last executing test programs: 7m59.038012419s ago: executing program 32 (id=1326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x5a, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa7"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181000, 0x90) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 6m19.004615699s ago: executing program 33 (id=2852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r1}, @fd, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)}}], 0x0, 0x0, 0x0}) 5m52.051711084s ago: executing program 34 (id=3057): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap$xdp(&(0x7f00003b4000/0x1000)=nil, 0x1000, 0x6, 0x10, r0, 0x100000000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x160e) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setresuid(0xee01, 0xee01, 0x0) utimensat(r3, 0x0, 0x0, 0x0) syz_open_procfs(r2, 0x0) 5m47.595159124s ago: executing program 5 (id=3079): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xa, 0xa, 0x9, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x48080) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 5m46.978794984s ago: executing program 5 (id=3082): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x4010, r6, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, 0x0) 5m46.501812421s ago: executing program 5 (id=3086): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) r1 = socket$inet6(0xa, 0x80000, 0x7dd) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0xe23, 0xffffffff, @remote, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x1ec6243bcbccac0b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r1, 0x88, 0xb, &(0x7f0000000080)=0x10000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) r3 = userfaultfd(0x80001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x91) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 5m45.34279736s ago: executing program 5 (id=3094): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000200)={0xed, 0x0, 0x2}) r2 = geteuid() r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0xb, 0xfffffffe, 0x9, 0x4}, 0x10) write(r3, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c) setuid(r2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock m'], 0xc) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 5m42.067689431s ago: executing program 5 (id=3098): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4800, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x1ff}}], [{@context={'context', 0x3d, 'user_u'}}]}) 5m32.453470982s ago: executing program 5 (id=3101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xe) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x1d000, 0x6}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788801609102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r5, 0x4, 0x80, 0x5, 0x6, 0x1d, @private2, @mcast2, 0x40, 0x8000, 0x4, 0x101}}) r6 = socket$inet6(0xa, 0x6, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, 0x0, &(0x7f0000d23000)=0x44) close_range(r0, 0xffffffffffffffff, 0x0) 5m28.412123566s ago: executing program 35 (id=3090): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) io_setup(0x3, &(0x7f0000000540)=0x0) io_pgetevents(r2, 0x5ff1, 0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000640)={0x0, 0x3938700}, &(0x7f0000000700)={&(0x7f0000000680)={[0xc200]}, 0x8}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000006c0)='{', 0xfffffffffffffe3a, 0x20008894, &(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x2b, 0x5, 0x20000000, 0x5, 0x6, 0x6, 0x6, 0x0, 0x0, 0x10, 0x400}}, 0x50) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002004000402505a8a4400001020301090224000101c33b3aa4b6812ed7071901020905014e3c94e5fe020000128106e302fc5f2000060202"], &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x11, 0x66, 0x3, 0x4, 0x0, 0x2}, 0x26, &(0x7f00000001c0)={0x5, 0xf, 0x26, 0x1, [@generic={0x21, 0x10, 0x4, "73354f5e06423f6364a788a242aeb8a265dadd93a15b8ecc83d5177483c8"}]}, 0x1, [{0xf7, &(0x7f00000003c0)=@string={0xf7, 0x3, "f84f2717dc58d3f28fa1fdb6893645f27c696471b8cf7b6b1d88d38b97e2ec2e5e28905b58386167ad91c210e2a55e46aa9a0f47295bf7c7762a991bfdef1007cb8398dd493326076a825d917a6a016f1fe84747c8929b7fd7bd4d574252e98dae058f1e5500d04727aac7a189183a6fe96202b6041d63ff8eec2bba73753ceac555f23d3904b0df861001c19140c897693a69cc05f4f60c696a3eeb7b92459c584df7ec3dfd6be3917d94ff1525dc9342b116b5a48adc562f03543c45b6222af474ca89121ff81b6766c6bb7d004d7369871c24689fd5d65c60da57bbcff26cb700eb120114d6b36520e246df16bb1c42085a72a9"}}]}) r10 = geteuid() r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$BLKBSZSET(r11, 0x40081271, &(0x7f0000000780)=0x7) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r13, r13) write$FUSE_STATX(r7, &(0x7f0000000280)={0x130, 0x0, r9, {0x0, 0x7, 0x0, '\x00', {0x2000, 0x3, 0x7fffffffffffffff, 0xf3e, r10, r13, 0x1000, '\x00', 0x5, 0x101, 0x5, 0x6, {0xfffffffffffffff6, 0x6fd5}, {0x8, 0x3}, {0xc2a0, 0x3}, {0x7fff}, 0xc, 0x9, 0x8, 0xb0}}}, 0x130) 5m22.297300603s ago: executing program 36 (id=3099): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) shutdown(r3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) 5m10.984799251s ago: executing program 37 (id=3102): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0xb, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m4.208386948s ago: executing program 38 (id=3101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xe) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x1d000, 0x6}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788801609102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r5, 0x4, 0x80, 0x5, 0x6, 0x1d, @private2, @mcast2, 0x40, 0x8000, 0x4, 0x101}}) r6 = socket$inet6(0xa, 0x6, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, 0x0, &(0x7f0000d23000)=0x44) close_range(r0, 0xffffffffffffffff, 0x0) 3m27.438139553s ago: executing program 2 (id=3449): r0 = syz_usb_connect(0x1, 0x11b5, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x1c, 0x40, 0x67, 0x4f0ea3f5fdbb38c9, 0xdf6, 0x4a, 0x35be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11a3, 0x4, 0x2, 0x3, 0x0, 0x1, [{{0x9, 0x4, 0x93, 0x80, 0xe, 0x89, 0xe1, 0xa8, 0x3, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x7, 0x18, "035b316348813145"}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x9}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0x5, 0xb, "f6"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x0, 0x9, "0bd0"}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x0, 0x1, "b9"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x4, 0x5, 0x1}]}], [{{0x9, 0x5, 0x8e, 0x10, 0x48, 0x6, 0xfd, 0x2, [@generic={0x6b, 0x23, "9a228a6bbf854ab629a495313eaccbbde6e6ce7156a4df461965fb15c145e01b50379b395c1d9ea0e14133338a4b8c82f6b6e60f76a50b1b3989a650ff20917d851a3b20c999f1d8f593b99e5d830ceeb7c7568206e7056da43647c52fab0d45721e2bbeba94d86c7a"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8000}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x2e, 0x7, 0x4d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0xcb, 0x7c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x56, 0xe08}, @generic={0xb0, 0x24, "05abe6cb8599e9f1b11554c4840a169c79f969065b195c3d62984abc43f10f7301fcb5e05e8b7323b6e2db36ff008b8ed38fa40449f8288ec14429be9a869f5a5ff72049f3fc61b479ee737cd27cb8df4e591fb0cfeff4a2f18ec276355041f280a183751a7fe9c5e666477a6c823fc3eb5cc626faf4e5f1d26637059655d57797dc529b3bce2f732f48b408b9231310140a5eaacfbef49e53057d320db9c30008ae8ef74978a12ebc7550fe2f81"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x420, 0xb4, 0x1, 0x3, [@generic={0x67, 0x30, "a61d04edee22f5546c527b08f3e1938a203ed818f9a22be41545cbc05ba46265327fe4d124aa0f3268ba3c9d4bdf88e673b1734f5ddd61b3305fc30448c66ff0a82a1bd97fa5b6bb7d6b18ad1fdc72cbdf1ba7ba20000609f1c8045d3213dcee4cdd26b05e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xd8, 0xb1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x79f, 0x5, 0x6, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x7, 0x2, 0x4, [@generic={0xa, 0x23, "0d411ffd872a37d4"}, @generic={0x19, 0x4, "63974bda1b909b94204f228b57a89ac272ddc8d5a95baa"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x90, 0x7, 0xff, [@generic={0xd8, 0x21, "9eddefda675fe38ee9dbcca5271fa026dd8b4feda633f0538eccf5493127f8ed10d7c4f3916f39883fd84f11027ff0ee9529abf26f2de1043ed134d4345e460e858e4951052ac3b648268dd355822bc688e97a8e1fae499f1c28fda3845f375354e4f4b5c21df3e0606ca6b7df4ef0990833491cfdf87d59ebb609f4fe9c3121bea3c0985cf480b9f4155cfc237d1d1da111188194632ddfe5facca3e410896a5bc2f9fc171240dbd8e7afdd8945b710ddf2267e3c51d335b4b904f279bd1126fc0e80efa982cd0c7cc5f23427c6059e9bb32eddf68e"}, @generic={0xbb, 0x22, "ce10a6be7b3d52806a622e3008fbed88ef2a5beee1a56b6b973bdfc6ec9b56a6a1472239a94541b14335f5e0070ee7cbf12869e4a8b0350bc149c068c09dcad12fd28e97c8ec3986bcd6c73f4044a60f89ac1e6f9ac83c58de2a3069f32991a835ac6b004259124ba0ade45978eff5356450004e92a6831807b202254d3d314fe7b55b373baee49617b40560ae3ed1ecd5252697600e2bc652b593f976bca172cabd0797092d41be453f1abeedb25bae964c4758c61024133b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, [@generic={0x4d, 0xf, "535ef6b808615c8660ec484d28161daf80fccb21ae042df5f6f4a3a58d8ca92b4a7331c54be25a043f1e6e74466095c2972e6096738dd97574353e01f7afef082fa8ecb28526b54593668e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x2, 0x1, 0x7, [@generic={0x23, 0xf, "9e319647267cf1e1d8ad07940aa547f2173936e50bdf13417064522b5a918612de"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0xb0, 0x7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}]}}, {{0x9, 0x5, 0x9, 0x8, 0x2f10feea4bcb06fa, 0xf3, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xab, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x4, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8f, 0x9}, @generic={0x8f, 0xf, "18c91b4844bc0bdac75a261c1a43175de22b27e98bc154a82e15033a7795fdc250fde0dc93739938153623b05d15ff88fe6dd478fa1227bfd4363a022315d0bec396714dff7a271d76cd7f5583ee91c34cf21422e4e82e6ea660f2e8d6a05e05c7b068584e6d95458ca4045b09965d689dabb1e5c23f50efef77f85497b2c7495b8f7efa820c9d21723ecc6129"}]}}]}}, {{0x9, 0x4, 0x82, 0x10, 0xf, 0xdc, 0x64, 0x7b, 0x8, [@generic={0x4f, 0x7, "9083f980a404c1cd0332e1a2640a3e748dbe9ef940eebd5550ae781f131d9950d7069bbef7cbf3fe332e661d9942d497eb0978c34f2de91335f26c735d9268dd943bae4f33277283307bda10b5"}, @generic={0xc1, 0x22, "57ad22b933e2cbe2abf34f928ff28c94b6f88e40358ac3f36016435e616b8cd6937bd52048390d5185d0b47534ec9e1c60da4e1cd19a3de0be71273d2836316776cd963d368b74bd3c6ecc28e91b5667c1e9c028d85b642551d63bdf1b305b478467d4c25e02b06e6f8ba14fc711a6d52da9abef0aa83cab4b6c078ae5b5bbc17e85dc09102b670ee59dc91ff8245cce02b869b9e9de22dbe2a25dcbf9e1227e8e1775b13b1559e43dad81242bf3c1e07920ad92683e948b32289c7404e0cb"}], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x8}]}}, {{0x9, 0x5, 0xe, 0x14, 0x20, 0xa, 0xc6, 0x3, [@generic={0x4d, 0x11, "bc0078fbe0fab39f898d7dcc5e6d60741a4c2e90025e1c8169afbe3a3ed23f245a350731a3b81c938fcc5ce427b31182cf8233f19a5c06e22241c4cb611fa1611fdb97eda0c2c48adf732e"}, @generic={0xc, 0x2, "6da18218d9bbe4dc9558"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x4, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x2, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x7, 0x9, 0xd, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0x2, 0x10, 0x428, 0x93, 0xb, 0x81, [@generic={0xb8, 0x23, "17a3385188f4c6422718d20ded748e5c7ab4d333f6a444b4fe1018008e0bdedae1135390e9ae05ecb81af4ae94edb392907ce1f74f4ed3d44484f87c6377cc8c3143c2ca52e70d6aad4acd4b4f428c9f962783f3db2aaeb7abb26528b1558542bf7c6b197d7d566543af8681f79d1fba7cca2db4daedcdf38e8810bd074e5edc57d3a6f966f36dd1d79aaf597bf96fc6cc7d5101f52d1951b1fc165cbfc60ceaf5d7ce5f2db75c98ff070f479cca2b179835346b38cb"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x5, 0x93, 0x1, [@generic={0x3c, 0x23, "6a116a3b0548e389d73e186b36c7c05cc20601ca1e1f8504dc29c69eac12e9e7338511bb0c7d1382c1b3a49e4023758e5891f4b8d4839260387e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x8, 0xf9, 0x0, [@generic={0xc1, 0x24, "f464d26b9566ae738a308081ddcb9f33b2e56c96b0a55d8f905f433401a548a87f89f2a6844abd434e441782a78792df5ec4e7f7338876dc1c824e3cbf4221c76351e8a1d3350c5b3e8fb8944e1b0d8ca980fbb30004cc7ed9ec80b54ad00329effd53c9bab5482eedbe3fceee67a479b177397a8bb8f118d8c9d7f8578c3ff697e356ff965d351c74b4be13d984b49cb0205d3ec20bee281ec3ae162ac94f239b7472a0ef97176c2438574ef8c3652d8db109b57eda35ca97e6d925f079a9"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x0, 0x4, 0x3, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x2, 0x8b, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}, @generic={0xf3, 0xf, "776734e1c47117823abbc65c85a3f85f52f3d60d6a8a2fac6bfd41acfa3cbb12e5d65466c5893d35de06672260918525e473808c360f41a43e67c2b47d4df73a4d96555a4c70b2e099697ca61357dfda288effcd786d84f246554fbcd0ef7d19daf31e51d9ff49298face0cd133dac6e28ab9c9e63c2cf1729a283fba1e9d3f4ef6c0fb66395bd252e846849756143ea71cfc168d00c98f71490818878b0355dd5954a327accce0c1878d01d42d4b666ddfc947fff063271902388fb083159062db8022b2ee20fdb38c88e90e2e331e917c616a837857914d9af5a5e2a37a99206a4d7cf278fd39854323539acd5b10fbd"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x81, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x401}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xc, 0x9, 0x7, [@generic={0x4c, 0x23, "18dd1bc66e85d83f0d0a5dfdd7eae1d1e0129d9bb4c96241f10f85721bc6d25b1775a994efd32e05987184344065baae292bad178e02bdddc8ee59bcbda72228b0681d3cae4fcd747286"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x6, 0xb7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0x20, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0xf, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfbff}, @generic={0xb0, 0x22, "c82e2953ecc4792cbd396a4b8127e9fd9cdb0fac610503fc5b68ef0bd43d3596bdc0d6dee3a856bdd483da6ad78a4e5115b3a484b51dee85299d76b27ed16db9a9688200d9415bd06fb293ae3f46263b0e14eeb4ea4d6d0825ff2980dfe2a21aa2b5e6785ee1ecb79029f0d41ccb35bd12046ec79631ed6771c3ff64a201000c63c90020069a1cc54028edb0fc296e7f7bbdcb7f9818103800bf0fc265621dbf413e6b457635f3830cb68ec1f198"}]}}]}}, {{0x9, 0x4, 0x75, 0x2, 0x6, 0x89, 0x33, 0x45, 0x0, [@hid_hid={0x9, 0x21, 0x8, 0x49, 0x1, {0x22, 0x16b}}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc3, 0x9}, @generic={0x69, 0x30, "05ed57cc3bacf5f29755b9278419ac62f6e640fd91e54327c8baf5d7a96df2d84039839dacf8e8f3926f263fe3071b2977df7c88e81db1e2a3e0da2bdc9c4f30ff761b608de894d82c981b0e6e72fb4ef157824fcdc4a17811ed3e6da80328db2c563cf7d19e37"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x80, 0x7f, 0xfd, [@generic={0xeb, 0x23, "c9225db1ac21f162e31ca8a66ae30e9bd6ed00ee19cc800d84466faa5ba8f4c60267f592dc1fa918563f590eb70403536c67d69f3d272d7fbf029212801a2e7cb8ec007cd2b24846fbb2fb7ba2f0bcc3f479f656dd9c894ff7c496cb20f3a00532f9e2dabb9bdb457eb5ddb1a13552f3b1fe009f9be321416156e24f51592449b87417748a2ec740edce7b60001d28a7851f12227bd3888f44de1af8baf2a3a8250ee1db600aef7340d59c47101abceb0055acd14db92402d5530315214aaa69f2431350221fc1b0a8b0c2027f84e0889b2f35b83cd9aa38ca617c87bd4e4471a45f91cb372b7a2d67"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xfd, 0x1, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd4, 0xa628}, @generic={0x34, 0x24, "90e567f9eaded56943c8d64e36f1bade2ad603e0292e8c22cc923287b54a41f814ee2dcfdbb6c6766fc7fb3b09ccfcf43905"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x3, 0xa0, 0x9, [@generic={0xe1, 0xc, "c05453a85d20a52d73c7b92945cc0d4ae9227c9b38f1b0a15743bab7b726ad1d8d56f0cfdf9de19e28aad810dae28801d7de7e7e9da18a60ac331f5e547ce443d8328cce18c85457634801a8ee5b6da69b4817bba608f934fd261bf9396a907cf229377d94f8b1637ca0ca4ed5d772155bee67309d975c59ca068f1b8e4695ac3b659a1cd434c3ba16bd43e993542b82fcaa5cc2e8bb4767f92a2b73aeb92cb816031ed6c8fd34a37e28446665c94d5a5ba7cd03099c430d422d17d3140096e5738ee6d152aeca20125e73478449fd8bb0fc3f2642617e6d9fa9c10f1e31be"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x0, 0xa6, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x53, 0x4, 0x3, [@generic={0x51, 0x23, "6280c96ed8d32f702f493c21fc4934e44e8e19461fa2ee81c8af6e96ebe429213d1dbf445800d53d491748b1a3fe82ec8998b2069c53493f901be9af5187e4c73e2606cd67df63aa44fddc44fe2ae1"}]}}]}}, {{0x9, 0x4, 0xc, 0x7f, 0x9, 0xa, 0x0, 0xfc, 0x45, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "49606fe09231"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xf9f3, 0x700, 0x0, 0x79}, {0x6, 0x24, 0x1a, 0xffff, 0x2}, [@acm={0x4, 0x24, 0x2, 0xb}]}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0xb, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x40, 0x10, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0xd0, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x6, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x68, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x9, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4b, 0x3ff}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x5, 0x2, 0xff, [@generic={0xff, 0x3, "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"}, @generic={0xfc, 0x7, "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"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x2, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x40}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x0, 0x2b, 0x6, [@generic={0x7a, 0x3, "01c6bf80ac59922935043e31df97b85d768561fcd4f169a2da95bb958ad60ac4e9b16bb6b431fe8380d1ccbb6bbe0b8acea1afdfc1cec489b93834ada9f5e0b55358953b06d34f07a2c1d8dfbf3b37d1d7b41d6bc3f398f1904463fbeefdeaf020ed4707f31dcb12c68e340aa59ff2c6686f4460d8fa6187"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x1, 0x8, 0x7, [@generic={0x37, 0x22, "10915300effdc28525dd5d764ff6630a32b218005a4a03a65f5127074d9ca14d953835ac2c83596cff310f23e9e5918a2a3976fba8"}]}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x300, 0xf8, 0x3, 0xc, 0xa84a26ef64de83b0, 0x81}, 0x161, &(0x7f00000012c0)={0x5, 0xf, 0x161, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x50, "062adeae4aa8b09c9496812faf19504f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "03d446bffcaebe4c9b1dced42f90c01f"}, @generic={0x92, 0x10, 0xa, "ec0717e9e107c0102d15635f13b6a22809389b74d6c2a805c8fb3430e0a917be4c71f4647179133aed6b67781b988619fba9c7e6a254698d2886b5a3fee7fc0e5927603d3344ae91d505f3c27a1d1113eb6e0ca26995950aec14ddf3514f21aab136cceda35bd27fdee5831ccc4046f4431abf4ee14e1cd555d9c04b3eff9c694122f29a5c78122c5f52cce6f046fa"}, @generic={0x83, 0x10, 0x4, "9f3d62dfe2b59aed28ed6d9044dfc5661276a7a2619e201bd26c3170d3fd2f49be072b0658988e77f65eeb2069d9759e98e0267f162d1dee159dbf89fb7d2eeb980d20cf31c21b41672eeac4f10fedfdb6264014bb689c39eb2a73f1460bc0e90db7517352056095f0d10040dce4b3389ca4e32ee06d85ffabfcba34467b7082"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x5, 0xf00, 0x6, [0xff3f00, 0xf, 0xf, 0xff3fc0]}]}, 0x5, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0xed, &(0x7f0000001500)=@string={0xed, 0x3, "d4c34dcbdda1676cbf0980a0e7ea41b1ef1531bbea8d4bf26c26ec763a97520c83772464eed415854599399945a087a05f5b35f35a7b6196f6773ac681d6cd2e0a5a6fdaa92ae185c5fda3d0f1740189387ec09033dd88ec38530519b1948326051f49712d4833f01e59530ea6352fc48c9720cd965dcf0b981136a2ff12af7840d73684a3884a2cff960178c480a4c516a1c6296d92c3da65c4c94801dd2cd1b93e7f4d7fa7f81abf2af406a8fdc29e3bd8c242539bfb99919370ce6aed5eb1c6e165ae403ab1f08631a3e016e4848e22d4f7050fa10f4fcea47a480e9acdfbcdd9e0c78fd2f141d13118"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001780)={0x14, &(0x7f00000016c0)={0x0, 0x5, 0x69, {0x69, 0x23, "77b610f32427174dcb54b037f22dec6f38248e85a63068f43a604afea88d23e379a334fec8395ed39f070ec0b14db64a5dc6b957623d0cfb3d378142afe0c7bf986938090c379bea39b4e493e9b89c17fdd8703f35ce9aa3f0f51f121fb2bf056b63eb055c67d1"}}, &(0x7f0000001740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a80)={0x44, &(0x7f00000017c0)={0x0, 0x12, 0xcd, "88c9dfa4910d429e70e67e317d46a8892e5d64f826e9f90b65f6be9e00a80428888ede79b713b2a89132a6e5a6efd3a53981082568691db099022a117d7dc8660046c5838d951ff421895c429cb8f233dbc011a99dec5902fb7150dce3dc2cd2be10566366fc574bb278e6c507f30d583690e360e3e44785f86ebe20eb8779e0a89344841e7e5f5838b766958048fc027143c6859891ab893417f2a5f32693b5fb14ad5e85fa900f1e7555eb43b2aea4325a61fd5daa95f0fc952a62b51f72fab3927fef48222ac89b161c7d02"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001940)={0x20, 0x80, 0x1c, {0x91a, 0x4, 0x1, 0x6, 0xfff8, 0x3, 0x8, 0x200, 0x0, 0x10, 0x99, 0x9}}, &(0x7f0000001980)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000019c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001a00)={0x20, 0x87, 0x2, 0x9f7c}, &(0x7f0000001a40)={0x20, 0x89, 0x2, 0x1}}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x801, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x10, 0xf, 0xffff0001}) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) (async) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$hid(r3, &(0x7f0000001c00)={0x24, &(0x7f0000001b00)={0x40, 0x23, 0x2e, {0x2e, 0x3, "84ff857033dc05fb033c09fc576e94796e7683eeecd9a9e24fa49e07e4bc9885930c1dc6b19ce700a27b8efe"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000001b80)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x1}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x2, 0x1, 0x8, '$('}, @main=@item_012={0x0, 0x0, 0x15a32c0a16b0c7bc}, @local=@item_4={0x3, 0x2, 0x1, "010dfe29"}]}}, &(0x7f0000001bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x3bd}}}}, &(0x7f0000001dc0)={0x2c, &(0x7f0000001c40)={0x40, 0xf, 0x36, "0b90f4644cadbab83a1fc026de2cf9300f201da2dea75201a139cd08dc51a9b4dbd2fb3fe123b5988caed834b9d4e3ea17e180209a38"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001d00)={0x20, 0x1, 0x54, "990630fbdd6edb860a725dfb3789dd9ef4d36b8dc91f5c0f1e8ad86e72014cc7d60b0851d158d95c15a370966b91698e511dd15ab341aa376257ff7552808906eb57d6a221315a43a26c6b8045cb684abdf484b6"}, &(0x7f0000001d80)={0x20, 0x3, 0x1, 0x9}}) 3m24.115952985s ago: executing program 2 (id=3484): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x2, 0x1, 0x2, 0x6, 0x5d, 0x7e, 0x1, 0x70, 0x2, 0xf, 0xa, 0x9, 0x0, 0xa, 0xc, 0x4a}}) 3m23.74923427s ago: executing program 2 (id=3486): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x8084) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200002, 0x200000, 0x6ce, 0x0, 0x9, 0xa}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0x2710}, {r3, r4/1000+60000}}, 0x0) (async) unshare(0x5000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m22.857652444s ago: executing program 2 (id=3488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.639128018s ago: executing program 2 (id=3489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) recvfrom$inet(r2, &(0x7f0000000100)=""/23, 0x17, 0x142, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.357742712s ago: executing program 2 (id=3492): syncfs(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x8, 0x1cc03931, &(0x7f00000002c0)="8a"}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x244, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)) syncfs(0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x8, 0x1cc03931, &(0x7f00000002c0)="8a"}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x244, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)) (async) 3m22.184364905s ago: executing program 39 (id=3492): syncfs(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x8, 0x1cc03931, &(0x7f00000002c0)="8a"}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x244, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)) syncfs(0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x8, 0x1cc03931, &(0x7f00000002c0)="8a"}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x244, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)) (async) 1m32.559702472s ago: executing program 7 (id=5186): r0 = getpid() (async) setns(0xffffffffffffffff, 0x24020000) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000700)={0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}) (async) unshare(0x24020400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="66b9800000c00f326635000400000f3067660f38818900000000f3db0e000067f0834f7c0066b80500000066b9002000000f01d9b879000f00d00f01c80f01c26426a009000f01b50740", 0x4a}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000008b040000000000ee0200000000000000"]) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) (async) lstat(&(0x7f0000000840)='.\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) cachestat(r5, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(r0, 0xc, &(0x7f0000000000)={0x200, 0xfffffffffffffffb}, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/215, 0xd7, 0x76) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="38d57beb4b9128aa7d5b535c17f41374d788fcf701879530b380a1fc695b7bad456deb7d9747dcbffa550000a3af53d535ebd92eb580e300"/69, 0x45}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000000900)="58e6856e40659fc23361c1ed69084995a153a0a6b99faea8e21bacc35a6b2a48f46ee438bcfe64d2325f384c153db1c6a4f46d1448841aa14fe93d4e69a43af978213f57ee6b1f2c012c06966acf55aee66fe46b8695e56e8427ee91af2d7b6e1e1a6d5b397154ca524fdc2c76e412b0d91652195c1f07d85ea24f1d61e451db191bdca95999ba09537376344b96868cc8a9e11b177ddc7e294895a3282230f5ab193f3e5f47808279abff411dd1190d32d3b2eb2c6ee312d8ec9b15cbe5030c065e6e19afd4f6b3e57ffef63d9eabee5511ed0be78dad62de4ed33c5b1d68a5f6b1d2684c4abbd5941cf6dbc200"/248, 0xf8}, {&(0x7f00000003c0)="82e00d123d9aa38e36a4f4e7d12806ad6d3c1226261d54d27bc38c4a5d19c80d96b09a88c9006e00"/52, 0x34}, {&(0x7f00000005c0)="5c0d956a3b48ea232d25036494a96d59ba6b63c5372ffcbedfb2b82c6668cd2b59ff5333d503ef7d97efa390b2a397d8bba55b9c849cbc2367abd7de9eea12fec66c03d801a5c5a071013e89f36f5950e51b2e651867e7e559cef53b4820be54b2fa4850e224483cf676260e7506663259f6804baeb7f184ed3e2328c66427ddec453989304f9f926193acedebfb5920c2e9345e02abfd31dacf00b65aed956beb483acdd4f2fa5405f68510de1204c47e4013e5092132ae44083d90bb8797021942d7a1e6f31dbea02dd3cc44cc1372d04ea2b084853ada8e92068e4db8771159970c", 0xe3}, {&(0x7f0000000480)="a56f24be64294731cf72d7a043304c3cad8e04d0e1d92cfde0fea8093d3a13760c107f0a808a8ad844e4093594cb83df24a554199bddb52a9ab11c6f3c571d1db56bfe44517a60c829ba956149e9d429a49537379e4b73ce50", 0x59}], 0x7, &(0x7f00000007c0)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x48}}], 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000a00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@flag='silent'}]}) chdir(&(0x7f0000000440)='./bus\x00') (async) dup(r1) (async) r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, 0x0, 0x0) 1m32.388008775s ago: executing program 7 (id=5190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x6, 0xbd, 0x0, 0x2, 0x0, 0xf, 0x3, 0x1, 0x0, 0x1, 0x4, 0x0, 0x8, 0x7, 0x10, 0xf9, 0x2, 0x7, '\x00', 0xfe, 0x5}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="b96f0b00000f322e3e672e450f07660fdb9ce30d000000b9b20a0000b80700000066baf80cb808efd383ef66bafc0c66b834e066ef0f30b890a4f084ef66bafc0cb902000040b800100000ba000000000f3036660f388281e264000066ba410066b8710066ef48b800100000000000000f23d00f21f835100000080f23f808403e93000088000000442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0xaa}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x242900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0x9, 0x12) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 1m32.171403378s ago: executing program 7 (id=5195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002000099bbd86d800ffdbdf2503"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2012860, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0]) 1m32.107886709s ago: executing program 7 (id=5196): syz_usb_connect(0x2, 0xfffffffffffffff5, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x10180, 0x4, 0x10, 0xf1, 0x50, 0x0, 0x5, 0x7, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x160182}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x10000000, @ipv4={'\x00', '\xff\xff', @local}, 0x46}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setrlimit(0x40000000000008, &(0x7f0000000000)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000001600)="4fbdd4bd0d380b5a", 0x8}, {&(0x7f0000002680)}], 0x3}}], 0x1, 0x40500c4) (async) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000001600)="4fbdd4bd0d380b5a", 0x8}, {&(0x7f0000002680)}], 0x3}}], 0x1, 0x40500c4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="10000000410002007d4c4807946e455f"], 0x10}], 0x1, 0x0, 0x0, 0x24000001}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x8, 0x0, 0x8, 0x8, 0x8, 0x4c, 0xde, 0x0, 0x4, 0x2, 0x3, 0x1, 0xa6}, {0x7ff, 0x6, 0x6, 0x1, 0x2, 0x4, 0x8, 0x8, 0x9, 0xee, 0xfd, 0x4, 0x8}, {0x9, 0xa, 0x9, 0x1, 0xff, 0x63, 0x6, 0x9, 0x2, 0x9, 0x7f, 0x3, 0x870}], 0x8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x20001000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x4, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) 1m31.306686322s ago: executing program 7 (id=5203): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x8, 0x80000000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x5c, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa73b9f"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x80000000) 1m31.123407645s ago: executing program 7 (id=5208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x1000, 0x4) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x20040, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x6000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x800, 0x9) prctl$PR_SET_THP_DISABLE(0x41, 0x3) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x6, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) prctl$PR_SET_THP_DISABLE(0x42, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x6, 0xff, 0x0, 0xfffffeff}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) 1m31.115079075s ago: executing program 40 (id=5208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x1000, 0x4) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x20040, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x6000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x800, 0x9) prctl$PR_SET_THP_DISABLE(0x41, 0x3) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x6, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) prctl$PR_SET_THP_DISABLE(0x42, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x6, 0xff, 0x0, 0xfffffeff}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) 58.868062393s ago: executing program 4 (id=5585): read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xe100, 0x6) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x2, 0x1, 0x301, 0x0, 0x0, {0xe, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48014}, 0x24000000) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 58.855456703s ago: executing program 4 (id=5586): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xf02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 57.80745463s ago: executing program 4 (id=5593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x1a, 0x0, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x13ac}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000040) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x13ac}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000040) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x60, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x60}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvfrom(r5, 0x0, 0x0, 0x40000005, 0x0, 0x0) (async) recvfrom(r5, 0x0, 0x0, 0x40000005, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x0, 0xbfcc, 0xa, 0x10, 0x20, 0x32, 0x0, 0xee01}, {0x0, 0xfffffffffffffffc, 0xfffffffffffefffc, 0x1200, 0xffffffdfffffffff, 0x0, 0x40000000000000, 0x9}, {0x2, 0x3, 0x400, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x2, 0x0, 0x4, 0x20000000}}, 0xe8) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001700), 0x880, 0x0) ppoll(&(0x7f0000001740)=[{r7, 0x1220}], 0x1, &(0x7f0000001780), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000016c0)=ANY=[@ANYBLOB="06000000000000000a004e2100009dea00000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000a004e2300000001fe80000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210024000000000000000000000000ffffe000000203000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e231b650f3cff02000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000400000000000000000000ffff6401010105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000a004e240000000900000000000000000000000000000000f77b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000004010000000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a006323ffffffff000000000000000000000000000000018d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000001b6fc0100000000000000000000000000000400"/1283], 0x510) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000016c0)=ANY=[@ANYBLOB="06000000000000000a004e2100009dea00000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000a004e2300000001fe80000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210024000000000000000000000000ffffe000000203000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e231b650f3cff02000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000400000000000000000000ffff6401010105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000a004e240000000900000000000000000000000000000000f77b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000004010000000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a006323ffffffff000000000000000000000000000000018d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000001b6fc0100000000000000000000000000000400"/1283], 0x510) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x15) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x15) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, 0x0) (async) ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper={0x40046306}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper={0x40046306}], 0x0, 0x0, 0x0}) 57.583402343s ago: executing program 4 (id=5597): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa1073, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x2d0102, 0x0) ioctl$FITHAW(r1, 0xc0045878) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) mremap(&(0x7f0000356000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000a4a000/0x2000)=nil) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) fcntl$getflags(r3, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYRES64]) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8"}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r8, &(0x7f0000000680)={'syz0\x00', {0x2, 0x4, 0x80, 0x9}, 0x1c, [0x10c06e59, 0x9, 0x2, 0x1, 0x5, 0x85, 0x0, 0x6, 0x100, 0x7fd, 0x4, 0x8, 0x189a, 0x6, 0xfab, 0xfffffffb, 0x9, 0x5, 0x8, 0x7, 0x1, 0x8, 0x3, 0x3, 0x101, 0x2, 0x2, 0x4, 0x401, 0x0, 0x8000, 0x4749, 0xf5, 0x4, 0x2, 0x2, 0x0, 0x9, 0x7e, 0xfffffffd, 0x5a849021, 0x5, 0x1000, 0x2daa3c99, 0x8, 0x8, 0x1, 0xffff, 0x2, 0x1000, 0x7, 0x10000, 0x80000000, 0x3, 0x2, 0x1, 0x4, 0x7, 0x5, 0x4, 0xcb3, 0x101, 0x4, 0x4], [0x6, 0x3, 0x80000000, 0x1, 0x8b, 0x691d, 0x0, 0x4, 0x3a5ab6a2, 0xfffffc00, 0x3e1, 0x8, 0x1, 0xb, 0x6, 0xe, 0x7, 0x3, 0x2, 0x82d, 0x7ff, 0x8, 0x9, 0x6, 0x5, 0x6, 0x4efb, 0xf6e, 0x6, 0x10, 0x10000, 0x2, 0x8, 0x3, 0x7, 0x9, 0x800, 0x20, 0x101, 0x101, 0xa, 0xd09, 0x9, 0xfffffffd, 0x3, 0x800, 0x3, 0x0, 0x5, 0x7, 0xa, 0x12, 0xf, 0x7, 0x80000000, 0xffffffff, 0x4, 0x1, 0x7, 0x6ad, 0xfffffffb, 0x800, 0x6, 0x200], [0xc8d4, 0x452c, 0x9, 0x100, 0xc57, 0x5, 0x9, 0x2, 0x0, 0x0, 0x80000009, 0x38b, 0x8, 0xc, 0x7, 0x2, 0x800, 0x3, 0x2c, 0x5, 0x100, 0x9, 0xff, 0x401, 0x1, 0x2, 0x9, 0x8, 0x3, 0x7, 0x0, 0x1, 0xeabd, 0xa22, 0x3, 0x18e4, 0x4, 0x3, 0x2, 0x7fff, 0x9, 0x78c1, 0x7fff, 0x7, 0x1, 0xbd6, 0xfff, 0x8592, 0x2, 0x3, 0x7, 0x2, 0x6, 0x5, 0x0, 0x2, 0x6, 0x401, 0x41, 0x2, 0x401, 0x200, 0x9, 0x3], [0xc10, 0x8, 0x100, 0xf41d, 0x0, 0x2, 0x5, 0x7, 0x240000, 0x8, 0x7, 0x4, 0x1000, 0xac, 0x40, 0x8, 0xfffffffe, 0xff, 0x5, 0x0, 0x7, 0x8000, 0x14, 0x38, 0x7, 0xfffffff9, 0x80000001, 0x6, 0x32, 0x3, 0x9, 0x3185, 0x1, 0xf6d, 0x75f, 0x3, 0x81, 0x3, 0x59b9, 0x8, 0x20000000, 0x3, 0x4, 0x2, 0x6170, 0xfffffffe, 0xeb, 0x47c9, 0x6, 0x5, 0x7, 0x10000, 0x0, 0x4, 0xff, 0x7cc3, 0xfffffffc, 0x3389, 0x5, 0x400, 0x955, 0x7d, 0x3, 0xfffffff7]}, 0x45c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 57.401203086s ago: executing program 4 (id=5600): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x0, 0xff, 0x0, 0xfff9}, 0x20) 57.217603149s ago: executing program 4 (id=5603): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r0}, 0x18, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffb, 0x4) (async, rerun: 64) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r0}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x34, 0x65, 0x29d55dc88c8bbabc, 0x35, 0x65, 0x32, 0x37], 0x2d, [0x65, 0x61, 0x34, 0x64], 0x2d, [0x36, 0x34, 0x33, 0x64], 0x2d, [0x0, 0x32, 0x32, 0x63], 0x2d, [0x39, 0x38, 0x30, 0x30, 0x38, 0x1, 0x34, 0x63]}}}]}) (async) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x4008, &(0x7f0000000300)={'trans=virtio,', {[{@mmap}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@fscache}, {@ignoreqv}, {@cache_readahead}, {@noxattr}, {@privport}], [{@obj_type={'obj_type', 0x3d, './binderfs/binder0\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, './binderfs/binder0\x00'}}, {@audit}, {@smackfstransmute}]}}) (async) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x3, 0x39) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1f, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) close(r3) tkill(r2, 0x12) waitid(0x0, r2, 0x0, 0x1000008, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ptrace$setopts(0x4200, r2, 0xffffffffffffffff, 0x100027) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) poll(&(0x7f0000000080)=[{r5, 0x200}], 0x1, 0x6) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 57.16000619s ago: executing program 41 (id=5603): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r0}, 0x18, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffb, 0x4) (async, rerun: 64) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r0}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x34, 0x65, 0x29d55dc88c8bbabc, 0x35, 0x65, 0x32, 0x37], 0x2d, [0x65, 0x61, 0x34, 0x64], 0x2d, [0x36, 0x34, 0x33, 0x64], 0x2d, [0x0, 0x32, 0x32, 0x63], 0x2d, [0x39, 0x38, 0x30, 0x30, 0x38, 0x1, 0x34, 0x63]}}}]}) (async) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x4008, &(0x7f0000000300)={'trans=virtio,', {[{@mmap}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@fscache}, {@ignoreqv}, {@cache_readahead}, {@noxattr}, {@privport}], [{@obj_type={'obj_type', 0x3d, './binderfs/binder0\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, './binderfs/binder0\x00'}}, {@audit}, {@smackfstransmute}]}}) (async) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x3, 0x39) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1f, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) close(r3) tkill(r2, 0x12) waitid(0x0, r2, 0x0, 0x1000008, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ptrace$setopts(0x4200, r2, 0xffffffffffffffff, 0x100027) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) poll(&(0x7f0000000080)=[{r5, 0x200}], 0x1, 0x6) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x6c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, 0x0}, 0x400}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 48.994165699s ago: executing program 8 (id=5711): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = eventfd(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/rnullb0\x00'}, {}, {0x20, '/dev/rnullb0\x00'}], 0xa, "f1fb64cf11d379cad9893921e417180b697516d5b8bf6bbae20a7230b84f277d1193d093112593cf8d7795cd5bb8846a94ce5b88d73e1bd0673a373231503aa15552427d5f71aa27a7c8e7f19ad12a2d5d03c2764569bce111c20506e9464ff075a4bc4e72"}, 0x8d) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) io_destroy(r0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x35, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r5) r9 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r4, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x40008005) 48.716590043s ago: executing program 8 (id=5714): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffebc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@private2, @empty, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1ff, 0x8000, 0x81, 0x400, 0x4, 0x1000001}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x20010, r7, 0xeb81e000) (async) chown(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="0dfefa0257b19becb029aa2f15f67eb5d4d10f9191ebe433eaa6bfe166d3b575689dfdf5f098db69c43c6c8d93ab14779109a0f1daa34ca4c40c4ae41876", @ANYRES16=r3, @ANYBLOB="3926582a17c0d9d8a5adf315c43379366ac9ddf9d87d2f334d0ac4ae9eeed3ddba4b284b239986948a12413cd3a7c17ce75deab208b2c98d8ff2bde34cbe4f5603904c9a5477a0f9ed0b036108dda0795f8eabb6ec2b178a7e7c385f4c5adb4b3dbc3f792e8c29"]) (async) syz_open_procfs(r1, 0x0) 48.477707466s ago: executing program 8 (id=5715): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0xa, 0x5, 0xa) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) clock_gettime(0x0, &(0x7f000000da00)={0x0, 0x0}) recvmmsg(r2, &(0x7f000000d7c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/223, 0xdf}, {&(0x7f00000013c0)=""/61, 0x3d}, {&(0x7f0000001400)=""/51, 0x33}], 0x5, &(0x7f00000014c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000024c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004780)=[{&(0x7f0000002540)=""/255, 0xff}, {&(0x7f0000002640)}, {&(0x7f0000002680)=""/218, 0xda}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x5, &(0x7f0000004800)=""/196, 0xc4}, 0x4}, {{&(0x7f0000004900)=@l2, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004980)=""/6, 0x6}, {&(0x7f00000049c0)}, {&(0x7f0000004a00)=""/130, 0x82}, {&(0x7f0000004ac0)=""/2, 0x2}, {&(0x7f0000004b00)=""/188, 0xbc}, {&(0x7f0000004bc0)=""/161, 0xa1}, {&(0x7f0000004c80)=""/46, 0x2e}, {&(0x7f0000004cc0)=""/71, 0x47}], 0x8, &(0x7f0000004dc0)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005dc0), 0x80, &(0x7f0000007180)=[{&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/79, 0x4f}, {&(0x7f0000006ec0)=""/253, 0xfd}, {&(0x7f0000006fc0)=""/236, 0xec}, {&(0x7f00000070c0)=""/104, 0x68}, {&(0x7f0000007140)=""/49, 0x31}], 0x6, &(0x7f0000007200)=""/167, 0xa7}, 0x3}, {{&(0x7f00000072c0)=@tipc=@name, 0x80, &(0x7f0000008540)=[{&(0x7f0000007340)=""/193, 0xc1}, {&(0x7f0000007440)=""/4096, 0x1000}, {&(0x7f0000008440)=""/193, 0xc1}], 0x3, &(0x7f0000008580)=""/172, 0xac}}, {{&(0x7f0000008640)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000008a40)=[{&(0x7f00000086c0)=""/27, 0x1b}, {&(0x7f0000008700)=""/172, 0xac}, {&(0x7f00000087c0)=""/234, 0xea}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/36, 0x24}, {&(0x7f0000008940)=""/9, 0x9}, {&(0x7f0000008980)=""/188, 0xbc}], 0x7, &(0x7f0000008ac0)=""/161, 0xa1}, 0x8}, {{&(0x7f0000008b80)=@hci, 0x80, &(0x7f000000c180)=[{&(0x7f0000008c00)=""/146, 0x92}, {&(0x7f0000008cc0)=""/4096, 0x1000}, {&(0x7f0000009cc0)=""/244, 0xf4}, {&(0x7f0000009dc0)=""/247, 0xf7}, {&(0x7f0000009ec0)=""/247, 0xf7}, {&(0x7f0000009fc0)=""/4096, 0x1000}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/150, 0x96}, {&(0x7f000000c080)=""/113, 0x71}, {&(0x7f000000c100)=""/84, 0x54}], 0xa, &(0x7f000000c240)=""/119, 0x77}, 0x9}, {{&(0x7f000000c2c0)=@hci, 0x80, &(0x7f000000c440)=[{&(0x7f000000c340)=""/254, 0xfe}], 0x1, &(0x7f000000c480)=""/112, 0x70}, 0x4}, {{&(0x7f000000c500)=@phonet, 0x80, &(0x7f000000d740)=[{&(0x7f000000c580)=""/4096, 0x1000}, {&(0x7f000000d580)=""/55, 0x37}, {&(0x7f000000d5c0)=""/154, 0x9a}, {&(0x7f000000d680)=""/160, 0xa0}], 0x4, &(0x7f000000d780)=""/2, 0x2}, 0x4}], 0x9, 0x10000, &(0x7f000000da40)={r6, r7+60000000}) sendto$packet(r3, &(0x7f0000000000)="09000000e70014000000d97bfbf788", 0xf, 0x200000c4, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) recvfrom$packet(r2, 0x0, 0x0, 0x2, 0x0, 0x0) listen(r1, 0x48) accept4(r1, 0x0, 0x0, 0x80800) eventfd2(0x58, 0x80000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xfffffffe}, 0x1c) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') getresgid(&(0x7f000000db00)=0x0, &(0x7f000000db40), &(0x7f000000db80)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f000000dbc0)=0x0) mount$fuse(0x0, &(0x7f000000da80)='./file0\x00', &(0x7f000000dac0), 0x10000, &(0x7f000000dc00)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@dont_appraise}, {@permit_directio}, {@fowner_lt={'fowner<', r11}}, {@obj_role={'obj_role', 0x3d, 'bridge0\x00'}}, {@subj_user}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) getsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000002640), &(0x7f00000049c0)=0x4) getdents(r9, 0x0, 0x3b) close_range(r0, r9, 0x2) 47.819906657s ago: executing program 8 (id=5726): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r0, 0x6e78340ffdda27db, 0x70bd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40) mount$tmpfs(0x0, 0x0, 0x0, 0x8011, &(0x7f0000000200)=ANY=[@ANYBLOB='huguid)', @ANYRESHEX=0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x1400037e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)="c742"}) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r9 = eventfd(0x0) io_submit(r8, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r9, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) io_destroy(r8) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x45809000) sync_file_range(r9, 0x8, 0x14000000, 0x0) 47.63889196s ago: executing program 8 (id=5728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x164, 0x2, 0x80000001}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0xc840) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x380, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r5, 0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 46.95363464s ago: executing program 8 (id=5738): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f) close(r3) (async) close(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x7, 0x7, 0x5, 0x3, 0x0, "4758739486268ea121649640c4d6733102268d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x120811, r1, 0x527b9000) 46.859733952s ago: executing program 42 (id=5738): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f) close(r3) (async) close(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x7, 0x7, 0x5, 0x3, 0x0, "4758739486268ea121649640c4d6733102268d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x120811, r1, 0x527b9000) 35.159933756s ago: executing program 1 (id=5920): r0 = syz_pidfd_open(0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x201, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setns(r0, 0x24020000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80240, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) write$cgroup_pid(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r6, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x7, 0x5, 0x5, 0x7, 0x3, 0x1, 0x2000000, 'syz1\x00'}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x120501, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000100)={0x0, 0x9, 0x4, 0xfff7, 0x0, 0x8, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum, 0x0, @desc1}) umount2(&(0x7f0000000040)='.\x00', 0x2) 34.979207979s ago: executing program 1 (id=5924): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r3 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000), 0x4) io_setup(0xfffffffe, &(0x7f0000000080)=0x0) r5 = eventfd(0x0) io_submit(r4, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r5, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) io_destroy(r4) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) 34.787157292s ago: executing program 1 (id=5928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x408, 0x6, 0x4, 0xd426, 0xa0, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0xff, {0x7, 0x25, 0x1, 0x2, 0xb, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xfb, 0x1e, 0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x38, 0x10, {0x7, 0x25, 0x1, 0x3, 0x40, 0x3}}}}}}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1}}}}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r3, 0xf5323000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x6, 0x7ff, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101}}}}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x8, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x408, 0x6, 0x4, 0xd426, 0xa0, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0xff, {0x7, 0x25, 0x1, 0x2, 0xb, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xfb, 0x1e, 0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x38, 0x10, {0x7, 0x25, 0x1, 0x3, 0x40, 0x3}}}}}}}]}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1}}}}) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r3, 0xf5323000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x6, 0x7ff, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101}}}}) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0}) (async) 33.906615886s ago: executing program 1 (id=5943): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe2(&(0x7f0000000140), 0x84000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r1, 0x701, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x40840) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0xf0) listen(r5, 0x0) accept4$unix(r5, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 33.808814348s ago: executing program 1 (id=5944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xa02, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000aa6401010100000000000000000000000000002400100000000200002084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000fffffffe0d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000012000001000300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 33.68800029s ago: executing program 1 (id=5945): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup(r3) connect$packet(r4, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x4}, 0x14) 33.68762906s ago: executing program 43 (id=5945): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup(r3) connect$packet(r4, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x4}, 0x14) 3.243948209s ago: executing program 0 (id=6388): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000040ac052b02400001020301090224000101009001090400060203010305092148cb4a0122a5b3090581030002048181518cb7b191501c6a080083933a0c26967112c1475eaafffe4be09d868b9eb200bc70f8d3f9e8e6e457a15ec33ce6fb8b55800e406a94bb41ef216b3e105b99bf8c9b320b6397b25d100b75e79ee6f69216e01a275178fb8f0b6bbe2d5dab9b6aa1deae2c37b15a2bf629161723507e3ca3eddf4273e458906aef3f22"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xea7, 0xa) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) r2 = getpid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100400, 0x0) read(r3, &(0x7f00000001c0)=""/219, 0xdb) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000dc0)=0x7) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) 3.235591379s ago: executing program 9 (id=6390): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/61, 0x0, 0x1, 0x8}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.17681318s ago: executing program 9 (id=6391): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0xfffffff7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2067) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004280)="06083cb6f49dc2fb20a7b1308c5574f4467712b94932feb205aa1a86b8e163bd57e11c315ee07477f746fd0b291fca4698097b28bd48683e86a9728e4724453e531114479c2ef6f1c409e156fda7d5ff6d3c896660bb08fa90d9985c54e9b21a07035eaa72d39d4ca066ef950554390c17007ac92e69d2d403ffa19f4d5e504daf93c4baf9b38b802f86aa94e154d6eb274f2f0a0f97841ec9bf640c4391be86d46582477c269c19a01d82a300f1fe69dbb694edc36b0210cd9fb0b64941f958c41d25ca143ff79ed9715d0879121a22da2203a06a416bcc82758e8307970db023dae1988d37e3ce8cff255e95007a93bd7e0b583ecd8750a37a809c11f2c91b6d6ae5c7fad5f16490fc565334aa126bceb2381e508d79190a4ac634e20b7cfa6d1794ddc402ecb86f1610be40789f39320fb23c13c41ac5d66e2b025ac2563868aa79a9c956e4ad0aa8b205bf8e006d04401665acab8647d9d40d616bfbffa704557ba0bb4754c38045d46cc945be0dc3847b3e17ba33df2c1c50be79c1d856de897583472262e67c1a4ffef25e8929c0eda0114d9cda5f57be4daa8bc43315be82f5d3debe707a386aab6aa6841b75fd26073b726d0777b62f146ddb486b61ca6b02b77e10a8ec43f787c5b25dd1677c7ad70cd897fc0a25ffd1fc22504ed4aa40a29328067d37a46d205272c3d51f23f139c44105499c614209995d5020d4f90b22804f428fc93aded21686b7d432f8cb81584d3e732fdcf52d3fb51069a5a8b40836a53e81a56588da87807fbe277da05e9c47ed78e3f7e72f767b68103fb8aa06319fb1fa80378663b40f6c2b9976b4a89ff9931ebb03cbb14fdf7ff4067640f60b026fa6a7ef8b049ab7dff0461e170ec5d3baf95a6d9bcc8c4d2c0216eedbb5da1f8b322b262a2879dd430870605ab233cbaf60e98fefa99623379ddc3ad5343c3f448e9e6939154b5260c4a05248e9558fe7b80154d1c70053599f22785cd07a0e0fbaa7dea6c419c2155582614435302151e5acece496d52402aa80fa4134d1c064172c91cf93b351f83b7524da4ab22aac2546f7097a64e33149aa84a538b6ebde1feabae4e6098a5cb9fc8b8ef9e5eb52525c69ea951b587f0f98501e95959844dc4ca13afda652cf3243c8ac547278100b041af40ce11e8d2fe2025f38ecd32bbb05e21c46c577f5fccdbec40345fe27029efab72375a6d98798045b7ba374ebf7aeb7591fe6faf2eac3b9ae5e47987c88b1f2b6bfe7a634d95d5eb3f5d3c7bf7269717e590c04ed663525a11bc99f3a510899522c833c337b701ad9037b8ab05d6a9142f4682424a5a11d503ae1e8c68c6772769b80465108c9f6cde8a49ce3aa3947283d9046126762a7f49be73542efe6c42f643dda9a6b340bd7c77c52833762c63ce38833ad2c6b6d9a52826e9ac36febde7a1f77840efaf819ad29709b275db1a37321e8ffa647d08ce0ab23f355d619ce52c252f6bd83688d4578f6943e9554f1b0477929e68b12272a6d2c954e024b73371ff7a0a4dd836a3f7c79f548b0723b467fa4f4ac53d33b2479f11dc81d48ebb6a31598caf5d8e14452878ef13d7ccccda92c7a0b806385b4c8e2e71bd4a3e498d4f663979377c2e504861a21ee39cc3d3f67655b57fdbd4f3cc040a26951a0f4d475142c1fdf2cd2bb7b9aba888ffd063bef67ccf225c378fc0ea86b60364392d4e8192b1be1145c3d508f6d7bf27711535f379827e00493bb5e963e18d413b58abd482856425dcfba73676d1510eca84281e20bcb8ebe0a932bb36dc7516fd206c0d08a6640a1d791c6fc382ca80029cc803c256042e16f3c11299c7c2e78a3c77a87221fa3a106efbade9a347cdde814d7a7781ec89dbe66c9db402b79eac6d44a23a9e1cc47f9ead244c2dfd2df2688173216c9b7ce1c69299e3c3fb9ec9f2ab0ee9f30f80cf21057110782012ef541ffcf955583d1c62fa5daea5a2812e826293b135c9ef91a4c0dbe34bd0fa08beba429a7603fcb345d15921e3ce245ad5ccc96475eb636a923687b45858697656cca71e2ebe3e271d1e27d38b540b273ad1577ffd14ea166ede7065623b955298cc6d3dce4ca405cf5b9d9406032b25fb7873895f6dad5d85a7ad100af962e1fba78237e4ef75d266ff4c57007673d70e575fc5326a591399443891dff0946d8f72b6572a7b77b82c0585264aba34380701e88061b2e2b860b20bb62e4a56c08e9d9e2eac9143f883c31aac55e63e01bc3af42dc84f5901911ea003d06675c72fa81768e177c1fc9678495b3adbd4cfe9e0d252d0ee265f78d0550fbede22c0d8729573670bcd9b71503ade7215153f04737bd52fde3c949bcc3e46f3e4bd859614f0fc72683c96647e15bc1803046c0828c49062aca7f48ae535d42907728c4525179ea1b9adbb09b4130988d713c3a7a059566bacc2735f95fd3bbb5810e5c9f2821f76356026948d502dbfa08522a1ff05e6654a7af45e20fdbc77a2c70f1c61ce39093b32912989a1d3b51508b0294cfa5425e7aca19a109af4dff056e795f4c42ef78e91e8e473cafe954429b1bc111568153bc13b8d34fc5ce5722b596e0a7b6afe620c1e7e5a25ed437f75af7c53201382c27e4f9fca49fbfd64b0c239ca6bb0e6b42002345c458c78f763a6333cb0cdccfb953b08f63bdc25caee7197eda33856fef51a108b6a1cc2a6586f4880f4c77da11c3c972f49ee164ff3968c7efb0db1b9aa2301298040fe92912ada484f9f0946d7db3388ca33a935f56cfd7b5a212bef9e7e8724c8f9cfc7d17537540f0aae2278ceb07ac48b29abb667d3a499aebea8c9357dad34a2ee3c86a3485da3b7d965c714f760709bfea9b933dcf4997bea61fdb0d5a752e17aabfdacdbe5d644147c95c4c7a13e0a2c2e8b5f8cd06b1902541ec9cfb1f42648eb2781c8ed74c133d19500b754e93d2a3a96b28e194ee3b4b94180972ac8f25000a826d1d193cad89bcf81b62b6a20e6a6517156fe9b14f2f8a4d53eec114a62713bcf19999f9e1b3fc7c9467cee257d1d64e318f983db3934a3c1408e2c869669f2f573706e04eb39b765dc1c4198672976d70cd6af9158c199afffa1cb9fd45441afd180acc35d1abb4b31b13d50a76469c0c2e1b13116cb337e438ce3f51f8df5ef4dcfde2b1f523f074edc2487c7e298a9f7ccd776066bcdfa1efb5946a03eeacaeb5f79c98ceb4d64f1bbe438979bc21cb8395a261015fc3b831d2c889ef315b16c9194fc28925688a60b7b8bf8fd2842c1e384780db2279f88daaac6d13fe2330fd626d6c5d4d76e6fbcfdaf8e69c0f1744afcfaf6a3f8399e178298edaf5d48b1840fb42e2fbdafb194e740a5271fb488a00a9cf60b2ce90b67ff1f45ef568ace5142b0fcafaa3ef5c9e0f14ab968c1b3ddb8872cbd18bc4d116b836996df10f43e519916fa7031063ceb0208b1b360fffeeb6c76e75825b002098507ecd8e33a2cea3263c701396a49adc8f495168b6a3d3193778d1cff97873db6580b0aacfd73af8e3cac064c748f6919cffe0f8ddcf0f8352a146c4f92a8f8f73e1041d13aec84451722a8651968d97f8693d57749e65d3b83271e4e9e71fce2cb28c69c6507d8536cf7e13fc45d40d5be9460033cc6c2b0ebb700edad6ef53b43ca625fa6d0fe22aa8670e81a4d65d47297a7c5e7a984d57f9f0a451ba45fdbec050d194f27f2d650cdb8ffaa1ea3714296e33a4d4affea262bd08347047651ec92c3ebaa5ee42f099bdff49a49622b3dc14ee36b296a55150b6969f0e9f029dc723b21bf28aefc58b1cdd001265e85be00595d3a43120652588b076bdf3f4b12a0d8854293c9b3f836791e511a22e03b695e2fd1c541ed2b08ac30158b84004a30542014f9cb5cc34f46637c85bcaac3bcfe2396714ee8c2e07d56da9105ff73b2e3730e4af5e37ee17a486be4316010a4f75ea7ea8ded06a0c2a816e4f8adc3d833a6f7f6a9aa464e724fffcbd2a45734e9898e1648ef2ea06624bcb8426063b473bdd31af1d2031ace4fc9d1e6cd2ddc745a2c7e47049e78709fd3738416035d528315617301c0bcf40bf10fdce777ae21c542994e12ec5cf94c0cc6a7427458584fdbd247187c7ca4868eb2806f5f14e595df2ed6f1d1213b58df4510436b20044eb982003029ec79c926ee998e83ad63bf6cbc1395a050fb6be783cf4c351b591ad139f7302600083c9c431fd462226561355d20bfbf252f8476403968cf91e42c7124763e8cd5479209f67cdeb9a2f2180ddd80e809ebfb8384e819264192ddf251e81a55e333217383b5a30eb13723e371e9a76cdac7072a4a6579494ce988318b921ce1b417da3ce1b4adfd32da53add4398a2127633e09d73d723aaf51d1d70d2d94759b34ecdab415c2126e634250aedb502be67f6a50f8c2c914dd7fadbf46b0c35e2736dd99f8ace31aa9d8c4ac79729cf638df0b827dedf2a8103e3a86cd2afcbb1acd8cbd994dac65e6e45b95169e9322df8d6a51e583fdd439c1748c66cd417178420955a6451982db02f5fbf83e677fcf3421956d86ca758390b6b2e76f8274535940a57a9b0501d318459665d1242d5c06834f4112a50c77361e0fc0197c2a5b9f29c9cde87b773a0e754f55eb798b49f64f388bfa205940f4c4b130acc9e9a9d7cc0ca9e37dc726aae0083563ee6cbe6e4a8d42c300b5af99cc66773b9d9fa343d558347d55a4a2ab1969f6cd7f47fa6047ffb875b4e82d870a68a7af865d606dd6ba9f93e845e7ad8568585c165766088bb77bba0545c551e6409b94becf0d50c7c6453a22e9c9d4ce4599d4adc9fef9eee47ef15ab6e2ed7fcc93132ce334ab2f0b5e508249dd09b7b8ad060a2b5b70f23965ebbe001a5a922eb00870a64d9dcd2433dc412ba0ae1ba0fabdc1dfe9f8d1ecc93a5b1cd02d961b5d6b30383cb33012a54a7e3213b556094c25826ec15ca54d6c21ed895a3b581178bce990aa008d1201c181f4116ccbed3e971b4d5b86e7f90eee3bd6974e5d2ed1561ba377b3cf66271578b406b4b4316d54427a4aa533b390692fa2d28fc5c1323c94146cc6aae6c062a772e804faf1b3a7fb5cc4d2d85ba87de6154696c79a8e7cfc0c2d31f251f635547e9b2f9f0836389790496bf15ba2a8ba39d8b59fd75062b2099a878c1f7d1ec8b68cf935582a33018996147b123bbe736fd3421649e7b6b661e1d926c0991cee9d91469b53f61d44545672b50648c08b319bbed0c4e6418b9550485ba65f37fe1c635cbb30fa00245725a7fec5e6fcf12e9b4e5d6251be0bf916b782da99bc4504f5a4da1f8dea6179074845be0097f28e604e4c233448e09d3c4e0a4e9b1887c47db5d07eb00befc92e045262a5ffa5bbb585e922ba8008839f64dc8e4e186106e99d3a456d48d5dae799592cece18b0c44cd679b90efd8a5c38b4abe4e957b02bb28262b925659f01af005ebf9656f1ea8f614bb1b2fd246ebee9ca64423e52023bbd61d76080836026c6a7e4c168e95735fd0dfb50012316805689b3f107fe0d4c8bdd54b3ecf7067d504ded28dd47840495fbc83c7d2b4dd7b7cbf8f9163160afcbc0d0766feb0c229c8df465e051c249baf32f37c6aa4c22d3d449a211672ef211739110c98e19dec0fd760647dc36e59ad46d5b8df31b7ed7e33f019e6bb035993f7370f880ae2f5abf1cbe46327f275616d22badda6143653941e92d1cf882806e9293e644c1e3e87702a4918a22f0fe4807720b22d56fb38864ee71b4669d136e3e08c6fe28c715195b8a93541348fa897b0ad71129e27bbfe775b139eb1aad6b3c1235ea9f278d8b6d03c2ed53e13499ed88bf6f3f0981207bd7b69808b64e35342267d3dcdd3e79b84700a8c7e80eab77391bb7ff9c1d29193c4ca955a27814e33f77a5ce69bc8f9046eb352609a99f011ef433c3712bbc54179f0bc8d4b4b13548f249787a5d7152d75b6a9acc2874a8a03732be2b47bbf049acc904bc3a3e56b8b1cb410b388dffd445aef288ef8679bc306337929fb7cf6391b0abca3a1d779e7426546330fb9f26379ca0d19a37bbdfd6169e409c6351eba72047e8dc9577a670f2418c93c9c6499c47d8e68ecfd2ab4c3c48479e4d6b828658c0eda40ee80ab87d7c545b12f833015b694c74388a1ec7586aa0f4beb520dae2af60e9f36722216885ae3d5bc8669e983ecfdce0b0cb1b08ae80cb773cf57f09c8b1e8209aab8452508530ab80753372f166497add34aba0c92aa6225a3f586e419b8c657f0596c931942febf731ed11f62c1c3222e1c9d4de8214a179e8f617e8a96c62c566bdf6e2c3cfeb53aa09899b2a1f6564336c61076144c1b391295da6582effd42924975885d32c7d593304ff02c9358f58dcc74b9795ec7e07d253fb7e65443a66b337e187df8cdfacab16b441c50359f4c9c2fd0b2e29f4b558974b6b916aad2acbe2393ace90c9313d696901dc0bcd3e51bc141561dc6bd7b1cb39ea5920df9c3a661a08441553b35fbc3d5ac1116976fdd3fc54389a13979eb190038ce7a9839f7687c55f117dfc535a0a0576bc1e15fc82abeae87f44f583961abf3e6f73960fddec97f8cd1ccd7fa1fac6f9f092a5ce5ac1030e9499f129991004d58782a433d367df4402acee936bb73b24086f5716c0abac541761a96bd92ba397584457cb69fc6c0d82a43cd54af81c4259eb85d6fd0063e44ac309431140ea5f5488cb06493e46dbfd09b339f145b504a638efe0233476aeec69ca0388a67816ad7507fdaa31082726326a3cf95ca41e67622f9977a80d4433a47fb773eb68f2fb4b4c3e413d5b7d81004f20f36473df3a0be45d890e81f6beda75fb4125a34032c47e0992c74ca261b0b186a3532971d3dd0fff71f8b9c01378e5630b86777738afde9c52362c4fd7c14a343f822b3b47c77f9a3db72429b0fc251c9a42e69bee638e073e0f3eb4afc8e13c5b7da98e101ac0d258248ae46350a225408e9ed4e2fb4a234bae1c1507c89a4c93e5843d60a64afc9e745c9df92287d142cca12e8c2a91bf9c6ee9010000000000000084472360607ae9c7e3497723469efbe13cdd0570d72782300e64c0f67c34788a643d89346ccf74e568363c62227b8cd21a83abcfb912b86362a61e56dcf9b4c3ab388e3fdcdc2c46a9a10e288225a2c807e4ce20257c3a77f897dead09539e0bce562eb8ad46a3821c30132aadc74c9373b4632f7cb60fe2ad74180d79fa43efd9cf8ba046552a5c38216883048122b96dac3a9146e1f8d846a0c024fc174c4c7bd12d79a09a5d6556448d1ae27faa1496e8729262d37885b4f2e2398e859b1ef2682db54b1b53701b1f867aad7546d6ca6dad5526ed61699f3816af5f639a50af3e58f81e209fe7b7299e664cdd96716ce6e346c08463d36d1af576e2db48435d4da127136a8756684d1201965c69e777f8de333e4c11e195ff17f7c44064f5d2cf83d4ca982a91c5a856e98f8c394d12e6e1bc07d3afb8e81524d0cddab6b0db8adbc19065be0c7ac34f8a30079c4c1bef905aa8d8483ac84ddde4727b41e522f369a41d25e01ec2bba121bf493dfd5f56223401ec8c7e7f26e44c1bf37c503aaca44452b02cbecf173f1b9520735a9d4fd7884b775d52836b8ca57d61264120d0dbd408efee3d0cea1f7897e7803f47c71d6cbaddf5dae75694ae0d47f38a4ea1cdcf1c71546f448e67de7bb429dc51b6e736471268f6d1ccd00d1d009fb7aaa77dadc71fa6217d181d7abae6da12895f1cf54b554defbe7873d2a5ce09d1b833667d8478a88c84693f121024c1e331c0dba86522a93b05312f4e5c1306f8f891b8b18b62d7f545e5a23d3753de39d7cd1aa71f79b540988d43a37d751076aeb931de5b7c2f4cb20b9df5129a7be53c061b9a5dff4ec629f8c39034d90f20943f50f0d4929f2b83407023826d5c7ec3286340cca056ef8382b11e5637d4a13be88a8e0476d1f5b5bc8807c8a7c696d4e57c5d560b148e64ee6e1b144ae31e922c8eb36578be06f391930eca1f2a2d25eef001504366e6d5ea9828cb35f24e96767fcbb25e60120bfa80427559db663eb2d04a852b5402e35c9ce1d9bea403acdc572e8c726fa1173a4fd58f40ba0c63e438c48ec0f7ecc13d3c1a92073256e4b6d8bd90a8baa3334c93565250e39fba2bc6c850fcfd5d7e67a3ce97ac43b34c5e7626c4b993c45a8cabdcc4a2ead066a5e7df9eeccc772e5c9501a0d2a38e7830c638c7be606c6937f4908113e77c5c91fff262bf4f9d67a8817fd05bddd832dd2d2e05e455b7133bf95aec9ec0861873738e3de574352b9b373564e6622e4d46fc2ed9f6321b98d96c41aa8f85e6881ca59262b32eba0ad98c56e17e58a220afa70cc214188f52b3789e23b196ff0e2386368badb28653d17506890c054d208e930e27316228a2760c5872093352a5b8aa81b73fdddf39f0479c36f1a91513e3f623fab1e92319227832024c1842528365a2a6e9c4f20ca3dfcc36b582dadd3eb841b37cfd04d7e1b6d40212467a1d0223939b8582a2f9c8faa09e45da314088fae33aa56b42ece6451e83c18895693495bd392caf65902b9ac9dc635a9578e352aeff450e4a8f4cd64fe77be52ced9526118d14ad1fe5dd0a9a5e8ae5a0b0c30e836a0a4bd406a6ba91a4923f0e990e859351ae205be94289566ef397b818d124fef114dbb91aced86f8942203afc68ed1ba78e37caa9dc7de9b7ba0534a0b9fa000e9200e1c5a7cf9ff05c6494a83b49050b11db41871543ad7733d22b3f5e135bc92bd936c6c4f5f773e58ac87584cf5faf7e20e5ab5494629046aa6e3a2f47aff78834929bc1f70f44fc887dfb8f404c2f0f3f4e11873d8d7ce56aab6ee036cb1a64f0b884a0b1a9ec60e3a7c9ce4009841a63d2ee7009810af461dcf09ccdd6f1fb988e9d7a0a6ffa79ac19e411d27f0e8ea74f9f88c71fdd28c43472c1622130a9cec79fe001290a9770bd79b1a8e06ef732d088cc6668561ad1c9e3c552b6b948b7e16b78345ceb41299fcb778b5f806867ca3caa75513ee7458b6d0f354a4ce5737ae8941f4ef859c3fd5d00b0c3ebbe8b0915afd078422cd0996bc2a0b5da08fba1029d6cfefc9e3762c5a0ac5cbf5e2f678947279ffacd359772d66a4eea61c8ef7c8070304b38baea9eb2ed51403d6004d1fefa59ded614d80e72b2a956e19ab9bf17953ff2152d338bdfc2aa6326433e6c2718d98e9c9fa82ca29b0361479e91018a25613e13e578cef517c278cdea4489f9a63ab5f1ad03365ddc683ae6420549fbc87c8a3d4706959b1d8415cfdad17ee4174060a48fbffcda34cd30f8b2c07217baca6bf66a16b8d863080bf59bdb6a7ead37df8c724dfc32f25b5c6bfb0ab13ea0687b9d94eecb0659ed3c3ceab1a96619d2a2c6736a27c55ac604ecaa53b082c9f813c67dafc003cd6f77fc4a03a6835efcb253ee3ce1b0aeaf09f9081b55ecffb7f32759be2e92d32ec98727e07f0c38ca88e13fe825d42416670b33360d43d8cb3239dccea6f869bcfd0abdb13206d7de23e2f0d3bcc3b1df651bf77ad2a96e839cff111040fc8e59388eac43953c004cfaf849cded85e0d03c630708e63bc70935f33047e476a8a7143d8926a745379c94103e25d7e250e0ed5103b0097ff11a2040b9238806bd8ce65bcbee59de5e58c235ac8136dd4a150d4961769376f45b3de9228a4e3d2764dc7046c447afa436b0d6a2d9f7eea37e6cfcad1f7b1c289998c2343b1b3c3b7675bf3ee97abbbfab5ddc79848b99dd4be9d4ca882cb3d5134c4fdf577cfa456954ac3b49dc78a1a721d7fbf0702225fd1845c3e9e4a7ac6893221068ed89901da63cc990e7bc5455d2c5f13c8381488d7781689358b369230cb2810a60b133a47ecfd56fe1839517b378c54adedc42b6a17185a6465155d037e7df4ed36d879c9df1250c2aa222b0af6c987dd3e1b16861332faee1013afdeb325b0f6d99e2a02f6bca904f0ddbc1d66b8aa21e4fc59208dd2c06a7177583d44efbddd8c534911e4d56d5af03d9cff13519c8963ab0146d80148a05ee1d506ef0683761f887ad3b5088cd9eab4f83f7dc914f2dea4188ab7b02484e6d11e24a954f71cf0fb11b4c574037192257de8b46c66a99f8a5765db8c587e542374ae8a4e30f20a91df21ac4a5496d43f436b8dc0edc32b1c87662076cad6196420c9e8ceeb4c8d42b30f3b3202d6891df8cf505700c9bdfe5ed89a2467ace8824cff266b4bd43dd6f84c9623212fa72860ce9801da9d0bb783891292286f1aa7ca8dd3027854dab4bb9b2eb742b29a44d07232523c1fe821d9095a60c7bf92a5a16d8082bc70fa6107bf08913afbb19ccc3df2a1b80e392af4aab62a2d8d328d80dfbb339319a880bc39cc68f5e0d7ef69965c521b7a089a59aad15c8287e1d8675cf034659c42493e8a31ac4a9c7053b1749b8be55bd42c8c41142596e0965b48476272476c5d69155c635a1a98d860aa5f389bb265420f09e6d4f0749b60a3c781e456a4e7157848bd129a61e66439bfa80952619ed6abe2a3c7c3a39bf619e311fda675d195915a5e6a9cbb45d05cdf2e34065e6a36c53972ca0d39c4a902b784e29418c49d6565aadc88bc1368e3382ac6ceb3f562028585994ea5ec5cf85d35bc9d899a31524cce5cd72feff93519d80d92098a872a963fe75d559d3d60de12a338e104a8fa0c4cd5f37f4374d802ddbca45af48583487fc591d6c62253dd97560347b3217362e1981d1835b693f8b85c0fe180ddc3ead34226cd5b0624e2d814514f5242826428bd222f2cba1ce36e268801a3b768df51bd3c8a6aa0103264aa4c72ceea0e3f72fdbd3a87ce4278bef01ca42c58b689a33f23b48c10309def3ee6693ec88b10eebc325b74c8fda2dae370d0088216bf20ce6b4ab0d849409eae8cc88127518fa7bc449d9e50ee5960db12995475ae2c120e8f119226fe8178832b235f554879fef6dd8ecbea16eb6be1594db84ee4db313724f71046dd91c27907c0be87413421cffde57a2b9063daf69a50a4a6c8b86d3527bd395419fef296f8de96dd3a39d171fa33deab36203e69a4029f02f7d296613da067d5c1d72938f88888cb8ddfee92f6b17dee931265993090536aa50c7573c08c32dd8121dbcad464bc45896f198a94d957afe6a7153a506127741b9bbe9984d1b1c26b7a63f0d2f90c14bf17d7f2e8284bf76c4e2506525abbe9eea8e5ad2b3a6d154f1233f293265cbd14e0560c35148c6b79d6ea415a5071c91225e24b3eca4d4d305a930f591d2251c090f0cd08f7bb1489bddc1a83e8acadb39293cd433523f99935cbe3228ef6bd8b0a8f6c1927fa02c14dca043590655e6f2f5eff6b68ff7fa1a8dfb29640532097a1fddb990b6b49f6759b14da96a76a79f4fbe57389db941eb261816c6bf645f1172309f07d9d9623483308f563055c06bd03debbceece152bb12c27278a00478a2af1f2d51095b0decadf7fcedfa9b4103692d38e31e764bc8def322cad1a5a773695c93b07567f7593f7dc46eebe6ebb95666e02216b88df94a5e1b551a21705861b208d85699c53937184bc78e9f5d2eed79d9be5", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x130, 0x0, 0x8, {0x800000000008, 0x2, 0x0, '\x00', {0x1, 0x1, 0x400000000000002, 0x9, 0x0, 0x0, 0xa000, '\x00', 0xffffffffffffffff, 0x29, 0xfff7fffffffffffa, 0x8, {0x100000000, 0x1fffffe}, {0x1f94, 0x6}, {0x8, 0x7}, {0x1b, 0xff}, 0x200008, 0xe19, 0xca94, 0x2}}}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x10ae) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) 3.069105052s ago: executing program 6 (id=6392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f00000002c0)=0x1000) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fsmount(0xffffffffffffffff, 0x0, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x2000000000000103, [0x4b, 0x400]}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000001200)={0x79, 0x0, 0x7de}) 2.657730898s ago: executing program 6 (id=6395): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000095c0)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x20008010) (async) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, 0x0) 2.491190491s ago: executing program 9 (id=6397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(0x0, 0x3) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x30000) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x30000) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x4a7, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x38, 0x79, 0xf3, 0x10, 0x6cd, 0x10b, 0xc14c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x495, 0x3, 0x8, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0xbc, 0x4, 0x8, 0xf4, 0xa5, 0xc8, 0xfc, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7f, 0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0xf7, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x40, 0x5, "92"}]}, @generic={0x9c, 0x8, "c16becef950726edc093a7fd1c5d056d13afbbc74f6505078d411b45df4accda31e9513032b70a88f411a33026bd28190f6ec7f5d5f0f4126fb2e2d1f1ced3916d1f65438834376e17865e05ae8e397dcdc1b78265b8dffca6c4643ca87332daba4e3d3c919c3e4d00061405e86c9a4c57d4955b946f3fcdef2961e8f64682a1fef959f9aee4a2bd9b7604f38039caeed5ad2cb74c432abbf4dd"}], [{{0x9, 0x5, 0xb33d983e120eb1f1, 0x2, 0x3ff, 0x0, 0x11, 0xf}}, {{0x9, 0x5, 0xc, 0x10, 0x1bf, 0x2, 0x4, 0x3, [@generic={0xbd, 0x6, "d3b1353f07609951b98d3aa91f7bc26076a52815244f00229522bc6728801aac6e5f5e22e36fbdf18f18b84004312fff664106350ecd3b0297bc7335f25820398048c6c4faf8a1a21f50decf5128ae55c42b5703877bd09c14f5daf5f5dfbdd3f1b9d8d846bd2365175d8d30fadc0313d2f3ffe349c133e0070b89d0d054767bae8c4f04b04b044fca2177d6a0d38bc6bb6620443975aae5fb33037496b8498792388854e5d5564a48c53b79699dfe3cf67640f21a868220978713"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x81, 0xd5, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0x9d, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x3, 0xd, 0x3}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0xf8, 0xd, 0x40, [@generic={0x79, 0x6a, "f08d83012f2ff96df6f97dfb306c10905e116fbb5bf8592935999d3482822c00cab177bbec798f3954a73da0baec2816e3499a1b78600c1ac2053a9ad37cfcaa91f0fc03ea85b0bebfdc3e048550671017755625f3b0c9e2e683fed7c306fd15507f9e81079bb560cdfbff6abc0021092bc90f5d335d08"}, @generic={0x54, 0x7, "2e6fe14558f0f37d8a33f20c740b0370ada928500268fba419c2d41e71ba80bcdcc75f1173defb73959cc29e595a2dc36cd2fb525c9ac93a94c01b040001dccae5893e5723e2bc1e3e521283ac067d385417"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x2, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x6, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0xd4, 0x3, 0x4, 0x89, 0xac, 0x6b, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x0, 0x4, 0x5, 0x27}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x9}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x6, 0xed}]}], [{{0x9, 0x5, 0x2, 0xa5e9c8203c56366, 0x20, 0x10, 0x1, 0x6}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x8, 0xfc, 0x5, [@generic={0xdc, 0x22, "3d5bebd4d29cf89b4c8a1f6d0f6017a0a90619aece0343f6a73b72133ced92a02ad799e94fd40b49e104caff7f387ef3536d94997b43383e9c4b19644dc7b3074e958c0f36d56da781bca735fcb713538882db29433e0842194146fed3e66f01b6c23118491c5f5d2d8f2ccccbbc18c972d20583f965727cda9d84099633fef1575ff3fceeedb2209f7f49d4494dfd0b6dea13cc1f554a243ca64f609632d37761349613189be6c7d758005c8fc903a2d774f297c2d4c076f30f15c77008c07feea5744fba97f4642f8b97f7b8663f62520e5dd834ca8e2e9720"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x4}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x9, 0x4, 0x9}}, {{0x9, 0x5, 0xe, 0x0, 0x410, 0x9, 0x5, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20e4}]}}]}}, {{0x9, 0x4, 0x97, 0x81, 0x3, 0xf8, 0x8f, 0xd3, 0x3, [@generic={0x72, 0xb, "70659ed89937ada9f62ad921c437552b5876a950e1b5ea3d7afc1e4cf3704ad2efb94277086e1190b1d34e4757e61256bbc6a1022aa9bc2418d10586bc11f4d96963f99291ee11a592542388ff94c44e6fba5e8fc15089a4b69ca26420569b7c76518f1658d965ad30c8e5ccf91ce864"}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x7, 0x80, 0x2}}, {{0x9, 0x5, 0x14, 0x8, 0x40, 0x5, 0xd2, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xcb, 0x40, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xb7, 0xcf6a}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x9}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x6, 0x0, 0x0, 0x10, 0x5f}, 0x35, &(0x7f0000000240)={0x5, 0xf, 0x35, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0xfa02c449fecbc06d, 0x2, 0x4, 0x4f, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x60, 0xfc, 0x1}, @ptm_cap={0x3}, @generic={0x19, 0x10, 0xb, "0b5e571299c5d9002e8d0ffa3354c25b370f0af0833b"}]}, 0x2, [{0x6a, &(0x7f0000000440)=@string={0x6a, 0x3, "6b871f48eb4695e56862d6fa7516deef4c1885ec5141111be1912d322510f1ca3bd012de7b3ffb14bd9846d0dd01eecbf95782371ec4b60e33fd3e6795bd8f606abdfec2e52b451c3e26852f12f8d40a40910120a3a60d9fe11cee4eb6330cba32085c149f5f2d97"}}, {0x34, &(0x7f0000000380)=@string={0x34, 0x3, "5cc0729e95f5ead6628124c19e8f374de95d54793b2da19c1ed09f07dff2ebab13adef94f1f8f15bbd569e2870c1f2f70048"}}]}) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0xc0000, 0x0) setns(r1, 0x80) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070c0702"], 0x10}}, 0x4400c030) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x0, 0x4}}, 0xe8) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}}, 0x20000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000600)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff3d, 0xe00}}], 0x2, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x9, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.817724971s ago: executing program 3 (id=6407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.788744792s ago: executing program 3 (id=6408): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="08001000", @ANYRES32=r3, @ANYBLOB="599000b4e53a852cf20f8f16ccc61abaa2826cf3fe8ba3d435d3dd103e408927fee1253e14605b4bd8d48696de933d541efa18bed9197d214364ee8abc4ce8cdd43387a8b8089366c828bd4cd4637ee20f15b5f636586994857d34c56eef3e258ff1111bce29e0dbad44cb9ba266f5a3625a05148c9e63"], 0x28}], 0x1}, 0x0) 1.648004544s ago: executing program 6 (id=6409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) close_range(r0, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 1.647036504s ago: executing program 9 (id=6410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x9}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x7b}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800, 0x0, 0x2, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) 1.621615355s ago: executing program 0 (id=6411): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381}) (async) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1}) 1.439224127s ago: executing program 9 (id=6412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x401, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') setns(r3, 0x80) listen(0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) 1.387780398s ago: executing program 0 (id=6413): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) prctl$PR_SET_ENDIAN(0x14, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0100001000110300000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0000000000002de79ee84ab834941f87a24d7100000000007b0000000000000032000000fe80000000000000000000000000001b000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000fdffffffffffffff43050000000000000000000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00040000000000000000004c0b120063636d5f62617365286362632d6165732d63652c77703338342d67656e65726963290000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/224, 0xe0}, {0x0}, {0x0}], 0x3, 0xfffffffc, 0x4) 1.360394899s ago: executing program 6 (id=6414): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000740)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40060}, 0x10) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x2, 0x70bd3c, 0x25dfdbfe, {}, ["", "", ""]}, 0x18}}, 0x4900) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 1.30356768s ago: executing program 9 (id=6415): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES32=r0], 0x15) dup(r2) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0xa}, 0x1, 0x80, &(0x7f0000000040)="be71ba45c7c748f1", 0x8, 0x8, 0x8, 0x0, 0x86f4, 0x80, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x25, &(0x7f0000000100)={0x2a, 0x6, 0xffff}) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r7, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) splice(r9, 0x0, r8, 0x0, 0xea7, 0xa) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r10, 0x4080aea2, &(0x7f00000000c0)={[0x1, 0x4000, 0xeeef0000, 0xffff1000], 0x100000000007, 0x14, 0x9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x6, 0x3b4f, {{0x6, 0x4, 0x3, 0x18, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010100, {[@noop]}}}}}) openat(0xffffffffffffff9c, 0x0, 0x107503, 0x8d) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9da35cbdeb50b3010800b6f708", @ANYRES16=0x0, @ANYBLOB="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"], 0x8a4}, 0x1, 0x0, 0x0, 0x7ae2105782a913b0}, 0x4810) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.143990312s ago: executing program 0 (id=6416): read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xe100, 0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1.143702172s ago: executing program 6 (id=6417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}]}]}]}, 0x44}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x3, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x8, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x4, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.028636084s ago: executing program 0 (id=6418): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x8877f468b58bc8b5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x149a82, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f22, 0x12) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 977.807725ms ago: executing program 6 (id=6419): r0 = socket(0x2, 0x3, 0xff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa8}}, 0x8014) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000280)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\x8c\x92\x1d\x0e~\xb6\xc0&\x8c\x15\x8a\xea6\x82%\x01\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x17\a\x00\x00\x00\x00\x00\x00\x00c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xd0_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y\'\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x19\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,+l/v\xd4P\xa3\xef}\x84:R\x00\xa2k\xa5\a,\x0e\xb4^') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r2, 0x22e7c000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000080)=0x7ff, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req={0x8, 0x1, 0x7, 0x1}, 0x10) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000640)=[@code={0xa, 0x5a, {"4e0fc72d1aaa0000360f07b9780a00000f3248b80e000000000000000f23d80f21f835800000e00f23f8f3420f06c4c29daa0c4f660f687e763664440f080f805c000000f00fba2aac"}}, @cpuid={0x14, 0x18, {0x1, 0x1000}}, @rdmsr={0x32, 0x18, {0x84b}}, @cpuid={0x14, 0x18, {0x9, 0xfff}}, @cpuid={0x14, 0x18, {0x4, 0x1}}, @wrmsr={0x1e, 0x20, {0x855, 0x7}}, @cpuid={0x14, 0x18, {0xf, 0x9}}, @uexit={0x0, 0x18, 0x662e8534}, @wr_crn={0x46, 0x20, {0x2, 0x3}}, @wr_crn={0x46, 0x20, {0x8, 0x7fffffffffffffff}}, @cpuid={0x14, 0x18, {0x8, 0xb3cf}}, @wr_crn={0x46, 0x20, {0x8, 0x97}}, @uexit={0x0, 0x18, 0x9}, @wrmsr={0x1e, 0x20, {0x60c, 0x9}}, @cpuid={0x14, 0x18, {0x2, 0x7}}, @code={0xa, 0x59, {"9866ba6100b00eeec4227d34adc983000045f7cd0090000064f23e0f204466baf80cb8f092c685ef66bafc0c66b8900066ef0f07400f0135727bdf84662e44f9460f009507000000"}}, @rdmsr={0x32, 0x18}], 0x243}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000017000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="6426670f01ba010000000fc719660f2d9bee610f009d0400660ff7ea641a720d440f20c066350f000000440f22c0b800008ee8660f388131f32af0", 0x3b}], 0x1, 0x0, &(0x7f0000000200)=[@flags={0x3, 0x20084}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000380)='\x00', 0x1, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000600)='(\x00') 651.84765ms ago: executing program 3 (id=6420): mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x40044}}], 0x1, 0x4) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000140), 0x10000, &(0x7f0000000180)={'trans=xen,', {[{@debug={'debug', 0x3d, 0x7}}, {@posixacl}, {@fscache}, {@privport}], [{@subj_type={'subj_type', 0x3d, 'f2fs\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r2}}, {@fsname={'fsname', 0x3d, 'f2fs\x00'}}, {@dont_measure}]}}) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x40044}}], 0x1, 0x4) (async) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000140), 0x10000, &(0x7f0000000180)={'trans=xen,', {[{@debug={'debug', 0x3d, 0x7}}, {@posixacl}, {@fscache}, {@privport}], [{@subj_type={'subj_type', 0x3d, 'f2fs\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r2}}, {@fsname={'fsname', 0x3d, 'f2fs\x00'}}, {@dont_measure}]}}) (async) 650.83544ms ago: executing program 3 (id=6421): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@directio}, {@afid={'afid', 0x3d, 0x8}}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f76d51f", 0x28}], 0x1}, 0x4b00) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r9, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r9, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 584.710041ms ago: executing program 3 (id=6422): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x6, 0xf6f}, {0x3, 0xfffffffa}]}, 0x14, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 523.690882ms ago: executing program 3 (id=6423): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setgroups(0x1, &(0x7f00000001c0)=[r2]) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r6, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d3e279060cfac2a888c0ac11be19df3aa8bee18ac5f38", @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRES8=r6, @ANYBLOB=',version=9p2000.u,\x00']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYBLOB="8022780d95d78b688a5eafd399a974c05ac78a473648b78ba16905aa2812dcadd1af8934c9acfc03a9b015bda09825cbc5d863b03b0ea7469cd2d6416f4bca8eacb0d3633245a519e8ba8e4e34613fef28c418d1995a1e0d259976"], 0x32600) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140500f6fd"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x881) listen(0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) 0s ago: executing program 0 (id=6424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x4000006da}) kernel console output (not intermixed with test programs): hen no active inc_refs [ 521.585349][ T330] usb 10-1: device descriptor read/8, error -71 [ 521.615135][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5220'. [ 521.642135][T16088] 9pnet_fd: Insufficient options for proto=fd [ 521.793419][T16098] rust_binder: 16094 RLIMIT_NICE not set [ 521.849550][ T330] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 521.908616][ T330] usb 10-1: device descriptor read/8, error -71 [ 522.084213][ T330] usb 10-1: device descriptor read/8, error -71 [ 522.095559][T16112] 9pnet_fd: Insufficient options for proto=fd [ 522.221938][ T330] usb usb10-port1: unable to enumerate USB device [ 522.311816][ T36] kauditd_printk_skb: 1856 callbacks suppressed [ 522.311837][ T36] audit: type=1400 audit(1753706991.024:20802): avc: denied { create } for pid=16124 comm="syz.1.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.342574][ T36] audit: type=1400 audit(1753706991.024:20803): avc: denied { create } for pid=16124 comm="syz.1.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 522.363963][ T36] audit: type=1400 audit(1753706991.024:20804): avc: denied { getopt } for pid=16124 comm="syz.1.5231" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.386513][ T36] audit: type=1400 audit(1753706991.024:20805): avc: denied { ioctl } for pid=16124 comm="syz.1.5231" path="socket:[74297]" dev="sockfs" ino=74297 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.413966][ T36] audit: type=1400 audit(1753706991.052:20806): avc: denied { read write } for pid=16046 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.468329][ T36] audit: type=1400 audit(1753706991.052:20807): avc: denied { sys_module } for pid=16126 comm="syz.8.5232" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 522.510504][ T36] audit: type=1400 audit(1753706991.052:20808): avc: denied { read write open } for pid=16046 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.539921][ T36] audit: type=1400 audit(1753706991.052:20809): avc: denied { ioctl } for pid=16046 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.566656][ T36] audit: type=1400 audit(1753706991.146:20810): avc: denied { read write } for pid=16129 comm="syz.4.5233" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 522.592129][ T36] audit: type=1400 audit(1753706991.146:20811): avc: denied { read write open } for pid=16129 comm="syz.4.5233" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 522.771281][T16163] /dev/loop0: Can't lookup blockdev [ 522.788239][T16165] binder: Bad value for 'max' [ 523.133781][T16193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 523.138227][T16190] rust_binder: Error in use_page_slow: ESRCH [ 523.145136][T16190] rust_binder: use_range failure ESRCH [ 523.151203][T16190] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 523.156851][T16190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 523.165234][T16190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:229 [ 523.278918][T16208] netlink: 'syz.9.5258': attribute type 4 has an invalid length. [ 523.445425][T16219] rust_binder: 27: no such ref 3 [ 523.450440][T16219] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 523.852432][T16226] 9pnet_fd: Insufficient options for proto=fd [ 523.943867][T16236] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5270'. [ 524.050886][T16248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=16248 comm=syz.1.5274 [ 524.077219][ T328] bridge_slave_1: left allmulticast mode [ 524.079543][T16248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=16248 comm=syz.1.5274 [ 524.089057][ T328] bridge_slave_1: left promiscuous mode [ 524.112529][T16248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=16248 comm=syz.1.5274 [ 524.137901][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.152391][ T328] bridge_slave_0: left allmulticast mode [ 524.155926][T16248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65 sclass=netlink_xfrm_socket pid=16248 comm=syz.1.5274 [ 524.161604][ T328] bridge_slave_0: left promiscuous mode [ 524.178868][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.192359][T16248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=16248 comm=syz.1.5274 [ 524.310106][ T328] veth1_macvtap: left promiscuous mode [ 524.327272][ T328] veth0_vlan: left promiscuous mode [ 524.587996][T16289] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 524.950369][ T328] bridge_slave_1: left allmulticast mode [ 524.965868][ T328] bridge_slave_1: left promiscuous mode [ 524.990771][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.998672][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.026794][T16310] rust_binder: 16306 RLIMIT_NICE not set [ 525.056262][ T9] rust_binder: 0: removing orphan mapping 0:4248 [ 525.112842][T16316] /dev/rnullb0: Can't open blockdev [ 525.153913][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5296'. [ 525.186872][ T328] tipc: Left network mode [ 525.187856][T16320] /dev/rnullb0: Can't open blockdev [ 525.214649][T16320] /dev/rnullb0: Can't open blockdev [ 525.464421][T16309] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.482646][T16309] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.500320][T16309] bridge_slave_0: entered allmulticast mode [ 525.507176][T16309] bridge_slave_0: entered promiscuous mode [ 525.516203][T16309] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.530250][T16309] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.546552][T16309] bridge_slave_1: entered allmulticast mode [ 525.560716][T16309] bridge_slave_1: entered promiscuous mode [ 525.767218][T16309] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.774334][T16309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.781636][T16309] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.788718][T16309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.867412][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.885136][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.922296][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.929419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.944158][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.951353][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.246788][T16309] veth0_vlan: entered promiscuous mode [ 526.265524][T16365] /dev/rnullb0: Can't open blockdev [ 526.331625][T16309] veth1_macvtap: entered promiscuous mode [ 526.714412][T16382] rust_binder: Error while translating object. [ 526.714483][T16382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 526.733512][T16382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 526.743544][T16382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 526.754922][T16382] rust_binder: Read failure Err(EFAULT) in pid:2 [ 526.891116][T16384] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5316'. [ 526.906939][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5316'. [ 526.935650][T16386] __vm_enough_memory: pid: 16386, comm: syz.4.5317, bytes: 18014402804453376 not enough memory for the allocation [ 527.590220][T16398] /dev/nbd8: Can't lookup blockdev [ 527.668531][ T36] kauditd_printk_skb: 672 callbacks suppressed [ 527.668554][ T36] audit: type=1400 audit(1753706996.029:21484): avc: denied { read } for pid=16402 comm="syz.9.5324" dev="nsfs" ino=4026532720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 527.703983][ T36] audit: type=1400 audit(1753706996.066:21485): avc: denied { read open } for pid=16402 comm="syz.9.5324" path="net:[4026532720]" dev="nsfs" ino=4026532720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 527.744067][ T36] audit: type=1400 audit(1753706996.066:21486): avc: denied { create } for pid=16402 comm="syz.9.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 527.765071][ T36] audit: type=1400 audit(1753706996.066:21487): avc: denied { read } for pid=16402 comm="syz.9.5324" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 527.789017][ T36] audit: type=1400 audit(1753706996.066:21488): avc: denied { read open } for pid=16402 comm="syz.9.5324" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 527.814715][ T36] audit: type=1400 audit(1753706996.066:21489): avc: denied { ioctl } for pid=16402 comm="syz.9.5324" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 527.839765][ T36] audit: type=1400 audit(1753706996.066:21490): avc: denied { ioctl } for pid=16402 comm="syz.9.5324" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 527.864627][ T36] audit: type=1400 audit(1753706996.066:21491): avc: denied { read write } for pid=16402 comm="syz.9.5324" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.888594][ T36] audit: type=1400 audit(1753706996.066:21492): avc: denied { read write open } for pid=16402 comm="syz.9.5324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.913570][ T36] audit: type=1400 audit(1753706996.066:21493): avc: denied { ioctl } for pid=16402 comm="syz.9.5324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.960402][T16410] rust_binder: Write failure EFAULT in pid:11 [ 527.973439][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 528.155146][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 528.162952][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.174160][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 528.189583][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.198832][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 528.206972][ T9] usb 10-1: SerialNumber: syz [ 528.219789][ T9] usb 10-1: bad CDC descriptors [ 528.432884][ T31] usb 10-1: USB disconnect, device number 18 [ 528.608741][T16419] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 528.616727][T16419] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 528.616753][T16419] rust_binder: Error while translating object. [ 528.628269][T16419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 528.634491][T16419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292 [ 528.652941][ T31] rust_binder: 16415: removing orphan mapping 0:1048 [ 528.753174][T16427] netlink: 'syz.1.5332': attribute type 4 has an invalid length. [ 529.256269][ T45] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 529.268751][T16453] fuse: Unknown parameter '0x0000000000000004aQ' [ 529.346346][T16455] 9pnet: Could not find request transport: vfd [ 529.374436][T16456] 9pnet: Could not find request transport: vfd [ 529.437995][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 529.452938][ T45] usb 9-1: unable to get BOS descriptor or descriptor too short [ 529.472434][ T45] usb 9-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 529.490725][ T45] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.527884][ T45] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 529.558656][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.579390][ T45] usb 9-1: Product: syz [ 529.584953][ T45] usb 9-1: Manufacturer: syz [ 529.589673][ T45] usb 9-1: SerialNumber: syz [ 529.823655][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.832904][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.855337][ T45] usb 9-1: invalid UAC_HEADER (v1) [ 529.866888][ T45] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 529.882247][ T45] usb 9-1: USB disconnect, device number 9 [ 529.950153][T11419] udevd[11419]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 531.076726][T16488] /dev/loop1: Can't lookup blockdev [ 531.551712][T16509] SELinux: security_context_str_to_sid () failed with errno=-22 [ 531.639459][T16514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5362'. [ 531.768164][T16517] 9pnet_fd: Insufficient options for proto=fd [ 531.777425][T16517] overlayfs: workdir and upperdir must be separate subtrees [ 532.110605][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 532.987323][ T45] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 533.062587][ T36] kauditd_printk_skb: 557 callbacks suppressed [ 533.062603][ T36] audit: type=1400 audit(1753707001.080:22051): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.147656][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 533.153624][ T36] audit: type=1400 audit(1753707001.164:22052): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.180473][ T36] audit: type=1400 audit(1753707001.192:22053): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.209156][ T45] usb 10-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.222643][ T45] usb 10-1: config 1 interface 0 has no altsetting 0 [ 533.230452][ T36] audit: type=1400 audit(1753707001.192:22054): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.234583][ T45] usb 10-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 533.257859][ T36] audit: type=1400 audit(1753707001.192:22055): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.266389][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.293612][ T36] audit: type=1400 audit(1753707001.192:22056): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.299628][ T45] usb 10-1: Product: syz [ 533.326801][ T36] audit: type=1400 audit(1753707001.220:22057): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.330851][ T45] usb 10-1: Manufacturer: syz [ 533.356057][ T36] audit: type=1400 audit(1753707001.220:22058): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.360327][ T45] usb 10-1: SerialNumber: syz [ 533.385941][ T36] audit: type=1400 audit(1753707001.220:22059): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.414684][ T36] audit: type=1400 audit(1753707001.220:22060): avc: denied { ioctl } for pid=16546 comm="syz.9.5372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.675117][ T45] usbhid 10-1:1.0: can't add hid device: -71 [ 533.681378][ T45] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 533.693317][ T45] usb 10-1: USB disconnect, device number 19 [ 533.711758][T11422] udevd[11422]: setting owner of /dev/bus/usb/010/019 to uid=0, gid=0 failed: No such file or directory [ 533.753048][T16572] overlayfs: failed to clone upperpath [ 534.687119][ T31] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 534.847450][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 534.855340][ T31] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 534.863853][ T31] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 534.872627][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.882898][ T31] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 534.891914][ T31] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 534.904942][ T31] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 534.914211][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.928756][ T31] usb 9-1: config 0 descriptor?? [ 535.075398][T16600] overlayfs: failed to clone upperpath [ 535.171820][ T31] usb 9-1: USB disconnect, device number 10 [ 535.333834][T16602] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.341022][T16602] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.348228][T16602] bridge_slave_0: entered allmulticast mode [ 535.355908][T16602] bridge_slave_0: entered promiscuous mode [ 535.364003][T16602] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.371175][T16602] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.378391][T16602] bridge_slave_1: entered allmulticast mode [ 535.385068][T16602] bridge_slave_1: entered promiscuous mode [ 535.454765][T16618] overlayfs: failed to clone upperpath [ 535.513180][T16602] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.520250][T16602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.527803][T16602] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.534915][T16602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.588099][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.595624][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.610552][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.617683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.626574][ T46] bridge_slave_1: left allmulticast mode [ 535.632666][ T46] bridge_slave_1: left promiscuous mode [ 535.638635][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.646213][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.697963][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.705094][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.746391][ T46] veth1_macvtap: left promiscuous mode [ 535.751957][ T46] veth0_vlan: left promiscuous mode [ 535.906217][T16602] veth0_vlan: entered promiscuous mode [ 535.943569][T16602] veth1_macvtap: entered promiscuous mode [ 536.039133][T16632] 9pnet_fd: Insufficient options for proto=fd [ 536.066190][ T755] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 536.221855][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5400'. [ 536.376307][ T45] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 536.525907][ T45] usb 2-1: device descriptor read/64, error -71 [ 536.782660][ T45] usb 2-1: device descriptor read/64, error -71 [ 537.039058][ T45] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 537.188733][ T45] usb 2-1: device descriptor read/64, error -71 [ 537.445346][ T45] usb 2-1: device descriptor read/64, error -71 [ 537.563108][ T45] usb usb2-port1: attempt power cycle [ 537.926839][ T45] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 537.950962][ T45] usb 2-1: device descriptor read/8, error -71 [ 538.090050][ T45] usb 2-1: device descriptor read/8, error -71 [ 538.265937][T16682] netlink: 'syz.9.5411': attribute type 16 has an invalid length. [ 538.275171][T16681] netlink: 'syz.9.5411': attribute type 16 has an invalid length. [ 538.343309][ T45] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 538.367463][ T45] usb 2-1: device descriptor read/8, error -71 [ 538.451752][ T36] kauditd_printk_skb: 534 callbacks suppressed [ 538.451789][ T36] audit: type=1400 audit(1753707006.122:22595): avc: denied { execmem } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 538.478733][ T36] audit: type=1400 audit(1753707006.122:22596): avc: denied { create } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.500495][ T36] audit: type=1400 audit(1753707006.122:22597): avc: denied { create } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.522990][ T36] audit: type=1400 audit(1753707006.122:22598): avc: denied { write } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.543949][ T36] audit: type=1400 audit(1753707006.122:22599): avc: denied { read } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.565014][ T36] audit: type=1400 audit(1753707006.122:22600): avc: denied { read } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.585717][ T36] audit: type=1400 audit(1753707006.122:22601): avc: denied { write } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.606825][ T45] usb 2-1: device descriptor read/8, error -71 [ 538.607403][ T36] audit: type=1400 audit(1753707006.122:22602): avc: denied { create } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.633906][ T36] audit: type=1400 audit(1753707006.122:22603): avc: denied { write } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.655016][ T36] audit: type=1400 audit(1753707006.122:22604): avc: denied { read } for pid=16695 comm="syz.9.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.728261][ T45] usb usb2-port1: unable to enumerate USB device [ 539.195729][T16711] /dev/rnullb0: Can't open blockdev [ 539.416006][T16723] binder: Unknown parameter '0x0000000000000004' [ 539.472682][T16725] netlink: 'syz.9.5426': attribute type 16 has an invalid length. [ 539.779976][T16748] overlayfs: failed to clone upperpath [ 540.035061][T16754] sit0: entered promiscuous mode [ 540.052588][T16754] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5433'. [ 540.524303][T16769] rust_binder: 56: no such ref 3 [ 540.534899][T16769] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 540.577233][T16774] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 540.577261][T16774] rust_binder: Read failure Err(EFAULT) in pid:56 [ 540.803221][T16784] rust_binder: Error while translating object. [ 540.809881][T16784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 540.820915][T16784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 540.837478][T16787] overlayfs: failed to clone upperpath [ 541.045663][T16798] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 541.047145][T16798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 541.058200][T16798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 541.065453][T16798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:65 [ 541.614645][ T9] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 541.637600][T16817] overlayfs: failed to clone upperpath [ 541.815766][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 541.830483][ T9] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 541.842285][ T9] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 38989, setting to 64 [ 541.864427][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 541.907962][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 541.943646][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.971599][ T9] usb 2-1: Product: syz [ 541.975924][ T9] usb 2-1: Manufacturer: 醥⷏⃖埱⏼秼뚻䱜翃皅ኋ䘫㋝䯯【養婴὏ᑡ螧맋ꔅ橝箞櫽맡⠨ᚺេᅘ︆뤎ઐ⿤㫾ᆰ툍䓗⬺ [ 542.017421][ T9] usb 2-1: SerialNumber: syz [ 542.049428][T16802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 542.089686][T16802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 542.119423][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5457'. [ 542.405924][T16802] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5447'. [ 542.416424][ T45] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 542.435310][T16839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 542.435346][T16839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 542.490385][ T9] usbhid 2-1:1.0: can't add hid device: -22 [ 542.506015][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 542.518269][ T9] usb 2-1: USB disconnect, device number 84 [ 542.608836][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 542.624712][ T45] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 542.639023][ T45] usb 9-1: config 0 has no interface number 0 [ 542.646182][ T45] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 542.658816][ T45] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 542.673083][ T45] usb 9-1: config 0 interface 255 has no altsetting 0 [ 542.680638][ T45] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 542.690916][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.718248][ T45] usb 9-1: config 0 descriptor?? [ 543.007165][ T9] usb 9-1: USB disconnect, device number 12 [ 543.154770][T16860] 9pnet_fd: Insufficient options for proto=fd [ 543.429702][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5468'. [ 543.491348][T16870] 9pnet_fd: Insufficient options for proto=fd [ 543.610563][T16881] veth0_vlan: entered allmulticast mode [ 543.626842][T16881] veth0_vlan: left promiscuous mode [ 543.646159][T16881] veth0_vlan: entered promiscuous mode [ 543.676680][T16883] netlink: 'syz.9.5475': attribute type 46 has an invalid length. [ 543.847992][ T36] kauditd_printk_skb: 539 callbacks suppressed [ 543.848011][ T36] audit: type=1400 audit(1753707011.163:23144): avc: denied { read } for pid=16894 comm="syz.8.5479" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 543.888672][ T36] audit: type=1400 audit(1753707011.192:23145): avc: denied { read open } for pid=16894 comm="syz.8.5479" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 543.914372][ T36] audit: type=1400 audit(1753707011.201:23146): avc: denied { ioctl } for pid=16894 comm="syz.8.5479" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 543.942065][ T36] audit: type=1400 audit(1753707011.201:23147): avc: denied { set_context_mgr } for pid=16894 comm="syz.8.5479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 543.963106][ T36] audit: type=1400 audit(1753707011.201:23148): avc: denied { ioctl } for pid=16894 comm="syz.8.5479" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 544.009328][ T36] audit: type=1400 audit(1753707011.257:23149): avc: denied { map } for pid=16894 comm="syz.8.5479" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 544.047299][ T36] audit: type=1400 audit(1753707011.257:23150): avc: denied { read } for pid=16894 comm="syz.8.5479" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 544.072832][ T36] audit: type=1400 audit(1753707011.322:23151): avc: denied { mounton } for pid=16894 comm="syz.8.5479" path="/26/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 544.106871][T16908] rust_binder: Error while translating object. [ 544.106907][T16908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 544.113330][T16908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 544.117656][ T36] audit: type=1400 audit(1753707011.407:23152): avc: denied { ioctl } for pid=16894 comm="syz.8.5479" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 544.171080][ T36] audit: type=1400 audit(1753707011.407:23153): avc: denied { call } for pid=16894 comm="syz.8.5479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 544.205991][T16910] overlayfs: failed to clone upperpath [ 544.564121][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5486'. [ 544.836858][T16924] netlink: 'syz.1.5487': attribute type 4 has an invalid length. [ 544.859428][T16924] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5487'. [ 545.092724][T16951] netlink: 220 bytes leftover after parsing attributes in process `syz.9.5496'. [ 545.131869][ T45] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 545.292181][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 545.299680][ T45] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.309993][ T45] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 545.325100][ T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.334227][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 545.342291][ T45] usb 9-1: SerialNumber: syz [ 545.350639][ T45] usb 9-1: bad CDC descriptors [ 545.570755][ T45] usb 9-1: USB disconnect, device number 13 [ 545.847541][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5501'. [ 545.983764][T16971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.996891][T16971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.404007][ T31] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 546.510929][ T755] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 546.564360][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 546.572053][ T31] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.583265][ T31] usb 9-1: config 0 interface 0 has no altsetting 0 [ 546.590215][ T31] usb 9-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 546.599511][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.609255][ T31] usb 9-1: config 0 descriptor?? [ 546.674597][ T755] usb 2-1: not running at top speed; connect to a high speed hub [ 546.684527][ T755] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 546.695577][ T755] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 38989, setting to 64 [ 546.706740][ T755] usb 2-1: config 1 interface 0 has no altsetting 0 [ 546.717518][ T755] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 546.726659][ T755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.734683][ T755] usb 2-1: Product: syz [ 546.738902][ T755] usb 2-1: Manufacturer: 醥⷏⃖埱⏼秼뚻䱜翃皅ኋ䘫㋝䯯【養婴὏ᑡ螧맋ꔅ橝箞櫽맡⠨ᚺេᅘ︆뤎ઐ⿤㫾ᆰ툍䓗⬺ [ 546.754584][ T755] usb 2-1: SerialNumber: syz [ 546.762781][T16977] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 546.770614][T16977] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 547.005055][T16977] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5505'. [ 547.039541][ T755] usbhid 2-1:1.0: can't add hid device: -22 [ 547.055767][ T755] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 547.066820][ T755] usb 2-1: USB disconnect, device number 85 [ 547.986700][T17008] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 548.007279][ T45] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 548.167968][ T45] usb 2-1: device descriptor read/64, error -71 [ 548.169018][T17023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17023 comm=syz.9.5522 [ 548.189541][T17023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17023 comm=syz.9.5522 [ 548.257985][T17028] overlayfs: failed to clone upperpath [ 548.350636][T17032] KVM: debugfs: duplicate directory 17032-4 [ 548.424539][ T45] usb 2-1: device descriptor read/64, error -71 [ 548.691841][ T45] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 548.740968][T17039] binder: Unknown parameter '01777777777777777777777' [ 548.852170][ T45] usb 2-1: device descriptor read/64, error -71 [ 548.864594][T17044] 9pnet_fd: Insufficient options for proto=fd [ 549.108764][ T45] usb 2-1: device descriptor read/64, error -71 [ 549.129737][T17062] netlink: 'syz.8.5536': attribute type 16 has an invalid length. [ 549.213447][ T36] kauditd_printk_skb: 451 callbacks suppressed [ 549.213469][ T36] audit: type=1400 audit(1753707016.177:23605): avc: denied { read write } for pid=16046 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 549.257890][ T45] usb usb2-port1: attempt power cycle [ 549.330980][ T36] audit: type=1400 audit(1753707016.224:23606): avc: denied { read write open } for pid=16046 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 549.342121][T17073] /dev/rnullb0: Can't open blockdev [ 549.373239][ T36] audit: type=1400 audit(1753707016.224:23607): avc: denied { ioctl } for pid=16046 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 549.411443][ T36] audit: type=1400 audit(1753707016.233:23608): avc: denied { create } for pid=17067 comm="syz.9.5538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 549.447777][ T36] audit: type=1400 audit(1753707016.252:23609): avc: denied { ioctl } for pid=16995 comm="syz.1.5513" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.476990][ T36] audit: type=1400 audit(1753707016.252:23610): avc: denied { ioctl } for pid=16995 comm="syz.1.5513" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.505911][ T36] audit: type=1400 audit(1753707016.252:23611): avc: denied { ioctl } for pid=16995 comm="syz.1.5513" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.535566][ T36] audit: type=1400 audit(1753707016.289:23612): avc: denied { mounton } for pid=17072 comm="syz.4.5539" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 549.560668][ T36] audit: type=1400 audit(1753707016.327:23613): avc: denied { ioctl } for pid=16995 comm="syz.1.5513" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.590883][ T36] audit: type=1400 audit(1753707016.327:23614): avc: denied { ioctl } for pid=16995 comm="syz.1.5513" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.643270][ T45] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 549.667081][ T45] usb 2-1: device descriptor read/8, error -71 [ 549.796517][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5548'. [ 549.808447][ T45] usb 2-1: device descriptor read/8, error -71 [ 550.071126][ T45] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 550.100725][ T45] usb 2-1: device descriptor read/8, error -71 [ 550.182603][T17106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.202122][T17106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.211672][T17105] __vm_enough_memory: pid: 17105, comm: syz.8.5551, bytes: 18014402804453376 not enough memory for the allocation [ 550.255217][ T45] usb 2-1: device descriptor read/8, error -71 [ 550.371924][ T45] usb usb2-port1: unable to enumerate USB device [ 550.387326][T17108] /dev/rnullb0: Can't open blockdev [ 551.415382][T17162] binder: Unknown parameter 'defcontext01777777777777777777777' [ 552.268694][T17199] fuseblk: Bad value for 'source' [ 552.390852][ T45] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 552.466182][ T31] usbhid 9-1:0.0: can't add hid device: -32 [ 552.472403][ T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 552.551128][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 552.690080][ T45] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 552.850485][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 552.856061][ T45] usb usb2-port1: attempt power cycle [ 553.186980][T17224] tipc: Started in network mode [ 553.192819][T17224] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 553.201724][T17224] tipc: Enabling of bearer rejected, failed to enable media [ 553.224632][ T45] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 553.247080][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 553.395854][ T45] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 553.419766][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 553.426081][ T45] usb usb2-port1: unable to enumerate USB device [ 553.451368][T17233] netlink: 165 bytes leftover after parsing attributes in process `syz.8.5591'. [ 554.115460][T17240] rust_binder: Write failure EFAULT in pid:168 [ 554.115914][T17241] rust_binder: Write failure EFAULT in pid:168 [ 554.122635][T17243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.154022][T17243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.572998][ T46] bridge_slave_1: left allmulticast mode [ 554.578817][ T46] bridge_slave_1: left promiscuous mode [ 554.584607][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.592328][ T46] bridge_slave_0: left allmulticast mode [ 554.598123][ T46] bridge_slave_0: left promiscuous mode [ 554.604083][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.649658][ T36] kauditd_printk_skb: 677 callbacks suppressed [ 554.649677][ T36] audit: type=1400 audit(1753707022.269:24292): avc: denied { execmem } for pid=17268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 554.718043][ T46] veth1_macvtap: left promiscuous mode [ 554.720535][ T36] audit: type=1400 audit(1753707022.335:24293): avc: denied { read write } for pid=16309 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 554.732068][ T46] veth0_vlan: left promiscuous mode [ 554.778590][ T36] audit: type=1400 audit(1753707022.335:24294): avc: denied { read write open } for pid=16309 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 554.806841][ T36] audit: type=1400 audit(1753707022.363:24295): avc: denied { ioctl } for pid=16309 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 554.837062][ T36] audit: type=1400 audit(1753707022.382:24296): avc: denied { read } for pid=17269 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 554.859555][ T36] audit: type=1400 audit(1753707022.382:24297): avc: denied { read open } for pid=17269 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 554.887527][ T36] audit: type=1400 audit(1753707022.382:24298): avc: denied { mounton } for pid=17269 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 554.954025][ T36] audit: type=1400 audit(1753707022.391:24299): avc: denied { sys_module } for pid=17269 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 555.005566][ T36] audit: type=1400 audit(1753707022.419:24300): avc: denied { read write } for pid=17270 comm="syz.8.5605" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 555.025546][T17275] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 555.035975][T17275] rust_binder: Read failure Err(EFAULT) in pid:167 [ 555.056812][ T36] audit: type=1400 audit(1753707022.419:24301): avc: denied { read write open } for pid=17270 comm="syz.8.5605" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 555.109077][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.116214][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.124893][T17269] bridge_slave_0: entered allmulticast mode [ 555.131420][T17269] bridge_slave_0: entered promiscuous mode [ 555.139870][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.146998][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.154215][T17269] bridge_slave_1: entered allmulticast mode [ 555.161976][T17269] bridge_slave_1: entered promiscuous mode [ 555.254569][T17280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.286467][T17280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.325810][T17280] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5607'. [ 555.499115][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.506340][T17269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.513716][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.520780][T17269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.545378][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.563937][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.565255][T17293] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 555.706329][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.713690][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.732098][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.739305][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.854894][T17312] sock: sock_timestamping_bind_phc: sock not bind to device [ 555.886608][T17314] /dev/rnullb0: Can't open blockdev [ 556.046209][T17269] veth0_vlan: entered promiscuous mode [ 556.166851][T17325] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 556.201205][T17269] veth1_macvtap: entered promiscuous mode [ 556.278339][T17326] rust_binder: 17325 RLIMIT_NICE not set [ 556.280666][T17326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 556.313974][ T755] rust_binder: 17324: removing orphan mapping 0:40 [ 556.906842][T17342] netlink: 220 bytes leftover after parsing attributes in process `syz.9.5624'. [ 556.974844][T17351] random: crng reseeded on system resumption [ 557.033557][T17351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.043586][T17351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.705819][T17369] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 557.713841][T17369] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 557.722528][T17369] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 557.730616][T17369] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 557.875229][T17379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.884706][T17379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.909646][T17379] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5636'. [ 558.816864][T17438] 9pnet_fd: Insufficient options for proto=fd [ 558.828553][T17439] 9pnet_fd: Insufficient options for proto=fd [ 558.878965][T17433] 9pnet_fd: Insufficient options for proto=fd [ 559.044378][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5659'. [ 559.064687][T17451] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5659'. [ 559.097194][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 559.278211][T17470] overlayfs: failed to clone upperpath [ 559.285133][T17468] overlayfs: failed to clone upperpath [ 559.406108][T17475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.457394][T17475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.519292][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5668'. [ 560.028809][ T36] kauditd_printk_skb: 815 callbacks suppressed [ 560.028830][ T36] audit: type=1400 audit(1753707027.302:25117): avc: denied { mounton } for pid=17487 comm="syz.9.5670" path="/234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 560.079673][ T36] audit: type=1400 audit(1753707027.311:25118): avc: denied { mount } for pid=17487 comm="syz.9.5670" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 560.149650][ T36] audit: type=1400 audit(1753707027.414:25119): avc: denied { read write } for pid=16309 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 560.174159][ T36] audit: type=1400 audit(1753707027.414:25120): avc: denied { read write open } for pid=16309 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 560.205494][ T36] audit: type=1400 audit(1753707027.414:25121): avc: denied { ioctl } for pid=16309 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 560.249274][ T36] audit: type=1400 audit(1753707027.461:25122): avc: denied { read write } for pid=17490 comm="syz.8.5671" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 560.278809][ T36] audit: type=1400 audit(1753707027.461:25123): avc: denied { read write open } for pid=17490 comm="syz.8.5671" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 560.313452][ T36] audit: type=1400 audit(1753707027.526:25124): avc: denied { ioctl } for pid=17490 comm="syz.8.5671" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 560.345148][ T36] audit: type=1400 audit(1753707027.564:25125): avc: denied { create } for pid=17492 comm="syz.9.5672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 560.437399][ T36] audit: type=1400 audit(1753707027.564:25126): avc: denied { write } for pid=17492 comm="syz.9.5672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 560.568262][T17516] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 560.568288][T17516] rust_binder: Read failure Err(EFAULT) in pid:213 [ 560.630692][T17521] rust_binder: Write failure EINVAL in pid:216 [ 560.849209][T17525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 561.274778][ T1892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 561.294212][T17542] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 561.302133][T17542] rust_binder: Error while translating object. [ 561.302167][T17542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 561.308482][T17542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:234 [ 561.362697][T17546] netlink: 'syz.9.5690': attribute type 16 has an invalid length. [ 561.606081][ T45] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 561.769336][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 561.777346][T17564] 9pnet_fd: Insufficient options for proto=fd [ 561.779795][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 561.807870][ T45] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 561.817568][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.825649][ T45] usb 2-1: Product: syz [ 561.829897][ T45] usb 2-1: Manufacturer: syz [ 561.834550][ T45] usb 2-1: SerialNumber: syz [ 561.839879][ T45] usb 2-1: config 0 descriptor?? [ 561.847323][T17544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 561.855865][T17544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 562.094269][T17544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 562.110528][T17544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 562.264660][T17588] overlayfs: failed to clone upperpath [ 562.295141][T17588] overlayfs: conflicting options: metacopy=off,verity=on [ 562.389322][T17592] overlayfs: failed to resolve './file0': -2 [ 562.718487][T17601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 562.728668][T17601] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 562.998623][ T45] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 563.019238][ T45] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 08:76:eb:ad:f0:62 [ 563.041234][ T45] usb 2-1: USB disconnect, device number 94 [ 563.050004][ T45] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 563.818453][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5723'. [ 564.203439][ T7362] usb 9-1: USB disconnect, device number 14 [ 564.264771][T17666] netlink: 'syz.1.5727': attribute type 16 has an invalid length. [ 564.287201][T17668] netlink: 57 bytes leftover after parsing attributes in process `syz.3.5729'. [ 564.373478][ T328] bridge_slave_1: left allmulticast mode [ 564.396556][ T328] bridge_slave_1: left promiscuous mode [ 564.402438][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.442981][ T328] bridge_slave_0: left allmulticast mode [ 564.448698][ T328] bridge_slave_0: left promiscuous mode [ 564.481905][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.704134][ T328] veth1_macvtap: left promiscuous mode [ 564.732961][ T328] veth0_vlan: left promiscuous mode [ 564.984322][ T7362] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 565.166026][ T7362] usb 2-1: Using ep0 maxpacket: 32 [ 565.179757][ T7362] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.208843][ T7362] usb 2-1: config 0 interface 0 has no altsetting 0 [ 565.218591][ T7362] usb 2-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 565.232932][ T7362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.251279][ T7362] usb 2-1: config 0 descriptor?? [ 565.274847][T17700] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.282028][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.309083][T17700] bridge_slave_0: entered allmulticast mode [ 565.315535][T17700] bridge_slave_0: entered promiscuous mode [ 565.324069][T17700] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.331903][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.339623][T17700] bridge_slave_1: entered allmulticast mode [ 565.346057][T17700] bridge_slave_1: entered promiscuous mode [ 565.381209][ T36] kauditd_printk_skb: 635 callbacks suppressed [ 565.381244][ T36] audit: type=1400 audit(1753707032.306:25762): avc: denied { setopt } for pid=17704 comm="syz.3.5741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.425745][ T36] audit: type=1400 audit(1753707032.306:25763): avc: denied { write } for pid=17704 comm="syz.3.5741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.456358][ T36] audit: type=1400 audit(1753707032.344:25764): avc: denied { sys_module } for pid=17700 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 565.499875][ T36] audit: type=1400 audit(1753707032.344:25765): avc: denied { sys_module } for pid=17700 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 565.522659][ T36] audit: type=1400 audit(1753707032.362:25766): avc: denied { create } for pid=17706 comm="syz.3.5742" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 565.544485][ T36] audit: type=1400 audit(1753707032.362:25767): avc: denied { ioctl } for pid=17706 comm="syz.3.5742" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=85514 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 565.571195][ T36] audit: type=1400 audit(1753707032.362:25768): avc: denied { ioctl } for pid=17706 comm="syz.3.5742" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=85514 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 565.598244][ T36] audit: type=1400 audit(1753707032.362:25769): avc: denied { ioctl } for pid=17706 comm="syz.3.5742" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=85514 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 565.627836][ T36] audit: type=1400 audit(1753707032.381:25770): avc: denied { sys_module } for pid=17700 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 565.679327][ T36] audit: type=1400 audit(1753707032.400:25771): avc: denied { ioctl } for pid=17688 comm="syz.1.5736" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 565.754105][ T7362] usbhid 2-1:0.0: can't add hid device: -71 [ 565.760202][ T7362] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 565.805021][ T7362] usb 2-1: USB disconnect, device number 95 [ 565.925623][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.932736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.947820][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.955014][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.072606][T17700] veth0_vlan: entered promiscuous mode [ 566.147278][T17700] veth1_macvtap: entered promiscuous mode [ 566.167782][T17748] netlink: 'syz.1.5754': attribute type 4 has an invalid length. [ 566.182763][T17748] /dev/rnullb0: Can't open blockdev [ 566.332631][T17761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 566.333140][T17761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 566.467158][T17772] 9pnet_fd: Insufficient options for proto=fd [ 566.583027][T17780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5765'. [ 566.600765][T17780] netlink: 'syz.1.5765': attribute type 4 has an invalid length. [ 566.610297][T17780] netlink: 'syz.1.5765': attribute type 6 has an invalid length. [ 566.618164][T17780] netlink: 'syz.1.5765': attribute type 4 has an invalid length. [ 566.626994][T17780] netlink: 'syz.1.5765': attribute type 4 has an invalid length. [ 566.635422][T17780] netlink: 'syz.1.5765': attribute type 2 has an invalid length. [ 566.748625][ T7362] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 566.941103][ T7362] usb 7-1: not running at top speed; connect to a high speed hub [ 566.963857][ T7362] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 566.982728][ T7362] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 38989, setting to 64 [ 567.008272][ T7362] usb 7-1: config 1 interface 0 has no altsetting 0 [ 567.030924][ T7362] usb 7-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 567.053191][ T7362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.061772][ T7362] usb 7-1: Product: syz [ 567.066251][ T7362] usb 7-1: Manufacturer: 醥⷏⃖埱⏼秼뚻䱜翃皅ኋ䘫㋝䯯【養婴὏ᑡ螧맋ꔅ橝箞櫽맡⠨ᚺេᅘ︆뤎ઐ⿤㫾ᆰ툍䓗⬺ [ 567.105581][ T7362] usb 7-1: SerialNumber: syz [ 567.123268][T17776] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 567.130952][T17776] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 567.371846][ T7362] usbhid 7-1:1.0: can't add hid device: -22 [ 567.379016][ T7362] usbhid 7-1:1.0: probe with driver usbhid failed with error -22 [ 567.391346][ T7362] usb 7-1: USB disconnect, device number 4 [ 567.453825][ T330] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 567.606102][T17852] overlayfs: failed to clone upperpath [ 567.617808][ T330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.626336][ T330] usb 2-1: not running at top speed; connect to a high speed hub [ 567.636370][ T330] usb 2-1: config 174 has an invalid interface number: 235 but max is 1 [ 567.644759][ T330] usb 2-1: config 174 has an invalid interface number: 151 but max is 1 [ 567.653716][ T330] usb 2-1: config 174 has no interface number 0 [ 567.660385][ T330] usb 2-1: config 174 has no interface number 1 [ 567.666672][ T330] usb 2-1: config 174 interface 235 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 567.677832][ T330] usb 2-1: config 174 interface 235 altsetting 3 endpoint 0x5 has invalid maxpacket 511, setting to 64 [ 567.688998][ T330] usb 2-1: config 174 interface 235 has no altsetting 0 [ 567.699216][ T330] usb 2-1: New USB device found, idVendor=045e, idProduct=04d8, bcdDevice=fa.9a [ 567.708337][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.716382][ T330] usb 2-1: Product: syz [ 567.720562][ T330] usb 2-1: Manufacturer: syz [ 567.725185][ T330] usb 2-1: SerialNumber: syz [ 567.730532][ T330] usb 2-1: Interface #151 referenced by multiple IADs [ 567.739638][T17844] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 567.998759][ T330] usb 2-1: USB disconnect, device number 96 [ 568.258841][T17879] batadv_slave_0: entered promiscuous mode [ 568.331776][T17878] batadv_slave_0: left promiscuous mode [ 568.619103][ T7362] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 568.625097][T17891] netlink: 'syz.3.5803': attribute type 4 has an invalid length. [ 568.788191][T17910] fuse: Invalid gid '00000000000037777777777' [ 568.806654][ T7362] usb 7-1: not running at top speed; connect to a high speed hub [ 568.826361][ T7362] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 568.838781][ T7362] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 38989, setting to 64 [ 568.851769][ T7362] usb 7-1: config 1 interface 0 has no altsetting 0 [ 568.863703][ T7362] usb 7-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 568.873653][ T7362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.883164][ T7362] usb 7-1: Product: syz [ 568.889630][ T7362] usb 7-1: Manufacturer: 醥⷏⃖埱⏼秼뚻䱜翃皅ኋ䘫㋝䯯【養婴὏ᑡ螧맋ꔅ橝箞櫽맡⠨ᚺេᅘ︆뤎ઐ⿤㫾ᆰ툍䓗⬺ [ 568.906270][ T7362] usb 7-1: SerialNumber: syz [ 568.937078][T17884] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 568.952350][T17919] overlayfs: missing 'lowerdir' [ 568.956140][T17884] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 568.975864][T17927] 9pnet_fd: Insufficient options for proto=fd [ 568.985704][T17929] 9pnet_fd: Insufficient options for proto=fd [ 569.204035][ T7362] usbhid 7-1:1.0: can't add hid device: -22 [ 569.219709][ T7362] usbhid 7-1:1.0: probe with driver usbhid failed with error -22 [ 569.239268][ T7362] usb 7-1: USB disconnect, device number 5 [ 569.281942][ T45] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 569.442321][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 569.451586][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 569.460499][ T45] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 569.470662][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.483206][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.492379][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.500559][ T45] usb 2-1: Product: syz [ 569.504753][ T45] usb 2-1: Manufacturer: А [ 569.509306][ T45] usb 2-1: SerialNumber: syz [ 569.757331][T17933] bpf: Bad value for 'mode' [ 569.907468][ T45] usb 2-1: 0:2 : does not exist [ 569.926121][ T45] usb 2-1: USB disconnect, device number 97 [ 569.988304][T11422] udevd[11422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 570.223320][T17965] rust_binder: 29: no such ref 0 [ 570.246693][T17965] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 570.259428][T17967] netlink: 'syz.3.5828': attribute type 27 has an invalid length. [ 570.271561][T17965] rust_binder: Write failure EINVAL in pid:29 [ 570.323689][T17976] binder: Unknown parameter '18446744073709551615' [ 570.426267][T17987] overlayfs: failed to clone upperpath [ 570.804534][ T36] kauditd_printk_skb: 739 callbacks suppressed [ 570.804554][ T36] audit: type=1400 audit(1753707037.382:26511): avc: denied { read } for pid=17993 comm="syz.1.5836" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 570.840279][ T36] audit: type=1400 audit(1753707037.382:26512): avc: denied { read open } for pid=17993 comm="syz.1.5836" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 570.875990][ T36] audit: type=1400 audit(1753707037.382:26513): avc: denied { ioctl } for pid=17993 comm="syz.1.5836" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 570.907495][ T36] audit: type=1400 audit(1753707037.382:26514): avc: denied { create } for pid=17993 comm="syz.1.5836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 570.945084][ T36] audit: type=1400 audit(1753707037.504:26515): avc: denied { mounton } for pid=18003 comm="syz.9.5838" path="/272/file0" dev="tmpfs" ino=1525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 570.969043][ T36] audit: type=1400 audit(1753707037.513:26516): avc: denied { create } for pid=18003 comm="syz.9.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 571.011537][ T36] audit: type=1400 audit(1753707037.513:26517): avc: denied { bind } for pid=18003 comm="syz.9.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 571.032141][T18010] 9pnet_fd: Insufficient options for proto=fd [ 571.038571][ T36] audit: type=1400 audit(1753707037.541:26518): avc: denied { create } for pid=18007 comm="syz.9.5840" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 571.135763][ T36] audit: type=1400 audit(1753707037.541:26519): avc: denied { ioctl } for pid=18007 comm="syz.9.5840" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86616 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 571.199785][ T36] audit: type=1400 audit(1753707037.541:26520): avc: denied { ioctl } for pid=18007 comm="syz.9.5840" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86616 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 571.295200][T18023] 9pnet_fd: Insufficient options for proto=fd [ 571.601783][ T330] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 571.655251][ T45] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 571.764460][ T330] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 571.774335][ T330] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 571.787335][ T330] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 571.796539][ T330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.804700][ T330] usb 7-1: Product: syz [ 571.809280][ T330] usb 7-1: Manufacturer: syz [ 571.813916][ T330] usb 7-1: SerialNumber: syz [ 571.818576][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 571.824825][ T330] usb 7-1: config 0 descriptor?? [ 571.832458][T18025] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 571.840398][ T45] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 571.843002][T18025] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 571.854399][ T45] usb 2-1: config 0 has no interface number 0 [ 571.862468][ T45] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 571.877292][ T45] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 571.890953][ T45] usb 2-1: config 0 interface 255 has no altsetting 0 [ 571.897799][ T45] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 571.907703][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.921402][ T45] usb 2-1: config 0 descriptor?? [ 572.081363][T18025] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 572.089295][T18025] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 572.212066][ T10] usb 2-1: USB disconnect, device number 98 [ 572.965509][ T330] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 572.993582][ T330] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 08:76:eb:ad:f0:62 [ 573.014045][ T330] usb 7-1: USB disconnect, device number 6 [ 573.027173][ T330] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 573.091194][T18066] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 573.440179][T18089] netlink: 4520 bytes leftover after parsing attributes in process `syz.9.5870'. [ 573.449532][T18089] tipc: New replicast peer: 172.30.0.1 [ 573.455284][T18089] tipc: Enabled bearer , priority 10 [ 573.483082][T18087] SELinux: Context system_u:object_r:ksm_device_t:s0 is not valid (left unmapped). [ 573.679006][T18098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 573.679043][T18098] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 573.688747][T18098] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:41 [ 573.707908][ T10] rust_binder: 18097: removing orphan mapping 0:1048 [ 573.804043][ T7362] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 573.964385][ T7362] usb 2-1: Using ep0 maxpacket: 16 [ 573.972230][ T7362] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.982657][ T7362] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 573.997296][ T7362] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.006406][ T7362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 574.014514][ T7362] usb 2-1: SerialNumber: syz [ 574.023092][ T7362] usb 2-1: bad CDC descriptors [ 574.028615][ T330] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 574.188902][ T330] usb 7-1: Using ep0 maxpacket: 16 [ 574.196382][ T330] usb 7-1: unable to get BOS descriptor or descriptor too short [ 574.207639][ T330] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 574.216065][ T330] usb 7-1: can't read configurations, error -71 [ 574.237865][ T31] usb 2-1: USB disconnect, device number 99 [ 574.481687][T18140] fuse: Bad value for 'fd' [ 574.648596][ T7362] tipc: Node number set to 1 [ 574.874430][T18162] netlink: 580 bytes leftover after parsing attributes in process `syz.6.5894'. [ 575.099459][T18180] overlayfs: failed to clone upperpath [ 575.271321][T18188] netlink: 'syz.1.5904': attribute type 30 has an invalid length. [ 575.289810][T18188] tmpfs: Unknown parameter 'smackfsroot' [ 575.517168][T18197] 9pnet_fd: Insufficient options for proto=fd [ 575.761159][T18207] tmpfs: Bad value for 'huge' [ 575.803546][T18210] 9pnet_fd: Insufficient options for proto=fd [ 575.942171][T18222] tipc: Enabling of bearer rejected, failed to enable media [ 575.952418][T18222] /dev/loop0: Can't lookup blockdev [ 576.033059][T18227] overlayfs: failed to clone upperpath [ 576.524444][ T36] kauditd_printk_skb: 682 callbacks suppressed [ 576.524463][ T36] audit: type=1326 audit(1753707042.733:27203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.1.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef438e9a9 code=0x7fc00000 [ 576.624361][ T36] audit: type=1400 audit(1753707042.817:27204): avc: denied { read write } for pid=17700 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.694872][T18242] binder: Unknown parameter 'context' [ 576.700512][ T36] audit: type=1400 audit(1753707042.817:27205): avc: denied { read write open } for pid=17700 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.812774][ T36] audit: type=1400 audit(1753707042.817:27206): avc: denied { ioctl } for pid=17700 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.845247][ T36] audit: type=1400 audit(1753707042.873:27207): avc: denied { create } for pid=18236 comm="syz.1.5920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.870611][ T36] audit: type=1400 audit(1753707042.873:27208): avc: denied { write } for pid=18236 comm="syz.1.5920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.937160][ T36] audit: type=1400 audit(1753707042.873:27209): avc: denied { read } for pid=18236 comm="syz.1.5920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.967635][ T36] audit: type=1400 audit(1753707042.873:27210): avc: denied { read } for pid=18236 comm="syz.1.5920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 577.010968][T18255] overlayfs: failed to clone upperpath [ 577.017486][ T36] audit: type=1400 audit(1753707042.873:27211): avc: denied { read } for pid=18236 comm="syz.1.5920" dev="nsfs" ino=4026532581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 577.066320][ T36] audit: type=1400 audit(1753707042.873:27212): avc: denied { read open } for pid=18236 comm="syz.1.5920" path="net:[4026532581]" dev="nsfs" ino=4026532581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 577.179231][T18264] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 577.197115][T18269] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5931'. [ 577.310604][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 577.470922][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 577.502168][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 577.530079][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.541109][ T10] usb 2-1: config 1 has no interface number 1 [ 577.548302][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 577.566971][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.587576][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.608513][ T10] usb 2-1: Product: syz [ 577.613228][ T10] usb 2-1: Manufacturer: syz [ 577.641803][ T10] usb 2-1: SerialNumber: syz [ 577.715005][T18289] /dev/loop0: Can't lookup blockdev [ 577.780233][T18294] netlink: 'syz.9.5938': attribute type 4 has an invalid length. [ 577.788319][T18295] netlink: 'syz.9.5938': attribute type 4 has an invalid length. [ 577.893230][ T10] usb 2-1: 2:1 : unsupported format bits 0x80 [ 577.912525][ T10] usb 2-1: USB disconnect, device number 100 [ 577.983640][T11422] udevd[11422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 578.146443][ T46] bridge_slave_1: left allmulticast mode [ 578.157178][ T46] bridge_slave_1: left promiscuous mode [ 578.176475][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.203529][ T46] bridge_slave_0: left allmulticast mode [ 578.212779][ T46] bridge_slave_0: left promiscuous mode [ 578.223968][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.330750][T18315] /dev/md0: Can't lookup blockdev [ 578.370082][ T46] veth1_macvtap: left promiscuous mode [ 578.382016][ T46] veth0_vlan: left promiscuous mode [ 578.399288][T18319] /dev/rnullb0: Can't open blockdev [ 578.610218][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.625484][T18316] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.632628][T18316] bridge_slave_0: entered allmulticast mode [ 578.642137][T18316] bridge_slave_0: entered promiscuous mode [ 578.651742][T18316] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.659418][T18316] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.666543][T18316] bridge_slave_1: entered allmulticast mode [ 578.680092][T18316] bridge_slave_1: entered promiscuous mode [ 578.780789][T18347] overlayfs: failed to clone upperpath [ 578.852051][T18316] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.859246][T18316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.866614][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.873698][T18316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.928218][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.936365][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.951658][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.958794][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.970718][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.977930][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.063285][T18316] veth0_vlan: entered promiscuous mode [ 579.101241][T18316] veth1_macvtap: entered promiscuous mode [ 579.249211][T18359] /dev/rnullb0: Can't open blockdev [ 579.693870][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 579.763669][T18381] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 580.088869][T18384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 580.592872][ T7362] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 580.632096][T18399] netlink: 'syz.9.5974': attribute type 4 has an invalid length. [ 580.774387][ T7362] usb 1-1: Using ep0 maxpacket: 8 [ 580.782444][ T7362] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 580.792818][ T7362] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.804908][ T7362] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.814080][ T7362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.822220][ T7362] usb 1-1: Product: Њ [ 580.826671][ T7362] usb 1-1: Manufacturer: 䀊 [ 580.831536][ T7362] usb 1-1: SerialNumber: ᠊ [ 581.066117][ T7362] usb 1-1: 0:2 : does not exist [ 581.091339][ T7362] usb 1-1: USB disconnect, device number 31 [ 581.142301][T11422] udevd[11422]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 581.333645][T18420] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5982'. [ 581.849488][T18441] rust_binder: Write failure EINVAL in pid:23 [ 581.881765][ T36] kauditd_printk_skb: 779 callbacks suppressed [ 581.881787][ T36] audit: type=1400 audit(1753707047.737:27992): avc: denied { read write } for pid=18316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 581.886169][ T1893] Bluetooth: hci0: command 0x1003 tx timeout [ 581.893024][ T36] audit: type=1400 audit(1753707047.737:27993): avc: denied { read write open } for pid=18316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 581.894594][ T1892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 581.919017][ T36] audit: type=1400 audit(1753707047.737:27994): avc: denied { ioctl } for pid=18316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=521 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 581.992379][ T36] audit: type=1400 audit(1753707047.821:27995): avc: denied { read } for pid=18446 comm="syz.0.5991" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 582.015886][ T36] audit: type=1400 audit(1753707047.821:27996): avc: denied { read open } for pid=18446 comm="syz.0.5991" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 582.069128][ T36] audit: type=1400 audit(1753707047.821:27997): avc: denied { read } for pid=18446 comm="syz.0.5991" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 582.101327][T18449] rust_binder: Error while translating object. [ 582.101387][T18449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 582.132025][T18449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 582.139259][ T36] audit: type=1400 audit(1753707047.821:27998): avc: denied { read open } for pid=18446 comm="syz.0.5991" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 582.189301][T18451] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 582.189355][T18451] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 582.206871][ T36] audit: type=1400 audit(1753707047.821:27999): avc: denied { ioctl } for pid=18446 comm="syz.0.5991" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 582.241801][T18451] rust_binder: Read failure Err(EFAULT) in pid:29 [ 582.270825][ T36] audit: type=1400 audit(1753707047.840:28000): avc: denied { read write } for pid=17700 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 582.344984][ T36] audit: type=1400 audit(1753707047.840:28001): avc: denied { read write open } for pid=17700 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 582.391965][T18462] overlayfs: failed to clone upperpath [ 582.557685][T18469] 9pnet_fd: Insufficient options for proto=fd [ 582.636123][T18472] netlink: 1347 bytes leftover after parsing attributes in process `syz.9.5999'. [ 583.005460][T18489] overlayfs: failed to clone upperpath [ 583.292033][T18491] rust_binder: 18488 RLIMIT_NICE not set [ 583.293153][T18491] rust_binder: got new transaction with bad transaction stack [ 583.328235][T18491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 583.417764][T18516] overlayfs: failed to clone upperpath [ 584.462585][ T7362] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 584.655027][ T7362] usb 1-1: Using ep0 maxpacket: 8 [ 584.664192][ T7362] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 72 [ 584.674455][ T7362] usb 1-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 584.687629][ T7362] usb 1-1: config 1 interface 0 has no altsetting 0 [ 584.697190][ T7362] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.706416][ T7362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.714750][ T7362] usb 1-1: Product: Ё [ 584.718919][ T7362] usb 1-1: Manufacturer: 賳芯㎗鱹鐸똣孃訤毟␉ꥇᘡ䗴훶쓒㢿ശ㤑렌뺃펞㥟喠ﴆ농Ỗ⭴뚲ࡡ▆纊动謳㔒Âⴺᨎ賵耲ꓐ䏁ថ좓䲧勴ॅ斛嬠킬쭴葍픁⽡蓩莗ⶍ뾄炻᭝䊏׆ꂷ㪭䞹摑㏢劘㎚⹏뽶쬜䤻롙䷣墻긿劉㾼ጷ [ 584.747035][ T7362] usb 1-1: SerialNumber: ࠐ [ 584.755083][T18573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 584.763911][T18573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 585.204498][T18573] 9pnet_fd: Insufficient options for proto=fd [ 585.214542][ T7362] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 585.231435][ T7362] usb 1-1: USB disconnect, device number 32 [ 585.820368][ T755] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 585.992092][ T755] usb 7-1: Using ep0 maxpacket: 16 [ 585.994734][T18629] syz.9.6054: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0 [ 586.001653][ T755] usb 7-1: config 0 has an invalid interface number: 58 but max is 0 [ 586.012864][T18629] CPU: 1 UID: 0 PID: 18629 Comm: syz.9.6054 Not tainted 6.12.38-syzkaller-gd64d8b7dab32 #0 b11b2e695edb96cef1ea16b3c17c686b1091986c [ 586.012903][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 586.012922][T18629] Call Trace: [ 586.012934][T18629] [ 586.012948][T18629] __dump_stack+0x21/0x30 [ 586.012995][T18629] dump_stack_lvl+0x10c/0x190 [ 586.013029][T18629] ? __cfi_dump_stack_lvl+0x10/0x10 [ 586.013064][T18629] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 586.013100][T18629] dump_stack+0x19/0x20 [ 586.013130][T18629] warn_alloc+0x1bc/0x2a0 [ 586.013160][T18629] ? stack_depot_save_flags+0x38/0x800 [ 586.013198][T18629] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 586.013230][T18629] ? __cfi_warn_alloc+0x10/0x10 [ 586.013258][T18629] ? kasan_save_track+0x4f/0x80 [ 586.013297][T18629] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 586.013333][T18629] ? xskq_create+0x68/0x2a0 [ 586.013369][T18629] ? xsk_init_queue+0xb6/0x120 [ 586.013402][T18629] ? xsk_setsockopt+0x43f/0x6f0 [ 586.013446][T18629] ? do_sock_setsockopt+0x26d/0x400 [ 586.013483][T18629] ? __x64_sys_setsockopt+0x1b8/0x250 [ 586.013520][T18629] ? x64_sys_call+0x2adc/0x2ee0 [ 586.013558][T18629] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 586.013599][T18629] __vmalloc_node_range_noprof+0x135/0x1420 [ 586.013639][T18629] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 586.013671][T18629] ? avc_has_perm+0x1f2/0x220 [ 586.013704][T18629] ? kasan_save_alloc_info+0x40/0x50 [ 586.013735][T18629] ? __kasan_kmalloc+0x96/0xb0 [ 586.013776][T18629] vmalloc_user_noprof+0x77/0x90 [ 586.013807][T18629] ? xskq_create+0xdb/0x2a0 [ 586.013842][T18629] xskq_create+0xdb/0x2a0 [ 586.013878][T18629] xsk_init_queue+0xb6/0x120 [ 586.013913][T18629] xsk_setsockopt+0x43f/0x6f0 [ 586.013946][T18629] ? __cfi_xsk_setsockopt+0x10/0x10 [ 586.013982][T18629] ? do_futex+0x356/0x500 [ 586.014022][T18629] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 586.014053][T18629] ? security_socket_setsockopt+0x33/0xd0 [ 586.014090][T18629] ? __cfi_xsk_setsockopt+0x10/0x10 [ 586.014123][T18629] do_sock_setsockopt+0x26d/0x400 [ 586.014160][T18629] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 586.014199][T18629] __x64_sys_setsockopt+0x1b8/0x250 [ 586.014236][T18629] x64_sys_call+0x2adc/0x2ee0 [ 586.014272][T18629] do_syscall_64+0x58/0xf0 [ 586.014302][T18629] ? clear_bhb_loop+0x50/0xa0 [ 586.014341][T18629] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 586.014379][T18629] RIP: 0033:0x7fc7d7f8e9a9 [ 586.014404][T18629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.014436][T18629] RSP: 002b:00007fc7d8dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 586.014467][T18629] RAX: ffffffffffffffda RBX: 00007fc7d81b5fa0 RCX: 00007fc7d7f8e9a9 [ 586.014490][T18629] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 586.014506][T18629] RBP: 00007fc7d8010d69 R08: 0000000000000004 R09: 0000000000000000 [ 586.014524][T18629] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 586.014543][T18629] R13: 0000000000000000 R14: 00007fc7d81b5fa0 R15: 00007fff53b95ae8 [ 586.014567][T18629] [ 586.014578][T18629] Mem-Info: [ 586.025318][ T755] usb 7-1: config 0 has no interface number 0 [ 586.071512][T18629] active_anon:15898 inactive_anon:3498 isolated_anon:0 [ 586.071512][T18629] active_file:14071 inactive_file:16824 isolated_file:0 [ 586.071512][T18629] unevictable:1 dirty:24 writeback:0 [ 586.071512][T18629] slab_reclaimable:6491 slab_unreclaimable:76991 [ 586.071512][T18629] mapped:27741 shmem:7176 pagetables:1167 [ 586.071512][T18629] sec_pagetables:0 bounce:0 [ 586.071512][T18629] kernel_misc_reclaimable:0 [ 586.071512][T18629] free:1493573 free_pcp:5307 free_cma:0 [ 586.071589][T18629] Node 0 active_anon:63592kB inactive_anon:13992kB active_file:56284kB inactive_file:67296kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:110964kB dirty:96kB writeback:0kB shmem:28704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:6032kB pagetables:4668kB sec_pagetables:0kB all_unreclaimable? no [ 586.081023][ T755] usb 7-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 586.101982][T18629] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965984kB mlocked:0kB bounce:0kB free_pcp:5772kB local_pcp:0kB free_cma:0kB [ 586.111720][ T755] usb 7-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 586.133433][T18629] lowmem_reserve[]: [ 586.140922][ T755] usb 7-1: config 0 interface 58 has no altsetting 0 [ 586.157964][T18629] 0 [ 586.170884][ T755] usb 7-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 586.205767][T18629] 3921 [ 586.213363][ T755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.219086][T18629] 3921 [ 586.223816][ T755] usb 7-1: Product: syz [ 586.227845][T18629] [ 586.232600][ T755] usb 7-1: Manufacturer: syz [ 586.246564][T18629] Normal free:3013952kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52692kB inactive_anon:13992kB active_file:56284kB inactive_file:67296kB unevictable:4kB writepending:96kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:26296kB local_pcp:23988kB free_cma:0kB [ 586.317178][ T755] usb 7-1: SerialNumber: syz [ 586.324433][T18629] lowmem_reserve[]: [ 586.342726][ T755] usb 7-1: config 0 descriptor?? [ 586.387849][T18629] 0 [ 586.439442][T18610] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 586.460385][T18629] 0 [ 586.472250][T18610] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 586.478952][T18629] 0 [ 586.484635][ T755] ums-isd200 7-1:0.58: USB Mass Storage device detected [ 586.495078][T18629] [ 586.594499][T18629] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 586.610800][T18629] Normal: 6*4kB (UE) 1045*8kB (UME) 1870*16kB (UE) 835*32kB (UME) 1092*64kB (UME) 638*128kB (UME) 144*256kB (UME) 61*512kB (UME) 39*1024kB (UME) 13*2048kB (UME) 650*4096kB (UM) = 3013632kB [ 586.629855][T18629] 39073 total pagecache pages [ 586.635239][T18629] 3874 pages in swap cache [ 586.641811][T18629] Free swap = 109148kB [ 586.647573][T18629] Total swap = 124996kB [ 586.651839][T18629] 2097051 pages RAM [ 586.657196][T18629] 0 pages HighMem/MovableOnly [ 586.662049][T18629] 351525 pages reserved [ 586.667685][T18629] 0 pages cma reserved [ 586.675233][T18629] Memory allocations: [ 586.680525][T18629] 0 B 0 init/main.c:1370 func:do_initcalls [ 586.687906][T18629] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 586.696094][T18629] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 586.703933][T18629] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 586.712113][T18629] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 586.720172][T18629] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 586.729001][T18629] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 586.737002][T18629] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 586.745125][T18629] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 586.753173][T18629] 0 B 0 init/initramfs.c:101 func:find_link [ 586.794327][ T755] ums-isd200 7-1:0.58: probe with driver ums-isd200 failed with error -22 [ 587.253548][ T36] kauditd_printk_skb: 404 callbacks suppressed [ 587.253569][ T36] audit: type=1400 audit(1753707052.770:28406): avc: denied { create } for pid=18652 comm="syz.3.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.279728][ T36] audit: type=1400 audit(1753707052.770:28407): avc: denied { ioctl } for pid=18652 comm="syz.3.6060" path="socket:[89501]" dev="sockfs" ino=89501 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.304758][ T36] audit: type=1400 audit(1753707052.770:28408): avc: denied { ioctl } for pid=18652 comm="syz.3.6060" path="socket:[89501]" dev="sockfs" ino=89501 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.344258][ T36] audit: type=1400 audit(1753707052.770:28409): avc: denied { create } for pid=18652 comm="syz.3.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.366115][ T36] audit: type=1400 audit(1753707052.770:28410): avc: denied { write } for pid=18652 comm="syz.3.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.391565][ T330] usb 7-1: USB disconnect, device number 9 [ 587.392759][ T36] audit: type=1400 audit(1753707052.770:28411): avc: denied { read } for pid=18652 comm="syz.3.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.423890][ T36] audit: type=1400 audit(1753707052.817:28412): avc: denied { mounton } for pid=18608 comm="syz.6.6046" path="/43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 587.473652][ T36] audit: type=1400 audit(1753707052.929:28413): avc: denied { read write } for pid=17700 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 587.507524][ T36] audit: type=1400 audit(1753707052.929:28414): avc: denied { read write open } for pid=17700 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 587.554719][ T36] audit: type=1400 audit(1753707052.929:28415): avc: denied { ioctl } for pid=17700 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 588.835357][T18729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 588.840981][T18729] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 588.866850][T18734] rust_binder: Error in use_page_slow: ESRCH [ 588.886111][T18734] rust_binder: use_range failure ESRCH [ 588.898064][T18734] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 588.909862][T18734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 588.930801][T18734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:166 [ 589.673327][T18770] random: crng reseeded on system resumption [ 589.754327][T18776] futex_wake_op: syz.3.6101 tries to shift op by 144; fix this program [ 589.935672][T18791] 9pnet_fd: Insufficient options for proto=fd [ 590.117915][ T330] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 590.291747][ T330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 590.318991][ T330] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 590.333308][ T330] usb 1-1: can't read configurations, error -71 [ 590.535552][T18818] netlink: 'syz.6.6115': attribute type 3 has an invalid length. [ 590.694665][T18832] rust_binder: Error while translating object. [ 590.694717][T18832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 590.701059][T18832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:202 [ 590.980843][T18840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 590.981417][T18841] overlayfs: failed to resolve './file0': -2 [ 591.007401][T18840] netlink: 'syz.0.6122': attribute type 32 has an invalid length. [ 591.040323][T18840] rust_binder: Write failure EFAULT in pid:99 [ 591.092302][T18847] netlink: 1748 bytes leftover after parsing attributes in process `syz.0.6125'. [ 591.276092][T18863] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 591.276120][T18863] rust_binder: Error while translating object. [ 591.285059][T18863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 591.291559][T18863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 591.324394][T18867] overlayfs: failed to resolve './file0': -2 [ 592.196314][T18883] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 592.314454][T18887] kvm: kvm [18886]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000059) = 0x0 [ 592.365453][T18887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 592.385148][T18887] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 592.397994][T18891] overlayfs: failed to resolve './file0': -2 [ 592.610099][ T36] kauditd_printk_skb: 647 callbacks suppressed [ 592.610122][ T36] audit: type=1400 audit(1753707057.774:29063): avc: denied { read } for pid=18910 comm="syz.6.6148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.658499][ T36] audit: type=1400 audit(1753707057.802:29064): avc: denied { read } for pid=18910 comm="syz.6.6148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.686992][ T36] audit: type=1400 audit(1753707057.812:29065): avc: denied { write } for pid=18910 comm="syz.6.6148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.713842][ T36] audit: type=1400 audit(1753707057.812:29066): avc: denied { ioctl } for pid=18910 comm="syz.6.6148" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 592.779875][ T36] audit: type=1400 audit(1753707057.812:29067): avc: denied { mount } for pid=18910 comm="syz.6.6148" name="/" dev="configfs" ino=2580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 592.809993][ T36] audit: type=1400 audit(1753707057.812:29068): avc: denied { read write } for pid=18910 comm="syz.6.6148" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 592.834954][ T36] audit: type=1400 audit(1753707057.812:29069): avc: denied { read write open } for pid=18910 comm="syz.6.6148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 592.861969][ T36] audit: type=1400 audit(1753707057.812:29070): avc: denied { ioctl } for pid=18910 comm="syz.6.6148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 592.896153][ T36] audit: type=1400 audit(1753707057.812:29071): avc: denied { ioctl } for pid=18910 comm="syz.6.6148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 592.922286][ T36] audit: type=1400 audit(1753707057.812:29072): avc: denied { ioctl } for pid=18910 comm="syz.6.6148" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 592.929580][ T45] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 593.120640][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 593.132687][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 593.146243][ T45] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 593.155694][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.165680][ T45] usb 7-1: Product: syz [ 593.169944][ T45] usb 7-1: Manufacturer: syz [ 593.174592][ T45] usb 7-1: SerialNumber: syz [ 593.184839][ T45] usb 7-1: config 0 descriptor?? [ 593.208671][T18911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 593.217130][T18911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 593.459601][T18911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 593.480558][T18911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 593.502584][T18936] overlayfs: failed to resolve './file1': -2 [ 593.514797][T18938] /dev/rnullb0: Can't open blockdev [ 594.148629][ T45] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 594.170562][ T45] usb 7-1: USB disconnect, device number 10 [ 594.310151][T18954] x_tables: duplicate underflow at hook 2 [ 594.380147][T18966] fuseblk: Unknown parameter 'group_Zd' [ 595.762551][ T755] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 595.807773][T19044] /dev/rnullb0: Can't open blockdev [ 595.819610][T19044] /dev/rnullb0: Can't open blockdev [ 595.894743][T19056] overlayfs: failed to resolve './file1': -2 [ 595.929509][ T755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 595.949081][ T755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 595.963087][ T755] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 595.976339][ T755] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 595.988178][ T755] usb 1-1: Product: syz [ 595.992412][ T755] usb 1-1: Manufacturer: syz [ 596.008601][ T755] usb 1-1: SerialNumber: syz [ 596.015471][ T755] usb 1-1: config 0 descriptor?? [ 596.046685][T19018] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 596.058381][T19063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 596.058443][T19063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:236 [ 596.296514][T19018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.328363][T19018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.416079][T19088] IPv6: NLM_F_CREATE should be specified when creating new route [ 596.425630][ T31] usb 1-1: USB disconnect, device number 35 [ 596.538416][T19092] netlink: 'syz.6.6216': attribute type 32 has an invalid length. [ 596.669809][T19101] netlink: 'syz.3.6217': attribute type 12 has an invalid length. [ 596.817079][T19107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.957140][T19138] overlayfs: failed to resolve './file1': -2 [ 597.969940][ T36] kauditd_printk_skb: 524 callbacks suppressed [ 597.969962][ T36] audit: type=1400 audit(1753707062.779:29595): avc: denied { mounton } for pid=19137 comm="syz.3.6233" path="/191/bus" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 598.066922][ T36] audit: type=1400 audit(1753707062.881:29596): avc: denied { read write } for pid=18316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.125172][ T36] audit: type=1400 audit(1753707062.881:29597): avc: denied { read write open } for pid=18316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.157035][T19144] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 598.189320][ T36] audit: type=1400 audit(1753707062.881:29598): avc: denied { ioctl } for pid=18316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=521 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.264140][ T36] audit: type=1400 audit(1753707062.966:29599): avc: denied { read } for pid=19142 comm="syz.0.6236" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 598.313028][ T36] audit: type=1400 audit(1753707062.966:29600): avc: denied { read open } for pid=19142 comm="syz.0.6236" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 598.345368][ T36] audit: type=1400 audit(1753707062.966:29601): avc: denied { ioctl } for pid=19142 comm="syz.0.6236" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 598.372669][ T36] audit: type=1400 audit(1753707062.966:29602): avc: denied { call } for pid=19142 comm="syz.0.6236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 598.409360][ T36] audit: type=1400 audit(1753707062.994:29603): avc: denied { read write } for pid=18316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.457495][T19156] rust_binder: Read failure Err(EAGAIN) in pid:169 [ 598.457855][T19156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 598.476708][T19156] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 598.483457][ T36] audit: type=1400 audit(1753707062.994:29604): avc: denied { read write open } for pid=18316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.495935][T19159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 598.618364][T19164] 9pnet_fd: Insufficient options for proto=fd [ 598.950819][T19178] rust_binder: Error in use_page_slow: ESRCH [ 598.950850][T19178] rust_binder: use_range failure ESRCH [ 598.965700][T19178] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 598.976023][T19178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 598.993884][T19178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:267 [ 599.332612][T19195] /dev/nbd9: Can't lookup blockdev [ 599.579125][ T31] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 599.743381][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 599.753865][T19223] batadv_slave_1: entered promiscuous mode [ 599.763143][ T31] usb 7-1: not running at top speed; connect to a high speed hub [ 599.777802][ T31] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 599.790257][ T31] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.804551][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 599.815468][ T31] usb 7-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 599.826673][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.834768][ T31] usb 7-1: Product: syz [ 599.839112][ T31] usb 7-1: Manufacturer: syz [ 599.843753][ T31] usb 7-1: SerialNumber: syz [ 599.850794][T19193] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 599.895049][T19224] batadv_slave_1: left promiscuous mode [ 600.084703][ T31] usbhid 7-1:1.0: can't add hid device: -22 [ 600.107411][ T31] usbhid 7-1:1.0: probe with driver usbhid failed with error -22 [ 600.132796][ T31] usb 7-1: USB disconnect, device number 11 [ 600.497191][T19259] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6274'. [ 600.541270][ T7362] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 600.625849][T19271] 9pnet_fd: Insufficient options for proto=fd [ 600.636126][T19272] 9pnet_fd: Insufficient options for proto=fd [ 600.726145][ T7362] usb 1-1: not running at top speed; connect to a high speed hub [ 600.743194][ T7362] usb 1-1: config 92 has an invalid interface number: 146 but max is 0 [ 600.762412][ T7362] usb 1-1: config 92 contains an unexpected descriptor of type 0x1, skipping [ 600.776804][ T7362] usb 1-1: config 92 has no interface number 0 [ 600.783308][ T7362] usb 1-1: config 92 interface 146 has no altsetting 0 [ 600.808165][ T7362] usb 1-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=a4.0a [ 600.829888][ T7362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.837956][ T7362] usb 1-1: Product: syz [ 600.861978][ T7362] usb 1-1: Manufacturer: syz [ 600.866704][ T7362] usb 1-1: SerialNumber: syz [ 601.201006][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6285'. [ 601.214915][ T31] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 601.224353][T19295] 9pnet_fd: Insufficient options for proto=fd [ 601.242317][T19295] overlayfs: failed to clone upperpath [ 601.364433][ T31] usb 7-1: device descriptor read/64, error -71 [ 601.546443][T19317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6296'. [ 601.631711][ T31] usb 7-1: device descriptor read/64, error -71 [ 601.696197][ T7362] rndis_host 1-1:92.146: invalid descriptor buffer length [ 601.714424][ T7362] usb 1-1: bad CDC descriptors [ 601.720303][ T7362] cdc_acm 1-1:92.146: invalid descriptor buffer length [ 601.738759][ T7362] usb 1-1: USB disconnect, device number 36 [ 601.835349][T19331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 601.888357][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 601.909917][T19334] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 601.917783][T19334] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 601.918671][T19334] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 602.048684][ T31] usb 7-1: device descriptor read/64, error -71 [ 602.315909][ T31] usb 7-1: device descriptor read/64, error -71 [ 602.436686][ T31] usb usb7-port1: attempt power cycle [ 602.661550][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6311'. [ 602.786651][T19368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 602.815778][ T31] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 602.863788][ T31] usb 7-1: device descriptor read/8, error -71 [ 602.897690][T19371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 603.002957][ T31] usb 7-1: device descriptor read/8, error -71 [ 603.278079][ T31] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 603.301737][ T31] usb 7-1: device descriptor read/8, error -71 [ 603.360442][ T36] kauditd_printk_skb: 579 callbacks suppressed [ 603.360463][ T36] audit: type=1400 audit(1753707067.830:30182): avc: denied { create } for pid=19384 comm="syz.3.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 603.387410][ T36] audit: type=1400 audit(1753707067.830:30183): avc: denied { write } for pid=19384 comm="syz.3.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 603.408069][ T36] audit: type=1400 audit(1753707067.830:30184): avc: denied { read } for pid=19384 comm="syz.3.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 603.428623][ T36] audit: type=1400 audit(1753707067.830:30185): avc: denied { read } for pid=19384 comm="syz.3.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 603.449240][ T36] audit: type=1400 audit(1753707067.839:30186): avc: denied { wake_alarm } for pid=19384 comm="syz.3.6318" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 603.470708][ T36] audit: type=1400 audit(1753707067.839:30187): avc: denied { wake_alarm } for pid=19384 comm="syz.3.6318" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 603.492406][ T36] audit: type=1400 audit(1753707067.839:30188): avc: denied { wake_alarm } for pid=19384 comm="syz.3.6318" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 603.513770][ T36] audit: type=1400 audit(1753707067.839:30189): avc: denied { create } for pid=19384 comm="syz.3.6318" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 603.535623][ T36] audit: type=1400 audit(1753707067.839:30190): avc: denied { ioctl } for pid=19384 comm="syz.3.6318" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=91947 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 603.562188][ T36] audit: type=1400 audit(1753707067.839:30191): avc: denied { ioctl } for pid=19384 comm="syz.3.6318" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=91947 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 603.588546][ T31] usb 7-1: device descriptor read/8, error -71 [ 603.716386][ T31] usb usb7-port1: unable to enumerate USB device [ 604.082502][T19415] overlayfs: missing 'lowerdir' [ 604.088841][T19416] rust_binder: 19411 RLIMIT_NICE not set [ 604.091138][T19411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 604.102838][T19411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 604.130922][T19417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 604.454017][ T7362] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 604.603692][ T7362] usb 1-1: device descriptor read/64, error -71 [ 604.861233][ T7362] usb 1-1: device descriptor read/64, error -71 [ 605.127547][ T7362] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 605.224957][T19455] tipc: Enabling of bearer rejected, failed to enable media [ 605.307794][T19457] overlayfs: missing 'lowerdir' [ 605.309402][ T7362] usb 1-1: device descriptor read/64, error -71 [ 605.510981][T19465] 9pnet_fd: Insufficient options for proto=fd [ 605.528980][T19467] overlayfs: missing 'lowerdir' [ 605.558145][T19470] rust_binder: Error while translating object. [ 605.558185][T19470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 605.566527][T19470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:299 [ 605.576924][T19469] tipc: Enabling of bearer rejected, failed to enable media [ 605.587234][ T7362] usb 1-1: device descriptor read/64, error -71 [ 605.727376][ T7362] usb usb1-port1: attempt power cycle [ 605.781519][T19484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 605.787381][T19487] overlay: Unknown parameter 'fsmagic' [ 605.801032][T19484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 606.111098][ T7362] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 606.168012][ T7362] usb 1-1: device descriptor read/8, error -71 [ 606.224736][T19501] tipc: Started in network mode [ 606.239412][T19501] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 606.259222][T19501] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0038 [ 606.270192][T19501] tipc: Enabled bearer , priority 10 [ 606.320084][ T7362] usb 1-1: device descriptor read/8, error -71 [ 606.554596][T19535] overlayfs: failed to clone upperpath [ 606.592136][ T7362] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 606.626904][ T7362] usb 1-1: device descriptor read/8, error -71 [ 606.725415][T19556] netlink: 'syz.3.6371': attribute type 16 has an invalid length. [ 606.776805][ T7362] usb 1-1: device descriptor read/8, error -71 [ 606.912988][ T7362] usb usb1-port1: unable to enumerate USB device [ 607.442684][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6378'. [ 607.468802][ T7362] tipc: Node number set to 1 [ 607.612058][T19582] 9pnet_fd: Insufficient options for proto=fd [ 607.670392][T19585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19585 comm=syz.3.6382 [ 607.826780][T19591] /dev/nullb0: Can't lookup blockdev [ 608.738942][ T36] kauditd_printk_skb: 751 callbacks suppressed [ 608.738960][ T36] audit: type=1400 audit(1753707078.864:30943): avc: denied { read write } for pid=17700 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.793848][ T36] audit: type=1400 audit(1753707078.864:30944): avc: denied { read write open } for pid=17700 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.831992][ T36] audit: type=1400 audit(1753707078.864:30945): avc: denied { ioctl } for pid=17700 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.859685][ T36] audit: type=1400 audit(1753707078.902:30946): avc: denied { ioctl } for pid=19607 comm="syz.0.6388" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 608.867181][ T7362] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 608.893681][ T36] audit: type=1400 audit(1753707078.976:30947): avc: denied { write } for pid=19615 comm="syz.6.6392" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 608.983049][ T36] audit: type=1400 audit(1753707078.976:30948): avc: denied { write open } for pid=19615 comm="syz.6.6392" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 609.016197][ T36] audit: type=1400 audit(1753707079.005:30949): avc: denied { ioctl } for pid=19615 comm="syz.6.6392" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 609.044077][ T36] audit: type=1400 audit(1753707079.079:30950): avc: denied { ioctl } for pid=19607 comm="syz.0.6388" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.072038][ T36] audit: type=1400 audit(1753707079.079:30951): avc: denied { ioctl } for pid=19607 comm="syz.0.6388" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.129612][ T7362] usb 1-1: unable to get BOS descriptor or descriptor too short [ 609.139952][ T7362] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.159874][ T7362] usb 1-1: config 1 interface 0 has no altsetting 0 [ 609.177466][ T36] audit: type=1400 audit(1753707079.079:30952): avc: denied { ioctl } for pid=19607 comm="syz.0.6388" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.213041][ T7362] usb 1-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 609.248060][ T7362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.285279][ T7362] usb 1-1: Product: syz [ 609.291552][ T7362] usb 1-1: Manufacturer: syz [ 609.299309][ T7362] usb 1-1: SerialNumber: syz [ 609.598609][ T7362] usbhid 1-1:1.0: can't add hid device: -22 [ 609.616103][ T7362] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 609.634918][ T7362] usb 1-1: USB disconnect, device number 41 [ 609.779306][T19675] netlink: 393 bytes leftover after parsing attributes in process `syz.3.6403'. [ 610.230067][T19693] netlink: 'syz.9.6410': attribute type 1 has an invalid length. [ 610.251364][T19690] KVM: debugfs: duplicate directory 19690-4 [ 610.288146][T19696] netlink: 'syz.3.6408': attribute type 16 has an invalid length. [ 610.300084][T19695] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.510816][T19702] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6413'. [ 610.551799][T19705] SELinux: security_context_str_to_sid () failed with errno=-22 [ 610.790760][T19713] rust_binder: Read failure Err(EFAULT) in pid:332 [ 611.189099][ T45] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 611.343834][T19728] 9pnet_fd: Insufficient options for proto=fd [ 611.360144][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 611.369217][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.380248][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.390138][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 611.403541][ T45] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 611.412808][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.421872][ T45] usb 7-1: config 0 descriptor?? [ 611.861448][ T45] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 611.868813][ T45] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 611.881386][ T45] ================================================================== [ 611.889648][ T45] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 611.897300][ T45] Read of size 1472 at addr ffff888109672641 by task kworker/1:1/45 [ 611.905459][ T45] [ 611.907826][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.12.38-syzkaller-gd64d8b7dab32 #0 b11b2e695edb96cef1ea16b3c17c686b1091986c [ 611.907851][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 611.907865][ T45] Workqueue: usb_hub_wq hub_event [ 611.907894][ T45] Call Trace: [ 611.907901][ T45] [ 611.907909][ T45] __dump_stack+0x21/0x30 [ 611.907931][ T45] dump_stack_lvl+0x10c/0x190 [ 611.907952][ T45] ? __cfi_dump_stack_lvl+0x10/0x10 [ 611.907972][ T45] ? __cfi__printk+0x10/0x10 [ 611.907997][ T45] print_address_description+0x71/0x220 [ 611.908015][ T45] print_report+0x4a/0x70 [ 611.908030][ T45] kasan_report+0x163/0x1a0 [ 611.908046][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 611.908069][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 611.908091][ T45] kasan_check_range+0x299/0x2a0 [ 611.908110][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 611.908132][ T45] __asan_memcpy+0x31/0x80 [ 611.908153][ T45] mon_bin_event+0x12c1/0x23e0 [ 611.908177][ T45] ? mon_bin_complete+0x50/0x50 [ 611.908199][ T45] ? __kmalloc_noprof+0x1b1/0x450 [ 611.908221][ T45] ? __hid_request+0x1e5/0x410 [ 611.908243][ T45] ? hid_connect+0x49a/0x1a20 [ 611.908266][ T45] ? hid_hw_start+0xcb/0x160 [ 611.908288][ T45] ? ms_probe+0x194/0x460 [ 611.908309][ T45] ? __cfi_mon_bin_submit+0x10/0x10 [ 611.908330][ T45] mon_bin_submit+0x2b/0x40 [ 611.908351][ T45] mon_submit+0x1b9/0x230 [ 611.908370][ T45] usb_hcd_submit_urb+0x12d/0x1a20 [ 611.908386][ T45] ? bus_probe_device+0x18b/0x270 [ 611.908407][ T45] ? usb_probe_device+0x1d4/0x380 [ 611.908422][ T45] ? really_probe+0x2d6/0x890 [ 611.908436][ T45] ? __driver_probe_device+0x198/0x280 [ 611.908462][ T45] ? driver_probe_device+0x54/0x3f0 [ 611.908477][ T45] ? __device_attach_driver+0x2f1/0x4b0 [ 611.908504][ T45] usb_submit_urb+0x111b/0x1800 [ 611.908526][ T45] usb_start_wait_urb+0x11b/0x2f0 [ 611.908550][ T45] ? usb_api_blocking_completion+0xd0/0xd0 [ 611.908573][ T45] ? __kasan_kmalloc+0x96/0xb0 [ 611.908598][ T45] ? __kasan_check_write+0x18/0x20 [ 611.908619][ T45] ? usb_alloc_urb+0x9b/0x200 [ 611.908639][ T45] usb_control_msg+0x25a/0x490 [ 611.908661][ T45] usbhid_raw_request+0x457/0x590 [ 611.908683][ T45] __hid_request+0x1e5/0x410 [ 611.908705][ T45] hidinput_connect+0x241b/0x3340 [ 611.908725][ T45] hid_connect+0x49a/0x1a20 [ 611.908749][ T45] ? usbhid_start+0x1a67/0x2530 [ 611.908769][ T45] ? __cfi_hid_connect+0x10/0x10 [ 611.908794][ T45] hid_hw_start+0xcb/0x160 [ 611.908816][ T45] ms_probe+0x194/0x460 [ 611.908838][ T45] hid_device_probe+0x2c4/0x5d0 [ 611.908863][ T45] ? __cfi_hid_device_probe+0x10/0x10 [ 611.908887][ T45] really_probe+0x2d6/0x890 [ 611.908903][ T45] __driver_probe_device+0x198/0x280 [ 611.908928][ T45] driver_probe_device+0x54/0x3f0 [ 611.908943][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 611.908959][ T45] __device_attach_driver+0x2f1/0x4b0 [ 611.908975][ T45] bus_for_each_drv+0x260/0x2f0 [ 611.908995][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 611.909010][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 611.909030][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 611.909052][ T45] __device_attach+0x2bd/0x3a0 [ 611.909076][ T45] ? device_attach+0x40/0x40 [ 611.909100][ T45] ? _raw_spin_lock+0x8c/0x120 [ 611.909118][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 611.909138][ T45] device_initial_probe+0x1e/0x30 [ 611.909162][ T45] bus_probe_device+0x18b/0x270 [ 611.909184][ T45] device_add+0x80c/0xc00 [ 611.909208][ T45] hid_add_device+0x39b/0x560 [ 611.909235][ T45] usbhid_probe+0xde3/0x12b0 [ 611.909257][ T45] usb_probe_interface+0x696/0xc00 [ 611.909274][ T45] ? __cfi_usb_probe_interface+0x10/0x10 [ 611.909290][ T45] really_probe+0x2d6/0x890 [ 611.909305][ T45] __driver_probe_device+0x198/0x280 [ 611.909331][ T45] driver_probe_device+0x54/0x3f0 [ 611.909346][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 611.909362][ T45] __device_attach_driver+0x2f1/0x4b0 [ 611.909379][ T45] bus_for_each_drv+0x260/0x2f0 [ 611.909399][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 611.909415][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 611.909436][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 611.909456][ T45] __device_attach+0x2bd/0x3a0 [ 611.909481][ T45] ? device_attach+0x40/0x40 [ 611.909511][ T45] ? _raw_spin_lock+0x8c/0x120 [ 611.909530][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 611.909550][ T45] device_initial_probe+0x1e/0x30 [ 611.909575][ T45] bus_probe_device+0x18b/0x270 [ 611.909596][ T45] device_add+0x80c/0xc00 [ 611.909621][ T45] usb_set_configuration+0x1ad4/0x20b0 [ 611.909650][ T45] usb_generic_driver_probe+0x95/0x160 [ 611.909672][ T45] usb_probe_device+0x1d4/0x380 [ 611.909686][ T45] ? __cfi_usb_probe_device+0x10/0x10 [ 611.909702][ T45] really_probe+0x2d6/0x890 [ 611.909717][ T45] __driver_probe_device+0x198/0x280 [ 611.909743][ T45] driver_probe_device+0x54/0x3f0 [ 611.909758][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 611.909774][ T45] __device_attach_driver+0x2f1/0x4b0 [ 611.909790][ T45] bus_for_each_drv+0x260/0x2f0 [ 611.909810][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 611.909826][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 611.909847][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 611.909868][ T45] __device_attach+0x2bd/0x3a0 [ 611.909892][ T45] ? device_attach+0x40/0x40 [ 611.909916][ T45] ? _raw_spin_lock+0x8c/0x120 [ 611.909934][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 611.909954][ T45] device_initial_probe+0x1e/0x30 [ 611.909978][ T45] bus_probe_device+0x18b/0x270 [ 611.909999][ T45] device_add+0x80c/0xc00 [ 611.910024][ T45] usb_new_device+0x9ed/0x1590 [ 611.910047][ T45] ? __cfi_usb_new_device+0x10/0x10 [ 611.910070][ T45] hub_event+0x2c81/0x4270 [ 611.910101][ T45] ? __cfi_hub_event+0x10/0x10 [ 611.910125][ T45] ? __kasan_check_write+0x18/0x20 [ 611.910147][ T45] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 611.910170][ T45] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 611.910190][ T45] ? kick_pool+0xb9/0x550 [ 611.910206][ T45] process_scheduled_works+0x7d2/0x1020 [ 611.910233][ T45] worker_thread+0xc58/0x1250 [ 611.910259][ T45] kthread+0x2ca/0x370 [ 611.910273][ T45] ? __cfi_worker_thread+0x10/0x10 [ 611.910297][ T45] ? __cfi_kthread+0x10/0x10 [ 611.910311][ T45] ret_from_fork+0x67/0xa0 [ 611.910332][ T45] ? __cfi_kthread+0x10/0x10 [ 611.910346][ T45] ret_from_fork_asm+0x1a/0x30 [ 611.910370][ T45] [ 611.910377][ T45] [ 612.096147][T19718] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6419'. [ 612.096834][ T45] Allocated by task 45: [ 612.096850][ T45] kasan_save_track+0x3e/0x80 [ 612.103719][T19718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.107446][ T45] kasan_save_alloc_info+0x40/0x50 [ 612.578390][ T45] __kasan_kmalloc+0x96/0xb0 [ 612.583011][ T45] __kmalloc_noprof+0x1b1/0x450 [ 612.587884][ T45] __hid_request+0xa9/0x410 [ 612.592443][ T45] hidinput_connect+0x241b/0x3340 [ 612.597593][ T45] hid_connect+0x49a/0x1a20 [ 612.602222][ T45] hid_hw_start+0xcb/0x160 [ 612.606667][ T45] ms_probe+0x194/0x460 [ 612.610836][ T45] hid_device_probe+0x2c4/0x5d0 [ 612.615719][ T45] really_probe+0x2d6/0x890 [ 612.620328][ T45] __driver_probe_device+0x198/0x280 [ 612.625807][ T45] driver_probe_device+0x54/0x3f0 [ 612.630971][ T45] __device_attach_driver+0x2f1/0x4b0 [ 612.636531][ T45] bus_for_each_drv+0x260/0x2f0 [ 612.641410][ T45] __device_attach+0x2bd/0x3a0 [ 612.646191][ T45] device_initial_probe+0x1e/0x30 [ 612.651268][ T45] bus_probe_device+0x18b/0x270 [ 612.656215][ T45] device_add+0x80c/0xc00 [ 612.660561][ T45] hid_add_device+0x39b/0x560 [ 612.665267][ T45] usbhid_probe+0xde3/0x12b0 [ 612.669904][ T45] usb_probe_interface+0x696/0xc00 [ 612.675027][ T45] really_probe+0x2d6/0x890 [ 612.679549][ T45] __driver_probe_device+0x198/0x280 [ 612.684851][ T45] driver_probe_device+0x54/0x3f0 [ 612.689885][ T45] __device_attach_driver+0x2f1/0x4b0 [ 612.695269][ T45] bus_for_each_drv+0x260/0x2f0 [ 612.700132][ T45] __device_attach+0x2bd/0x3a0 [ 612.704918][ T45] device_initial_probe+0x1e/0x30 [ 612.709970][ T45] bus_probe_device+0x18b/0x270 [ 612.714841][ T45] device_add+0x80c/0xc00 [ 612.719194][ T45] usb_set_configuration+0x1ad4/0x20b0 [ 612.724674][ T45] usb_generic_driver_probe+0x95/0x160 [ 612.730147][ T45] usb_probe_device+0x1d4/0x380 [ 612.735004][ T45] really_probe+0x2d6/0x890 [ 612.739508][ T45] __driver_probe_device+0x198/0x280 [ 612.744899][ T45] driver_probe_device+0x54/0x3f0 [ 612.749930][ T45] __device_attach_driver+0x2f1/0x4b0 [ 612.755401][ T45] bus_for_each_drv+0x260/0x2f0 [ 612.760263][ T45] __device_attach+0x2bd/0x3a0 [ 612.765041][ T45] device_initial_probe+0x1e/0x30 [ 612.770087][ T45] bus_probe_device+0x18b/0x270 [ 612.774946][ T45] device_add+0x80c/0xc00 [ 612.779285][ T45] usb_new_device+0x9ed/0x1590 [ 612.784064][ T45] hub_event+0x2c81/0x4270 [ 612.788493][ T45] process_scheduled_works+0x7d2/0x1020 [ 612.794052][ T45] worker_thread+0xc58/0x1250 [ 612.798738][ T45] kthread+0x2ca/0x370 [ 612.802883][ T45] ret_from_fork+0x67/0xa0 [ 612.807320][ T45] ret_from_fork_asm+0x1a/0x30 [ 612.812101][ T45] [ 612.814442][ T45] The buggy address belongs to the object at ffff888109672640 [ 612.814442][ T45] which belongs to the cache kmalloc-8 of size 8 [ 612.828242][ T45] The buggy address is located 1 bytes inside of [ 612.828242][ T45] allocated 7-byte region [ffff888109672640, ffff888109672647) [ 612.842049][ T45] [ 612.844379][ T45] The buggy address belongs to the physical page: [ 612.851054][ T45] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109672 [ 612.859910][ T45] flags: 0x4000000000000000(zone=1) [ 612.865468][ T45] page_type: f5(slab) [ 612.869636][ T45] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 612.878258][ T45] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 612.886846][ T45] page dumped because: kasan: bad access detected [ 612.893299][ T45] page_owner tracks the page as allocated [ 612.899031][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2201187167, free_ts 0 [ 612.916668][ T45] post_alloc_hook+0x3b9/0x3f0 [ 612.921546][ T45] prep_new_page+0x1c/0x120 [ 612.926068][ T45] get_page_from_freelist+0x46bb/0x4750 [ 612.931717][ T45] __alloc_pages_noprof+0x30d/0x6c0 [ 612.936940][ T45] alloc_slab_page+0x6b/0x1f0 [ 612.941643][ T45] allocate_slab+0x69/0x440 [ 612.946172][ T45] ___slab_alloc+0x59a/0x8b0 [ 612.950787][ T45] __kmalloc_noprof+0x243/0x450 [ 612.955737][ T45] acpi_ns_internalize_name+0x2cf/0x470 [ 612.961378][ T45] acpi_ns_get_node+0x1a4/0x350 [ 612.966260][ T45] acpi_get_handle+0x182/0x2a0 [ 612.971043][ T45] acpi_has_method+0x87/0xd0 [ 612.975653][ T45] acpi_init_device_object+0x823/0x15b0 [ 612.981205][ T45] acpi_add_single_object+0x10c/0x1960 [ 612.986684][ T45] acpi_bus_check_add+0x3a6/0x810 [ 612.991715][ T45] acpi_bus_check_add_1+0x26/0x30 [ 612.996835][ T45] page_owner free stack trace missing [ 613.002290][ T45] [ 613.004616][ T45] Memory state around the buggy address: [ 613.010345][ T45] ffff888109672500: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 613.018436][ T45] ffff888109672580: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 613.026517][ T45] >ffff888109672600: fa fc fc fc 05 fc fc fc 07 fc fc fc fa fc fc fc [ 613.034592][ T45] ^ [ 613.040843][ T45] ffff888109672680: fa fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 613.048942][ T45] ffff888109672700: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 613.057009][ T45] ================================================================== [ 613.065095][ T45] Disabling lock debugging due to kernel taint [ 613.083994][ T45] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 613.157351][ T45] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 613.179197][ T45] microsoft 0003:045E:07DA.000A: no inputs found [ 613.192079][ T45] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 613.204429][ T45] usb 7-1: USB disconnect, device number 16 [ 613.244860][T19731] fido_id[19731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory