last executing test programs: 45.370794749s ago: executing program 3 (id=160): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket$inet(0x2, 0x800, 0x0) sendto$inet(r1, 0x0, 0x54, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 45.309449505s ago: executing program 3 (id=162): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x30, 0x12, 0x0, {0x3, @ether_spec={@local, @remote, 0x1ff}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x4e23, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 45.23488683s ago: executing program 3 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x4}) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f61657020686173683df7"], 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000180)='./binderfs/binder0\x00', 0xffffffffffffffff) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x1, 0x3, 0x9, 0xb}, 0x10) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, &(0x7f0000000880)="1f1298", 0x3, r8) (async) keyctl$search(0xa, r8, &(0x7f0000000980)='user\x00', &(0x7f00000009c0)={'syz', 0x2}, r7) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x810002, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRESDEC=r3, @ANYRESHEX=r2]) (async) waitid$P_PIDFD(0x3, r6, &(0x7f0000000200), 0x40000000, &(0x7f0000000340)) 45.165898396s ago: executing program 3 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10008, 0x0) (async, rerun: 32) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c8, 0x1f8, 0x0, 0x108, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000002240)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1a31406, 0x0) (async) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async) fcntl$setsig(r2, 0xa, 0x19) (async, rerun: 64) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async, rerun: 64) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) sendfile(r5, r2, 0x0, 0x80000000) 45.145171948s ago: executing program 3 (id=169): openat$incfs(0xffffffffffffff9c, 0x0, 0x14040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x10000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xb, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff34, 0x1000000, 0x0}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x1, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',m/\x00', @ANYRES16=r2, @ANYBLOB="39020000000000000000140000001800078008000200060000000c0003000000000000000000"], 0x2c}}, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be004432fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7a) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000a40)={0x0, 0x2, [@link_local, @remote]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0xa0, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x180a, 0x3}, @fd, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0xd9, 0x0, &(0x7f0000000300)="32873c61500fe4cc9fb8cf3a78778783961e175d8c4c243c1092bb2b1bf1aba2f01c576f4ac109835f86a188a284abd9975ac3f2790e048cab291c9325bec1bab63b23a41e6e43e005e88528cf0d9d85aba3894563486794dcefa5d8ea32821bbf235921fc23794483a588bb6b77c9ad4c113f404a958f345f16e0b7b1a8e286510500a3f64860973c349613ec2c8ebd77d3c6529ef154d213ad72cd285f58743801258b33fde93130ce811f847c066c6cbfcbec6853eec0a3de89a7ac6d00aeb0c5efdf74830b361b1aee28ac97ae0d7b04066bd3b5906816"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) 45.079667053s ago: executing program 3 (id=170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) fcntl$setstatus(r2, 0x4, 0xc2400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5447331efe188bfa00102bafe512010102b7334508d219616ac0b0010203010902120001010d906c091c5100000206008e"], 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) (async) setreuid(0x0, r3) (async) fcntl$setstatus(r2, 0x4, 0xc2400) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5447331efe188bfa00102bafe512010102b7334508d219616ac0b0010203010902120001010d906c091c5100000206008e"], 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) (async) io_setup(0x1, 0x0) (async) io_submit(0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 45.007474649s ago: executing program 32 (id=170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) fcntl$setstatus(r2, 0x4, 0xc2400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5447331efe188bfa00102bafe512010102b7334508d219616ac0b0010203010902120001010d906c091c5100000206008e"], 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) (async) setreuid(0x0, r3) (async) fcntl$setstatus(r2, 0x4, 0xc2400) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5447331efe188bfa00102bafe512010102b7334508d219616ac0b0010203010902120001010d906c091c5100000206008e"], 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) (async) io_setup(0x1, 0x0) (async) io_submit(0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 26.754568965s ago: executing program 1 (id=353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) syz_pidfd_open(0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r2, 0x4004480d, 0x0) r3 = dup(r2) prlimit64(0x0, 0x4, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.622752265s ago: executing program 1 (id=354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="120153111003000000106a050e0140000102030109022400010168080809040077020301030e092140000401229e00000581034000080105"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000900)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1402, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) syz_io_uring_setup(0xdb72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0x10, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, &(0x7f0000000600)="d8eaf0825800982eddecba200066b81500000066ef0f20d86635200000000f22d8660f383a43a50f436200f30fc7fa0f28b8eb000f01c8", 0x37}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x2, "b88c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000001300)={0x44, &(0x7f0000001080)={0x0, 0xe, 0x3, "7102e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xaa, 0xb, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf7, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xa9, 0x8, 0x3, 0xff, 0x3}, 0x4f, &(0x7f00000002c0)={0x5, 0xf, 0x4f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "6d32393bd602000000979255ced86e6e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0xd, 0xd81}, @ss_cap={0xa, 0x10, 0x3, 0x3ef1fce8a94ba7c0, 0x8, 0x80, 0x9, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x8001, 0xf000, 0x1, [0xc030, 0x30, 0xffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xa, 0x5, 0x7}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43f}}, {0x64, &(0x7f0000000380)=@string={0x64, 0x3, "e003490c7b2ba96601832573988e807a9bcf6043c16fd74f2bb0c0b6a025d590b980ee7562d04c1adc99be6fbbc45b04a150da6d708dc5e5a4e622d5771be1d1b61cbcffa329d7aa8d858e74d1cb1bd4d7a408226f261adacabfe5dc5309bb5e3c4c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "52b5a0e92227799c93669567b7c1c49ca4a7"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x443}}, {0x45, &(0x7f0000000500)=@string={0x45, 0x3, "8035f890a477569b5289f36e8d19c5cef4be54e786522daafd73a73145eed1a11d8af62471b8c489bc24e603022802e4dc7dc6acf554dba9bfb0767eadd72fcb092d7a"}}]}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) close_range(r0, 0xffffffffffffffff, 0x0) 23.55836016s ago: executing program 1 (id=386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB="b9", @ANYRESHEX], 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0xad, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000006200), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x206b) mknod$loop(&(0x7f00000005c0)='./file0/file0\x00', 0x808, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008680)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x651, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r6, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000013c0)={&(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0xc, {0x7, 0x2b, 0x401, 0x20408004, 0x6, 0x1, 0xbe, 0x0, 0x0, 0x0, 0x2, 0xc286}}, &(0x7f0000000300)={0x18, 0xffffffffffffffda, 0x8000000000000001, {0xfffffffffffffff7}}, &(0x7f0000000400)={0x18, 0x0, 0x7}, 0x0, &(0x7f0000000480)={0x18, 0x0, 0x30d, {0x1}}, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x13, 0x0, 0x3ff, {'-)\x00'}}, &(0x7f0000000a80)={0x20, 0x0, 0x5}, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x4, {0x1, 0x3, 0x7, 0x5, 0x7, 0x9, {0x5, 0x4, 0x2, 0x800, 0x100, 0x5, 0x5, 0x10, 0x3, 0x0, 0xa5d, r5, r6, 0x80000001, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x130, 0xfffffffffffffffe, 0xe0, {0x0, 0x7, 0x0, '\x00', {0x8, 0xfffffff7, 0x4, 0x401, 0x0, r6, 0x8000, '\x00', 0x4, 0x100000001, 0x5, 0x200, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0xffffffff}, {0xff, 0x1}, 0x7f, 0x2, 0x9, 0xfff}}}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 22.121355795s ago: executing program 1 (id=409): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x9, 0x401, 0x9, 0xb, 0x400, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8923000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, 0x2a, 0x400, 0x70bd29, 0x25dfdbfb, {0xa}, [@nested={0x10, 0x105, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x11f}]}, @typed={0xc, 0x9d, 0x0, 0x0, @u64=0x1ff}, @nested={0xee, 0x8c, 0x0, 0x1, [@generic="cc5b0d896029bd7356f6dc8fb20669869057fda09af800b5b5631d0f94ff855a483820d89b3b3f9a5a666d56fb6ffb609310633f25e46434108d9ea009e6c2ba4d25b3cbe591d056a8d07fad18f2cc5e08f3626361f0ea74c6b4b0378994abd11b54a91887d2f9cec30acd02d15540121488b1308ea321afacfdaa9703a5c2a9993a09827d562cd4d87dfd6d655e0100a86c3838941f80687fa6c5f80c2c221a590edbe41117b88e0df33224d35b97c28c4fdbafc77bd6fc9f01ea938e9f5525e2ea1d028020c1f8bd0d50df81afc4167de9bfd8fae4b0bc97c64df9934ffe3b54a64a2345443dd8a92e"]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000340)={0xa74, 0x0, 0x4, 0x3, 0x7, "8587019ce14a0e40b9397f9b2d6030d1b3eb65", 0xcdbd, 0x81}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000380)={0xce, 0x0, r4}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000400)={0x4, 0xe5bd, 0x80000000, 0xb1ca, 0xbc, "c10b0220d5e2e583b7aef132a8e653b1a9b0ea", 0x8, 0x3}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000480)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0x5) ioctl$KVM_CAP_STEAL_TIME(r4, 0x4068aea3, &(0x7f0000000500)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000580)=0x6d) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000005c0)={0x40, 0x5}) preadv2(r3, &(0x7f0000001ac0)=[{&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/187, 0xbb}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000940)=""/114, 0x72}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/31, 0x1f}, {&(0x7f0000001a00)=""/129, 0x81}], 0x8, 0xffffffff, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r6, 0x4018aee3, &(0x7f0000001b80)=@attr_other={0x0, 0x6257c8fb, 0x9, &(0x7f0000001b40)=0x5}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x35e46228ecbffa3}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x2) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000001cc0)='wg2\x00', 0x4) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_CAP_XEN_HVM(r8, 0x4068aea3, &(0x7f0000001d00)={0x26, 0x0, 0x6}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) read$FUSE(r9, &(0x7f0000001dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = syz_open_procfs(r10, &(0x7f0000003e00)='oom_score_adj\x00') setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000003e40)={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3d3a}, {0xa, 0x4e20, 0x5a, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1, {[0x7, 0x2, 0x0, 0xff, 0x8001, 0x2, 0x8000, 0x4]}}, 0x5c) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f0000003ec0)={0x8, 0x570}) 22.105728946s ago: executing program 1 (id=410): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1100, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) read(r0, &(0x7f0000000080)=""/191, 0xbf) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x6, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x5, 0x1f, 0x6, 0xe8, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x6, 0x1, 0x5, 0x40, 0x5a}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x5, 0x0, "ec34"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x6, "c7d3e84f3f0f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0xff, 0x8, 0x2, {0x7, 0x25, 0x1, 0x80, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x4, "82f83a0a0e6dbe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x1, 0x99, {0x7, 0x25, 0x1, 0x80, 0x6, 0x7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xff, 0x4, 0x1a, 0x40, 0x4}, 0xa8, &(0x7f0000000240)={0x5, 0xf, 0xa8, 0x5, [@generic={0x6e, 0x10, 0xb, "734a46e9daace54836e43672f93565d274f462eb0b1ac263a5a8adf7b6bd82b7763f82d0d0a4d6521f5e1d95331011c2686fd0325a38d0e31525784562afc990576a7088f0f1259b4f6f68759743cea5ddde67224e36bc2c3f5080bc71578d7b3f49722956233162b2e072"}, @generic={0x1e, 0x10, 0xa, "7e487cd91ac78124d2fd31e138da56b4cd2caf1ac067d58848c818"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x0, 0x9563}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x81, 0xc2}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x423}}]}) r2 = signalfd(r0, &(0x7f0000000380)={[0x9]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000010c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000440)={0xc3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x70}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x2, 0x0, 0x16, 0x8, 0xb, 0x6, 0x36, 0x3, 0x2, 0x48, 0x6c, 0x3, 0x6, 0x5, 0x4, 0x2, 0x1, 0x12, 0x1, 0x2, 0x16, 0x24, 0x18, 0x1b, 0x1, 0x3, 0x30, 0x60, 0x60, 0x32]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x479, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@device_b, {0x0, 0xe8}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xf, @random=0x3, 0x2710, @void, @val={0x1, 0x2, [{0x3}, {0x48}]}, @void, @val={0x4, 0x6, {0x6, 0x0, 0x3, 0x1}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0xd4, {0xd, 0xde, 0x3, "446b5bdbe6454d9b4dda7de0d6a310395094ec7f44a2059f4e582073213ea564d8c20db288fa6cef296db50fc280eedd828d0770c3cdd78f3427f11aeb7372dfab15afafeae994360df0a6f85d800c717deded7ba6b2df2904c2727b50a949e7e6e88c658176c31e862469b4726ae82120dc2e409f5ba7ae79b5a4c7512ac9174b9435985ab6485cee130ae1699a505e42f7931b8f649f17775916dc652e3074df94d8e576275807ead619ba92e5e94975690137e645683a86a7895f38f22e6d58398c2333a8fca1c66530c4c65a5e9b9f"}}, @val={0x25, 0x3, {0x1, 0x24}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0x4, 0xf73, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x3, 0x35}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x8, 0x25, 0x41}}, [{0xdd, 0x22, "e21e8b3eae33a13815d5784758524860b14c0c74b1c9cba9f2087ce29ddabaaa52cf"}, {0xdd, 0xeb, "0324bccebc66787c623e6658be32317faac25ea81946f0860c56c46cb644411adc656ba5049b35dad8e95850c5cc50e8a3c28497f3f8cffbb7c32bb948536989a5281ae1b024d42c83e94b513744b9f8d9123646bb8e5ca9e83de78fdf6886aa275b11d3f257ff8e631466476fd896c4c7327e3e0580b8851446a025fd4311a7fc88ca5ee791fa58d6dacfb20a3acbc83a4eba6ec920101b552e6b874fc62c6224e025f1b2d16819634c35945d080646970a0f24f9eee4f7d6c1a3356518b0f893a40e4ae9230fcb37e7ea22352737a1c31c0bfe11ee8de89a581f0632c06715865020d2dc5150f0f8fdb9"}, {0xdd, 0xa8, "dcd39ab2e5da1b74c7a078c6699f57b1e537bf7c53a45ef7a54f53e97d2b41acb291d973e889a54c9ba06d7d29daca9ddd472e5aad473d5053e12c04b3447828c22f07570b1e852d9ff84d5439019aadb238750943fa5b127ff4646c3596a26a7346b8e6c875895f9e8ad14a3a751b4f904d2e726cec8e177c70b4caa782df3dab7d3d43eb76730acf59a5407a9477e3b82a9caca9a6960c6a8e9fced9850e47b97ba8346f0fc621"}, {0xdd, 0x92, "3512c2e1779205545d82636a6be7754b19f5c5e6ea659745daf6601c2c6c5ae7250a0dd813a8aa550ddd4d49a7a8d3b78351aa9cb878d682a9620d3a93f7d0ad35ac446ef7cc63b5e33905897b3e009a2cc785f4a0aa552aa3e6ed6216123afe8f9168e73cef789568c95c292b58dc7a8841eb5daa93f036314ff8b3f57e4cca6cb71b0b2e1ec0022115ffce1d0f761a5a74"}, {0xdd, 0xe2, "c75281bae8624b52cb70c460e7d2d0b7d6f5d03f6de097cc85f240ad06860d0f5f7c041ffb4b773eb059af0ebf05c6a63b766b75b485dc02db00c837a3f9a84dce3a108c1b86337e9d89c678365ec7215887e3a9e8ef11a8e5a742fe914060c7cc5cec21449c9e66072251cb8822d978d15ea3c21520349b4e9b8b2d874a069a706c178ba43df2c715d0b333a9d52e6c948df257aee9b81bbbd06f4d6c79e66ed76fddd34be2cd012cbd1a57a84feead5f745f4d08499e35eccdaa7de8b67e3abf07b2705203259996932e05b3174c2002cf354f9498bfcb2f75873324ee71ee8286"}]}}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x252, 0xf, [@dsss={0x3, 0x1, 0xd}, @ssid={0x0, 0x1, @random="b8"}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @broadcast}}, @prep={0x83, 0x1f, {{}, 0xfe, 0xe, @device_b, 0x9, @void, 0x0, 0x7ee, @device_a, 0x513918d7}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x9}}, @tim={0x5, 0xee, {0x5, 0xe8, 0x9, "d2251fe6c6a3a29996e89ede847832556f37c99b5ab68813d9ead2d0ddcd21f487746111e9e2e35d9e99741c8779e2ef3890cc8bf4ddb796a72808a8ce5cce6bb7d7ce03bd3fc92e113f146434d4bc6e0d0ee2ad24cb9901b2b848aa2bb0b1c52c25179b9141fc021999d7945ff2d66af3e1dab3efc85a5f7ce425d0f751b6cc12946eebe0f8fde40fa686c51613a8a22c5ca0d596bf54475cb9b4f1898fefdbc6d7415300e72017192520d9721244b4ad3ae787fa95aa08cbe37d4f4850774fc168586ffa48452fd0393a36ff53cd77e0edbda4f2e30ee35ed816b77d2020aba2f7242a764d8d665d7f20"}}, @fast_bss_trans={0x37, 0x73, {0x9, 0x3, "e002020d3b4c8f0461607c92df5f760a", "27d0c8c229fef9f015a15bd3ee5789c04cef68d0f82bf90aabb1f3f8fe41d1b8", "61cd7bb9cddfc9d92fb75fa22942ab29fa869561231749f75ae2971417b62f67", [{0x3, 0x9, "fc8a0845649e7d56a0"}, {0x1, 0x4, "f9f90696"}, {0x1, 0xe, "9465070b276bda8977abdf42c0d8"}]}}, @fast_bss_trans={0x37, 0x9c, {0x7e, 0x3, "72d941f0ebb9e03fecd4967637a41659", "394238c08ba589ad0b754a2cef0386224eba0b3c5e7578ee580e99a0a7c56635", "ddd80545a099b8abf279c2cb816b3b10779c0cffe78b88ffb21649552641297d", [{0x1, 0x11, "b74542d4bdee6666a26351773af1ce27d6"}, {0x1, 0xc, "00816a885c25bbbfaf6d62b9"}, {0x4, 0x27, "c28c44a550e169f756d2846565b50052e13110bd8778fe813e07faca3fbb4326ea906a0c2b325f"}]}}, @random_vendor={0xdd, 0x9, "6b5fb6b102d235a463"}]}, @NL80211_ATTR_FTM_RESPONDER={0x144, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xa6, 0x2, "dc4c3d5bda183bc735bb4d791cccdf0cd3f06910886d7908ef41e10e7e47eb68c6044ea6fe24c231f968633cf01012d45d31c89912cfa8aca8c288e4fd2c9dc58777b97b8dcbd58846501b6eb07123afbd2d92d61ab337e77be022d7f0b675f172a8713407b83c9f5133b290c7cda000159cd0c37014814e7ecf7f637c05fccc9b2f85782c5cfec86d861e6052b759e1f12c219d0446341d9a942fba66898368915f"}, @NL80211_FTM_RESP_ATTR_LCI={0x8d, 0x2, "d2f88f285621d86806e4ffbad0ac9d0a8017c6d2b37ff97e0ed94413acd0cacaa37a014943c477dab5ab9b1de3d520fd842935e7fdc58ce89c861a6a8c8ba2618d334cec2e356c0963e5b0cdc03244e132abaedd37f6200f6cc517f0442819ffca367e31c2eaed1d0aac446855e5c3ecba2eba8e4ad44a897834bde5ca564c43e21ef841b1a88a9691"}]}, @NL80211_ATTR_FTM_RESPONDER={0x23c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xfe, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x8f, 0x2, "3db4f38fabc9302dae3597b671c3a240334f259ba74e4ea160a871c0c7c715599d2efea4b63f19af0e60a0a9380b454987f3cfca63a4e419a21e41d77b717d9a3f1ff5ffdae0da87a0f313445ead2f90430c98d4d803ab2a2d164865cedd911d9cc2350caf80fcbff436d85b0e10cf4bafe35ba746543a74660f8f4b6f9784133f98610ef7d02ce4bdced5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "381dea"}, @NL80211_FTM_RESP_ATTR_LCI={0x91, 0x2, "88b0a8bf4b1769ff2c98974344721ba5f661ceb7cf27ec1247da22ea81589858e6f9f2f877528a883fb99086720b166618648a05439a5c5d1f65b8628e2046baca241194f56b3d8ef6cf8aa54b1e3360b3f819b4afd79ead0104cb52ce10fbdb78600d8a22c6f2cbe073daec271d5e6974aa149e178f481df35eb1b63bfa2071f53a13b9b2fb920ab58d35ac82"}]}, @NL80211_ATTR_FTM_RESPONDER={0x50, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "8a399c5960f5646ffeaa407ee3a3c5c7959026bc411544d81bf9f47357c5a75515b1110ad63c087984b216dabfdb02a44f616ba036f57dd4f22366f45f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@ssid={0x0, 0xa, @random="2c9ee4b7b6d70d285a7f"}, @chsw_timing={0x68, 0x4, {0x7, 0x5}}]}, @NL80211_ATTR_IE={0xc3, 0x2a, [@mic={0x8c, 0x10, {0xad7, "eb68348e2353", @short="65bfd74c4361ba01"}}, @random_vendor={0xdd, 0xc, "21724b30292cc6ddb3820c71"}, @mesh_chsw={0x76, 0x6, {0x9, 0x6a, 0x20, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x1d}, 0x5, 0x5, @broadcast, 0x9, 0x481, 0x1}}, @fast_bss_trans={0x37, 0x6f, {0x4, 0x1, "5c65ce3bbb8243fafbded4b76102dd0a", "fbac82800baf7ad25b220d8c735d542aaafaab0275b5169ab172e850bdc9f7c9", "692bb95b39a2f385af94b535f0932f027b891fd1867143f20eb3b06637f905db", [{0x2, 0x1b, "a1d435a0d24e0522df50a58c3592cc9f00a4c01139a25942de6c2b"}]}}, @chsw_timing={0x68, 0x4, {0x0, 0xff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}}]}]]}, 0xc3c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000014c0)={&(0x7f0000001240), 0xc, &(0x7f0000001480)={&(0x7f00000012c0)={0x19c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5453}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7c5b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa6d}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd7c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc432}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa51}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcdd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc1}, 0x4004000) r6 = syz_open_pts(r2, 0x40180) splice(r2, &(0x7f0000001500)=0x7, r6, &(0x7f0000001540)=0x4a, 0x5, 0x0) syz_usb_control_io(r1, &(0x7f0000001800)={0x2c, &(0x7f0000001580)={0x40, 0xe, 0x3b, {0x3b, 0x6, "062b8665e225aa296ca2754ff97b27e56be61650449477ef3467428a2445b2061f7eb62e6380658cfca5cfdd7d2dab70234c12f2f39abf9aff"}}, &(0x7f0000001600)={0x0, 0x3, 0x78, @string={0x78, 0x3, "8596d84a5f020fffb0da3a29326d62530cee869597064c74d0227fc55fd71673f90d2e144f95085ebd14695d9b441068ac258dd1554ee19d14d34bae1f783b9aa0a83b4a6d7fab6590065b8e3fadb05aa7d64a2fa3e68c3566b62dfe9ffee770aed7832ca1b36a967cf4aaf84dda858f4f939ff42201"}}, &(0x7f0000001680)={0x0, 0xf, 0xef, {0x5, 0xf, 0xef, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x7, 0xf, 0x2, [0x180]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x5, 0xc83}, @generic={0xa8, 0x10, 0x4, "048e50f85cee24b05829db5ec9ce3ddab7cf1528348e5872a51c431f13393f0431660ded0f27c1cfedb8f48e60da9926fad8eeb3e58f12a44d4b9c790aa2c466c95df6f25ae239d73cb21a0caef80edbf5897ac53103c283913ca95b9f8f32946c9cd593612ae525eb1d0c8320538f8adf9dead7a1ba44527be2b42ae8abaf2c7794143ea1ce12083198144fd230af214214111aa7247a563c27a0ba48fb89faf710e6c94e"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x101, 0xf, 0x100}, @ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x5, 0xf00, 0x1, [0xff3f00, 0xf0, 0x30, 0x3f00]}]}}, &(0x7f0000001780)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x8, 0x2, 0x8, "fb1b4897", "718a94bb"}}, &(0x7f00000017c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0x1, 0x81, 0x5, 0xc, 0x4}}}, &(0x7f0000001d00)={0x84, &(0x7f0000001840)={0x0, 0xa, 0xf5, "b025d278642178c0c55e81661fbd82fdf28a03dbf560dc814756fa8071119e2ab3774772bb53498f8d668b781ab152fed0bc354fc136ea93adde1115e183f1cf45bfb10d6c5f9da3dd11b80bd33e813f92022e309ba7b1ad71ee265fa7651a2011fcf4043efb19e4f707fc7c6142bd3d1418287bd1c599867d9cc26892006e63894e601c474e787efd91c5ec96ac4cb5c0fa07340439b453b8be0743746e36e08375c0aab6c338376c358cc09899c12cca98e99c6aa64f62b226c54401073a89c0a79f798df71633ce6fc684a60dba6312a80849b8976aba9e1b2b776912a8fe41215dc04e97c55ddfa43f06141ff8c5d9087688d2"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000019c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x8, 0x20}}, &(0x7f0000001a40)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001a80)={0x40, 0x9, 0x1, 0x23}, &(0x7f0000001ac0)={0x40, 0xb, 0x2, "c5fd"}, &(0x7f0000001b00)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000001b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001b80)={0x40, 0x17, 0x6}, &(0x7f0000001bc0)={0x40, 0x19, 0x2, "1ac3"}, &(0x7f0000001c00)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000001c40)={0x40, 0x1c, 0x1, 0x11}, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0xe}}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000001dc0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001e00)='./binderfs/custom0\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001e80)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001f80)={'sit0\x00', &(0x7f0000001ec0)={'syztnl2\x00', 0x0, 0x7, 0x7, 0xa, 0x1, {{0x27, 0x4, 0x0, 0x13, 0x9c, 0x68, 0x0, 0x6, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x53, 0x1, 0x1, [{@multicast1, 0xa6f0}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x75, 0x0, [{0x1, 0x8, "6ffe0533aac0"}, {0x1, 0x12, "0d18dd7bbccf7ec5a38de9abe971518e"}, {0x0, 0x12, "afa37a29c0ead2b0ff170250dd3ca951"}, {0x6, 0xf, "a14290de63de55c9a6664c0e78"}, {0x6, 0xd, "2c3122d1bf0bb89009059a"}, {0x7, 0x7, "9b487e3fce"}, {0x1, 0x11, "f7e35457cbc3cb7144b5398da0df84"}, {0x2, 0xf, "8847a7c476ad8f0c8f57e46688"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002040)={'ip6_vti0\x00', &(0x7f0000001fc0)={'ip6gre0\x00', 0x0, 0x29, 0xac, 0x7, 0x2, 0x18, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x3, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002100)={'ip6_vti0\x00', &(0x7f0000002080)={'syztnl1\x00', 0x0, 0x4, 0xf5, 0x10, 0x100, 0x40, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x8001, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002200)={'gretap0\x00', &(0x7f0000002140)={'syztnl2\x00', 0x0, 0x700, 0x80, 0xfff, 0xf, {{0x1c, 0x4, 0x1, 0x3c, 0x70, 0x65, 0x0, 0x47, 0x4, 0x0, @loopback, @remote, {[@noop, @lsrr={0x83, 0x7, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x2d, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}]}, @generic={0x44, 0x11, "7cf089eb4f34a390b1f695e7b72c2e"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x54, [@rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "0cec27cada0bd13c"}]}, @end, @end]}}}}}) getsockname$packet(r2, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002280)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002340)={'syztnl0\x00', &(0x7f00000022c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x8, 0x3, 0x4c, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20, 0x10, 0x2, 0xfffffffe}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000024c0)={'tunl0\x00', &(0x7f0000002380)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0xe, 0x9, {{0x3d, 0x4, 0x1, 0x4, 0xf4, 0x68, 0x0, 0x9, 0x4, 0x0, @local, @empty, {[@cipso={0x86, 0x2d, 0x3, [{0x2, 0xc, "0f764f1bd8edbf99fd16"}, {0x5, 0xc, "ae9191010e9609b1ebd6"}, {0x7, 0x4, "ddf7"}, {0x7, 0xb, "7daed08d76d1973358"}]}, @timestamp={0x44, 0x8, 0x15, 0x0, 0x0, [0xfffffff9]}, @ssrr={0x89, 0xf, 0x72, [@empty, @remote, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0xa0, 0x3, 0x0, [{@empty, 0x9}]}, @timestamp_addr={0x44, 0x44, 0x75, 0x1, 0xc, [{@multicast2, 0xc9}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x1ff}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0xcb}, {@remote, 0xc0}]}, @timestamp={0x44, 0x20, 0xde, 0x0, 0x3, [0x3, 0x0, 0x5, 0x7c98, 0x9fdf, 0xaf1, 0x0]}, @timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0x2, [{@multicast2, 0xa3b9}, {@multicast2, 0x8}, {@private=0xa010102}, {@multicast1, 0x2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000002680)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002500)={0x128, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x880}, 0x20008801) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r7) sendmsg$NL80211_CMD_LEAVE_MESH(r16, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x1c, r17, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 20.682433279s ago: executing program 1 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000440)={0x3, 0x1, 0x3, 0x11, 0xc8, &(0x7f0000000900)}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r7, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0xbc, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x75}}}}, [@NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "61e8c6e483576ee50c6b23d3b7"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "372e4126a6d9ab4467a8b4d8c4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4abf0ff51cd543fd102f5574a2"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8040}, 0x40800) syz_usb_connect$uac1(0x5, 0xd7, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0xff, "17b1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa995, 0x6bf1, 0x7f, "379ebd8fd28a4d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x9, "", "ad51"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0xfff7, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "", 'uH'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0xfffc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4ef36361642bc9a4d1f80001dfadb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x5, 0x2f, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x2d, 0x9, 0x0, 0x3}]}, 0x1, [{0x67, &(0x7f0000000300)=@string={0x67, 0x3, "252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2a88195a952b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"}}]}) 9.994362692s ago: executing program 0 (id=526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x9, 0x89, {0x89, 0x4, "c34b9a87256b043865a49d65d34bf037f475102ff2621b507a800117ae7fc4ca43915b8b60d610387c26495f3a697330c984c045b4df82ce94e3d3d795d6070f4ac654a41bd9592e46495c1b93aa36e36d93a4dd87da8d8aa29f1093552114b5c524502c7809437393715c2bc51b795f3bf569342762fa3a6097f0832e0de5f1773a1a80dfcf04"}}, &(0x7f0000000080)={0x0, 0x3, 0x28, @string={0x28, 0x3, "12fb2268206ac25249dc2b98716ac5628df77239c35cb9ecd042aa7881a2f6d3f02147b2a113"}}, &(0x7f0000000100)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x49, 0x6, 0x18, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe3, 0x0, 0x4, 0xd, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x9, 0x8, 0x200, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x6, 0xf1e, 0x0, [0x0, 0xc0]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x5, 0x2, "c0476608", "117171a9"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x3, 0x7, 0x2, 0x284f, 0x3}}}, &(0x7f0000000980)={0x84, &(0x7f0000000340)={0x20, 0x10, 0xa2, "6d2573ce255a57fa65964bb44d4f9c0eed58984ba1ab97d24cf9c9af523ae873d045c3cd94a2fd2ae2c9bd71db1345c0208d87b94ed313e2040a33b7fc86ccdef3ed47b70100dc28295f8eb187f59e5e603c0ebf69d9a1b0e1c7b6877d6b3264cd51b2b2bf63769cde9ef16986a99229d13118d7b1bb466205e104061d2d037becd0a2eaab186397b64529e24482335179957750b06434d9d5b0f18cbee7533d9a53"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf1e0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'P&'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "2ba0"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x13}}) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x9, 0x89, {0x89, 0x4, "c34b9a87256b043865a49d65d34bf037f475102ff2621b507a800117ae7fc4ca43915b8b60d610387c26495f3a697330c984c045b4df82ce94e3d3d795d6070f4ac654a41bd9592e46495c1b93aa36e36d93a4dd87da8d8aa29f1093552114b5c524502c7809437393715c2bc51b795f3bf569342762fa3a6097f0832e0de5f1773a1a80dfcf04"}}, &(0x7f0000000080)={0x0, 0x3, 0x28, @string={0x28, 0x3, "12fb2268206ac25249dc2b98716ac5628df77239c35cb9ecd042aa7881a2f6d3f02147b2a113"}}, &(0x7f0000000100)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x49, 0x6, 0x18, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe3, 0x0, 0x4, 0xd, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x9, 0x8, 0x200, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x6, 0xf1e, 0x0, [0x0, 0xc0]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x5, 0x2, "c0476608", "117171a9"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x3, 0x7, 0x2, 0x284f, 0x3}}}, &(0x7f0000000980)={0x84, &(0x7f0000000340)={0x20, 0x10, 0xa2, "6d2573ce255a57fa65964bb44d4f9c0eed58984ba1ab97d24cf9c9af523ae873d045c3cd94a2fd2ae2c9bd71db1345c0208d87b94ed313e2040a33b7fc86ccdef3ed47b70100dc28295f8eb187f59e5e603c0ebf69d9a1b0e1c7b6877d6b3264cd51b2b2bf63769cde9ef16986a99229d13118d7b1bb466205e104061d2d037becd0a2eaab186397b64529e24482335179957750b06434d9d5b0f18cbee7533d9a53"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf1e0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'P&'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "2ba0"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x13}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x28, 0x0, &(0x7f0000001dc0)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x28, 0x0, &(0x7f0000001dc0)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) 6.954290884s ago: executing program 0 (id=555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.948958935s ago: executing program 0 (id=557): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100a00, 0x0) r1 = dup(r0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x101, 0x70bd2d, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8041}, 0x80) personality(0x5400004) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x3f059000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) 6.926883367s ago: executing program 0 (id=561): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r4 = inotify_init1(0x80000) syz_clone(0x82048411, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0) close_range(r4, r4, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x154) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x1000440, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r6 = openat$incfs(r5, &(0x7f0000000240)='.log\x00', 0x2a000, 0x12c) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="29886962bc301b68c3c70763c33af857072bf899f33a2f8c499f37d0623dee5fb66e7675afa98bb1299536314b647a752854332a237435252ca2d917d37b47dd2daed342d033c6f2ac107b8c29a584f60bba469fc77d6a133bfc6c448405b9558afaa9f6d3bc12d2705afbbe343c247bcbb870d312265050c4440efa92011278764327835f8973e1e9d488c59434d0000000"]) fspick(r6, 0x0, 0x1) ioctl$BLKRRPART(r3, 0x125f, 0x0) 6.831898724s ago: executing program 0 (id=564): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) getsockopt$packet_int(r2, 0x107, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 6.586216784s ago: executing program 0 (id=570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="d0030000", @ANYRES16=r3, @ANYBLOB="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"], 0x3d0}, 0x1, 0x0, 0x0, 0x4092}, 0x4000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) 6.50314778s ago: executing program 33 (id=570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="d0030000", @ANYRES16=r3, @ANYBLOB="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"], 0x3d0}, 0x1, 0x0, 0x0, 0x4092}, 0x4000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) 5.453431684s ago: executing program 34 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000440)={0x3, 0x1, 0x3, 0x11, 0xc8, &(0x7f0000000900)}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r7, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0xbc, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x75}}}}, [@NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "61e8c6e483576ee50c6b23d3b7"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "372e4126a6d9ab4467a8b4d8c4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4abf0ff51cd543fd102f5574a2"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8040}, 0x40800) syz_usb_connect$uac1(0x5, 0xd7, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0xff, "17b1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa995, 0x6bf1, 0x7f, "379ebd8fd28a4d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x9, "", "ad51"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0xfff7, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "", 'uH'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0xfffc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4ef36361642bc9a4d1f80001dfadb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x5, 0x2f, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x2d, 0x9, 0x0, 0x3}]}, 0x1, [{0x67, &(0x7f0000000300)=@string={0x67, 0x3, "252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2a88195a952b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"}}]}) 3.179738006s ago: executing program 4 (id=600): ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_team\x00', {0xffff}, 0x400}) r0 = syz_usb_connect$cdc_ncm(0x4, 0x8b, &(0x7f0000000040)={{0x12, 0x1, 0x389, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x2, 0x8, 0xb7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "1ae0dcf9"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x96, 0x2, 0x56}, {0x6, 0x24, 0x1a, 0x1, 0x2d}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe, 0xc, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x1, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x4, 0x9, 0x5, 0x10, 0x5}, 0x2a, &(0x7f0000000140)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3b, "20a179aef74943f5d8f7f4dd193c362e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xc, 0x5, 0x8b, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0xa9, &(0x7f0000000180)=@string={0xa9, 0x3, "92827a403f28aa44e49799e6c643de0b5df99bcedeb2802603719387b4721c31f41a3ad8997ff88ad057813f86d1771533964852e3894228b5419fb7ba42d8c3c9e6ddeb9fc8f68c0bf13a39f3b6573c55cdf1a69f9dc19112fdaf06d12d95bfb51a95b041a3cfb898559d5f9c4f9d8a264dc674715f971dff2f4e4cae0f934e8f0ec69581092c14666637056f8f00cb1a396c45927a3b2f53840a5a0e8c1f26a9436a3942ffff"}}]}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x20, 0x2, 0x39, {0x39, 0xd, "f49b0d6a279dfdcb79e8bb6ed023d8161351db910166ad54490d4d1d256a2bbd5d4dcca47e8e13b858f76d91595e302a407d80c23d3b29"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f0000000300)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x9, 0xfc}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x0, 0x81, "21a85a18", "473eead1"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x4, 0x1, 0x0, 0x8, 0x2, 0x8}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x20, 0x8, 0xd3, "6213ace5ffba655bd83991583ec7d84204f8b271570eb0901d9c053b64affa7781252a2db113a50d6bb47cf9ac038a6e6054dd0be21619da299acb21dbd6992456cba4c0e63bad4de84035c93f90445808d7008260eed43eb28685bf2f21d7e7e48f17ead56777535d9c3927b2977181e4bc14a9e726363300ad2254a3f8e5589db94b16c6ffd19e10cd39d137fa711333bd41dcce2ef3cfc2048f5e8f731b48d3639719851d5920e15af6143b213bb743ee87db718cc3c30cd7c5a8bdf52c208b4c7d2f59ea0acd5bfd7945c7ef4cf6f30653"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x0, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x20, 0x4}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0xb, 0x2, "18dc"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "35cb"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0xf}}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x501, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x63, 0x2, 0x3, 0x1, 0x3, 0xfc, {0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0xe5c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x9, 0x8, 0x2, 0x40, 0x4}, 0x23, &(0x7f0000000a00)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x1, 0x9, 0x9f}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "59830f7e9519e50883b9ae452d5e0090"}]}, 0x7, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x813}}, {0x7, &(0x7f0000000a80)=@string={0x7, 0x3, "5694f6abea"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x40f}}, {0x28, &(0x7f0000000bc0)=@string={0x28, 0x3, "6c02f9549741880ee4c50252f1ef63fc0d976f88d8a97ec1252315419307c0d103038d2514d0"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000c80)={0x20, 0x3, 0x89, {0x89, 0x4, "9f39e429c7a14d1513a6838a5606404daf9c67785658448b6873486c006da6d5f23e2e398957d2da2c36ef5f25ccbe41fd29bac030587b8d0f095f4e21ea11d533dcc7731c47227954d6d6d0c536707c488b40f96785f1dc5cff468121c9701f68eaa127fa60fb41093991d2dff124e7d25066c60e4519fd7158f2d205a8c787c7e38dd9e54288"}}, &(0x7f0000000d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000dc0)={0x20, 0x0, 0xc1, "c63bdd0592d03a21bfc7a836219eeac3543c0d8e88db556f6d1f3f3326b07f007845f723892354b6db87722369a0e1631993199ebf5d9289ae9b06980ed24cc20b8a354ab46afc502d96ae733a79a8d42946a782b75701f6826376eb4bd7c68245f8d92b6855f1539a0b9ad3cdf9edc530c4b1c1a4c058769ce79c566ce414d1f72af582706327bf22f4d7a670136b6e85a8d8f5260cad2bcdb3cbf2b527fbef6a288980e9920328754850626fdb469b7b68f5e04282a5b092d7d9614ff4d8a394"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x80, 0x1c, {0xffff, 0x1, 0x10, 0xc, 0x6, 0xf, 0x400, 0xffffff2c, 0xe9d, 0x506f, 0x4, 0x1}}, &(0x7f0000000f80)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000fc0)={0x20, 0x83, 0x2}, &(0x7f0000001000)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000001040)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001200)={0x14, &(0x7f0000001100)={0x0, 0xb, 0xb6, {0xb6, 0xc, "b3a3bec52628968253aa689678a6461b08cb639972800adbdbdbd13a0ad90af226c5e2f9a495e9385bcc804283b17def3b3590d23a85be6a7b3580d7d79181f0fbc8815fd46631d218fc8bd8e70d258e6b7d9054292a1213e43ba27eaadaf75d5256b74b2fc26c60bb8cc4b92b89157ef842d88e6ba454d871c8829cf32f4eff08c8723cd32e16fd76124679bc79f1aa68331bb9896bce3a6b7b992592e316cad8dfc03175b26e77d0e299c4e376a314ee4644f1"}}, &(0x7f00000011c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000013c0)={0x1c, &(0x7f0000001240)={0x0, 0x14, 0xbb, "7d7f556eecd80efeb6c046dd6c52657535a7329e8f8a89941af729df74fd4512b87163e235a37df2045fdf2ce199445b8c3a62660083c6a846c1729ca12e2224a5cd2160b0082871bfa741562fcddb32bc51e6379005ef23d456773fe224219b9c9eba3247b211fd7abcfe5f161780aea0376811b4296c827d0043fcf77413c458e488160c308de5d6623bf1249a8fba2613e98202386a27cfd89bf2985bd91fe78da556c0c0871fb44b53d3219fe009aeb841b226e34c07648b3c"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001380)={0x0, 0x8, 0x1}}) syz_usb_ep_write(r1, 0x0, 0xe9, &(0x7f0000001400)="15b253e3f75a4ab3a4e62dd9974379ac60a5e0dc8f0494188ceec0feeb6d5c42663a6a860a95b44e9f2c94d7d8471a614f4af9b792bcb38033c9ca72e42330e845c53a5ef28e64db32faea94a89a361f5a6ebc37d0a5ca6850e0750a87fd3906c1d90e084d232f19edf0efd621c675b7b08e3f1d7cb81acebcfa4b535829a8253bd2f6759b55f11967ce2cb39e246ff5799adfeee52ed89928f59511ddb5633e464f1549e245a2569a3812e830151305050c0966e5d48874adc3270fe110cd08779b625c40e90951a3d83e4d804c3c7f0555e3d3bd477fe10ea0263db85a0daf319c9c5959bf255dc6") r2 = syz_usb_connect(0x3, 0x2f2, &(0x7f0000001500)={{0x12, 0x1, 0x200, 0x9, 0x1, 0x60, 0xff, 0x5ef, 0x8888, 0x4e60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e0, 0x4, 0xd, 0x81, 0x120, 0x6, [{{0x9, 0x4, 0xdb, 0xc, 0xe, 0xa1, 0xe9, 0x0, 0x14, [], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x8, 0x14, 0xff}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x74, 0xe, 0x7, [@generic={0x29, 0xe, "a87e91bca7cd309ad32ddb3733c80dcc6f4ef845b4358183eeb7ec5dc9d2ae9895fd4ad0ad35e2"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x9, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x5, 0xaf, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9a, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x93, 0x7, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x8, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x9, 0x3, 0x4, [@generic={0x4d, 0x0, "4bbc475a73f0cc8f3dd8db5f74dfb5b665984a2ba3c8ea310841262e25ee2340f68528ac4f0716a876f59ca7074b32a91f0e5cfd6764e35ee501ceaf579b4119783fb1d3a4778c7c5cb8af"}, @generic={0xde, 0x23, "6b0e5dbee902560091f65583648decc461f7335b51e498a42efebcf02a3b9174e58bff7f12c53737dfa0f159e8a7588249cae9a0bd55f40ad3479119eb487db7bad95dbb7112f734075edbb12bdb86e7bcc88113166eec99bccecb81f5773b476995a7195bad4292a5bca170a286b6529fac8abdfcb2397ef2f3156a71c6d362e137a81758fc5b4b4cd1702f18546852aaddcdc3055d5ceb81f349be0ef93e497d9a32b8807343f042ff865bb020029548e2579297622791a986ec40b58cfb65c6ec30989ac0d7ab083bab137ec432079924e87d20b28c2fde1a82b7"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x89, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xf3, 0x10, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x5, 0x5, 0xfa}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0xde, 0x29}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x2, 0xa5, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x48, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x81}]}}]}}, {{0x9, 0x4, 0x76, 0x80, 0x1, 0x27, 0xdd, 0x40, 0x5, [@hid_hid={0x9, 0x21, 0x300, 0xb9, 0x1, {0x22, 0x334}}], [{{0x9, 0x5, 0x5, 0x1, 0x200, 0x6, 0xce, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0xe0, 0xdf, 0x2, 0xd6, 0x19, 0x8b, 0x4, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e1b1d69eed"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7fff, 0xf6c1, 0xf9}, {0x6, 0x24, 0x1a, 0x1ff, 0x20}}], [{{0x9, 0x5, 0x8, 0xc, 0x3ff, 0xfd, 0x8, 0x1, [@generic={0x37, 0x23, "5317b44f036e8bd2e6c909ab5adf75f553ed465acd31a3f3119b55c30aba43d2db02b88b3aead095afd4347bacce6416d15ac99e15"}, @uac_iso={0x7, 0x25, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x2, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x3e, 0x0, 0x0, 0x17, 0x0, 0x1a, 0xf, [@hid_hid={0x9, 0x21, 0x100, 0xfc, 0x1, {0x22, 0x408}}]}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x310, 0x4, 0x6, 0xa3, 0xff, 0x5}, 0x38, &(0x7f0000001840)={0x5, 0xf, 0x38, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xff, 0x4, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x0, 0x1d}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e1c17da8c49830972c6c4fac946266ae"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xe, 0x2, 0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4d, &(0x7f0000001880)=@string={0x4d, 0x3, "a2985ad5636c2a85fe949a46412e175c74f01c75b865ec5717202bb60cb37fbc6f2e4c5c843ea836edec749414751442be824a7e8056d5185f668e96b726e3f7f0bc03b4e074ecb23ef696"}}, {0xd9, &(0x7f0000001900)=@string={0xd9, 0x3, "aebd5c37585be31069b684200a09887346ccdd72a306326e1ff5453d90e15d3f890bcc6e50e6e0b7cb627e22738eb9d664b6e95d3592febdb531c43dd0133b8cf4e4adaa155339f7218596e81a242a31a787f4cf65162427821d04873eaaea2dd00d806a33bf4274266c831e706f803722fbab2f8cf8e1576c51348555eff00cf45d4ce0d8e0ee7dd4d3b7d143e52f097bab623942874cc4a1e850ad09c89412fd44efece9909f39e670e9b26bc26f8ad55a7df7a8d0d1e3964fb8c8f62bbd75e726be62a694e230a55d4c4cf3891eddb8682185019a82"}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x74, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x74}}, 0x40400c1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c00), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x30, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x240440c4}, 0x4800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x70, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x44005}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000002240)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002200)={&(0x7f0000001f40)={0x290, r7, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x258, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x80}, @broadcast, @device_a, @initial, {0x0, 0x7}}, 0x2a00, 0x4, @device_a, {0x0, 0x2, @random="2ade"}, @val={0x1, 0x3, [{0x24, 0x1}, {0xa, 0x1}, {0x48, 0x1}]}, @void, [{0xdd, 0xaa, "b5e7237480b8e69c4bfe6bc8c4abbc0996429fb9c1168a73887cb75a56c930096d5092364fb210fe1362895be7febd1e3b678b3c85cb1875a43b0ca552c2f00fe066ff8d366bd895a6243d9c3de9bb73ae26a30e4350e370f82e0cdbea9ad3204a8b08c89dc530690cd72638d86798f91630c9ac99c2206501bb20fc4b176d980b0675aca1db165b18f43b04ff2a0a4eaae3a7d115826dc7169d9784a59b34fb2a029c227bc16da589ac"}, {0xdd, 0x27, "adca01f3a096adfe15783ccac12739fbe4db736c6d6b641de7d611578d51ac2aa204ffd40531ce"}, {0xdd, 0x75, "ea363d30556ae385167d5deb961c0c969bd84492ce7e4f71963a69cae84039ffccf710b65a75c2f499f3ae6f4026aa88042645cf6a3c44c73511b5b4df1febbb9b2a1d4e3bf19edf1ef1bd9965bce1cdf46fa428b8cd51b16953d4038420b8ce265cea45be3ba30c824168c330f9bcc0e5e2374971"}, {0xdd, 0xdb, "604dc2da1b4ddb9cab143dfe70fa123a1b381805f8c6b0684e4ae238ab30e1f8cba3a7db56465e0cb945fc49e40e4619ab14049f943ddf65306a4185b7498b65475d8f64122fdb5eee1f2cc18b490aa5e39bbf6f130ee960a56f2a84b90dec9ec2ef6d01a060f0f9f6391dbf31e0d13ca3253676d5c3e61512afa79dfd4e399f438e0bfb3126d35b6d7d4fa5fd8a5cc4541dc1b226383fb7dd513f91254852a4699ddf374a32ff441481cc355c219643c33b9620c816b72fadb22dca24bcbb7963decffc52697e74bf1a8013a99c16d5f04358430c2a6a10d09401"}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_usb_control_io$hid(r2, &(0x7f0000002380)={0x24, &(0x7f0000002280)={0x20, 0x10, 0x3a, {0x3a, 0x22, "4771375bd33478e8aa7f06c21bb71bd15ed8d1c70e5024f0ca013d8e7461eb661b35dd2b08565c1f1bcf5731e3cb645412a040255f55540a"}}, &(0x7f00000022c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000002300)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xb, "5cc9fe75"}, @main=@item_4={0x3, 0x0, 0x0, "5a58d47c"}, @global=@item_012={0x1, 0x1, 0x9, 'Y'}]}}, &(0x7f0000002340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x251}}}}, &(0x7f0000002600)={0x2c, &(0x7f00000023c0)={0x40, 0xf, 0xcb, "3d2f7361b953a52894ab6f38c593c7a8a606ce7ae9c337c07d4dcf6c3902b20b9fa4cdc17532590aeb973764d2441ede8ef4f96fda67c508982fe6d04a341939408fcb4c6c2c3e4ba116aaf67526de6c6254470ec556f27b1ff9dd537bb2b8d85e5a92ef6d97423b6bdb6c6682de3da8ecb3056f6ad328a2b16b40d6ec5f1df9d7a44799c8af3a588dc94864fc5056468ed0a205f8bbf760fbd50d8ff83d8ea8dc459495f3ba0ae026cb3e3b1fbafee4d77db90a608e93d5ef4ea6bdd6d039e2203b3741b5e7323c7399e7"}, &(0x7f00000024c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002540)={0x20, 0x1, 0x6f, "21b66c0f369364cb40a53b0c28364f4dabb090294d7cfd71499f01174365deb224df5673831feffd14b5595387ed747a032f3aaf16e7786b2c4ea022459dafcd78472fa7d8a1b1094c76f8fea2d1245f403c3c6dd963a30496ddeb80a6122b468fbd6ddaa70704f4a1a4a00dd7b5ff"}, &(0x7f00000025c0)={0x20, 0x3, 0x1, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002640)={'batadv_slave_1\x00'}) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002680), 0x34b241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000026c0)={'batadv0\x00', 0x2000}) write$cgroup_int(r9, &(0x7f0000002700)=0xff, 0x12) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000002740), 0x200000, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000027c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000028c0)=0xe8) r12 = getegid() chown(&(0x7f0000002780)='./file0\x00', r11, r12) ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f0000002900)=0xb) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000002940)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x90, 0x65, [{{0x9, 0x4, 0x0, 0xbc, 0x1, 0x7, 0x1, 0x1, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x0, 0x10}}]}}}]}}]}}, &(0x7f0000002d00)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x200, 0x6, 0x8, 0x6, 0xff, 0x5}, 0x29, &(0x7f00000029c0)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x60, 0xe8, 0x4, 0x5, 0xfb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xc, 0x3, 0x81}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x0, 0x780, 0x8}]}, 0x6, [{0xa, &(0x7f0000002a00)=@string={0xa, 0x3, "e7a16c392d51149c"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4}}, {0x2c, &(0x7f0000002a80)=@string={0x2c, 0x3, "4fd17b04b07c493613726975c0f6ca3905c1c2afa36eb250782e326bc4e38d90bc90be08d3b19d2d1a35"}}, {0xd2, &(0x7f0000002ac0)=@string={0xd2, 0x3, "b881ef0bb03e9b0b7b81a6f7f1b0d5f0d6306fda3d000565c3fc336a6675018ed6d891e0f4c46ba9320d0c475fc48eafd5d2a0204f529aeab8311bfb0a5ece2c63aa23e0d51a3ad6b5f7a4aa1a332d246e904eaa1e258d71161750fe3e04d1f3b20f9fda0db73955d595ab87cee39a441c1f27a3991dbb250d149ac32dfd6c5ad0a5c19bbad882549c57ac739b4e41811151086b0e2efe2adf2996caff111a72c1f7ee6e8d8f3d11bc6e77c94fb99b5c2fe72558823ad43695e7151cf4d5b6633c3cd119e1a9497aabde14d38de6e7ae"}}, {0xcf, &(0x7f0000002bc0)=@string={0xcf, 0x3, "6381465a0647513f2f4bae78336fab7e78e4f988ffc137dd98a14f0b1d5160b1b30174fb2461aa5eed4472cb67027547c5de5716c8b7cef6f725c8460dd8c26642a30a64c4a8d73af7e754876f14e51f448031a5effe5a7927268fe5216d80ca6303171354c8af74804513ac300f342cb1738de92428cd2c52ed029f70e917dde07e7818cf3630a1b397d97459d03afa2a9502b70c03c2d0922b949d1a9838f716c600c36c27f7ce4f1294438b652dc78bd74b6fe4bfb8561df23d1a0e7645f8a50dd2e71c2c51e352e12bc9b7"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x444}}]}) 1.901906178s ago: executing program 2 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x8862, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r0, &(0x7f0000003300)=0x10000, 0x8) unshare(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=']) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xf) 1.726543191s ago: executing program 4 (id=604): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/106, 0x6a) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000010380)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in=@remote, 0x0, 0xfff9, 0x2000, 0x1, 0x0, 0x0, 0x20, 0x3, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x19000000, 0x6c}, @in6=@private0, {0x0, 0x0, 0x0, 0x20000000000000, 0x1, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000, 0x80000000000}, {0x42000000}, 0x70bd2b, 0xfffffffd, 0xa, 0x0, 0xfe}}, 0xf0}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000002c0)={0x0, &(0x7f0000000340)}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1010, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="402196"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x33, 0x80, 0x3, "3d42e5d3", "4aab69b6"}}, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 1.649730418s ago: executing program 2 (id=605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = dup(r1) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x10142) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@private=0xa010100, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000479000/0x1000)=nil, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) r9 = signalfd(r7, &(0x7f0000000040)={[0x804000000000000]}, 0x8) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00006f5000/0x2000)=nil, &(0x7f000091d000/0x2000)=nil, 0x2000, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x45809000) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x11, 0x4, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) dup(r1) (async) getsockname$packet(r2, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) recvmsg(0xffffffffffffffff, 0x0, 0x10142) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@private=0xa010100, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) munmap(&(0x7f0000479000/0x1000)=nil, 0x1000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) (async) signalfd(r7, &(0x7f0000000040)={[0x804000000000000]}, 0x8) (async) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00006f5000/0x2000)=nil, &(0x7f000091d000/0x2000)=nil, 0x2000, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x45809000) (async) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x11, 0x4, 0xb}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 1.402743037s ago: executing program 2 (id=606): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setfsuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/113, 0x71) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x2, 0x0, &(0x7f0000001100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635004000000f300f00d636808a0d0001ba4300b80b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000440)={{0xeeef0000, 0x8080000, 0xf, 0x7, 0x10, 0x3, 0x9, 0x81, 0x80, 0x4, 0x9, 0x28}, {0x80a0000, 0x8080000, 0x9, 0x7, 0x9, 0x4e, 0x16, 0xf9, 0xe, 0x5, 0x6a, 0x4}, {0xeeee8000, 0x0, 0xb, 0x49, 0xff, 0x81, 0xf7, 0xc, 0x7, 0x3, 0x9, 0x5}, {0x8080000, 0xd000, 0xf, 0x9, 0x1, 0xc, 0xd, 0x9a, 0x6, 0x6, 0x2, 0xa}, {0x3000, 0x6000, 0x4, 0xd5, 0xff, 0x5, 0x7, 0x3, 0xb8, 0x0, 0x6, 0x3}, {0xdddd0000, 0xeeee8000, 0x4, 0x1, 0x58, 0x5, 0x5, 0x9, 0x7, 0x0, 0x4, 0xd9}, {0xd5d70000, 0xffff1000, 0xa, 0xe8, 0x80, 0x3, 0x6, 0x0, 0x4, 0x5, 0x81, 0x1}, {0xffff1000, 0x100000, 0x10, 0xa, 0x7f, 0x9, 0x4, 0x3, 0x9, 0x7, 0x7, 0x9}, {0x8080000, 0x3}, {0xf000, 0x5}, 0x11, 0x0, 0x100000, 0x500251, 0xa, 0x401, 0x1, [0xfff, 0x2, 0x0, 0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setfsuid(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/113, 0x71) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x2, 0x0, &(0x7f0000001100)) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635004000000f300f00d636808a0d0001ba4300b80b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000440)={{0xeeef0000, 0x8080000, 0xf, 0x7, 0x10, 0x3, 0x9, 0x81, 0x80, 0x4, 0x9, 0x28}, {0x80a0000, 0x8080000, 0x9, 0x7, 0x9, 0x4e, 0x16, 0xf9, 0xe, 0x5, 0x6a, 0x4}, {0xeeee8000, 0x0, 0xb, 0x49, 0xff, 0x81, 0xf7, 0xc, 0x7, 0x3, 0x9, 0x5}, {0x8080000, 0xd000, 0xf, 0x9, 0x1, 0xc, 0xd, 0x9a, 0x6, 0x6, 0x2, 0xa}, {0x3000, 0x6000, 0x4, 0xd5, 0xff, 0x5, 0x7, 0x3, 0xb8, 0x0, 0x6, 0x3}, {0xdddd0000, 0xeeee8000, 0x4, 0x1, 0x58, 0x5, 0x5, 0x9, 0x7, 0x0, 0x4, 0xd9}, {0xd5d70000, 0xffff1000, 0xa, 0xe8, 0x80, 0x3, 0x6, 0x0, 0x4, 0x5, 0x81, 0x1}, {0xffff1000, 0x100000, 0x10, 0xa, 0x7f, 0x9, 0x4, 0x3, 0x9, 0x7, 0x7, 0x9}, {0x8080000, 0x3}, {0xf000, 0x5}, 0x11, 0x0, 0x100000, 0x500251, 0xa, 0x401, 0x1, [0xfff, 0x2, 0x0, 0x4]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) (async) 1.401835087s ago: executing program 6 (id=584): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$unix(r0, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/181, 0xb5, 0x1, &(0x7f0000002980)=""/4096, 0x1000}, &(0x7f00000005c0)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000340)=""/229) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x1, 0x11}, @fda={0x66646185, 0x3, 0x2, 0x3b}, @fda={0x66646185, 0x2, 0x0, 0x40}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @register_looper, @exit_looper], 0x1, 0x0, &(0x7f0000000100)="c6"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={0x0, "ccfb74e857c35659a91f50ff18c2ca66"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="59cf"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x14, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001980)={{r0}, 0x0, 0x18, @unused=[0x6, 0x1, 0x4, 0x6], @devid=r3}) 1.271188118s ago: executing program 5 (id=572): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/113, 0x71, 0x2, 0x3c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}], 0x27, 0x0, &(0x7f00000002c0)="e928a895eef41783bbe4f7cccd7c2cc2c82dda72ace7d91a0ce62a87430ce3a5bbf7f904d14e83"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x101, 0x8, 0x2, 0x10000, 0x10, 0xffffffffffffffff}) sched_setscheduler(r2, 0x7, &(0x7f00000003c0)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040090}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40084) r5 = syz_open_dev$usbmon(&(0x7f0000000740), 0x6, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x2c14a) rt_sigqueueinfo(r2, 0x25, &(0x7f0000000780)={0x9, 0xfc1, 0xfffffff8}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x7, &(0x7f0000000840)=[{0x2ee6, 0x3, 0x1, 0x1c22}, {0x2, 0x2, 0x0, 0xc7}, {0x2, 0x6, 0x8, 0x9}, {0xff, 0x0, 0xd5, 0x2}, {0x89, 0x1, 0xf4, 0x4}, {0x10, 0x1, 0x1, 0x80}, {0x80, 0x10, 0x6, 0x47}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x28, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000a40)=0xfffffffd, 0x4) socket(0x3, 0x80000, 0xf753) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d00)=@ethtool_channels={0x3c, 0x7ff, 0x2, 0x3, 0xa86d, 0x3, 0x8, 0x4, 0x1}}) socket(0x1f, 0xa, 0x0) mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0xd9) prlimit64(r2, 0xb, &(0x7f0000000dc0)={0x1000, 0x6}, &(0x7f0000000e00)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x34}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 1.150851727s ago: executing program 2 (id=607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1000}) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r2, 0x1) recvfrom$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.148900028s ago: executing program 6 (id=584): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$unix(r0, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/181, 0xb5, 0x1, &(0x7f0000002980)=""/4096, 0x1000}, &(0x7f00000005c0)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000340)=""/229) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x1, 0x11}, @fda={0x66646185, 0x3, 0x2, 0x3b}, @fda={0x66646185, 0x2, 0x0, 0x40}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @register_looper, @exit_looper], 0x1, 0x0, &(0x7f0000000100)="c6"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={0x0, "ccfb74e857c35659a91f50ff18c2ca66"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="59cf"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x14, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001980)={{r0}, 0x0, 0x18, @unused=[0x6, 0x1, 0x4, 0x6], @devid=r3}) 1.014619908s ago: executing program 5 (id=572): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/113, 0x71, 0x2, 0x3c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}], 0x27, 0x0, &(0x7f00000002c0)="e928a895eef41783bbe4f7cccd7c2cc2c82dda72ace7d91a0ce62a87430ce3a5bbf7f904d14e83"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x101, 0x8, 0x2, 0x10000, 0x10, 0xffffffffffffffff}) sched_setscheduler(r2, 0x7, &(0x7f00000003c0)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040090}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40084) r5 = syz_open_dev$usbmon(&(0x7f0000000740), 0x6, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x2c14a) rt_sigqueueinfo(r2, 0x25, &(0x7f0000000780)={0x9, 0xfc1, 0xfffffff8}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x7, &(0x7f0000000840)=[{0x2ee6, 0x3, 0x1, 0x1c22}, {0x2, 0x2, 0x0, 0xc7}, {0x2, 0x6, 0x8, 0x9}, {0xff, 0x0, 0xd5, 0x2}, {0x89, 0x1, 0xf4, 0x4}, {0x10, 0x1, 0x1, 0x80}, {0x80, 0x10, 0x6, 0x47}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x28, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000a40)=0xfffffffd, 0x4) socket(0x3, 0x80000, 0xf753) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d00)=@ethtool_channels={0x3c, 0x7ff, 0x2, 0x3, 0xa86d, 0x3, 0x8, 0x4, 0x1}}) socket(0x1f, 0xa, 0x0) mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0xd9) prlimit64(r2, 0xb, &(0x7f0000000dc0)={0x1000, 0x6}, &(0x7f0000000e00)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x34}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 898.125148ms ago: executing program 2 (id=608): ftruncate(0xffffffffffffffff, 0x398a0bdb) r0 = add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x7, 0x0, 0x8, r6, 0x8}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x1, r6, 0x8}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000002c0)={0x80}) (async) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffeffe, 0x0, 0x1, r6, 0x8}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x412) (async) keyctl$search(0xa, r1, &(0x7f0000000080)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, r1) (async) r7 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f00000043c0)) (async) recvmmsg(r7, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10000, 0x0) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r8, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x14, 0x7}) (async) close_range(r3, 0xffffffffffffffff, 0x0) 897.287817ms ago: executing program 4 (id=609): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xf648a000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [{0x20, '/proc/diskstats\x00'}, {0x20, '\x00'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '\x00'}], 0xa, "26fb22f52ac5628ea4aab1b62d0d03db0d15522152264c8bbc29d8b7e2737e9f9892381382a2ffc147bf1fdb824ee353691a613b8a2ea26ff48c71147871a4198f6c7f8777a570da321a886355e669389ff21db9dab40a21ba6694245187bec5c5d2e9f05cd52f47f6504c51254c76029dcd53044d620ac1b0208e687ee791281144862b584ebc06e5ca1ed0b00b902ff3ac1ea26d02d78efc70b7df2e3441b095a495ab8e93f963c4ada35ad03ce0b7b9e3760f7e391357e7fb5e927fb1f1c909f113960031"}, 0xf4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xffffffff00000000) write$binfmt_elf32(r2, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x5b, 0x7f, 0xf8, 0x13, 0x800, 0x3, 0x3, 0x1, 0x1fa, 0x38, 0x4f, 0x1, 0x5, 0x20, 0x1, 0x1, 0xe, 0x1}, [{0x3, 0x5, 0x1, 0x0, 0xa, 0x100, 0x7ff, 0xb9b}], "40eb49d49abbd045f073a2f3029ce1be916e109277aa48a92546f7eb05d5be168df64799dbdb26721ab22bb6e83104855698716aee088c386b644ec6f6194b31d9f79346084741f8ab0d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6a2) 894.990278ms ago: executing program 6 (id=584): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$unix(r0, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/181, 0xb5, 0x1, &(0x7f0000002980)=""/4096, 0x1000}, &(0x7f00000005c0)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000340)=""/229) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x1, 0x11}, @fda={0x66646185, 0x3, 0x2, 0x3b}, @fda={0x66646185, 0x2, 0x0, 0x40}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @register_looper, @exit_looper], 0x1, 0x0, &(0x7f0000000100)="c6"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={0x0, "ccfb74e857c35659a91f50ff18c2ca66"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="59cf"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x14, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001980)={{r0}, 0x0, 0x18, @unused=[0x6, 0x1, 0x4, 0x6], @devid=r3}) 762.812459ms ago: executing program 5 (id=572): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/113, 0x71, 0x2, 0x3c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}], 0x27, 0x0, &(0x7f00000002c0)="e928a895eef41783bbe4f7cccd7c2cc2c82dda72ace7d91a0ce62a87430ce3a5bbf7f904d14e83"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x101, 0x8, 0x2, 0x10000, 0x10, 0xffffffffffffffff}) sched_setscheduler(r2, 0x7, &(0x7f00000003c0)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040090}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40084) r5 = syz_open_dev$usbmon(&(0x7f0000000740), 0x6, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x2c14a) rt_sigqueueinfo(r2, 0x25, &(0x7f0000000780)={0x9, 0xfc1, 0xfffffff8}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x7, &(0x7f0000000840)=[{0x2ee6, 0x3, 0x1, 0x1c22}, {0x2, 0x2, 0x0, 0xc7}, {0x2, 0x6, 0x8, 0x9}, {0xff, 0x0, 0xd5, 0x2}, {0x89, 0x1, 0xf4, 0x4}, {0x10, 0x1, 0x1, 0x80}, {0x80, 0x10, 0x6, 0x47}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x28, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000a40)=0xfffffffd, 0x4) socket(0x3, 0x80000, 0xf753) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d00)=@ethtool_channels={0x3c, 0x7ff, 0x2, 0x3, 0xa86d, 0x3, 0x8, 0x4, 0x1}}) socket(0x1f, 0xa, 0x0) mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0xd9) prlimit64(r2, 0xb, &(0x7f0000000dc0)={0x1000, 0x6}, &(0x7f0000000e00)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x34}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 647.131738ms ago: executing program 4 (id=610): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@wr_crn={0x46, 0x20, {0x0, 0xe}}, @rdmsr={0x32, 0x18, {0xbbd}}, @code={0xa, 0x5e, {"66baf80cb80336188aef66bafc0cb08eee440f20c03502000000440f22c00f01cb0f22a643398412002000000f01c536643e3e0f01c9b805000000b9000000000f01d966b80c010f00d80f01d1"}}, @code={0xa, 0x6e, {"c482450c508cb965030000b807000000ba000000000f307a75adb9800000c00f3235010000000f3066ba2100b000ee66baf80cb868add886ef66bafc0ced66baf80cb8be79fb81ef66bafc0cb0b3ee0f20130f20e035000020000f22e0"}}], 0x104}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000140)={0x10200, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r8 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r8, 0x7, r2, &(0x7f0000000180)={0xffffffffffffffff, r2, 0xfffffffd}) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141a03, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r11, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xc, 0x40, 0x9, 0x0, 0x0, 0x9, 0x2, 0x66, 0x0, 0x2000000000d1, 0x10, 0x9, 0x1000], 0x3000, 0xa8340}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f00000000c0)={0x50, 0x2e8ddb3bcc46b91e, r13, {0x7, 0x1f, 0x1, 0x7ab78c4493c52f9b, 0x0, 0xfff, 0x8, 0x0, 0x0, 0x0, 0x20, 0x1000}}, 0x50) r14 = inotify_init() inotify_add_watch(r14, &(0x7f0000000080)='./file0\x00', 0x424) r15 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setreuid(0x0, 0xee00) write$UHID_CREATE(r15, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x6, 0xe57, 0x8, 0x1ff, 0x9}}, 0x120) 644.304848ms ago: executing program 6 (id=584): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$unix(r0, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/181, 0xb5, 0x1, &(0x7f0000002980)=""/4096, 0x1000}, &(0x7f00000005c0)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000340)=""/229) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x1, 0x11}, @fda={0x66646185, 0x3, 0x2, 0x3b}, @fda={0x66646185, 0x2, 0x0, 0x40}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @register_looper, @exit_looper], 0x1, 0x0, &(0x7f0000000100)="c6"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={0x0, "ccfb74e857c35659a91f50ff18c2ca66"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="59cf"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x14, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001980)={{r0}, 0x0, 0x18, @unused=[0x6, 0x1, 0x4, 0x6], @devid=r3}) 504.535909ms ago: executing program 5 (id=572): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/113, 0x71, 0x2, 0x3c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}], 0x27, 0x0, &(0x7f00000002c0)="e928a895eef41783bbe4f7cccd7c2cc2c82dda72ace7d91a0ce62a87430ce3a5bbf7f904d14e83"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x101, 0x8, 0x2, 0x10000, 0x10, 0xffffffffffffffff}) sched_setscheduler(r2, 0x7, &(0x7f00000003c0)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040090}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40084) r5 = syz_open_dev$usbmon(&(0x7f0000000740), 0x6, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x2c14a) rt_sigqueueinfo(r2, 0x25, &(0x7f0000000780)={0x9, 0xfc1, 0xfffffff8}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x7, &(0x7f0000000840)=[{0x2ee6, 0x3, 0x1, 0x1c22}, {0x2, 0x2, 0x0, 0xc7}, {0x2, 0x6, 0x8, 0x9}, {0xff, 0x0, 0xd5, 0x2}, {0x89, 0x1, 0xf4, 0x4}, {0x10, 0x1, 0x1, 0x80}, {0x80, 0x10, 0x6, 0x47}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x28, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000a40)=0xfffffffd, 0x4) socket(0x3, 0x80000, 0xf753) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d00)=@ethtool_channels={0x3c, 0x7ff, 0x2, 0x3, 0xa86d, 0x3, 0x8, 0x4, 0x1}}) socket(0x1f, 0xa, 0x0) mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0xd9) prlimit64(r2, 0xb, &(0x7f0000000dc0)={0x1000, 0x6}, &(0x7f0000000e00)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x34}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 380.988969ms ago: executing program 6 (id=584): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$unix(r0, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/181, 0xb5, 0x1, &(0x7f0000002980)=""/4096, 0x1000}, &(0x7f00000005c0)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000340)=""/229) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x1, 0x11}, @fda={0x66646185, 0x3, 0x2, 0x3b}, @fda={0x66646185, 0x2, 0x0, 0x40}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @register_looper, @exit_looper], 0x1, 0x0, &(0x7f0000000100)="c6"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={0x0, "ccfb74e857c35659a91f50ff18c2ca66"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="59cf"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x14, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001980)={{r0}, 0x0, 0x18, @unused=[0x6, 0x1, 0x4, 0x6], @devid=r3}) 255.936669ms ago: executing program 4 (id=611): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$user(&(0x7f0000002000), &(0x7f0000002040)={'syz', 0x3}, &(0x7f0000002080)="fecb", 0x2, 0xfffffffffffffffe) keyctl$describe(0x6, r2, &(0x7f0000000000)=""/203, 0xcb) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x1c, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e", @generic="15c76bc0"]}, 0x1c}], 0x1}, 0x4000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r3 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r3, 0x0, 0x54, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 255.466259ms ago: executing program 5 (id=572): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/113, 0x71, 0x2, 0x3c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}], 0x27, 0x0, &(0x7f00000002c0)="e928a895eef41783bbe4f7cccd7c2cc2c82dda72ace7d91a0ce62a87430ce3a5bbf7f904d14e83"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x101, 0x8, 0x2, 0x10000, 0x10, 0xffffffffffffffff}) sched_setscheduler(r2, 0x7, &(0x7f00000003c0)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040090}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40084) r5 = syz_open_dev$usbmon(&(0x7f0000000740), 0x6, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x2c14a) rt_sigqueueinfo(r2, 0x25, &(0x7f0000000780)={0x9, 0xfc1, 0xfffffff8}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x7, &(0x7f0000000840)=[{0x2ee6, 0x3, 0x1, 0x1c22}, {0x2, 0x2, 0x0, 0xc7}, {0x2, 0x6, 0x8, 0x9}, {0xff, 0x0, 0xd5, 0x2}, {0x89, 0x1, 0xf4, 0x4}, {0x10, 0x1, 0x1, 0x80}, {0x80, 0x10, 0x6, 0x47}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x28, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000a40)=0xfffffffd, 0x4) socket(0x3, 0x80000, 0xf753) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d00)=@ethtool_channels={0x3c, 0x7ff, 0x2, 0x3, 0xa86d, 0x3, 0x8, 0x4, 0x1}}) socket(0x1f, 0xa, 0x0) mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0xd9) prlimit64(r2, 0xb, &(0x7f0000000dc0)={0x1000, 0x6}, &(0x7f0000000e00)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x34}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 124.50683ms ago: executing program 2 (id=612): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) linkat(r0, &(0x7f00000001c0)='./file1\x00', r0, 0x0, 0x1000) (async) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd0) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async, rerun: 64) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) (rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "c0ff"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r6, 0x0, &(0x7f0000001680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x6b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f3030303030033030303030303030ce22cd9cab3114b73034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x14000, 0x0) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000480)={&(0x7f0000000700)={0x50, 0xffffffffffffffda, 0x16, {0x7, 0x29, 0x0, 0x21, 0x72, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) unshare(0x600) (async) fsync(0xffffffffffffffff) 123.711ms ago: executing program 6 (id=584): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$unix(r0, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/181, 0xb5, 0x1, &(0x7f0000002980)=""/4096, 0x1000}, &(0x7f00000005c0)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000340)=""/229) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x1, 0x11}, @fda={0x66646185, 0x3, 0x2, 0x3b}, @fda={0x66646185, 0x2, 0x0, 0x40}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @register_looper, @exit_looper], 0x1, 0x0, &(0x7f0000000100)="c6"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={0x0, "ccfb74e857c35659a91f50ff18c2ca66"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="59cf"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x14, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000008, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001980)={{r0}, 0x0, 0x18, @unused=[0x6, 0x1, 0x4, 0x6], @devid=r3}) 5.151829ms ago: executing program 4 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e4f, 0x1, 0xb4, 0x103d, 0x200000000008, 0x0, 0x0, 0xfffffffffffffffe, 0x20000000ffffffff, 0x1, 0x40000000005, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) rt_sigaction(0x35, &(0x7f0000000300)={&(0x7f0000000100)="d8ef660f3822b82a640000f341aad9fc45c0fe05460f1cb1000000003ef3a4660fc5eefd660f383fb122000000c46179fafc", 0x0, &(0x7f0000000380)="f0440fb307c4c17dde619ff36547f6af00f07fbec4417ae6b505000000c4a201a6826d12f9b7c4a115f2d1f30501000000660fed750d0f1a5ab23626430fc760b8", {[0x8]}}, &(0x7f00000004c0)={&(0x7f0000000440)="354c6497abf30faef4c4e17c2b1d000000008fe950024e00c481fe70ea008fe978c38e0b6000008ab50e000000440f5c3ccb6743dbe9457200", 0x0, &(0x7f0000000480)="8fe8689f77f67fc4c27920b63536ac668f893090810300000066460fd6d38f0848cffe886b1e6a45dd8307660f2ddfeb646465dc6e46c4637d04a9ffefffff00"}, 0x8, &(0x7f0000000500)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000daab"], 0xf0}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) openat$cgroup_ro(r4, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d80)=ANY=[@ANYBLOB="4c000000140003042cbd7000ffdbdf251eda05074e214e220010000005a5a88de8000000000000020600000082210000f4ffffffff030000", @ANYRES32=0x0, @ANYBLOB="fbffffff7f0000000800000000020000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, 0x0) 0s ago: executing program 5 (id=572): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/113, 0x71, 0x2, 0x3c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}], 0x27, 0x0, &(0x7f00000002c0)="e928a895eef41783bbe4f7cccd7c2cc2c82dda72ace7d91a0ce62a87430ce3a5bbf7f904d14e83"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x101, 0x8, 0x2, 0x10000, 0x10, 0xffffffffffffffff}) sched_setscheduler(r2, 0x7, &(0x7f00000003c0)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040090}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40084) r5 = syz_open_dev$usbmon(&(0x7f0000000740), 0x6, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x2c14a) rt_sigqueueinfo(r2, 0x25, &(0x7f0000000780)={0x9, 0xfc1, 0xfffffff8}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x7, &(0x7f0000000840)=[{0x2ee6, 0x3, 0x1, 0x1c22}, {0x2, 0x2, 0x0, 0xc7}, {0x2, 0x6, 0x8, 0x9}, {0xff, 0x0, 0xd5, 0x2}, {0x89, 0x1, 0xf4, 0x4}, {0x10, 0x1, 0x1, 0x80}, {0x80, 0x10, 0x6, 0x47}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x28, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000a40)=0xfffffffd, 0x4) socket(0x3, 0x80000, 0xf753) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d00)=@ethtool_channels={0x3c, 0x7ff, 0x2, 0x3, 0xa86d, 0x3, 0x8, 0x4, 0x1}}) socket(0x1f, 0xa, 0x0) mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0xd9) prlimit64(r2, 0xb, &(0x7f0000000dc0)={0x1000, 0x6}, &(0x7f0000000e00)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x34}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) kernel console output (not intermixed with test programs): miscuous mode [ 27.137266][ T289] veth1_macvtap: entered promiscuous mode [ 27.151051][ T290] veth0_vlan: entered promiscuous mode [ 27.189407][ T290] veth1_macvtap: entered promiscuous mode [ 27.190100][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.297009][ T342] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.297705][ T342] rust_binder: 4: no such ref 0 [ 27.319042][ T345] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.321258][ T341] rust_binder: Error while translating object. [ 27.336476][ T342] rust_binder: Error while translating object. [ 27.343657][ T341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 27.365893][ T342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 27.384895][ T341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 27.399750][ T342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 27.436563][ T345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.631141][ T386] rust_binder: 17: no such ref 0 [ 27.728296][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.867492][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.107508][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.347460][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.497452][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.644808][ T421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 28.644846][ T421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:19 [ 28.737449][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.877476][ T10] usb usb3-port1: attempt power cycle [ 29.105954][ T433] batadv_slave_1: entered promiscuous mode [ 29.141114][ T433] batadv_slave_1: left promiscuous mode [ 29.192821][ T443] bridge0: entered allmulticast mode [ 29.207551][ T443] bridge0: left allmulticast mode [ 29.217569][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.228034][ T443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.228069][ T443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 29.259051][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.303856][ T452] GUP no longer grows the stack in syz.0.39 (452): 200000005000-200000008000 (200000004000) [ 29.314210][ T452] CPU: 1 UID: 0 PID: 452 Comm: syz.0.39 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 29.314254][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.314279][ T452] Call Trace: [ 29.314287][ T452] [ 29.314298][ T452] __dump_stack+0x21/0x30 [ 29.314339][ T452] dump_stack_lvl+0x10c/0x190 [ 29.314371][ T452] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.314402][ T452] ? futex_lock_pi_atomic+0xdd/0xc70 [ 29.314431][ T452] dump_stack+0x19/0x20 [ 29.314461][ T452] fixup_user_fault+0x63d/0x6d0 [ 29.314486][ T452] fault_in_user_writeable+0x76/0xe0 [ 29.314524][ T452] futex_lock_pi+0x258/0xa10 [ 29.314548][ T452] ? futex_unqueue+0x136/0x160 [ 29.314587][ T452] ? __cfi_futex_lock_pi+0x10/0x10 [ 29.314613][ T452] ? __cfi_futex_wake_mark+0x10/0x10 [ 29.314642][ T452] ? futex_setup_timer+0xb4/0xd0 [ 29.314678][ T452] ? __cfi_futex_wake_mark+0x10/0x10 [ 29.314707][ T452] ? mas_find+0x358/0x5f0 [ 29.314736][ T452] ? __kasan_check_write+0x18/0x20 [ 29.314771][ T452] do_futex+0x25c/0x500 [ 29.314810][ T452] ? __cfi_do_futex+0x10/0x10 [ 29.314847][ T452] ? __vm_munmap+0x2c7/0x370 [ 29.314883][ T452] __se_sys_futex+0x28f/0x300 [ 29.314923][ T452] ? __x64_sys_futex+0x110/0x110 [ 29.314963][ T452] ? __kasan_check_write+0x18/0x20 [ 29.314996][ T452] __x64_sys_futex+0xe9/0x110 [ 29.315035][ T452] x64_sys_call+0x227f/0x2ee0 [ 29.315069][ T452] do_syscall_64+0x58/0xf0 [ 29.315104][ T452] ? clear_bhb_loop+0x50/0xa0 [ 29.315144][ T452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.315173][ T452] RIP: 0033:0x7fb570b8eb69 [ 29.315205][ T452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.315228][ T452] RSP: 002b:00007fb5719f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 29.315266][ T452] RAX: ffffffffffffffda RBX: 00007fb570db5fa0 RCX: 00007fb570b8eb69 [ 29.315288][ T452] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 29.315306][ T452] RBP: 00007fb570c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 29.315326][ T452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.315342][ T452] R13: 0000000000000000 R14: 00007fb570db5fa0 R15: 00007ffe18547948 [ 29.315364][ T452] [ 29.316099][ T452] rust_binder: Error while translating object. [ 29.408540][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.427813][ T452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 29.563027][ T452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:36 [ 29.593942][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 29.593962][ T36] audit: type=1400 audit(1754369815.430:162): avc: denied { bind } for pid=457 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.629146][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.637445][ T36] audit: type=1400 audit(1754369815.430:163): avc: denied { connect } for pid=457 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.660450][ T36] audit: type=1400 audit(1754369815.430:164): avc: denied { nlmsg_write } for pid=457 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 29.681247][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.706357][ T36] audit: type=1400 audit(1754369815.540:165): avc: denied { read } for pid=455 comm="syz.3.40" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.708489][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.730005][ T36] audit: type=1400 audit(1754369815.540:166): avc: denied { open } for pid=455 comm="syz.3.40" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.786574][ T470] /dev/rnullb0: Can't open blockdev [ 29.792114][ T36] audit: type=1400 audit(1754369815.620:167): avc: denied { mounton } for pid=469 comm="syz.0.43" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 29.833155][ T45] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 29.842373][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.851229][ T45] usb 2-1: Product: syz [ 29.855523][ T45] usb 2-1: Manufacturer: syz [ 29.860170][ T45] usb 2-1: SerialNumber: syz [ 29.876505][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.997882][ T10] usb usb3-port1: unable to enumerate USB device [ 30.087459][ T64] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 30.187449][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.259217][ T64] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 30.270252][ T64] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 30.281050][ T64] usb 1-1: config 1 interface 0 has no altsetting 0 [ 30.338674][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.349939][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.359275][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.368663][ T45] usb 4-1: config 0 descriptor?? [ 30.780195][ T36] audit: type=1400 audit(1754369816.620:168): avc: denied { create } for pid=455 comm="syz.3.40" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.801216][ T36] audit: type=1400 audit(1754369816.620:169): avc: denied { map } for pid=455 comm="syz.3.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.825325][ T36] audit: type=1400 audit(1754369816.620:170): avc: denied { read write } for pid=455 comm="syz.3.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.016587][ T36] audit: type=1400 audit(1754369816.850:171): avc: denied { read } for pid=480 comm="syz.2.46" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.076921][ T483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=87 sclass=netlink_route_socket pid=483 comm=syz.2.47 [ 31.347448][ T408] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.477475][ T408] usb 3-1: device descriptor read/64, error -71 [ 31.717677][ T408] usb 3-1: device descriptor read/64, error -71 [ 31.957705][ T408] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 32.087447][ T408] usb 3-1: device descriptor read/64, error -71 [ 32.311594][ T31] usb 2-1: USB disconnect, device number 2 [ 32.327544][ T408] usb 3-1: device descriptor read/64, error -71 [ 32.438886][ T408] usb usb3-port1: attempt power cycle [ 32.548523][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 32.557314][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.568589][ T45] usb 4-1: USB disconnect, device number 2 [ 32.701390][ T495] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 32.708697][ T495] rust_binder: Write failure EINVAL in pid:55 [ 32.777481][ T408] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 32.814490][ T408] usb 3-1: device descriptor read/8, error -71 [ 32.823796][ T506] rust_binder: validate_parent_fixup: new_min_offset=80, sg_entry.length=0 [ 32.823842][ T506] rust_binder: Error while translating object. [ 32.833627][ T506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.841254][ T506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 32.862801][ T64] usb 1-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 32.871334][ T510] rust_binder: Error while translating object. [ 32.881897][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.891271][ T510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.896215][ T510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 32.899497][ T64] usb 1-1: Product: 쑱熬䔉睂ྻꩈẶ셸≖⨚䘆ꠠ럲㫭ᕻ勱ᡋ忢큂Ѝ鯊ﾋ廢멪䏤㯢穊臦壒袮ﶌ䚌㚉蠋랧謰떥꾝롘㈗ួ뵹࡫㉷墈衲쐖䲅氶︮뀆參♃灠荋類 [ 32.911381][ T510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.915267][ T64] usb 1-1: Manufacturer: ⠁ [ 32.945952][ T513] rust_binder: Error while translating object. [ 32.945999][ T513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.946317][ T64] usb 1-1: can't set config #1, error -71 [ 32.953047][ T513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 32.963883][ T408] usb 3-1: device descriptor read/8, error -71 [ 32.987557][ T64] usb 1-1: USB disconnect, device number 2 [ 33.001052][ T514] rust_binder: Error while translating object. [ 33.001108][ T514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 33.010434][ T514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:53 [ 33.077742][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.227436][ T408] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 33.238800][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.249936][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.260166][ T45] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 33.269521][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.278163][ T408] usb 3-1: device descriptor read/8, error -71 [ 33.281177][ T45] usb 4-1: config 0 descriptor?? [ 33.408453][ T408] usb 3-1: device descriptor read/8, error -71 [ 33.527464][ T408] usb usb3-port1: unable to enumerate USB device [ 33.696239][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 33.702980][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.714851][ T45] usb 4-1: USB disconnect, device number 3 [ 34.026305][ T539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.026338][ T539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.329075][ T553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 34.347507][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.507501][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 34.513835][ T31] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 34.524256][ T31] usb 1-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 34.533450][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.543504][ T31] ftdi_sio 1-1:254.0: Ignoring interface reserved for JTAG [ 34.744104][ T64] usb 1-1: USB disconnect, device number 3 [ 34.849034][ T561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=561 comm=syz.1.68 [ 34.861870][ T561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.862082][ T561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.868739][ T561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:82 [ 35.184259][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 35.184280][ T36] audit: type=1400 audit(1754369821.020:190): avc: denied { bind } for pid=565 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 35.254757][ T36] audit: type=1400 audit(1754369821.090:191): avc: denied { getopt } for pid=569 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.747441][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.898552][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.909504][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.919309][ T45] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 35.928395][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.937195][ T45] usb 4-1: config 0 descriptor?? [ 36.071277][ T36] audit: type=1400 audit(1754369821.910:192): avc: denied { setattr } for pid=589 comm="syz.1.78" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 36.099114][ T36] audit: type=1400 audit(1754369821.910:193): avc: denied { setattr } for pid=589 comm="syz.1.78" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.122294][ T36] audit: type=1400 audit(1754369821.950:194): avc: denied { create } for pid=592 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.141606][ T36] audit: type=1400 audit(1754369821.950:195): avc: denied { write } for pid=592 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.143522][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.317434][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 36.323822][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 36.334792][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.344621][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 36.357568][ T31] usb 3-1: New USB device found, idVendor=04d8, idProduct=5011, bcdDevice= 0.00 [ 36.366638][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.367448][ T408] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.383092][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 36.389199][ T31] usb 3-1: config 0 descriptor?? [ 36.394527][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.403197][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 36.411448][ T45] usb 4-1: USB disconnect, device number 4 [ 36.528648][ T408] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 36.539671][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.550817][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.560627][ T408] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 36.574335][ T408] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 36.583600][ T408] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 36.591882][ T408] usb 2-1: Manufacturer: syz [ 36.597417][ T408] usb 2-1: config 0 descriptor?? [ 36.606611][ T588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.615717][ T588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.728191][ T36] audit: type=1400 audit(1754369822.570:196): avc: denied { mounton } for pid=587 comm="syz.2.77" path="/9/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 36.911715][ T36] audit: type=1400 audit(1754369822.750:197): avc: denied { map } for pid=595 comm="syz.3.80" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.952573][ T36] audit: type=1400 audit(1754369822.790:198): avc: denied { read } for pid=597 comm="syz.3.81" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.975432][ T36] audit: type=1400 audit(1754369822.790:199): avc: denied { open } for pid=597 comm="syz.3.81" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.006699][ T408] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 37.014777][ T408] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 37.028668][ T408] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 37.297783][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 37.308252][ T408] usb 2-1: USB disconnect, device number 3 [ 37.317001][ T593] ======================================================= [ 37.317001][ T593] WARNING: The mand mount option has been deprecated and [ 37.317001][ T593] and is ignored by this kernel. Remove the mand [ 37.317001][ T593] option from the mount to silence this warning. [ 37.317001][ T593] ======================================================= [ 37.361660][ T593] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 37.521624][ T618] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.531344][ T618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 37.676918][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.684187][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.690923][ T630] binder: Unknown parameter 'binder' [ 37.777451][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.928699][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.939695][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.949573][ T31] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 37.958688][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.967322][ T31] usb 1-1: config 0 descriptor?? [ 38.266342][ T634] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 38.291576][ T636] /dev/rnullb0: Can't open blockdev [ 38.363306][ T639] rust_binder: 638 RLIMIT_NICE not set [ 38.370360][ T408] rust_binder: 637: removing orphan mapping 0:1048 [ 38.379351][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 38.396552][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.408530][ T31] usb 1-1: USB disconnect, device number 4 [ 38.896386][ T644] 9pnet_fd: Insufficient options for proto=fd [ 38.910121][ T31] usb 3-1: USB disconnect, device number 10 [ 38.920340][ T646] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.167496][ T408] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.317502][ T408] usb 1-1: Using ep0 maxpacket: 8 [ 39.322661][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.327599][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 39.331993][ T408] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 39.345946][ T408] usb 1-1: can't read configurations, error -22 [ 39.457518][ T9] usb 2-1: device descriptor read/64, error -71 [ 39.477517][ T408] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.497466][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 39.503894][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 39.513128][ T31] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 39.522906][ T31] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 39.532677][ T31] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 39.542670][ T31] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 39.552454][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 39.559114][ T31] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 39.568470][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.579191][ T31] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 39.627484][ T408] usb 1-1: Using ep0 maxpacket: 8 [ 39.634191][ T408] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 39.642447][ T408] usb 1-1: can't read configurations, error -22 [ 39.649217][ T408] usb usb1-port1: attempt power cycle [ 39.707493][ T9] usb 2-1: device descriptor read/64, error -71 [ 39.727474][ T632] Bluetooth: hci0: command 0x1003 tx timeout [ 39.727482][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.776471][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.784099][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.791628][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.799395][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.806872][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.814545][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.822009][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.827248][ T648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 39.829647][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.845755][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.853270][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.860853][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.868341][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.875972][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.883537][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.891221][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.898698][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.906229][ T476] hid-generic 0006:000F:0009.0002: unknown main item tag 0x0 [ 39.915176][ T476] hid-generic 0006:000F:0009.0002: hidraw0: VIRTUAL HID v0.06 Device [syz0] on syz0 [ 39.947429][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.955812][ T663] fido_id[663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.987449][ T408] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.004752][ T670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.004791][ T670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 40.017786][ T408] usb 1-1: Using ep0 maxpacket: 8 [ 40.033447][ T31] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 40.033785][ T408] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 40.045909][ T31] usb 3-1: USB disconnect, device number 11 [ 40.055742][ T408] usb 1-1: can't read configurations, error -22 [ 40.107459][ T9] usb 2-1: device descriptor read/64, error -71 [ 40.187490][ T408] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.207896][ T408] usb 1-1: Using ep0 maxpacket: 8 [ 40.214405][ T408] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 40.222607][ T408] usb 1-1: can't read configurations, error -22 [ 40.229177][ T408] usb usb1-port1: unable to enumerate USB device [ 40.357437][ T9] usb 2-1: device descriptor read/64, error -71 [ 40.467570][ T9] usb usb2-port1: attempt power cycle [ 40.757475][ T408] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 40.807443][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.828624][ T9] usb 2-1: device descriptor read/8, error -71 [ 40.860068][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 40.860088][ T36] audit: type=1400 audit(1754369826.700:218): avc: denied { getopt } for pid=674 comm="syz.3.105" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.887920][ T677] netlink: 72 bytes leftover after parsing attributes in process `syz.3.106'. [ 40.888073][ T36] audit: type=1400 audit(1754369826.720:219): avc: denied { write } for pid=676 comm="syz.3.106" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.931072][ T36] audit: type=1400 audit(1754369826.730:220): avc: denied { map } for pid=676 comm="syz.3.106" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.955201][ T408] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.957812][ T36] audit: type=1400 audit(1754369826.760:221): avc: denied { ioctl } for pid=681 comm="syz.3.107" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.966202][ T408] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.000806][ T408] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 41.011505][ T9] usb 2-1: device descriptor read/8, error -71 [ 41.021353][ T408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.034295][ T408] usb 3-1: config 0 descriptor?? [ 41.046728][ T687] 9pnet_fd: Insufficient options for proto=fd [ 41.257416][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.278527][ T9] usb 2-1: device descriptor read/8, error -71 [ 41.409165][ T9] usb 2-1: device descriptor read/8, error -71 [ 41.443370][ T408] usbhid 3-1:0.0: can't add hid device: -71 [ 41.449959][ T408] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 41.459332][ T408] usb 3-1: USB disconnect, device number 12 [ 41.517567][ T9] usb usb2-port1: unable to enumerate USB device [ 41.918886][ T36] audit: type=1400 audit(1754369827.760:222): avc: denied { name_bind } for pid=694 comm="syz.3.110" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.968477][ T36] audit: type=1400 audit(1754369827.810:223): avc: denied { relabelfrom } for pid=697 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.990527][ T36] audit: type=1400 audit(1754369827.810:224): avc: denied { relabelto } for pid=697 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.991993][ T700] 9pnet: p9_errstr2errno: server reported unknown error [ 42.016816][ T36] audit: type=1400 audit(1754369827.850:225): avc: denied { create } for pid=701 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 42.023374][ T700] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 42.120714][ T36] audit: type=1400 audit(1754369827.960:226): avc: denied { read write } for pid=710 comm="syz.3.116" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.150322][ T9] rust_binder: 0: removing orphan mapping 0:40 [ 42.167869][ T709] rust_binder: Error while translating object. [ 42.167911][ T709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 42.168992][ T36] audit: type=1400 audit(1754369827.960:227): avc: denied { open } for pid=710 comm="syz.3.116" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.181350][ T709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 42.247498][ T408] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 42.315020][ T728] rust_binder: Error in use_page_slow: ESRCH [ 42.315040][ T728] rust_binder: use_range failure ESRCH [ 42.321163][ T728] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 42.326662][ T728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.335070][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:112 [ 42.387483][ T408] usb 3-1: device descriptor read/64, error -71 [ 42.418779][ T737] input: syz1 as /devices/virtual/input/input4 [ 42.467479][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.537489][ T476] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.597735][ T9] usb 4-1: device descriptor read/64, error -71 [ 42.638168][ T408] usb 3-1: device descriptor read/64, error -71 [ 42.688554][ T476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.699566][ T476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.707496][ T479] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.709688][ T476] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 42.725978][ T476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.734696][ T476] usb 1-1: config 0 descriptor?? [ 42.847521][ T9] usb 4-1: device descriptor read/64, error -71 [ 42.857568][ T479] usb 2-1: Using ep0 maxpacket: 16 [ 42.864269][ T479] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 42.872070][ T479] usb 2-1: can't read configurations, error -61 [ 42.878398][ T408] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 43.007521][ T479] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 43.015139][ T408] usb 3-1: device descriptor read/64, error -71 [ 43.087651][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.143529][ T476] usbhid 1-1:0.0: can't add hid device: -71 [ 43.149573][ T476] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 43.158662][ T476] usb 1-1: USB disconnect, device number 9 [ 43.167425][ T479] usb 2-1: Using ep0 maxpacket: 16 [ 43.174663][ T479] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 43.182322][ T479] usb 2-1: can't read configurations, error -61 [ 43.188847][ T479] usb usb2-port1: attempt power cycle [ 43.217496][ T9] usb 4-1: device descriptor read/64, error -71 [ 43.257476][ T408] usb 3-1: device descriptor read/64, error -71 [ 43.367653][ T408] usb usb3-port1: attempt power cycle [ 43.457454][ T9] usb 4-1: device descriptor read/64, error -71 [ 43.527555][ T479] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.547831][ T479] usb 2-1: Using ep0 maxpacket: 16 [ 43.554517][ T479] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 43.562444][ T479] usb 2-1: can't read configurations, error -61 [ 43.568963][ T9] usb usb4-port1: attempt power cycle [ 43.697485][ T479] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.707623][ T408] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 43.717876][ T479] usb 2-1: Using ep0 maxpacket: 16 [ 43.724711][ T479] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 43.732701][ T479] usb 2-1: can't read configurations, error -61 [ 43.739320][ T479] usb usb2-port1: unable to enumerate USB device [ 43.746377][ T408] usb 3-1: device descriptor read/8, error -71 [ 43.878645][ T408] usb 3-1: device descriptor read/8, error -71 [ 43.907470][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.928606][ T9] usb 4-1: device descriptor read/8, error -71 [ 44.058491][ T9] usb 4-1: device descriptor read/8, error -71 [ 44.117498][ T408] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 44.138701][ T408] usb 3-1: device descriptor read/8, error -71 [ 44.268843][ T408] usb 3-1: device descriptor read/8, error -71 [ 44.297492][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.318453][ T9] usb 4-1: device descriptor read/8, error -71 [ 44.377598][ T408] usb usb3-port1: unable to enumerate USB device [ 44.448747][ T9] usb 4-1: device descriptor read/8, error -71 [ 44.557708][ T9] usb usb4-port1: unable to enumerate USB device [ 44.567238][ T751] kvm: pic: non byte read [ 44.572126][ T751] kvm: pic: non byte read [ 44.576752][ T751] kvm: pic: level sensitive irq not supported [ 44.576797][ T751] kvm: pic: non byte read [ 44.587761][ T751] kvm: pic: level sensitive irq not supported [ 44.587808][ T751] kvm: pic: non byte read [ 44.598818][ T751] kvm: pic: level sensitive irq not supported [ 44.598880][ T751] kvm: pic: non byte read [ 44.609744][ T751] kvm: pic: level sensitive irq not supported [ 44.609790][ T751] kvm: pic: non byte read [ 44.620662][ T751] kvm: pic: level sensitive irq not supported [ 44.620723][ T751] kvm: pic: non byte read [ 44.631496][ T751] kvm: pic: level sensitive irq not supported [ 44.631547][ T751] kvm: pic: non byte read [ 44.642180][ T751] kvm: pic: level sensitive irq not supported [ 44.642226][ T751] kvm: pic: non byte read [ 44.653011][ T751] kvm: pic: level sensitive irq not supported [ 44.653071][ T751] kvm: pic: non byte read [ 44.653184][ T753] Invalid logical block size (7) [ 44.659548][ T751] kvm: pic: level sensitive irq not supported [ 44.668853][ T751] kvm: pic: level sensitive irq not supported [ 44.775689][ T9] rust_binder: 754: removing orphan mapping 0:4224 [ 44.789910][ T758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.897518][ T759] x_tables: unsorted entry at hook 2 [ 44.923116][ T764] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 44.944651][ T767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.207512][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.368684][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.379735][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.389733][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 45.399030][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.407840][ T9] usb 1-1: config 0 descriptor?? [ 45.590662][ T777] rust_binder: Write failure EFAULT in pid:129 [ 45.607390][ T779] rust_binder: 131: no such ref 1024 [ 45.619101][ T779] rust_binder: Write failure EINVAL in pid:131 [ 45.637434][ T479] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 45.799049][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.810323][ T479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.820647][ T9] hid (null): global environment stack underflow [ 45.827504][ T479] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 45.836693][ T479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.845809][ T9] hid-steam 0003:28DE:1142.0003: global environment stack underflow [ 45.853919][ T9] hid-steam 0003:28DE:1142.0003: item 0 0 1 11 parsing failed [ 45.861643][ T9] hid-steam 0003:28DE:1142.0003: steam_probe:parse of hid interface failed [ 45.870733][ T9] hid-steam 0003:28DE:1142.0003: probe with driver hid-steam failed with error -22 [ 45.880525][ T479] usb 4-1: config 0 descriptor?? [ 45.885578][ T408] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.932865][ T783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.932899][ T783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.962743][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 45.962765][ T36] audit: type=1326 audit(1754369831.800:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.2.141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8cd8eb69 code=0x0 [ 46.023989][ T767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.024161][ T767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137 [ 46.034774][ T9] usb 1-1: USB disconnect, device number 10 [ 46.050263][ T408] usb 2-1: Using ep0 maxpacket: 16 [ 46.056489][ T408] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.074146][ T408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.087556][ T408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.096974][ T408] usb 2-1: SerialNumber: syz [ 46.111389][ T408] hub 2-1:1.0: bad descriptor, ignoring hub [ 46.118499][ T408] hub 2-1:1.0: probe with driver hub failed with error -5 [ 46.297864][ T479] usbhid 4-1:0.0: can't add hid device: -71 [ 46.303875][ T479] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 46.328412][ T479] usb 4-1: USB disconnect, device number 9 [ 46.432196][ T797] Zero length message leads to an empty skb [ 46.587418][ T31] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 46.603066][ T31] usb 2-1: device reset changed ep0 maxpacket size! [ 46.609812][ T36] audit: type=1400 audit(1754369832.450:237): avc: denied { create } for pid=802 comm="syz.2.145" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.630270][ T36] audit: type=1400 audit(1754369832.450:238): avc: denied { link } for pid=802 comm="syz.2.145" name="#9" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.630563][ T31] usb 2-1: USB disconnect, device number 12 [ 46.653155][ T36] audit: type=1400 audit(1754369832.450:239): avc: denied { rename } for pid=802 comm="syz.2.145" name="#a" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.659448][ T804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.683894][ T36] audit: type=1326 audit(1754369832.450:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=802 comm="syz.2.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8cd8eb69 code=0x0 [ 46.803774][ T811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.804450][ T811] fuseblk: Unknown parameter '2R0x0000000000000008' [ 46.819928][ T811] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 46.837020][ T813] raw_sendmsg: syz.3.148 forgot to set AF_INET. Fix it! [ 46.917125][ T36] audit: type=1400 audit(1754369832.750:241): avc: denied { write } for pid=819 comm="syz.3.150" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.939114][ T36] audit: type=1400 audit(1754369832.750:242): avc: denied { remove_name } for pid=819 comm="syz.3.150" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.962438][ T36] audit: type=1400 audit(1754369832.750:243): avc: denied { unlink } for pid=819 comm="syz.3.150" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.987449][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 47.057643][ T828] netlink: 'syz.3.152': attribute type 12 has an invalid length. [ 47.137458][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 47.144684][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 47.153358][ T31] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 47.163878][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.173066][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.188689][ T31] usb 2-1: string descriptor 0 read error: -22 [ 47.195062][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.204441][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.215393][ T31] cdc_ncm 2-1:1.0: skipping garbage [ 47.223978][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 47.231239][ T31] cdc_ncm 2-1:1.0: bind() failure [ 47.232028][ T836] binder: Bad value for 'defcontext' [ 47.310364][ T838] kvm: MWAIT instruction emulated as NOP! [ 47.317099][ T839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 47.326091][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 47.335576][ T36] audit: type=1400 audit(1754369833.170:244): avc: denied { ioctl } for pid=837 comm="syz.3.156" path="socket:[6034]" dev="sockfs" ino=6034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.360242][ T36] audit: type=1400 audit(1754369833.170:245): avc: denied { setopt } for pid=837 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.419456][ T479] usb 2-1: USB disconnect, device number 13 [ 47.711543][ T859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.712112][ T859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.724162][ T859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 47.921195][ T12] bridge_slave_1: left allmulticast mode [ 47.951901][ T12] bridge_slave_1: left promiscuous mode [ 47.958172][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.965982][ T12] bridge_slave_0: left allmulticast mode [ 47.977503][ T12] bridge_slave_0: left promiscuous mode [ 47.983192][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.997452][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.106856][ T887] tmpfs: Unsupported parameter 'mpol' [ 48.115175][ T887] 9pnet: p9_errstr2errno: server reported unknown error [ 48.125753][ T12] veth1_macvtap: left promiscuous mode [ 48.131580][ T12] veth0_vlan: left promiscuous mode [ 48.159726][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 48.171220][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.191425][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.206490][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 48.222674][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 48.232094][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 48.240503][ T9] usb 1-1: Manufacturer: syz [ 48.249407][ T9] usb 1-1: config 0 descriptor?? [ 48.249464][ T883] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.261623][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.268785][ T883] bridge_slave_0: entered allmulticast mode [ 48.275607][ T883] bridge_slave_0: entered promiscuous mode [ 48.284419][ T883] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.291759][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.299258][ T883] bridge_slave_1: entered allmulticast mode [ 48.305819][ T883] bridge_slave_1: entered promiscuous mode [ 48.334174][ T896] tmpfs: Unknown parameter 'vise' [ 48.414946][ T883] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.422086][ T883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.429460][ T883] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.436540][ T883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.460555][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.468383][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.479742][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.486839][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.499727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.503308][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 48.506810][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.529223][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 48.553015][ T9] usb 1-1: USB disconnect, device number 11 [ 48.553017][ T883] veth0_vlan: entered promiscuous mode [ 48.555737][ T911] fuse: Unknown parameter '$' [ 48.568149][ T883] veth1_macvtap: entered promiscuous mode [ 48.617469][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.716051][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 48.716955][ T920] rust_binder: Read failure Err(EFAULT) in pid:79 [ 48.745400][ T922] bpf: Bad value for 'uid' [ 48.758617][ T922] incfs: Error accessing: ./file0. [ 48.767447][ T922] incfs: mount failed -20 [ 48.779162][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 48.797623][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24840, setting to 1024 [ 48.817586][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.827958][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.837017][ T31] usb 2-1: config 0 descriptor?? [ 48.987495][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.065136][ T940] netlink: 'syz.2.187': attribute type 4 has an invalid length. [ 49.073076][ T940] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.187'. [ 49.101888][ T943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.188'. [ 49.137430][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 49.143872][ T9] usb 1-1: config index 0 descriptor too short (expected 49410, got 36) [ 49.152814][ T9] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 49.161842][ T9] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 49.171032][ T9] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 49.181442][ T9] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 49.191427][ T9] usb 1-1: config index 1 descriptor too short (expected 49410, got 36) [ 49.200187][ T9] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 49.209207][ T9] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 49.218715][ T9] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 49.229078][ T9] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 49.240896][ T9] usb 1-1: config index 2 descriptor too short (expected 49410, got 36) [ 49.249394][ T9] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 49.250509][ T31] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 49.260944][ T9] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 49.276043][ T9] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 49.276140][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input7 [ 49.286707][ T9] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 49.309733][ T9] usb 1-1: config index 3 descriptor too short (expected 49410, got 36) [ 49.318522][ T9] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 49.327474][ T9] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 49.336542][ T9] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 49.347445][ T9] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 49.358037][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice= 0.40 [ 49.365449][ T31] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 49.367356][ T9] usb 1-1: New USB device strings: Mfr=16, Product=0, SerialNumber=9 [ 49.367487][ T479] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 49.395166][ T9] usb 1-1: Manufacturer: syz [ 49.400063][ T9] usb 1-1: SerialNumber: syz [ 49.453125][ C1] usb 2-1: input irq status -75 received [ 49.548911][ T479] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.557107][ T479] usb 3-1: not running at top speed; connect to a high speed hub [ 49.565981][ T479] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 49.574267][ T479] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.584743][ T479] usb 3-1: config 0 has no interface number 0 [ 49.590900][ T479] usb 3-1: config 0 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.603945][ T479] usb 3-1: config 0 interface 88 has no altsetting 0 [ 49.612826][ T479] usb 3-1: language id specifier not provided by device, defaulting to English [ 49.627746][ T45] usb 1-1: USB disconnect, device number 12 [ 49.628890][ T479] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 49.650463][ T479] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 49.687467][ T479] usb 3-1: Product: syz [ 49.691777][ T479] usb 3-1: Manufacturer: syz [ 49.696409][ T479] usb 3-1: SerialNumber: syz [ 49.706409][ T479] usb 3-1: config 0 descriptor?? [ 49.860286][ T966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.860498][ T966] rust_binder: 18: no such ref 64 [ 49.918003][ T479] usb 3-1: USB disconnect, device number 17 [ 49.979235][ T970] rust_binder: Error in use_page_slow: ESRCH [ 49.979264][ T970] rust_binder: use_range failure ESRCH [ 49.985354][ T970] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 49.990945][ T970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 49.999091][ T970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 50.391134][ T972] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 50.442258][ T974] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 50.470915][ T981] input: syz1 as /devices/virtual/input/input8 [ 50.861435][ T1002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.861621][ T1002] rust_binder: Error while translating object. [ 50.868218][ T1002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 50.874512][ T1002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:195 [ 51.076332][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 51.076352][ T36] audit: type=1400 audit(1754369836.910:283): avc: denied { shutdown } for pid=1006 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.268446][ T1014] PM: Enabling pm_trace changes system date and time during resume. [ 51.268446][ T1014] PM: Correct system time has to be restored manually after resume. [ 51.401281][ T479] usb 2-1: USB disconnect, device number 14 [ 51.466228][ T1030] binder: Unknown parameter 'context' [ 51.482800][ T36] audit: type=1400 audit(1754369837.320:284): avc: denied { mount } for pid=1020 comm="syz.1.214" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 51.482988][ T1021] overlay: Bad value for 'uuid' [ 51.516129][ T36] audit: type=1400 audit(1754369837.350:285): avc: denied { ioctl } for pid=1020 comm="syz.1.214" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.605019][ T36] audit: type=1326 audit(1754369837.440:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27338eb69 code=0x7fc00000 [ 51.706859][ T36] audit: type=1400 audit(1754369837.540:287): avc: denied { read } for pid=1044 comm="syz.0.219" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.717658][ T476] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 51.829098][ T36] audit: type=1400 audit(1754369837.670:288): avc: denied { listen } for pid=1052 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.829615][ T1053] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 51.849472][ T1053] rust_binder: Error in use_page_slow: EBUSY [ 51.859905][ T1053] rust_binder: use_range failure EBUSY [ 51.865898][ T1053] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 51.871441][ T1053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 51.879238][ T1053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:162 [ 51.898787][ T476] usb 3-1: not running at top speed; connect to a high speed hub [ 51.916440][ T476] usb 3-1: config 1 interface 0 has no altsetting 0 [ 51.925095][ T476] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.934460][ T476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 51.942822][ T476] usb 3-1: Product: 蝢樓啵뮪嶛蟳錂䱻鋼李萵頌容ヹ㥖㣍ᔤⰾ␩願廈㐧渌馋没ꫪﱰ᷼놥ﮜ蒰ಞ碞萹窌ꤕ姬햜슌텗瘒埪㢈薜⒱ꔉ죁캃ኽ婿㽞䋓ஒ䲩벹꟢ᵻ髡拢⭕ﾷ耪顳ᚭ쒚첥떊媇멠ꢞ䣙㶸캦ݺ靂㴶嘄딣⣚䏡Ɐ噷繨騵⦱㨤轳龬ֳ䓰ႈꣀ✲쟡욷⢯ﮭ硎圮플垌ꦊ룵饓売횬앍覾蚣 [ 51.977464][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 51.978813][ T476] usb 3-1: Manufacturer: ㏭ṯ餞埣蜯⡒瘰ⱳ빪Ꮨ觧녳檀┴枷룁 [ 51.995349][ T476] usb 3-1: SerialNumber: syz [ 52.128642][ T9] usb 1-1: config index 0 descriptor too short (expected 55117, got 75) [ 52.137159][ T9] usb 1-1: config 151 has too many interfaces: 79, using maximum allowed: 32 [ 52.146291][ T9] usb 1-1: config 151 has an invalid descriptor of length 143, skipping remainder of the config [ 52.156924][ T9] usb 1-1: config 151 has 0 interfaces, different from the descriptor's value: 79 [ 52.167920][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 52.178977][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.187016][ T9] usb 1-1: Product: syz [ 52.191475][ T9] usb 1-1: Manufacturer: syz [ 52.196190][ T9] usb 1-1: SerialNumber: syz [ 52.228986][ T36] audit: type=1326 audit(1754369838.070:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd27332ad69 code=0x7fc00000 [ 52.253546][ T36] audit: type=1326 audit(1754369838.090:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd27332ae2f code=0x7fc00000 [ 52.277039][ T36] audit: type=1326 audit(1754369838.090:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd27338eb69 code=0x7fc00000 [ 52.394003][ T1066] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 52.401717][ T1066] rust_binder: Write failure EINVAL in pid:35 [ 52.421617][ T476] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 233 proto 3 vid 0x0525 pid 0xA4A8 [ 52.442523][ T1051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.451403][ T476] usb 3-1: USB disconnect, device number 18 [ 52.458620][ T476] usblp0: removed [ 52.531153][ T9] usb 1-1: USB disconnect, device number 13 [ 52.667473][ T479] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.817433][ T479] usb 5-1: Using ep0 maxpacket: 32 [ 52.823794][ T479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.835071][ T479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.845277][ T479] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.854675][ T479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.863558][ T479] usb 5-1: config 0 descriptor?? [ 52.869526][ T479] hub 5-1:0.0: USB hub found [ 53.072728][ T479] hub 5-1:0.0: 1 port detected [ 53.078958][ T1089] overlayfs: failed to resolve './file2': -2 [ 53.093060][ T476] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.111235][ T36] audit: type=1400 audit(1754369838.950:292): avc: denied { read } for pid=1092 comm="syz.2.234" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.116701][ T476] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.204225][ T1102] kvm: kvm [1092]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 53.217811][ T1102] kvm: kvm [1092]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 53.236048][ T1102] kvm_intel: kvm [1092]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 53.247847][ T1102] kvm: kvm [1092]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 53.258537][ T1093] sit0: entered promiscuous mode [ 53.265019][ T1093] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 53.272803][ T1093] netlink: 9 bytes leftover after parsing attributes in process `syz.2.234'. [ 53.404897][ T1111] rust_binder: 136: no such ref 0 [ 53.719139][ T476] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 53.828212][ T1123] netlink: 57 bytes leftover after parsing attributes in process `syz.0.241'. [ 53.877625][ T476] usb 3-1: Using ep0 maxpacket: 8 [ 53.884592][ T476] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 53.886006][ T479] hub 5-1:0.0: activate --> -90 [ 53.894659][ T476] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 53.909205][ T476] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 53.920850][ T476] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.929999][ T476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.938064][ T476] usb 3-1: Product: syz [ 53.942256][ T476] usb 3-1: Manufacturer: syz [ 53.946868][ T476] usb 3-1: SerialNumber: syz [ 54.154014][ T1111] rust_binder: 136: no such ref 3 [ 54.159236][ T1111] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 54.205046][ T1128] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 54.212699][ T1128] rust_binder: Write failure EINVAL in pid:136 [ 54.685903][ T1139] netlink: 104 bytes leftover after parsing attributes in process `syz.0.245'. [ 54.740146][ T1139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.842214][ T1141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 54.918304][ T479] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 54.952255][ T1148] tipc: Started in network mode [ 54.957610][ T1148] tipc: Node identity 7, cluster identity 4711 [ 54.963947][ T1148] tipc: Node number set to 7 [ 54.969682][ T1148] rust_binder: Error while translating object. [ 54.969834][ T1148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 54.976158][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:205 [ 54.986371][ T1149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.500561][ T1175] fuse: Bad value for 'fd' [ 55.577522][ T45] usb 5-1: USB disconnect, device number 2 [ 55.741635][ T1184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 55.741814][ T1184] rust_binder: 1183 RLIMIT_NICE not set [ 55.751481][ T1183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.757184][ T1183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 55.807428][ T475] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.978463][ T1196] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 55.978539][ T1196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.979308][ T475] usb 1-1: Using ep0 maxpacket: 16 [ 55.992482][ T1196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:234 [ 56.001477][ T475] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 56.008677][ T479] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 56.011158][ T475] usb 1-1: config 0 has no interface number 0 [ 56.032951][ T475] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 56.036934][ T479] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.052973][ T475] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 56.077410][ T475] usb 1-1: config 0 interface 41 has no altsetting 0 [ 56.086006][ T475] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 56.104209][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.112542][ T475] usb 1-1: Product: syz [ 56.116954][ T475] usb 1-1: Manufacturer: syz [ 56.121871][ T475] usb 1-1: SerialNumber: syz [ 56.128225][ T475] usb 1-1: config 0 descriptor?? [ 56.133625][ T1177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.141350][ T1177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.349083][ T1177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.356353][ T1177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.466812][ T476] cdc_ncm 3-1:1.0: bind() failure [ 56.473186][ T476] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 56.480372][ T476] cdc_ncm 3-1:1.1: bind() failure [ 56.488793][ T476] usb 3-1: USB disconnect, device number 19 [ 56.512714][ T1205] rust_binder: Failed copying into alloc: EFAULT [ 56.512740][ T1205] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 56.519327][ T1205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.528000][ T1205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:139 [ 56.554467][ T1210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.563809][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 56.574398][ T475] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 56.598732][ T1212] binder: Bad value for 'stats' [ 56.957462][ T476] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 57.007481][ T479] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.107408][ T476] usb 3-1: Using ep0 maxpacket: 32 [ 57.113693][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 57.113712][ T36] audit: type=1400 audit(1754369842.950:304): avc: denied { read } for pid=1224 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.119574][ T476] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.121734][ T1225] rust_binder: pid 1225 performed invalid decrement on ref [ 57.139276][ T476] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.148003][ T479] usb 2-1: device descriptor read/64, error -71 [ 57.155462][ T476] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.167952][ T1225] rust_binder: 64: no such ref 3 [ 57.170517][ T476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.179463][ T1225] rust_binder: Write failure EFAULT in pid:64 [ 57.184141][ T476] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.209687][ T476] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.222838][ T476] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.231931][ T476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.244221][ T476] usb 3-1: config 0 descriptor?? [ 57.417492][ T479] usb 2-1: device descriptor read/64, error -71 [ 57.456595][ T476] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.469724][ T476] usb 3-1: USB disconnect, device number 20 [ 57.476593][ T476] usblp0: removed [ 57.507478][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.631389][ T408] usb 1-1: USB disconnect, device number 14 [ 57.657488][ T479] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 57.667430][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 57.678303][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.689928][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.699667][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.707902][ T45] usb 5-1: SerialNumber: syz [ 57.716746][ T45] hub 5-1:1.0: bad descriptor, ignoring hub [ 57.723127][ T45] hub 5-1:1.0: probe with driver hub failed with error -5 [ 57.807430][ T479] usb 2-1: device descriptor read/64, error -71 [ 57.907415][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 57.965217][ T36] audit: type=1400 audit(1754369843.800:305): avc: denied { ioctl } for pid=1238 comm="syz.0.273" path="uts:[4026532300]" dev="nsfs" ino=4026532300 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.057510][ T479] usb 2-1: device descriptor read/64, error -71 [ 58.077417][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 58.083668][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.093074][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.101814][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.110859][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.120584][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.130308][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.143368][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.152517][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.161203][ T10] usb 3-1: config 0 descriptor?? [ 58.167752][ T479] usb usb2-port1: attempt power cycle [ 58.177489][ T45] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 58.185744][ T45] usb 5-1: device reset changed ep0 maxpacket size! [ 58.193701][ T45] usb 5-1: USB disconnect, device number 3 [ 58.368740][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.382629][ T10] usb 3-1: USB disconnect, device number 21 [ 58.390122][ T10] usblp0: removed [ 58.497462][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.507442][ T479] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 58.528633][ T479] usb 2-1: device descriptor read/8, error -71 [ 58.570581][ T1216] tipc: Enabling of bearer rejected, failed to enable media [ 58.647446][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 58.653968][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.662415][ T45] usb 5-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 58.668619][ T479] usb 2-1: device descriptor read/8, error -71 [ 58.672775][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.688015][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.703233][ T45] usb 5-1: string descriptor 0 read error: -22 [ 58.709617][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.718714][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.730420][ T45] cdc_ncm 5-1:1.0: skipping garbage [ 58.735676][ T45] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 58.742514][ T45] cdc_ncm 5-1:1.0: bind() failure [ 58.917656][ T479] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.929854][ T1230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 58.938519][ T479] usb 2-1: device descriptor read/8, error -71 [ 58.987261][ T10] usb 5-1: USB disconnect, device number 4 [ 59.006046][ T36] audit: type=1400 audit(1754369844.840:306): avc: denied { setopt } for pid=1254 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.025553][ T36] audit: type=1400 audit(1754369844.840:307): avc: denied { map } for pid=1254 comm="syz.4.277" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 59.078455][ T479] usb 2-1: device descriptor read/8, error -71 [ 59.163133][ T1265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.184004][ T1265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.192291][ T479] usb usb2-port1: unable to enumerate USB device [ 59.195119][ T1265] overlayfs: failed to resolve './bus/file0': -2 [ 59.217858][ T1275] input: syz1 as /devices/virtual/input/input10 [ 59.409334][ T1285] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 59.429822][ T1287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 59.597489][ T476] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 59.697430][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 59.757448][ T476] usb 1-1: Using ep0 maxpacket: 16 [ 59.763792][ T476] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.774135][ T476] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.786648][ T476] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.796010][ T476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.804087][ T476] usb 1-1: Product: syz [ 59.808543][ T476] usb 1-1: Manufacturer: syz [ 59.813160][ T476] usb 1-1: SerialNumber: syz [ 59.858575][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.869695][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.880320][ T45] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 59.889532][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.897654][ T36] audit: type=1400 audit(1754369845.730:308): avc: denied { map } for pid=1297 comm="syz.1.290" path="socket:[10055]" dev="sockfs" ino=10055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.942662][ T45] usb 3-1: config 0 descriptor?? [ 60.024075][ T1280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.024340][ T1280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 60.031081][ T1280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:275 [ 60.043888][ T476] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 60.063687][ T476] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 60.073975][ T476] usb 1-1: USB disconnect, device number 15 [ 60.080451][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.237494][ T479] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 60.366690][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 60.373037][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 60.381774][ T45] usb 3-1: USB disconnect, device number 22 [ 60.398841][ T479] usb 2-1: config 235 has an invalid interface number: 71 but max is 1 [ 60.407225][ T479] usb 2-1: config 235 has an invalid descriptor of length 0, skipping remainder of the config [ 60.417627][ T479] usb 2-1: config 235 has 1 interface, different from the descriptor's value: 2 [ 60.426712][ T479] usb 2-1: config 235 has no interface number 0 [ 60.433158][ T479] usb 2-1: config 235 interface 71 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 60.446395][ T479] usb 2-1: config 235 interface 71 has no altsetting 0 [ 60.455011][ T479] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=84.d8 [ 60.464147][ T479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.472541][ T479] usb 2-1: Product: syz [ 60.476725][ T479] usb 2-1: Manufacturer: syz [ 60.481480][ T479] usb 2-1: SerialNumber: syz [ 60.527464][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.564496][ T36] audit: type=1400 audit(1754369846.400:309): avc: denied { remount } for pid=1305 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.688572][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.699766][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.709773][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 60.710469][ T36] audit: type=1400 audit(1754369846.550:310): avc: denied { execute } for pid=1301 comm="syz.1.291" name="file1" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.718918][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.749230][ T1302] process 'syz.1.291' launched './file1' with NULL argv: empty string added [ 60.758645][ T36] audit: type=1400 audit(1754369846.600:311): avc: denied { execute_no_trans } for pid=1301 comm="syz.1.291" path="/76/file1" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.768215][ T10] usb 5-1: config 0 descriptor?? [ 60.830759][ T479] usb 2-1: unknown interface protocol 0xae, assuming v1 [ 60.838066][ T479] usb 2-1: cannot find UAC_HEADER [ 60.846108][ T479] snd-usb-audio 2-1:235.71: probe with driver snd-usb-audio failed with error -22 [ 60.856714][ T479] usb 2-1: USB disconnect, device number 19 [ 60.864443][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:235.71/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.898935][ T36] audit: type=1400 audit(1754369846.740:312): avc: denied { read } for pid=1315 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.069992][ T36] audit: type=1400 audit(1754369846.910:313): avc: denied { read } for pid=1320 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.204488][ T10] wacom 0003:056A:5000.0007: hidraw0: USB HID v0.02 Device [HID 056a:5000] on usb-dummy_hcd.4-1/input0 [ 61.356088][ T476] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.364764][ T476] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 61.412401][ T1304] rust_binder: Failed to allocate buffer. len:184, is_oneway:true [ 61.417243][ T1304] overlayfs: statfs failed on './file0' [ 61.434356][ T10] usb 5-1: USB disconnect, device number 5 [ 61.706164][ T1348] rust_binder: 1344 RLIMIT_NICE not set [ 61.706346][ T1344] rust_binder: Write failure EINVAL in pid:262 [ 61.723740][ T10] rust_binder: 1343: removing orphan mapping 0:40 [ 61.885977][ T1356] 9pnet_fd: Insufficient options for proto=fd [ 61.885976][ T1357] 9pnet_fd: Insufficient options for proto=fd [ 61.967454][ T476] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 61.997618][ T1359] /dev/rnullb0: Can't open blockdev [ 62.033555][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 62.047685][ T227] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 62.056702][ T10] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.127440][ T476] usb 2-1: Using ep0 maxpacket: 16 [ 62.137319][ T476] usb 2-1: config 2 has an invalid interface number: 236 but max is 3 [ 62.146114][ T476] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 62.155033][ T476] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 62.164075][ T476] usb 2-1: config 2 has an invalid interface number: 74 but max is 3 [ 62.172661][ T476] usb 2-1: config 2 has an invalid interface number: 50 but max is 3 [ 62.180847][ T476] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 62.194727][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 62.194747][ T36] audit: type=1400 audit(1754369848.030:317): avc: denied { create } for pid=1368 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 62.207466][ T476] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 62.229170][ T36] audit: type=1400 audit(1754369848.030:318): avc: denied { write } for pid=1368 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 62.247534][ T476] usb 2-1: config 2 has an invalid interface number: 190 but max is 3 [ 62.267814][ T227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.278885][ T227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.290321][ T476] usb 2-1: config 2 has no interface number 0 [ 62.296438][ T476] usb 2-1: config 2 has no interface number 1 [ 62.306051][ T227] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 62.313296][ T1371] tipc: Enabling of bearer rejected, failed to enable media [ 62.317408][ T476] usb 2-1: config 2 has no interface number 2 [ 62.330263][ T227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.346954][ T476] usb 2-1: config 2 has no interface number 3 [ 62.353381][ T227] usb 3-1: config 0 descriptor?? [ 62.358487][ T476] usb 2-1: config 2 interface 236 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 62.370652][ T476] usb 2-1: config 2 interface 236 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 62.381461][ T476] usb 2-1: config 2 interface 236 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 62.392598][ T476] usb 2-1: config 2 interface 236 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 62.408153][ T476] usb 2-1: config 2 interface 236 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 62.419859][ T476] usb 2-1: config 2 interface 236 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 62.430828][ T476] usb 2-1: config 2 interface 236 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 62.459219][ T476] usb 2-1: config 2 interface 236 altsetting 7 bulk endpoint 0x2 has invalid maxpacket 1023 [ 62.476241][ T476] usb 2-1: config 2 interface 236 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 62.487291][ T476] usb 2-1: config 2 interface 236 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 62.498675][ T476] usb 2-1: config 2 interface 236 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 62.510331][ T1386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.510825][ T476] usb 2-1: config 2 interface 236 altsetting 7 endpoint 0x87 has invalid maxpacket 8237, setting to 64 [ 62.528601][ T476] usb 2-1: config 2 interface 236 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 62.541996][ T476] usb 2-1: config 2 interface 74 altsetting 53 has a duplicate endpoint with address 0x3, skipping [ 62.552770][ T476] usb 2-1: config 2 interface 74 altsetting 53 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 62.564092][ T476] usb 2-1: config 2 interface 50 altsetting 81 has an invalid descriptor for endpoint zero, skipping [ 62.576837][ T476] usb 2-1: config 2 interface 50 altsetting 81 has a duplicate endpoint with address 0x7, skipping [ 62.587642][ T476] usb 2-1: config 2 interface 50 altsetting 81 has a duplicate endpoint with address 0xD, skipping [ 62.598636][ T476] usb 2-1: config 2 interface 50 altsetting 81 has a duplicate endpoint with address 0xC, skipping [ 62.609428][ T476] usb 2-1: config 2 interface 190 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 62.620204][ T476] usb 2-1: config 2 interface 190 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 62.631130][ T476] usb 2-1: config 2 interface 190 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 62.642081][ T476] usb 2-1: config 2 interface 190 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 62.653023][ T476] usb 2-1: config 2 interface 190 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 62.663943][ T476] usb 2-1: config 2 interface 190 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 62.674700][ T476] usb 2-1: config 2 interface 190 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 62.685762][ T476] usb 2-1: config 2 interface 190 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 62.696721][ T476] usb 2-1: config 2 interface 236 has no altsetting 0 [ 62.703553][ T476] usb 2-1: config 2 interface 74 has no altsetting 0 [ 62.710487][ T476] usb 2-1: config 2 interface 50 has no altsetting 0 [ 62.717217][ T476] usb 2-1: config 2 interface 190 has no altsetting 0 [ 62.725757][ T476] usb 2-1: Dual-Role OTG device on HNP port [ 62.732205][ T476] usb 2-1: New USB device found, idVendor=2001, idProduct=3c1f, bcdDevice=86.5a [ 62.741635][ T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.749943][ T476] usb 2-1: Product: Ў [ 62.754202][ T476] usb 2-1: Manufacturer: 䐊 [ 62.759189][ T476] usb 2-1: SerialNumber: ᠁ [ 62.768180][ T1350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.775681][ T1350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.785041][ T227] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 62.792740][ T227] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 62.801668][ T1350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.809227][ T227] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 62.817203][ T227] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 62.824944][ T227] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 62.833357][ T227] steelseries 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 62.983607][ T227] steelseries 0003:1038:12B6.000A: hid_hw_raw_request() failed with -71 [ 62.994121][ T227] usb 3-1: USB disconnect, device number 23 [ 63.018555][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.027572][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.046154][ T476] usb 2-1: USB disconnect, device number 20 [ 63.527119][ T476] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 63.545950][ T476] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.847484][ T227] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 63.882733][ T36] audit: type=1400 audit(1754369849.720:319): avc: denied { connect } for pid=1418 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.902686][ T36] audit: type=1400 audit(1754369849.730:320): avc: denied { write } for pid=1418 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.951919][ T1422] binder: Bad value for 'stats' [ 63.974730][ T1422] binder: Bad value for 'stats' [ 64.012807][ T227] usb 2-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 64.029120][ T227] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 64.040706][ T227] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 24692, setting to 1024 [ 64.052480][ T36] audit: type=1400 audit(1754369849.890:321): avc: denied { read write } for pid=1426 comm="syz.2.326" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.077290][ T227] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.104596][ T36] audit: type=1400 audit(1754369849.890:322): avc: denied { open } for pid=1426 comm="syz.2.326" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.107178][ T1431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.130389][ T227] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.148243][ T36] audit: type=1326 audit(1754369849.940:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1430 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8cd8eb69 code=0x7ffc0000 [ 64.172027][ T227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.173580][ T36] audit: type=1326 audit(1754369849.940:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1430 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c8cd8eb69 code=0x7ffc0000 [ 64.180073][ T227] usb 2-1: Product: syz [ 64.180093][ T227] usb 2-1: Manufacturer: syz [ 64.209324][ T36] audit: type=1326 audit(1754369849.940:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1430 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8cd8eb69 code=0x7ffc0000 [ 64.218176][ T227] usb 2-1: SerialNumber: syz [ 64.238792][ T36] audit: type=1326 audit(1754369849.940:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1430 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c8cd8eb69 code=0x7ffc0000 [ 64.297230][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.303875][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.352858][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 64.368058][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.429312][ T1449] rust_binder: Write failure EFAULT in pid:333 [ 64.512074][ T1457] fuse: Unknown parameter '' [ 64.528127][ T1457] 9pnet_fd: Insufficient options for proto=fd [ 64.574695][ T1462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.629061][ T1468] KVM: debugfs: duplicate directory 1468-6 [ 64.817953][ T1479] netlink: 680 bytes leftover after parsing attributes in process `syz.2.341'. [ 64.843982][ T1481] input: syz1 as /devices/virtual/input/input14 [ 64.888629][ T476] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 64.901373][ T476] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.257525][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 65.276253][ T1404] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 65.284766][ T1404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.293416][ T1404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.302178][ T227] cdc_ncm 2-1:1.0: bind() failure [ 65.312268][ T227] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 65.321061][ T227] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 65.331599][ T227] usb 2-1: USB disconnect, device number 21 [ 65.432062][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 65.447407][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 65.455564][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 65.464758][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.472814][ T9] usb 1-1: Product: syz [ 65.477000][ T9] usb 1-1: Manufacturer: syz [ 65.482417][ T9] usb 1-1: SerialNumber: syz [ 65.928640][ T1503] rust_binder: Error while translating object. [ 65.928701][ T1503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 65.935374][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 65.955786][ T1503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 66.049036][ T1505] KVM: debugfs: duplicate directory 1505-6 [ 66.226329][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 66.237609][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.261076][ T10] usb 1-1: USB disconnect, device number 16 [ 66.273890][ T10] usblp0: removed [ 66.357436][ T632] Bluetooth: hci0: command 0x1003 tx timeout [ 66.358633][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.470542][ T1529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.470774][ T1529] rust_binder: Failed copying remainder into alloc: EFAULT [ 66.477523][ T1529] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 66.486573][ T1529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 66.495462][ T1529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:114 [ 66.589272][ T1534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1534 comm=syz.2.357 [ 66.627413][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 66.777433][ T9] usb 2-1: device descriptor read/64, error -71 [ 66.811728][ T479] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 66.828393][ T479] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.965373][ T1553] /dev/rnullb0: Can't open blockdev [ 67.017416][ T9] usb 2-1: device descriptor read/64, error -71 [ 67.267430][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 67.407411][ T9] usb 2-1: device descriptor read/64, error -71 [ 67.474251][ T1577] rust_binder: 1572 RLIMIT_NICE not set [ 67.474484][ T1572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.480223][ T1572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 67.504347][ T227] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 67.527021][ T227] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.647519][ T9] usb 2-1: device descriptor read/64, error -71 [ 67.692902][ T1590] binder: Bad value for 'max' [ 67.698601][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 67.698619][ T36] audit: type=1400 audit(1754369853.540:344): avc: denied { getattr } for pid=1589 comm="syz.2.375" path="socket:[13134]" dev="sockfs" ino=13134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.699148][ T1590] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 4224, size: 18446744073709551614) [ 67.733222][ T1590] rust_binder: Error while translating object. [ 67.745766][ T1590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.752235][ T1590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242 [ 67.762213][ T9] usb usb2-port1: attempt power cycle [ 67.780000][ T1594] overlayfs: conflicting options: userxattr,verity=require [ 67.960268][ T36] audit: type=1400 audit(1754369853.800:345): avc: denied { shutdown } for pid=1597 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.037505][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 68.117432][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 68.138445][ T9] usb 2-1: device descriptor read/8, error -71 [ 68.187426][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 68.193894][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.205241][ T10] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 68.214447][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.223530][ T10] usb 3-1: config 0 descriptor?? [ 68.268449][ T9] usb 2-1: device descriptor read/8, error -71 [ 68.438065][ T10] belkin 0003:1020:0006.0011: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 68.462988][ T10] usb 3-1: USB disconnect, device number 24 [ 68.500140][ T36] audit: type=1400 audit(1754369854.340:346): avc: denied { map } for pid=1609 comm="syz.2.382" path="pipe:[11945]" dev="pipefs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 68.527512][ T227] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 68.533216][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 68.539478][ T36] audit: type=1400 audit(1754369854.370:347): avc: denied { listen } for pid=1609 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.568453][ T9] usb 2-1: device descriptor read/8, error -71 [ 68.678502][ T227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.689634][ T227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.698492][ T9] usb 2-1: device descriptor read/8, error -71 [ 68.699557][ T227] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 68.715953][ T227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.729171][ T227] usb 1-1: config 0 descriptor?? [ 68.809212][ T9] usb usb2-port1: unable to enumerate USB device [ 68.888387][ T476] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 68.906862][ T476] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.145241][ T227] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 69.152830][ T227] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 69.160698][ T227] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 69.168449][ T227] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 69.176199][ T227] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 69.183924][ T227] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 69.191654][ T227] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 69.200763][ T227] steelseries 0003:1038:12B6.0013: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 69.360993][ T227] steelseries 0003:1038:12B6.0013: hid_hw_raw_request() failed with -71 [ 69.371043][ T227] usb 1-1: USB disconnect, device number 17 [ 69.787478][ T408] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 69.830210][ T1626] netlink: 'syz.4.387': attribute type 3 has an invalid length. [ 69.838116][ T1626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 69.863725][ T1629] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 69.863769][ T1629] rust_binder: Error while translating object. [ 69.872640][ T1629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.879111][ T1629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 69.958828][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 69.978448][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 102, changing to 7 [ 69.989631][ T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24624, setting to 1024 [ 70.002203][ T408] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.011452][ T408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.019847][ T408] usb 2-1: Product: syz [ 70.024039][ T408] usb 2-1: Manufacturer: syz [ 70.028683][ T408] usb 2-1: SerialNumber: syz [ 70.034096][ T408] usb 2-1: config 0 descriptor?? [ 70.041448][ T408] usb 2-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 66 [ 70.085495][ T1641] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.127593][ T36] audit: type=1400 audit(1754369855.960:348): avc: denied { getopt } for pid=1646 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.150470][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 70.176324][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.241256][ T36] audit: type=1400 audit(1754369856.080:349): avc: denied { read } for pid=1623 comm="syz.1.386" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.277535][ T36] audit: type=1400 audit(1754369856.080:350): avc: denied { open } for pid=1623 comm="syz.1.386" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.292380][ T1660] rust_binder: Write failure EFAULT in pid:288 [ 70.377664][ T408] usb 2-1: USB disconnect, device number 26 [ 70.408293][ T1663] overlay: ./file0 is not a directory [ 70.416443][ T1068] udevd[1068]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.592128][ T1680] netlink: 84 bytes leftover after parsing attributes in process `syz.2.404'. [ 70.736534][ T1690] fuse: Bad value for 'fd' [ 70.741639][ T36] audit: type=1400 audit(1754369856.580:351): avc: denied { watch } for pid=1689 comm="syz.2.408" path="/94/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.137493][ T408] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 71.287458][ T408] usb 2-1: Using ep0 maxpacket: 16 [ 71.293791][ T408] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.302688][ T408] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 71.313025][ T408] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.323988][ T408] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.333263][ T408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.341356][ T408] usb 2-1: Product: syz [ 71.345548][ T408] usb 2-1: Manufacturer: syz [ 71.350717][ T408] usb 2-1: SerialNumber: syz [ 71.452718][ T36] audit: type=1400 audit(1754369857.290:352): avc: denied { lock } for pid=1700 comm="syz.2.412" path="socket:[12171]" dev="sockfs" ino=12171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.487584][ T36] audit: type=1326 audit(1754369857.330:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.2.413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8cd8eb69 code=0x0 [ 71.763142][ T408] usb 2-1: 0:2 : does not exist [ 71.772242][ T408] usb 2-1: USB disconnect, device number 27 [ 71.782447][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.278868][ T1707] tc_dump_action: action bad kind [ 72.435269][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 72.577453][ T227] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 72.586889][ T1728] mmap: syz.2.423 (1728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.737427][ T227] usb 2-1: Using ep0 maxpacket: 8 [ 72.744530][ T227] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.753767][ T227] usb 2-1: config 1 has no interface number 1 [ 72.760147][ T227] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 72.773013][ T227] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 72.785834][ T227] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.794962][ T227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.803020][ T227] usb 2-1: Product: syz [ 72.807181][ T227] usb 2-1: Manufacturer: syz [ 72.811833][ T227] usb 2-1: SerialNumber: syz [ 73.098976][ T1740] netlink: 'syz.4.428': attribute type 4 has an invalid length. [ 73.106797][ T1740] netlink: 'syz.4.428': attribute type 27 has an invalid length. [ 73.114662][ T1740] netlink: 3609 bytes leftover after parsing attributes in process `syz.4.428'. [ 73.156574][ T36] audit: type=1400 audit(1754369858.990:354): avc: denied { bind } for pid=1741 comm="syz.0.429" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.177546][ T36] audit: type=1400 audit(1754369858.990:355): avc: denied { node_bind } for pid=1741 comm="syz.0.429" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.363670][ T1757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.404073][ T1763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 73.667450][ T475] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 73.817439][ T475] usb 1-1: Using ep0 maxpacket: 32 [ 73.824243][ T475] usb 1-1: config 0 has no interfaces? [ 73.831354][ T475] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 73.840562][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.848644][ T475] usb 1-1: Product: syz [ 73.852893][ T475] usb 1-1: Manufacturer: syz [ 73.857555][ T475] usb 1-1: SerialNumber: syz [ 73.862967][ T475] usb 1-1: config 0 descriptor?? [ 73.966659][ T1772] /dev/rnullb0: Can't open blockdev [ 73.976886][ T1772] x_tables: unsorted underflow at hook 3 [ 73.984532][ T36] audit: type=1400 audit(1754369859.820:356): avc: denied { remount } for pid=1771 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.109181][ T1785] rust_binder: 161: no such ref 2 [ 74.114442][ T1785] rust_binder: 161: no such ref 3 [ 74.123227][ T1764] rust_binder: Error in use_page_slow: ESRCH [ 74.123255][ T1764] rust_binder: use_range failure ESRCH [ 74.129493][ T1764] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 74.135004][ T1764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.143245][ T1764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:413 [ 74.894395][ T1812] veth0_to_hsr: entered allmulticast mode [ 74.910042][ T1811] veth0_to_hsr: left allmulticast mode [ 75.137441][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.288586][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 75.297799][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.306969][ T10] usb 5-1: config 0 descriptor?? [ 75.313316][ T10] usb 5-1: selecting invalid altsetting 1 [ 75.321077][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 75.338639][ T1068] udevd[1068]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.441813][ T1820] netlink: 104 bytes leftover after parsing attributes in process `syz.2.457'. [ 75.466707][ T1823] syz.2.458 uses obsolete (PF_INET,SOCK_PACKET) [ 75.487817][ T36] audit: type=1400 audit(1754369861.330:357): avc: denied { mount } for pid=1825 comm="syz.2.459" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 75.516410][ T10] usb 5-1: USB disconnect, device number 7 [ 76.352518][ T1840] rust_binder: 174: no such ref 2 [ 76.380580][ T408] usb 1-1: USB disconnect, device number 18 [ 76.586456][ T1855] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 76.593911][ T1855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 76.857466][ T1299] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 77.019395][ T1299] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.032389][ T1299] usb 1-1: config 1 interface 0 has no altsetting 0 [ 77.040627][ T1299] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.050036][ T1299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.058342][ T1299] usb 1-1: Product: syz [ 77.062561][ T1299] usb 1-1: Manufacturer: 叛ﷲ [ 77.067480][ T1299] usb 1-1: SerialNumber: syz [ 77.073202][ T1857] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 77.284506][ T36] audit: type=1400 audit(1754369863.120:358): avc: denied { setattr } for pid=1856 comm="syz.0.470" path="socket:[14659]" dev="sockfs" ino=14659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.310104][ T1299] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 77.313343][ T1859] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 77.320974][ T1299] usb 1-1: USB disconnect, device number 19 [ 77.884595][ T1869] netlink: 'syz.0.473': attribute type 3 has an invalid length. [ 77.901545][ T227] usb 2-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 78.018959][ T1876] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.018984][ T1876] rust_binder: Read failure Err(EFAULT) in pid:191 [ 78.027266][ T1876] rust_binder: Failed to allocate buffer. len:4592, is_oneway:false [ 78.723452][ T1886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 78.732232][ T1886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:197 [ 79.147483][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 79.306445][ T1894] rust_binder: 1893 RLIMIT_NICE not set [ 79.311878][ T479] rust_binder: 1892: removing orphan mapping 0:4240 [ 79.324862][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.336004][ T10] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 79.341117][ T1896] KVM: debugfs: duplicate directory 1896-5 [ 79.347631][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 108 [ 79.363615][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.372801][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.384522][ T1888] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.568152][ T1900] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.568182][ T1900] rust_binder: Read failure Err(EFAULT) in pid:204 [ 79.603807][ T1884] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 79.610976][ T1884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 79.619652][ T1884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:436 [ 79.630609][ T227] usb 1-1: USB disconnect, device number 20 [ 79.724117][ T1907] kvm: user requested TSC rate below hardware speed [ 79.732167][ T36] audit: type=1400 audit(1754369865.570:359): avc: denied { watch_reads } for pid=1906 comm="syz.4.488" path="/71/file0" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.037508][ T476] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 80.188535][ T476] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 80.196950][ T476] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.207466][ T476] usb 5-1: config 0 has no interface number 0 [ 80.215280][ T476] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 80.224586][ T36] audit: type=1400 audit(1754369866.060:360): avc: denied { map } for pid=1919 comm="syz.0.494" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 80.247837][ T476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.250034][ T36] audit: type=1400 audit(1754369866.060:361): avc: denied { execute } for pid=1919 comm="syz.0.494" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 80.256149][ T476] usb 5-1: Product: syz [ 80.284640][ T476] usb 5-1: Manufacturer: syz [ 80.289887][ T476] usb 5-1: SerialNumber: syz [ 80.297021][ T476] usb 5-1: config 0 descriptor?? [ 80.506358][ T476] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 80.512879][ T476] usb 5-1: No valid video chain found. [ 80.519914][ T476] usb 5-1: USB disconnect, device number 9 [ 80.527554][ T1299] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 80.677457][ T1299] usb 1-1: Using ep0 maxpacket: 16 [ 80.684052][ T1299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.695005][ T1299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.704788][ T1299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.718137][ T1299] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.727309][ T1299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.736234][ T1299] usb 1-1: config 0 descriptor?? [ 80.944242][ T1299] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 80.952476][ T1299] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 80.964117][ T1299] microsoft 0003:045E:07DA.0015: no inputs found [ 80.970719][ T1299] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 81.029467][ T36] audit: type=1400 audit(1754369866.870:362): avc: denied { accept } for pid=1936 comm="syz.2.498" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.110421][ T1952] fuse: Bad value for 'fd' [ 81.148558][ T1299] usb 1-1: USB disconnect, device number 21 [ 81.417425][ T479] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 81.567661][ T479] usb 5-1: Invalid ep0 maxpacket: 64 [ 81.602507][ T36] audit: type=1400 audit(1754369867.440:363): avc: denied { read } for pid=1975 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.698236][ T479] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 81.809128][ T1993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.847429][ T479] usb 5-1: Invalid ep0 maxpacket: 64 [ 81.852985][ T479] usb usb5-port1: attempt power cycle [ 81.910020][ T1996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.910752][ T1996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.917711][ T1996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:466 [ 81.924639][ T1997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.948363][ T2001] tipc: Enabling of bearer rejected, failed to enable media [ 82.197458][ T479] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 82.217936][ T479] usb 5-1: Invalid ep0 maxpacket: 64 [ 82.347512][ T479] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 82.367784][ T479] usb 5-1: Invalid ep0 maxpacket: 64 [ 82.373344][ T479] usb usb5-port1: unable to enumerate USB device [ 82.966889][ T2028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.975713][ T2028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.983934][ T2028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.984274][ T2028] rust_binder: Error in use_page_slow: ESRCH [ 82.990803][ T2028] rust_binder: use_range failure ESRCH [ 82.996874][ T2028] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 83.002433][ T2028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 83.010523][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:488 [ 83.197438][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 83.246150][ T36] audit: type=1400 audit(1754369869.080:364): avc: denied { name_bind } for pid=2029 comm="syz.2.527" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 83.337474][ T10] usb 1-1: device descriptor read/64, error -71 [ 83.577497][ T10] usb 1-1: device descriptor read/64, error -71 [ 83.817440][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 83.947450][ T10] usb 1-1: device descriptor read/64, error -71 [ 84.158202][ T2048] tc_dump_action: action bad kind [ 84.197857][ T10] usb 1-1: device descriptor read/64, error -71 [ 84.206302][ T2054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.283795][ T2059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 84.307593][ T10] usb usb1-port1: attempt power cycle [ 84.587615][ T479] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 84.647437][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 84.668531][ T10] usb 1-1: device descriptor read/8, error -71 [ 84.738623][ T479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.748819][ T479] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.757808][ T479] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.772181][ T479] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.781330][ T479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.789635][ T479] usb 5-1: Product: syz [ 84.793836][ T479] usb 5-1: Manufacturer: syz [ 84.798539][ T479] usb 5-1: SerialNumber: syz [ 84.804207][ T10] usb 1-1: device descriptor read/8, error -71 [ 84.811544][ T479] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 84.818505][ T479] cdc_mbim 5-1:1.0: bind() failure [ 84.990941][ T2075] netlink: 393 bytes leftover after parsing attributes in process `syz.2.542'. [ 85.057402][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 85.066614][ T476] usb 5-1: USB disconnect, device number 14 [ 85.087946][ T10] usb 1-1: device descriptor read/8, error -71 [ 85.123118][ T36] audit: type=1400 audit(1754369870.960:365): avc: denied { wake_alarm } for pid=2082 comm="syz.2.545" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.218592][ T10] usb 1-1: device descriptor read/8, error -71 [ 85.328244][ T10] usb usb1-port1: unable to enumerate USB device [ 85.573075][ T10] rust_binder: 2053: removing orphan mapping 0:1024 [ 85.716186][ T10] rust_binder: 2089: removing orphan mapping 0:1048 [ 85.996178][ T2103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 86.006237][ T2112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.014321][ T36] audit: type=1400 audit(1754369871.850:366): avc: denied { accept } for pid=2102 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.075233][ T36] audit: type=1400 audit(1754369871.910:367): avc: denied { execute } for pid=2122 comm="syz.4.559" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.103902][ T2126] incfs: Error accessing: ./file0. [ 86.119529][ T2126] incfs: mount failed -20 [ 86.128400][ T2126] 9pnet_fd: Insufficient options for proto=fd [ 86.233787][ T10] rust_binder: 0: removing orphan mapping 0:1024 [ 86.247177][ C1] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 86.323747][ T2144] tipc: Started in network mode [ 86.328832][ T2144] tipc: Node identity 7, cluster identity 4711 [ 86.335183][ T2144] tipc: Node number set to 7 [ 86.364865][ T330] bridge_slave_1: left allmulticast mode [ 86.374376][ T330] bridge_slave_1: left promiscuous mode [ 86.383110][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.392216][ T330] bridge_slave_0: left allmulticast mode [ 86.398188][ T330] bridge_slave_0: left promiscuous mode [ 86.404910][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.518790][ T2161] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=2161 comm=syz.2.575 [ 86.532495][ T330] veth1_macvtap: left promiscuous mode [ 86.547463][ T330] veth0_vlan: left promiscuous mode [ 86.747468][ T476] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 86.911641][ T476] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.921933][ T476] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.931148][ T476] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.945996][ T476] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.955473][ T476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.964185][ T476] usb 5-1: Product: syz [ 86.968650][ T476] usb 5-1: Manufacturer: syz [ 86.973309][ T476] usb 5-1: SerialNumber: syz [ 86.990652][ T476] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 86.997600][ T476] cdc_ncm 5-1:1.0: bind() failure [ 87.606464][ T36] audit: type=1400 audit(1754369873.440:368): avc: denied { ioctl } for pid=2200 comm="syz.2.586" path="socket:[15920]" dev="sockfs" ino=15920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.973012][ T10] usb 5-1: USB disconnect, device number 15 [ 88.632144][ T2225] overlayfs: disabling nfs_export due to verity=require [ 88.646792][ T2225] overlayfs: failed to clone upperpath [ 90.067461][ T476] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 90.217403][ T476] usb 5-1: Using ep0 maxpacket: 16 [ 90.226186][ T476] usb 5-1: config 1 interface 0 altsetting 99 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.239497][ T476] usb 5-1: config 1 interface 0 has no altsetting 0 [ 90.247839][ T476] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.40 [ 90.257216][ T476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.265468][ T476] usb 5-1: Product: 䰊 [ 90.270147][ T476] usb 5-1: Manufacturer: 鑖꯶ [ 90.275060][ T476] usb 5-1: SerialNumber: ъ [ 90.483175][ T2257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.493866][ T2257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.507004][ T2257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.516624][ T2257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.532316][ T476] usbhid 5-1:1.0: can't add hid device: -71 [ 90.538789][ T476] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 90.552014][ T476] usb 5-1: USB disconnect, device number 16 [ 91.107171][ T2288] tmpfs: Bad value for 'nr_inodes' [ 91.391181][ T2292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.400329][ T2292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.603685][ T36] audit: type=1400 audit(1754369877.440:369): avc: denied { getopt } for pid=2305 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.113674][ T36] audit: type=1400 audit(1754369877.950:370): avc: denied { read } for pid=2319 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.402113][ T2331] fuse: Bad value for 'user_id' [ 92.407105][ T2331] fuse: Bad value for 'user_id' [ 92.412913][ T2331] UHID_CREATE from different security context by process 292 (syz.4.610), this is not allowed. [ 92.750428][ T2342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=572 state=3 status=67 (errno 32: Broken pipe) [ 92.992951][ T36] audit: type=1400 audit(1754369878.830:371): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2767]" dev="pipefs" ino=2767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 93.279660][ T12] bridge_slave_1: left allmulticast mode [ 93.285459][ T12] bridge_slave_1: left promiscuous mode [ 93.291432][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.299825][ T12] bridge_slave_0: left allmulticast mode [ 93.305592][ T12] bridge_slave_0: left promiscuous mode [ 93.311554][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.319892][ T12] bridge_slave_1: left allmulticast mode [ 93.325572][ T12] bridge_slave_1: left promiscuous mode [ 93.332115][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.340181][ T12] bridge_slave_0: left allmulticast mode [ 93.345847][ T12] bridge_slave_0: left promiscuous mode [ 93.351690][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.530001][ T12] tipc: Left network mode [ 93.536033][ T12] veth1_macvtap: left promiscuous mode [ 93.541709][ T12] veth0_vlan: left promiscuous mode [ 93.547253][ T12] veth1_macvtap: left promiscuous mode [ 93.552864][ T12] veth0_vlan: left promiscuous mode