmode' [ 275.297343][T14932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 275.297368][T14932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:189 [ 275.559339][ T629] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 275.731581][T14932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4815'. [ 275.740670][T14932] netlink: 'syz.0.4815': attribute type 6 has an invalid length. [ 275.748575][T14932] netlink: 'syz.0.4815': attribute type 5 has an invalid length. [ 275.756390][T14932] netlink: 'syz.0.4815': attribute type 4 has an invalid length. [ 275.767402][ T629] usb 1-1: unable to get BOS descriptor or descriptor too short [ 275.776478][ T629] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 275.784130][ T629] usb 1-1: can't read configurations, error -71 [ 275.864692][ T348] usb 10-1: USB disconnect, device number 8 [ 276.222444][ T348] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 276.313959][T14936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 276.384090][ T348] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 276.405243][ T348] usb 10-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 276.414561][ T348] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.424113][ T348] usb 10-1: config 0 descriptor?? [ 276.460810][T14943] rust_binder: Write failure EFAULT in pid:198 [ 276.519366][T14951] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4823'. [ 276.565455][T14956] netlink: 'syz.0.4825': attribute type 4 has an invalid length. [ 276.574638][T14956] netlink: 'syz.0.4825': attribute type 4 has an invalid length. [ 276.586976][T14957] netlink: 'syz.0.4825': attribute type 4 has an invalid length. [ 276.612449][T14963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.622810][T14963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.644472][T14934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.653175][T14934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.662641][ T36] audit: type=1400 audit(2000000004.899:925): avc: denied { mounton } for pid=14933 comm="syz.9.4816" path="/proc/127/cgroup" dev="proc" ino=63608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 276.686939][ T36] audit: type=1400 audit(2000000004.918:926): avc: denied { mounton } for pid=14933 comm="syz.9.4816" path="/proc/127/cgroup" dev="nsfs" ino=4026533349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 276.952849][ T348] usbhid 10-1:0.0: can't add hid device: -71 [ 276.959000][ T348] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 276.967942][ T348] usb 10-1: USB disconnect, device number 9 [ 277.431202][ T629] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 277.560179][T14972] rust_binder: Error while translating object. [ 277.560255][T14972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.567314][T14972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 277.591360][ T629] usb 1-1: Using ep0 maxpacket: 32 [ 277.607517][ T629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.621004][ T629] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.632996][ T629] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.650659][ T629] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 277.665390][ T629] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.672186][ T629] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 277.681691][ T629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.690822][ T629] usb 1-1: config 0 descriptor?? [ 277.987089][ T2367] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 278.127017][ T629] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 2/5 [ 278.136188][ T629] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 278.144488][ T629] hid-thrustmaster 0003:044F:B65D.000F: probe with driver hid-thrustmaster failed with error -22 [ 278.155393][ T2367] usb 10-1: Using ep0 maxpacket: 8 [ 278.163594][ T2367] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.173816][ T2367] usb 10-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 278.183076][ T2367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.191718][ T2367] usb 10-1: config 0 descriptor?? [ 278.407115][ T426] usb 1-1: USB disconnect, device number 16 [ 278.629078][ T2367] kye 0003:0458:501A.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 278.640018][ T2367] kye 0003:0458:501A.0010: unknown main item tag 0x7 [ 278.646871][ T2367] kye 0003:0458:501A.0010: item fetching failed at offset 6/7 [ 278.654826][ T2367] kye 0003:0458:501A.0010: parse failed [ 278.660447][ T2367] kye 0003:0458:501A.0010: probe with driver kye failed with error -22 [ 278.844756][ T629] usb 10-1: USB disconnect, device number 10 [ 279.037308][T15014] rust_binder: 228: no such ref 2 [ 279.042488][T15014] rust_binder: inc_ref_done called when no active inc_refs [ 279.042507][T15014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 279.050338][T15014] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 279.138087][ T36] audit: type=1400 audit(2000000007.208:927): avc: denied { append } for pid=15024 comm="syz.0.4848" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 279.219228][ T5665] Bluetooth: hci0: Frame reassembly failed (-84) [ 279.225695][ T5665] Bluetooth: hci0: Frame reassembly failed (-84) [ 279.700478][ T2367] rust_binder: 15039: removing orphan mapping 0:8 [ 280.412468][T15055] kvm: user requested TSC rate below hardware speed [ 280.429515][T15055] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 280.438337][T15055] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 280.714360][ T2367] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 280.875835][ T2367] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 280.887456][ T2367] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.897425][ T2367] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 280.910827][ T2367] usb 10-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 280.920323][ T2367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.929522][ T2367] usb 10-1: config 0 descriptor?? [ 281.364145][ T2367] saitek 0003:0738:1709.0011: unknown main item tag 0x0 [ 281.366899][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 281.371305][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 281.383634][ T2367] saitek 0003:0738:1709.0011: unknown main item tag 0x0 [ 281.390778][ T2367] saitek 0003:0738:1709.0011: unknown main item tag 0x0 [ 281.397900][ T2367] saitek 0003:0738:1709.0011: unknown main item tag 0x0 [ 281.404967][ T2367] saitek 0003:0738:1709.0011: unknown main item tag 0x0 [ 281.412836][ T2367] saitek 0003:0738:1709.0011: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.9-1/input0 [ 282.587806][T15062] rust_binder: Write failure EFAULT in pid:255 [ 282.587952][T15062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 283.491375][T15069] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 283.509148][T15069] SELinux: failed to load policy [ 283.535478][T15072] random: crng reseeded on system resumption [ 283.561451][T15072] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 283.561487][T15072] rust_binder: Read failure Err(EFAULT) in pid:264 [ 283.594102][T15070] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.608151][T15070] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.615669][T15070] bridge_slave_0: entered allmulticast mode [ 283.622291][T15070] bridge_slave_0: entered promiscuous mode [ 283.629562][T15070] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.637248][T15070] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.637385][ T8520] usb 10-1: USB disconnect, device number 11 [ 283.645400][T15070] bridge_slave_1: entered allmulticast mode [ 283.658109][T15070] bridge_slave_1: entered promiscuous mode [ 283.699191][T15080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.759902][T15070] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.770553][T15089] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 283.773604][T15070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.790369][T15070] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.797462][T15070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.836424][T15091] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0 [ 283.836461][T15091] rust_binder: Error while translating object. [ 283.842305][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 283.853432][T15091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 283.869080][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 283.879164][T15091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 283.893129][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 283.904613][T15070] veth0_vlan: entered promiscuous mode [ 283.932460][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 283.932825][T15070] veth1_macvtap: entered promiscuous mode [ 283.951139][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 283.963250][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 283.994988][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 284.013101][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 284.035499][T15102] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 284.038285][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 284.062489][T15095] __vm_enough_memory: pid: 15095, comm: syz.9.4869, bytes: 1099511693312 not enough memory for the allocation [ 284.092019][ T36] audit: type=1400 audit(2000000011.837:928): avc: denied { connect } for pid=15101 comm="syz.1.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 284.113216][T15108] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 284.166449][T15110] rust_binder: Write failure EFAULT in pid:176 [ 284.253747][T15119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 284.301901][T15124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.311978][T15124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 284.319331][T15124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:185 [ 284.344574][T15126] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 284.364708][T15126] rust_binder: Write failure EINVAL in pid:187 [ 284.450464][ T36] audit: type=1400 audit(2000000012.183:929): avc: denied { mounton } for pid=15142 comm="syz.0.4885" path="/syzcgroup/unified/syz0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 284.605790][T15152] rust_binder: Error while translating object. [ 284.605842][T15152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 284.605955][T15153] rust_binder: Error while translating object. [ 284.612404][T15152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:305 [ 284.622130][T15153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 284.637531][T15153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:305 [ 284.647902][ T426] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 284.668386][T15155] validate_nla: 1 callbacks suppressed [ 284.668457][T15155] netlink: 'syz.0.4889': attribute type 4 has an invalid length. [ 284.682631][T15155] netlink: 'syz.0.4889': attribute type 4 has an invalid length. [ 284.725598][T15158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:311 [ 284.810631][ T426] usb 10-1: device descriptor read/64, error -71 [ 285.088791][ T426] usb 10-1: device descriptor read/64, error -71 [ 285.345411][ T426] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 285.484474][ T426] usb 10-1: device descriptor read/64, error -71 [ 285.741159][ T426] usb 10-1: device descriptor read/64, error -71 [ 285.790908][T15176] usb usb8: usbfs: process 15176 (syz.0.4895) did not claim interface 63 before use [ 285.858878][ T426] usb usb10-port1: attempt power cycle [ 285.938923][ T36] audit: type=1400 audit(2000000013.566:930): avc: granted { setsecparam } for pid=15182 comm="syz.1.4898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 285.958929][ T36] audit: type=1400 audit(2000000013.585:931): avc: denied { execute } for pid=15182 comm="syz.1.4898" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 286.222402][ T426] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 286.244914][ T426] usb 10-1: device descriptor read/8, error -71 [ 286.273199][T15193] cgroup: fork rejected by pids controller in /syz1 [ 286.283722][T15191] loop7: detected capacity change from 0 to 16384 [ 286.330795][T15192] loop7: detected capacity change from 16384 to 16383 [ 286.385092][ T426] usb 10-1: device descriptor read/8, error -71 [ 286.551309][T15337] 9pnet_fd: Insufficient options for proto=fd [ 286.570519][T15339] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.639491][ T426] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 286.662065][ T426] usb 10-1: device descriptor read/8, error -71 [ 286.802636][ T426] usb 10-1: device descriptor read/8, error -71 [ 286.917719][ T426] usb usb10-port1: unable to enumerate USB device [ 286.956053][T15349] rust_binder: Error while translating object. [ 286.956076][T15349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 286.962450][T15349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:174 [ 287.157849][T15358] rust_binder: Error while translating object. [ 287.167125][T15358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 287.173399][T15358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:183 [ 287.185887][T15360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.603258][T15366] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.618343][T15366] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 287.627022][T15366] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.629892][ T36] audit: type=1400 audit(2000000022.153:932): avc: denied { shutdown } for pid=15367 comm="syz.9.4916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 287.635269][T15366] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 287.822537][T15379] rust_binder: Write failure EFAULT in pid:345 [ 287.858772][ T36] audit: type=1400 audit(2000000022.359:933): avc: denied { execute } for pid=15385 comm="syz.0.4923" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 288.052544][ T36] audit: type=1400 audit(2000000022.546:934): avc: denied { setattr } for pid=15395 comm="syz.0.4927" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.257497][ T36] audit: type=1400 audit(2000000022.742:935): avc: denied { map } for pid=15402 comm="syz.0.4930" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 288.425644][ T348] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 288.529838][T15407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 288.588202][ T348] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 8 [ 288.604862][ T348] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 288.615068][ T348] usb 2-1: config 1 interface 0 has no altsetting 0 [ 288.623402][ T348] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 288.632795][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.641353][ T348] usb 2-1: Product: ఌ [ 288.645636][ T348] usb 2-1: Manufacturer: 袭㍿逸鉍⩥뭇혛泜㵔蚱ّ탌ϖ걫膠없舃휩滁鵏藟稢騦揍쁐쇚ᰪ䕟챋㚆츅뗐䳤眡饠딎츝쳩뒳䣍웛몋뻦忽嵅쵮¯鱧법廤ꑕ探浲㚱쟽ִ덆ෟ冽鐠항炭䘯퐥䂆⋑⴩⊚跌螒뵡㗻᪌ƈ蓮뭇깽훁ⲉ檄쟪Ⱳ蘕Մ䁦 [ 288.674065][ T348] usb 2-1: SerialNumber: చ [ 288.679751][T15401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 288.687097][T15401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 288.778581][ T629] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 288.939058][ T629] usb 10-1: Using ep0 maxpacket: 16 [ 288.945822][ T629] usb 10-1: unable to get BOS descriptor or descriptor too short [ 288.954686][ T629] usb 10-1: config 9 has an invalid interface number: 63 but max is 1 [ 288.962974][ T629] usb 10-1: config 9 has an invalid interface number: 159 but max is 1 [ 288.971403][ T629] usb 10-1: config 9 has no interface number 0 [ 288.977794][ T629] usb 10-1: config 9 has no interface number 1 [ 288.984533][ T629] usb 10-1: config 9 interface 63 has no altsetting 0 [ 288.993462][ T629] usb 10-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 289.003299][ T629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.011809][ T629] usb 10-1: Product: syz [ 289.016348][ T629] usb 10-1: Manufacturer: syz [ 289.021135][ T629] usb 10-1: SerialNumber: syz [ 289.298095][T15412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 289.452425][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 289.623494][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 289.630421][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 289.639713][ T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 289.648085][ T9] usb 1-1: config 0 has no interface number 0 [ 289.654325][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 289.665362][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 289.675295][ T9] usb 1-1: config 0 interface 88 has no altsetting 0 [ 289.685160][ T9] usb 1-1: string descriptor 0 read error: -22 [ 289.691756][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 289.701403][ T9] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 289.711640][ T9] usb 1-1: config 0 descriptor?? [ 289.719305][ T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input35 [ 289.743832][T10889] udevd[10889]: Error opening device "/dev/input/event3": Input/output error [ 289.758724][T10889] udevd[10889]: Unable to EVIOCGABS device "/dev/input/event3" [ 289.769643][T10889] udevd[10889]: Unable to EVIOCGABS device "/dev/input/event3" [ 289.932641][ T9] usb 1-1: USB disconnect, device number 17 [ 290.716379][ T36] audit: type=1400 audit(2000000025.042:936): avc: denied { execute } for pid=15415 comm="syz.0.4934" path="/dev/usbmon#" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 290.760807][T15418] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 291.227787][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 291.327710][ T348] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 7 proto 2 vid 0x04B8 pid 0x0202 [ 291.343388][ T348] usb 2-1: USB disconnect, device number 4 [ 291.362220][ T348] usblp0: removed [ 291.398874][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 291.405453][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.415035][ T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 291.423448][ T9] usb 1-1: config 0 has no interface number 0 [ 291.429561][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 291.441040][ T9] usb 1-1: config 0 interface 88 has no altsetting 0 [ 291.451900][ T9] usb 1-1: string descriptor 0 read error: -22 [ 291.458299][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 291.467884][ T9] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 291.478856][ T9] usb 1-1: config 0 descriptor?? [ 291.486638][ T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input36 [ 291.702541][ T9] usb 1-1: USB disconnect, device number 18 [ 291.758506][ T629] usb 10-1: USB disconnect, device number 16 [ 291.777935][T12072] udevd[12072]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.805838][ T37] INFO: task syz.2.2790:8744 blocked for more than 122 seconds. [ 291.813949][ T37] Not tainted syzkaller #0 [ 291.822538][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.827303][T15455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.831655][ T37] task:syz.2.2790 state:D [ 291.833010][T15455] rust_binder: Failed copying remainder into alloc: EFAULT [ 291.838359][ T37] stack:0 pid:8744 tgid:8743 ppid:6867 flags:0x00004004 [ 291.843174][T15455] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 291.850657][ T37] Call Trace: [ 291.858837][T15455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 291.867649][ T37] [ 291.870463][T15455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:205 [ 291.880308][ T37] __schedule+0x1322/0x1df0 [ 291.897579][ T37] ? __sched_text_start+0x10/0x10 [ 291.902688][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 291.908358][ T37] ? mutex_unlock+0x8b/0x240 [ 291.913095][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 291.919083][ T37] schedule+0xc6/0x240 [ 291.923211][ T37] super_lock+0x150/0x300 [ 291.927558][ T37] ? user_get_super+0x350/0x350 [ 291.932589][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 291.938489][ T37] ? __kasan_check_write+0x18/0x20 [ 291.943882][ T37] iterate_supers+0x8a/0x560 [ 291.948984][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 291.954560][ T37] ksys_sync+0x95/0x160 [ 291.958914][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 291.963697][ T37] ? switch_fpu_return+0x12/0x20 [ 291.968767][ T37] __ia32_sys_sync+0x12/0x20 [ 291.973379][ T37] x64_sys_call+0x2a58/0x2ee0 [ 291.978101][ T37] do_syscall_64+0x58/0xf0 [ 291.982529][ T37] ? clear_bhb_loop+0x50/0xa0 [ 291.987231][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 291.993485][ T37] RIP: 0033:0x7fd8f5d8ebe9 [ 291.998006][ T37] RSP: 002b:00007fd8f6c46038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 292.006673][ T37] RAX: ffffffffffffffda RBX: 00007fd8f5fc5fa0 RCX: 00007fd8f5d8ebe9 [ 292.014920][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.022996][ T37] RBP: 00007fd8f5fc5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 292.030990][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.039325][ T37] R13: 00007fd8f5fc6038 R14: 00007fd8f5fc5fa0 R15: 00007ffd953ae748 [ 292.047709][ T37] [ 292.051250][ T37] NMI backtrace for cpu 0 [ 292.051266][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 292.051293][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.051305][ T37] Call Trace: [ 292.051312][ T37] [ 292.051321][ T37] __dump_stack+0x21/0x30 [ 292.051352][ T37] dump_stack_lvl+0x10c/0x190 [ 292.051377][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 292.051401][ T37] dump_stack+0x19/0x20 [ 292.051425][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 292.051450][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 292.051475][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 292.051500][ T37] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 292.051547][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.051573][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.051598][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 292.051622][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 292.051647][ T37] watchdog+0xd8f/0xed0 [ 292.051675][ T37] ? __cfi_watchdog+0x10/0x10 [ 292.051701][ T37] ? __kasan_check_read+0x15/0x20 [ 292.051729][ T37] ? __kthread_parkme+0x138/0x180 [ 292.051747][ T37] ? schedule+0xc6/0x240 [ 292.051775][ T37] kthread+0x2c7/0x370 [ 292.051795][ T37] ? __cfi_watchdog+0x10/0x10 [ 292.051820][ T37] ? __cfi_kthread+0x10/0x10 [ 292.051839][ T37] ret_from_fork+0x67/0xa0 [ 292.051874][ T37] ? __cfi_kthread+0x10/0x10 [ 292.051894][ T37] ret_from_fork_asm+0x1a/0x30 [ 292.051924][ T37] [ 292.051932][ T37] Sending NMI from CPU 0 to CPUs 1: [ 292.211560][ C1] NMI backtrace for cpu 1 [ 292.211573][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 292.211591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.211599][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 292.211619][ C1] Code: cc cc cc b8 f1 c4 40 1d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 51 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 292.211630][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 292.211643][ C1] RAX: ffff8881f6f00000 RBX: ffff888103668000 RCX: ffffffff858c009e [ 292.211653][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000004ca134 [ 292.211662][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 292.211672][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd000 [ 292.211681][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cae8e8 [ 292.211690][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 292.211701][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.211711][ C1] CR2: 000000110c2976bc CR3: 0000000108ab8000 CR4: 00000000003526b0 [ 292.211724][ C1] Call Trace: [ 292.211729][ C1] [ 292.211735][ C1] default_idle+0x17/0x30 [ 292.211751][ C1] arch_cpu_idle+0xd/0x20 [ 292.211764][ C1] default_idle_call+0x3f/0x80 [ 292.211778][ C1] do_idle+0x1a0/0x470 [ 292.211790][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 292.211804][ C1] cpu_startup_entry+0x48/0x70 [ 292.211816][ C1] start_secondary+0x12e/0x140 [ 292.211837][ C1] common_startup_64+0x13b/0x157 [ 292.211854][ C1]