last executing test programs: 4m34.922521062s ago: executing program 1 (id=205): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x89a5f000) fadvise64(0xffffffffffffffff, 0x3, 0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x8000000, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x4008) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xb540f1e41053034d}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 4m34.038158393s ago: executing program 1 (id=209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3e8, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x1f048e83907ec8f}, 0x0) r2 = gettid() syz_pidfd_open(r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ftruncate(0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a"], 0x34}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xffffffffffffffea, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0xfffffffffffffffd, 0xe}, @fda={0x66646185, 0x8, 0x3, 0x3d}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 4m33.936732371s ago: executing program 1 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000010101040000003a141ac22c02000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x3c}, 0x1, 0x0, 0x0, 0x541b6104d5f326ad}, 0x0) 4m33.921078922s ago: executing program 1 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 4m33.888509085s ago: executing program 1 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x1) preadv(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/138, 0x8a}, {0x0}, {0x0}], 0x5, 0x4, 0x7ff) 4m33.792502883s ago: executing program 1 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) r1 = syz_clone(0x20000800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000006200), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="33000000060000000000000000000000040000000000000005000000000000000a000000000000002f6465932248757365000054db471c76788438c8d3c94a1b9a49c7d27e1169bbbbffffffff2721a266370b38df2da1c2599d9c3d948b5a8a"], 0x33) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x240400c1) ptrace$setregs(0x1a, r1, 0x800000bc, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000001f80)=0x2, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2403020005029a0102092406", @ANYRES16=r1, @ANYBLOB="a29bc22ebf971ea3ddf758e7cf1a62c735a456075fd337a92f310b567f092cae09bcc01eee028612ae1b027da5ff0ca8d15b7db9a86a9fef432710ba1a7dd3c91ea97042b9e823237f08c4a7ec266db0a8552f7724a2d90d046d51b61b72dcd8aa56ab5a9de929125628741defa84f21f284b975333fa553c39b82cac1202bccb753b671b3468cda3026b13f1f76f2cebb75f49124983f41159bf65a187223e972b29a523af81f01d50ac557431fbc98d12e8450461b1b331470bbe6288ae03834c4b77c5e1b9c0271ef1f4f34d31bcec2f13b213d562363"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) writev(r6, &(0x7f0000001180)=[{&(0x7f0000001240)="06", 0x1}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="f6684cfd9f5e2924"}}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000580)={0xdb, 0x0, 0x3}) r7 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x8080000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) kcmp(0xffffffffffffffff, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x20000000) 4m33.787772573s ago: executing program 32 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) r1 = syz_clone(0x20000800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000006200), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="33000000060000000000000000000000040000000000000005000000000000000a000000000000002f6465932248757365000054db471c76788438c8d3c94a1b9a49c7d27e1169bbbbffffffff2721a266370b38df2da1c2599d9c3d948b5a8a"], 0x33) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x240400c1) ptrace$setregs(0x1a, r1, 0x800000bc, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000001f80)=0x2, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2403020005029a0102092406", @ANYRES16=r1, @ANYBLOB="a29bc22ebf971ea3ddf758e7cf1a62c735a456075fd337a92f310b567f092cae09bcc01eee028612ae1b027da5ff0ca8d15b7db9a86a9fef432710ba1a7dd3c91ea97042b9e823237f08c4a7ec266db0a8552f7724a2d90d046d51b61b72dcd8aa56ab5a9de929125628741defa84f21f284b975333fa553c39b82cac1202bccb753b671b3468cda3026b13f1f76f2cebb75f49124983f41159bf65a187223e972b29a523af81f01d50ac557431fbc98d12e8450461b1b331470bbe6288ae03834c4b77c5e1b9c0271ef1f4f34d31bcec2f13b213d562363"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) writev(r6, &(0x7f0000001180)=[{&(0x7f0000001240)="06", 0x1}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="f6684cfd9f5e2924"}}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000580)={0xdb, 0x0, 0x3}) r7 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x8080000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) kcmp(0xffffffffffffffff, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x20000000) 3m54.078293173s ago: executing program 0 (id=494): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffff"], 0x21c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000027e000000330003"], 0x1c}}, 0x4000054) r0 = socket(0x10, 0xa, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x80000009, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000400)={'\x00', 0x8, 0x3, 0x94}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000002840)='ip_vti0\x00', 0x10) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) getgroups(0x2, &(0x7f0000000200)=[0xee01, 0xee00]) r9 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000005c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000600)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e24, 0x1, 0x4e20, 0x4, 0x2, 0x1a0, 0xa0, 0x84, r11, r6}, {0xc, 0x30f8, 0x8, 0x81, 0x1b0, 0x7, 0xec, 0x80000001}, {0x2, 0x6, 0x0, 0xa}, 0x3, 0x6e6bbe, 0x0, 0x1, 0x3, 0x2}, {{@in6=@remote, 0x4d3, 0xdb}, 0xa, @in=@local, 0x3502, 0x3, 0x2, 0x0, 0x5, 0x100, 0xfe}}, 0xe8) fstat(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r12, r12) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xe00}}], [{@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@euid_eq={'euid', 0x3d, r9}}, {@measure}, {@context={'context', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@obj_user}, {@uid_lt={'uid<', r12}}]}}) 3m53.160741397s ago: executing program 0 (id=499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3m53.11995138s ago: executing program 0 (id=501): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x5, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x4, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x7fffffff}}], [{@euid_lt={'euid<', r3}}, {@uid_gt={'uid>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x30, 0x38, 0x64, 0x35, 0x38, 0x39, 0x64], 0x2d, [0x38, 0x33, 0x33], 0x2d, [0x66, 0x38, 0x38, 0x33], 0x2d, [0x38, 0x35, 0x31, 0x63], 0x2d, [0x35, 0x30, 0x34, 0x63, 0x37, 0x62, 0x6f, 0x62]}}}]}) 3m53.0058015s ago: executing program 0 (id=503): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0, 0x8a900e, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0/../file0/file0/../file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x5) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) setxattr$trusted_overlay_nlink(&(0x7f0000000500)='\x00', &(0x7f0000000540), &(0x7f0000000580)={'L-', 0x3}, 0x16, 0x3) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 3m52.957696704s ago: executing program 0 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x9}) 3m52.87918468s ago: executing program 0 (id=506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x25, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r6, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x2) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) 3m52.834398974s ago: executing program 33 (id=506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x25, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r6, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x2) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) 3m32.934280362s ago: executing program 2 (id=624): r0 = socket(0x28, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) nanosleep(&(0x7f0000000400)={0x77359400}, 0x0) (rerun: 64) process_vm_writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) recvmmsg(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/148, 0x94}], 0x7, &(0x7f0000000a40)=""/121, 0x79}, 0xd89}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)=""/123, 0x7b}, {&(0x7f0000000b40)=""/218, 0xda}, {&(0x7f0000000c40)=""/127, 0x7f}, {&(0x7f0000000cc0)=""/227, 0xe3}, {&(0x7f0000000dc0)=""/155, 0x9b}, {&(0x7f0000000e80)=""/147, 0x93}, {&(0x7f0000000f40)=""/30, 0x1e}], 0x7, &(0x7f0000001000)=""/234, 0xea}, 0xffff6e71}, {{&(0x7f0000001100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/196, 0xc4}, {&(0x7f0000001400)=""/104, 0x68}, {&(0x7f0000001480)=""/252, 0xfc}], 0x3, &(0x7f0000001600)=""/240, 0xf0}, 0x7}, {{&(0x7f0000001700)=@ax25={{0x3, @bcast}, [@null, @remote, @default, @bcast, @netrom, @default, @netrom, @default]}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001780)=""/70, 0x46}, {&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/115, 0x73}], 0x3, &(0x7f0000001900)=""/116, 0x74}, 0x8001}, {{&(0x7f0000001980)=@vsock, 0x80, &(0x7f0000001580)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/233, 0xe9}, {&(0x7f0000002b00)=""/188, 0xbc}], 0x3, &(0x7f0000002bc0)=""/203, 0xcb}, 0xfffffffc}], 0x5, 0x10020, &(0x7f0000002e00)={0x0, 0x989680}) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f00000003c0)={'wg0\x00', {0x2, 0x0, @empty}}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002e40)={0x50, 0xe39f6f557a2dff20, 0x0, {0x7, 0x2b, 0x100, 0x600240, 0xe7b, 0x9, 0x9, 0x7, 0x0, 0x0, 0x100, 0x2}}, 0x50) (async, rerun: 32) recvfrom$unix(r5, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x802, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000040)) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000080)={0x2}) 3m32.775934925s ago: executing program 2 (id=626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x101, 0x4) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086315}], 0x0, 0x0, 0x0}) (async, rerun: 32) rmdir(&(0x7f0000000000)='./file0\x00') 3m32.474235699s ago: executing program 2 (id=631): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x5, 0x7, 0x9) 3m32.126031627s ago: executing program 2 (id=634): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x8, 0x4}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000004) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002400010002000000fadbdf2507000000130000000800ff00", @ANYRES32], 0x30}], 0x1}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r3 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000140), 0x4) 3m31.771540046s ago: executing program 2 (id=639): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r4, 0x0, 0x2) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000000)=0x19e6) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) wait4(r6, 0x0, 0x80000000, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000001aa155a2ca444c564da9fade0c920bc95e3ef5af43d6f5ea9ae31a1e4bcee71ff794551b545523a3b3ba4c8f721ecd1f79325c9b95eec12cef5d58c2bb9ee7b43d898640e0f404dc5d9a1212148ed41323"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="f3a7c4c251ae24500f79704b0fc77ce2240f015faab8010000000f01d9650fb44d0c660f388155f69ac0000000db000fc734c3", 0x33}], 0x1, 0x54, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioperm(0x9, 0x9, 0x8) sendfile(r1, r1, 0x0, 0x7ffff000) 3m31.736210478s ago: executing program 2 (id=642): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xbcc, 0x4, 0x4, 0x8000006, 0x7}) 3m31.59621417s ago: executing program 34 (id=642): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xbcc, 0x4, 0x4, 0x8000006, 0x7}) 3m8.023285563s ago: executing program 6 (id=864): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4066, 0xfe2}, {0x0}], 0x2}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) 3m7.832665759s ago: executing program 6 (id=866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) utimes(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) getdents(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m7.57269375s ago: executing program 6 (id=870): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x17) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r3 = socket$inet(0x2, 0xa, 0x7f) sendmsg$sock(r3, &(0x7f0000000480)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, 0x0}, 0x2000c801) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000000)={0x40, 0xa, 0x58, "f1e2cfd4d4dc8a4081ada078f6e47fdf783cda50cda2968376e6857380b978bd1d4c8b96aada64044166f6a2a8282d13dca46608b41c30e1e47d48792f07f5648a5786cc6fbe3463e7178300"/88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setuid(0xee00) syslog(0x2, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x24, 0x11, 0x8, 0x0, 0x2, {0x7}, [@nested={0x10, 0xe3, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @typed={0x4, 0x6b, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x40020) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220b000000660cbb92"], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m4.464841409s ago: executing program 6 (id=885): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000680)={r0, 0xfffffffd, {0x0, 0x0, 0x0, 0x100000000, 0x4e, 0x0, 0x9, 0x40f, 0x8, "b25ed6ce3d60670cfb19992eed469da1d13340de243bc37c213cdbcb9ceef6ff74528b0d5f3a55cd739538f00e938841cb40d5196fb48c871128691c06f8e4ff", "7dfd7d8561131c1ece90863eb3e743ffa9c222b065bf86bf972f4f51d9aa01da8958e9ffdc6ca931cf5bc9d096e4e2b62533e07c34b783e79eb5e6f9766d9858", "e6ff98193284dda5bd6f2f8fd41e2c6ba837b35fe12474e34bb8bf9eb4a90598", [0x4000000000001, 0xffdfffffffffffff]}}) r1 = getpgid(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0xa) r2 = getpid() ioprio_set$pid(0x3, r2, 0x0) setrlimit(0xe, &(0x7f0000000040)={0x3, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2200, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0xc, 0xff, 0xb, 0x0, 0xffffffffffffffff}) sigaltstack(&(0x7f00000003c0)={&(0x7f0000000440)=""/204, 0x2, 0xcc}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') unlinkat(r5, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000180), 0x4) prlimit64(r3, 0x8, 0x0, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000640)={@remote, 0x800, 0x0, 0x2, 0x0, 0x5, 0xc2}, 0x20) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(r7, &(0x7f0000000140)='fdinfo/4\x00') 3m4.114315847s ago: executing program 6 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="650f09430f350fc798393a38fa450f01c5c7442400cb000000c744240229080000ff1c24260f01c50f79b4f500800000dab1899452882e76caf32e9d", 0x3c}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="f3450fc7b6f8f7000066f30fbc3d06e600800f3765c5c5010000000f01d9d8e68fc98890a200800000c4817c517ab0ebee34fa660fc7b18a86006500002265", 0x3f}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x1ffcc35c6ab96c2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8ee4a000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$netlink(0x10, 0x3, 0xc) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71, r7}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYBLOB="37a546c47e525d06e28256e0ff7a11dcfc777ce1635f0396ba3c5abb085340cb7cd553fe0a35c911003a9c1cad9681dbc42126656c9a6bc1bf4fc30cb5fbd0a347fd8a915e4ae78edb277f8dc513d2cea6cc756dc558afad0f6b2a7ffc9ca3fe3bec76381065e20a36599d079890091ed1cab0019885ef5d512568065adf1c6a559beecaf4e8a8d28d5cf64054e11690c684b1e130c3f2f4cd3990ed38b03d5a900fb0f4006cc33ea16d79f8aaeed4e93d046c00028f8999f2decaddb74687d70b86e350c882bfaca05d79ce1ac84779bdc52e97b0c765ab0786b0f74b4fa1ad68964e83480d5f", @ANYRES16=r5, @ANYBLOB="1f2a20a62255340a7b61bf0276d1d8bfbf34b68cd86f80ec5516dda4528f92298ef5a8f53e13f0808a08debd28a1d100d08df4f88f9ea5449ea424664e1c468d6315c5f9223d90ac64bb55c0d85e25a92b53a37157dc70624199674ad0a7df319b1093fd946b90fba9cb76f9c5cc7695d2898a80f103e689893bbc9d92b5687878c0b4858ec074c0ca69396077f298e15a5e63a92aba36b359bab08c4a8f3cabb88c690f3262743b076788cb022c4e9a9c11dd1394b0fddb5948a8601479b0df8b63", @ANYRES32=r0]) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) readv(r8, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x2, 0xfffffffffffffffd) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e1) sendfile(r10, r10, 0x0, 0x1200000000000) write$tun(r10, &(0x7f0000000340)={@void, @val={0x0, 0x3, 0x8, 0x1, 0x800, 0xff}, @ipv6=@gre_packet={0x4, 0x6, "ef37b0", 0x51, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "bdc765290bd0d93865a9ae551d"}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x3, 0x2, 0x1, 0x0, 0x1, 0x3}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x70, 0x0, 0x1, 0x2, 0x2, 0x2}, 0x2, {0x3, 0xff, 0x2, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}, 0x83) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r10, 0x40049366, &(0x7f00000000c0)) 3m3.636183666s ago: executing program 6 (id=895): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x5cf, 0xf, 0x2, 0xe, 0xf, "137d391f85124e15332ba087724e00b238562f"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socket(0x1e, 0x4, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) syz_open_pts(r4, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x5cf, 0xf, 0x2, 0xe, 0xf, "137d391f85124e15332ba087724e00b238562f"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 3m3.556113193s ago: executing program 35 (id=895): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x5cf, 0xf, 0x2, 0xe, 0xf, "137d391f85124e15332ba087724e00b238562f"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socket(0x1e, 0x4, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) syz_open_pts(r4, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x5cf, 0xf, 0x2, 0xe, 0xf, "137d391f85124e15332ba087724e00b238562f"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 14.030930243s ago: executing program 5 (id=2698): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x841, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5]) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r7 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000084000000", @ANYRES32=0x0, @ANYRESDEC=r7, @ANYBLOB="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"], 0xa0}}, 0x0) (async) r9 = syz_open_dev$evdev(&(0x7f0000000340), 0x80000001, 0x200002) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000002c0)=0x20) (async, rerun: 64) r11 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000100)=0x200) (async) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_udp_int(r11, 0x11, 0xa, &(0x7f0000000140)=0x2, 0x4) 13.866722606s ago: executing program 5 (id=2700): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) personality(0x5400004) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x28010c, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r5}, 0x10) (async) ptrace(0x10, r2) (async) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) 13.787791942s ago: executing program 5 (id=2701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) getrandom(&(0x7f00000001c0)=""/279, 0x117, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.541722642s ago: executing program 5 (id=2704): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13.408472493s ago: executing program 5 (id=2705): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002f00)=""/4085, 0xff5}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYRES8=r0], 0x18}}, 0x8080) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0x7704, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x8ee4a000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x7ff, 0x2, 0xff, 0x0, 0x7, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000480)='fd\x00') preadv(r8, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0) fadvise64(r6, 0x3, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) mmap(&(0x7f00000ff000/0x4000)=nil, 0x4000, 0x8, 0x100010, r1, 0x73287000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000500)={0x1}, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 13.310389281s ago: executing program 5 (id=2706): syz_usb_connect$uac1(0x6, 0xfffffffffffffe7e, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x455}}, {0x0, &(0x7f0000000280)=@string={0x0, 0x3, "0db19bd5c358117a8a4f1dc433e46632c339d9916fcc450a3f2a1c8baa8c02bd70cc99ba1e9f2e6495bfcea97481de829b269d05e9f1b0f129d72b8f4460683a5e5f734720b5f1a7ab2e0e1708518f78144ecc9c02355ee0fda78c75d4e7"}}, {0x0, &(0x7f0000000200)=@string={0x0, 0x3, "d88fa8188a"}}, {0x0, &(0x7f0000000300)=@string={0x0, 0x3, "194c882d8484bd1d3e15481b68425723974f6e30604c68c6b881d650"}}, {0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x42c}}, {0x0, &(0x7f0000000380)=@lang_id={0x0, 0x3, 0x426}}, {0x0, &(0x7f0000000400)=@string={0x0, 0x3, "acecd29f944b998a356666ba6cd2640c37bea9de3340f9c9607c7c46887fd22f66d256a8b460"}}, {0x0, &(0x7f0000000440)=@string={0x0, 0x3, "76b3d4cc346c5d2987363546014522504f9c925914243d49c1b5dcf0ed69a6b7e0648c837b03debd9ba2136720c4dde04b"}}, {0x0, &(0x7f0000000480)=@lang_id={0x0, 0x3, 0x44e}}]}) (async) syz_usb_connect$uac1(0x6, 0xfffffffffffffe7e, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x455}}, {0x0, &(0x7f0000000280)=@string={0x0, 0x3, "0db19bd5c358117a8a4f1dc433e46632c339d9916fcc450a3f2a1c8baa8c02bd70cc99ba1e9f2e6495bfcea97481de829b269d05e9f1b0f129d72b8f4460683a5e5f734720b5f1a7ab2e0e1708518f78144ecc9c02355ee0fda78c75d4e7"}}, {0x0, &(0x7f0000000200)=@string={0x0, 0x3, "d88fa8188a"}}, {0x0, &(0x7f0000000300)=@string={0x0, 0x3, "194c882d8484bd1d3e15481b68425723974f6e30604c68c6b881d650"}}, {0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x42c}}, {0x0, &(0x7f0000000380)=@lang_id={0x0, 0x3, 0x426}}, {0x0, &(0x7f0000000400)=@string={0x0, 0x3, "acecd29f944b998a356666ba6cd2640c37bea9de3340f9c9607c7c46887fd22f66d256a8b460"}}, {0x0, &(0x7f0000000440)=@string={0x0, 0x3, "76b3d4cc346c5d2987363546014522504f9c925914243d49c1b5dcf0ed69a6b7e0648c837b03debd9ba2136720c4dde04b"}}, {0x0, &(0x7f0000000480)=@lang_id={0x0, 0x3, 0x44e}}]}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @multicast1}, {0x6, @remote}, 0x60, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_vlan\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)=""/2, &(0x7f0000000240)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 13.261307634s ago: executing program 36 (id=2706): syz_usb_connect$uac1(0x6, 0xfffffffffffffe7e, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x455}}, {0x0, &(0x7f0000000280)=@string={0x0, 0x3, "0db19bd5c358117a8a4f1dc433e46632c339d9916fcc450a3f2a1c8baa8c02bd70cc99ba1e9f2e6495bfcea97481de829b269d05e9f1b0f129d72b8f4460683a5e5f734720b5f1a7ab2e0e1708518f78144ecc9c02355ee0fda78c75d4e7"}}, {0x0, &(0x7f0000000200)=@string={0x0, 0x3, "d88fa8188a"}}, {0x0, &(0x7f0000000300)=@string={0x0, 0x3, "194c882d8484bd1d3e15481b68425723974f6e30604c68c6b881d650"}}, {0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x42c}}, {0x0, &(0x7f0000000380)=@lang_id={0x0, 0x3, 0x426}}, {0x0, &(0x7f0000000400)=@string={0x0, 0x3, "acecd29f944b998a356666ba6cd2640c37bea9de3340f9c9607c7c46887fd22f66d256a8b460"}}, {0x0, &(0x7f0000000440)=@string={0x0, 0x3, "76b3d4cc346c5d2987363546014522504f9c925914243d49c1b5dcf0ed69a6b7e0648c837b03debd9ba2136720c4dde04b"}}, {0x0, &(0x7f0000000480)=@lang_id={0x0, 0x3, 0x44e}}]}) (async) syz_usb_connect$uac1(0x6, 0xfffffffffffffe7e, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x455}}, {0x0, &(0x7f0000000280)=@string={0x0, 0x3, "0db19bd5c358117a8a4f1dc433e46632c339d9916fcc450a3f2a1c8baa8c02bd70cc99ba1e9f2e6495bfcea97481de829b269d05e9f1b0f129d72b8f4460683a5e5f734720b5f1a7ab2e0e1708518f78144ecc9c02355ee0fda78c75d4e7"}}, {0x0, &(0x7f0000000200)=@string={0x0, 0x3, "d88fa8188a"}}, {0x0, &(0x7f0000000300)=@string={0x0, 0x3, "194c882d8484bd1d3e15481b68425723974f6e30604c68c6b881d650"}}, {0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x42c}}, {0x0, &(0x7f0000000380)=@lang_id={0x0, 0x3, 0x426}}, {0x0, &(0x7f0000000400)=@string={0x0, 0x3, "acecd29f944b998a356666ba6cd2640c37bea9de3340f9c9607c7c46887fd22f66d256a8b460"}}, {0x0, &(0x7f0000000440)=@string={0x0, 0x3, "76b3d4cc346c5d2987363546014522504f9c925914243d49c1b5dcf0ed69a6b7e0648c837b03debd9ba2136720c4dde04b"}}, {0x0, &(0x7f0000000480)=@lang_id={0x0, 0x3, 0x44e}}]}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @multicast1}, {0x6, @remote}, 0x60, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_vlan\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)=""/2, &(0x7f0000000240)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 5.541713745s ago: executing program 7 (id=2777): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) iopl(0x3) (async) iopl(0x3) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x8, 0x1, 0xc3}, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x8, 0x1, 0xc3}, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) process_mrelease(0xffffffffffffffff, 0x700000000000013) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)) (async) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) (async) timer_settime(r4, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000200)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008804"]) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) socket(0x1, 0x5, 0x0) (async) r10 = socket(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000000c0)=0x2) getsockopt(r10, 0x1, 0x29, 0x0, &(0x7f0000003300)) 5.442398473s ago: executing program 7 (id=2778): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xf648a000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) listxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setuid(0xee01) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_io_uring_setup(0x619d, &(0x7f0000000000)={0x0, 0xdd87, 0x8, 0x0, 0x151}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r2, 0x8000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.344527111s ago: executing program 7 (id=2779): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x220220, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000100)={0x1, 0x4}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff", 0x16}], 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x4001185) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @private1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x800002, 0xa, 0x0, 0x0, 0x7ffffffe, 0x340190}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000740)=[@dead_binder_done], 0x7b, 0x0, &(0x7f00000005c0)="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"}) 5.342729681s ago: executing program 3 (id=2780): syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0xb51, 0xcc3f, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x1, 0x1004, 0x0, 0x8, 0x2e, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x8, 0x9, 0x96, 0x7fffffff, 0xffffffff00000000, 0x4, 0x4, 0x9, 0x23b, 0x3, 0x2, 0xfffffffffffffffc, 0x8, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x200, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x8001, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x7ffffffd, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x8, 0x6, 0x27ffffff, 0x5, 0x61d, 0x3, 0x7, 0xfffffffffffffff4, 0x4, 0x6, 0x200, 0x7, 0x2, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0x1, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x1000000000000cc, 0x8, 0x3]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000b60000400000000000000044"]) chdir(&(0x7f00000003c0)='./bus\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000100)=0xfffffffc, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000480), 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x109501, 0x11e) creat(&(0x7f0000000000)='./bus\x00', 0x0) getdents(r7, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.352584151s ago: executing program 3 (id=2786): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup(r1) syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585dadb"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xcc, &(0x7f0000000000)=@string={0xcc, 0x3, "b6139515b2a3dae1a2a829a1df9ce11443f24d3e1adbf09a83b822271a56b4bf3b83ff41d3734df78ba299cf194dc4cceb598d0c6c0078a676cf0912c283a3def3dc1f07a7307ec9db1418cbc28ca10b1289ecd7ca39598c23e6b7681e8099a0b095757e8e4916871adf27ff17f4b3318dcec60535fce7e5d01e308cedc2409ddc3cd540c8b1744cf230186e4c5058ac5e51a704a37996dc99d81cf7e2be9a4db96a6bbc5fdd58f33cb95898959470b13a810e8dd6f384e625254d00ceb624e41ee0ee9a2fd88cefee5c"}}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r3) sync_file_range(r1, 0x7, 0xc6d8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) connect$packet(r2, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x6}, 0x14) 3.784620496s ago: executing program 3 (id=2797): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x5, 0x7, 0x9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x71ac6000) 3.784231216s ago: executing program 3 (id=2798): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/54, 0x36}], 0x4, &(0x7f0000000300)=""/178, 0xb2}, 0x1) 3.73723317s ago: executing program 3 (id=2799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@x86={0x8, 0x7f, 0x7f, 0x0, 0xfffffffa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x6, 0x81, 0x0, 0x0, 0x7, 0xa7, 0x0, 0x8, 0x3, '\x00', 0x8, 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.316058304s ago: executing program 7 (id=2804): r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x8000, 0x1000}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xe, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4741, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000100)=0xa) r3 = syz_usb_connect(0x4, 0x6d1, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x46, 0xe2, 0xd3, 0x8, 0xbb4, 0xa6b, 0x65e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6bf, 0x2, 0x9, 0xe1, 0x90, 0x81, [{{0x9, 0x4, 0xc2, 0xd1, 0xb, 0x2f, 0xe5, 0x98, 0xf, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c1717155057f"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@country_functional={0xa, 0x24, 0x7, 0x89, 0x849a, [0xd55b, 0x160]}, @acm={0x4}, @country_functional={0xa, 0x24, 0x7, 0xb1, 0x101, [0x1, 0xc35a]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x40}]}], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x0, 0x6, 0x81, [@generic={0x94, 0x24, "162327b6c1425ec70adc6719bcd8a3637bf623543a993dc8a4daeb115e22f8224153f63e42a8f9e3b7ffa3af4e99a525e7f1e848195420c56843bfc5148b25c38df17877626595c9e34bcab6fdc8d6db9adccb83bfe5d10598f39f66dc61d70d974f112997825e52e35d2b20095084a7cb2df34ec81fce321cbb20d6d96a8e2917861c8c9c954358e39590a58bdbfe7e1fd2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x1, 0x7, 0x9, [@generic={0x5a, 0x8, "89af932d5e3d3eddd8feab957df492dc00f8f61637fd629e0ecdecaf0fc3e8b0535d9bcc69303621b47178bb5a6d693b2c67757fc5b972e76756b94f5d90b0943ba95724c2f0ac9ec31a9e9e4b6c558583aea34a66fd30b7"}, @generic={0x87, 0x23, "8c992353308651e4e96c67f6d3aebddaf951ab811e89ff28da39d55ea015e280d6a48b45bc6e9cd1c0f6201dde322b0b4e820a797ac562d2cae2661c9a456f281a83338d98ebc45c76112d076c3a059feb79e6860eacdf2733544e2308a8a7858f11624ce1cb406fcf7d86c7d361425b926178a489fdce0434db61628bc882c09cf2191ff9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xa, 0xf2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x60, 0x3, 0x2, [@generic={0xd5, 0x23, "9197827d24c8d160dca5da495265e14ee02e2d4ddeb421b2abb5d710f06adb1253992f47b75914dd055c2a16072ef467d45219d37c00cecbdba2c693a8552911bb4e76878248d16beb0cc3bcc152e3f2f113e399e7e31ed6de2091f3152bea24355269c64ec006ba56348238ccf46e44ecbae4e79ec9076c4a1434e857eb1d95d5a851050e253c963c5cc86dedd3d028606df003fdc1f5fe2939f70b3fde2c2fa151d3aa9f11a6e52170998859909180fc5a4b169771796784e5aff2075da3050a77e9020b6fd87758bc4602080d57a0396566"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x400}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x9, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}, @generic={0x6a, 0x22, "f8e6923f8c1e0b064b89499fa63e92d808e6811310b5383e14a40924a1ed0d7d73a3fa5e970b74cd44f5bc293944def3fa1ed5efcb2d36dedd3c972ffc9ca1fe661877a6e29eb2a7b386826a4234a614a2b8755021650ac7bf8293ce350afd0fd1f0489fca3e9fcd"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xca88}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x6}]}}, {{0x9, 0x5, 0x81, 0x0, 0x3ff, 0x2, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xe, 0x4, 0x6, [@generic={0x8, 0x10, "7cc4ffa3ad7f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0x3, 0x0, [@generic={0x3d, 0x23, "9050c6d3cc8711c54a432167864eaa5ba6af9d74d4d7e5f464476657d410eb905bd5382d1f1a44967f7ecbc9e951adc220d35f992a6020053dc658"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3f7, 0x7f, 0x8, 0xce, [@generic={0xee, 0x23, "6e8cf85ecb735f92c08475acc865a879d00ae450a9558a3032c2fad671dd858882b95b02efad4293f0d03de86d2fa9e492baa75d7ed3f7eb37a681b4817b7d2cf2cfa9fae2eca720c7980f43ec91c216c6de793ccc9f94f9660cd8350a7524dc4e400c328e4a9a235e29f1810086ff0e816596ead675e1e274a4e6ae49944c71a52e47054cff63f7500e3fd6bbcdd9d6aae426144d62f41d097184794715585b781273b80d76cf2712f4656c0728907ff0328f8363f3346286ff58a43bdedaf787f375e017371aa575de6cb2f24d7d0092db7f218fc2672af8018738dd93a83724f02866b156128b4c0ae05c"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x1, 0x9, 0x6, [@generic={0xa4, 0x23, "f58e72bb9a56f1199b48841efd5c4a0b4dc9e904acdff3c4a18f2b2f2e91c5709def1b8880a8c27129b7e60e78f1d6bf67fbc6fa0fc5d4d3e7d4ce986ff2d561f128a8f7f71de140329f30fdf4640cde09955dd07662088e002aab4fe5a42e047e29335714f15948eddf6c20cbaf5d2b311a224e49577ac9cb66959cc6e1da96fa7377094013bcf59a9a2e38cd617c0f8f89f2407f5e8ff0c19eb3e4585ca15b4df3"}]}}]}}, {{0x9, 0x4, 0x32, 0x5b, 0x1, 0x86, 0x51, 0x15, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x80}, [@selector_unit={0xb, 0x24, 0x5, 0x4, 0x2, "aa87365bcb28"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x4, 0xa, 0x4, 0x6, 0x7}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "b0b2e19f"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xffff0000, 0x7f, 0xeca}, [@mdlm_detail={0xf7, 0x24, 0x13, 0xff, "13cd11a24e0ea291e694b42944206c873461cc469f41f801b259d69ef10e9f71eeeb25834886882497ced8df073a56ffe5c2e9021959917895fe4267976201f88413f04b5d3f17b6e603ade59c9ecb76494a73c6488143e7a872a53d5f08cc56d99a6fd766cdccc6c788e7c59468645cadcffdf42dfd7f7bbacb4dcef36a5ecd8b20465f68c890b47f4950d7f137b44f00ce3e30edf492f1f756ad8dc4dca37a259b45b95e836f3b9fd2e823cf4bb427a19c1faba657c468b9ccc385981ab19fc90a505d91f34f7c6f2cd8b85fcf59ca1010365075cdfd2295c5b1544484b056fcba2fd371612d71565613c433422130859e36"}]}], [{{0x9, 0x5, 0x8, 0xc, 0x40, 0x9, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x7, 0x8}]}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x5, 0x9, 0x6, 0x40, 0x4}, 0x2e, &(0x7f0000000880)={0x5, 0xf, 0x2e, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x4, 0xb, 0xb375, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0xb1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x92, 0xdb04}]}, 0x1, [{0x6b, &(0x7f00000008c0)=@string={0x6b, 0x3, "bf1de8006675a1cb514e8ff78dd500de4a1fff6babdb7837176672578bd686cab80625d310a23c00722bc40e3c30925130634e968da382bf0c4841b8a2fdb66fbe82559a110302a6f295b3878c78effe96c152ec129f96098d4a8e6710bab815fd446cc30e6413bd3d"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000a00)={0x14, &(0x7f0000000980)={0x40, 0x10, 0x14, {0x14, 0x1, "6716822b7843934d3397011576be8356b927"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000a40)={0x40, 0x8, 0xfb, "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"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c00)={0x20, 0x0, 0x78, {0x76, "ae404095d79b34cf3781eae25bed2b746a9a2090a4eeeb6b8e96dc1e33228560acf10177ab7591fb0899ccf134ca29e4187c7c647f5210f2d5357f6cf67397987d917789fc0e3596060dbf9b7a72bcfba72792fabc6df939298c491c38e28bf72fa1a994014004a4f8fcd43853f57fe95e65616f978c"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1, 0xf0}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x3}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0x250100, 0x0) bind$bt_sco(r4, &(0x7f0000000d80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x80010, 0xffffffffffffffff, 0x3052b000) syz_usb_control_io$uac1(r3, &(0x7f0000000fc0)={0x14, &(0x7f0000000dc0)={0x40, 0x6, 0xf6, {0xf6, 0x8, "4bfb8c095d14f0223e1528556b43b232a3c7fecd0fd8a48602477b967047ba0ccef02be505d405e9a759b0bf3219eb67c33e84019ba999e3f4be7eb8e2b9b6b7a95437fa320c7de7dfb0c11a9b39088b253595c4de0d93117f575047eef19b045109d9394766a8ad64b9a5ca753d3f162eb6f87507be646ab721c16f05aa69be48b47521be4ec43fede93bb322417d84c6a1ba85b3187e2f8a782a48ee745f168d8e8dd2f3551ab27dd2700b49651c48baacdc4fa79a2a56c7e99dc35890c3b1eccc5333dea8b0aa77bb02430ce4ae5c8602374079577edb4eef266505b9273072c70ae9fe689add93c059e272e2b0b8036f6da6"}}, &(0x7f0000000ec0)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "c65c9b86a6e27666750d5b0366a8e4fd73aeca6cf048bfe3fcfc492204b2caf672ef6eb9b9aa613d570a3079a6a4d85d1a9c3ebb4e2a46bf01c90e687785daf2e197aec506626c05de36014fc28a70065c21233ee7b381e0641bbf46d38c86c7f36262cf176e12079daa5c656269e8f7623f0b8a0ac1f46ee4229a9f9a0575139683aefb24eb8057c38e93aad7f5e654997dae9b791403dfd859630c29dc5a1c0b1d5e3983ee6f863e4d3017af2017fc7badf471d28ddb93f20de0e2e52b5031eac8e4a2e2e3aebf43a9ea853ea03815626410805437eb43e789c12d17d23df393f3"}}}, &(0x7f0000001280)={0x44, &(0x7f0000001000)={0x20, 0x9, 0x96, "e15f970ad24fd10de017138b88a86c518b6baebe99c15726c3a47e2d26befab8572f057f17415f7ba368143a920785444fea2800fde702d149163df9ac52dfcf65f34eca9ade3b5c82c1e78eb52deb1c92330d9dc6616dc8628c2c38a26174a5aa1d008f40256cb955889203f480fe7d6c6d78d337f6ca9cf049cda6824911d9056ab93409e96c2f72f8b05244168fe599c9286ea483"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001140)={0x20, 0x81, 0x1, "d3"}, &(0x7f0000001180)={0x20, 0x82, 0x2, "31be"}, &(0x7f00000011c0)={0x20, 0x83, 0x1, 'p'}, &(0x7f0000001200)={0x20, 0x84, 0x4, "de26b998"}, &(0x7f0000001240)={0x20, 0x85, 0x3, "1b032b"}}) r5 = accept4$bt_l2cap(r4, &(0x7f0000001300), &(0x7f0000001340)=0xe, 0x80000) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000013c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000001380)}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001440)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001540)=0xe8) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000001400)=@filename='./file0\x00', r6, &(0x7f0000001580)) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000015c0)={'vxcan1\x00', 0x6}) r7 = syz_open_dev$usbfs(&(0x7f0000001600), 0x7, 0xd3cc51f96302760b) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000026c0)=@urb_type_iso={0x0, {0x7}, 0x0, 0x1, &(0x7f0000001640)="7220703424fd13d31a19c8eab3062167372522e0681ff5834bb363fb79b68f7c8502ec3d8c5e028650e48669e436e460d8e14686cbb0b4fe7c8ad690aea831a0f47f768d66721bbc2a52928df5de14ebc7b4c047c6f690471ad3122273d619", 0x5f, 0x5756, 0x9, 0x56, 0x3ff, 0x1, &(0x7f00000016c0)="a60244c20807cbee4c00a5268d85af630d6350d4f24b63889ed0fdf1d7846de3d0edf158f91c1571ec4c73cc448e809914bb0e1a3ff1b767b2db4a56a1ce41031d20999828ff96371875b6b76c628e435c5790a6c2176051e92104eba5d5085047dc1b9250cdb725816db54c0e63b6770e39f5a88cf4d482d0fa88bd3413940b0ead6da6077259c40636855213c9f1bd72abbfbbc639f72620ca4733d8a32b3a9115d11f1ab98638a896a0c6497c5a878ad0f7b2e5a1b68d6388d33654c958afd930b4ec5d32007f3e133ec948b33f6a2c67a769c4bc45f8016147d81a93aabd1e9ef83cabf56d5410336d16cf58fa84c719507e8feba95155c7acc8f93be77819182d1b1b08ac717713c22afb5faa92bd36e7de8c30756f72f8cf697c424d96efbc222d991b87a7428974d14436ecbf158e46082b868d9f81a85751f2fd26c2a828602a1d6b2f6228524a971a3cb44fdafc0605c47d4622caa97e8d6bab84713c6dbb485f73c04afa417bdbbd0f90f263c77dd59c98dca97d4194e59324890200e92bb648448598d0aaed628d65a4d911b4c88c5b595f7e49d2db033e74429a8ed5c4ec96da82e015a80c0bbad5b31c123cdcddaa2867b6fa61b11eadbd76437717597342492136659a7acbe570c0788b9ed88e3b50e965f7b10ff52f7c7e7ed85cc231a3511bb81871966cd62d66c4d7e689ab42cc5da57a3314d535c5db46382b14ca341f682f5342043927fcc1385c9f821251ff688453bd9a8edbaf5e261d93c79587bdd16aeee98536db97ff77e8824a170bad074e5b02d03ac8d47e069327b0b9df45e689af5a58c592e8cd2d15bed8afa285f9d7f4e054faf068e35a511fbf0e0c8f6c922270cf0b131a0e91d48d42ae94c3fb5f1af732525f2bf360e0552076f1b209c9f5f00dd97314be9ebe0e036aa800ac37731b018e31cf69c2f9aa4cf18cf19177f3ff894766ccb89ef11f7b8604f62c6c011a93b1e0c226faf92ecf2dab614ee824b0adc0816335847c6cc0e56716cbf130ee58aedf797bcf26f945df009515f09c7d0323be203af1299718886b9b773b8360a46e100268f8daa806a364c805053c1afa5d52904c66162fddf96bebacccb7277858027fab9b68108cdf45517ea7989187e2421a198a8ec4fc8b52cdb6d2cb36c2a0c985551e16e1bef50d79021882c919a093c2594520e3a540a488963c505c2351007a60e74543d9f4b84ef770eab70b4f599afaa09038fe4b3f82ffdf8bf2d94c4e60b0fe4ef7bbdcc91b6a3de88ec977884cea08ee265e4bfd7f518b724d4200d79ad666c61f3921d5d763d489beb21bcbe51e44bf00af116fd2135c21718df5f3ea3df40cad68dbf9c54026ad7df551c171b489c176036bc5880bcb2ab99541e40b66366da723082aedae9c9c1e50e51484528d84ef86a03960135ec27780419701bbc8c6ee84ae63ed7b8de48f6b5e44c31f7a34b686b0cccc7f0067ed39a81ac8d3c37d70a21f438d21126631f25ec9c3f83639419fc7302fb77658a886b65fc098f2e750f6a0dc6d86cf4462a299cd304a2c04a08c01c16b1e7c4c969e4e656f08917034adda5f0db7ea7e55954a4ec2b2bd87c7552bf420d34a2e8545e6ffb7c0173358ce850910ecedc81028b5e34ed89980980ec689d16ac640b9c9914c06537e309fdf3d91e30801e5cb12d5e8a5c7ec259fcedba6cfae58b5deb8a283ae3f6f637e0ebca1db6536ccf17da010017b12824e5bfc9ef5245a1ee0cf557cb5d194dee1edf51dce5101bc37920955a3a925447112cb09d72422b79dad81b57d464c37d0e01292cad8065e4cbfe60e4f9fade7427489a58f597da778414c216abd18a803e431121ab5a4b014aebb0c504c50303d560a360f7f5100bedfd2d745921e307f20a05d451f54f35ccb45d799b1c28affd9613b54a9092fe9d0b39b362924d50b44f1cac6715a9746f3f0dfb2d51fc14e2e19c50cd96e12f7ad98c9f95d1bce13a79a7d73c76bdcb567870018424fdc30e32053bfe3b8238ab1f23a396cef7a3f8d1c3f8ce9ed8f59595d53a54c7361d6df84c5281f595e081d134f498c0c30ff9386299d40990fc02d113d7e4ed0a862c94e3fa0baf028a63dcb01c0ffc9093d2a251808320de9e75758a267bec0ba3c2dea746f59c44efe376aa32c096f447e92e8a26cabaee06ab97866d4c1054ce7e24fe5a627f978eb41b2d14c44ab5a4f1d6e4ee6b607fa9dc903bdd5f47f8fac6fa9ba1ee5df5d465593c67386baf8534680f7e5ab1c6f51a4f4562ad2160db71f5a0070a4e2cc749e6346926278b00eae3d4fb6e18d989b471576bab05ddb5cbc10bd4ac6d848d1ef0eb9b276538f646e72a7e71f3fa00455765bc130965c6edbd7c934e92013636cc748990b29a0d3d0c08dd98f271ac6237f238565718f07404e875e0935832da8bfcc5b37bca80fb03f917d139daff4526bd5020713d4852a88a7fce86e1e54a62cc9fe96822876e7d35e2b8d8301515b2119d95a80621804b4f683cf73c6b379a35ff5e5ee5f9a79bfce7d703f8f61d4200f6a192e0e135939b751c4608c990d3d27a64325845ba3832b4adcf3eaf58c52b44c5ec7fab54bbc637240d5e7caf346b88f69d3607da18c780b1fa117f04faa366f98cb2c0a1f50571b0763ba1cd259719c7609e7eec9b125d877032e8b5aacb2e64049ba259753cca9348906d9e8697f34d35961c08ecf2a72ee77ecf68cfb5f0502a791e56ea48127381ffe7fd62cbceee060167c0e381de989dd7ddfa84360fa5b95287a350c1437e2be10eb7abfb54caa3a7cd3f80b15f8b8a07c771e8771a27bf90bd729764b6aec25955c8c1c64321dd5277b20a7fb6f68c42486dca6450b4d73b30c963b9341e4b10db243965a86c9d5bfef344440e0705ecc2010cc49ab6847c43e1f3fe7edd7cf47ac7424699c77492da29a83d6f8ebd420baaa4abb7677ec874ea9e223e53b059a27c18d12b316670524db64c5967f2abc3f2295ad764f240f8e6815fbd2d06ea04f5af2d740dfdc49bff3c2bd03cae8cd7495392d33a2c3f0ca3eaf574cd2efef703e2bf9f7929a99d894e63983b02f26cfdca63e74b36305d06948ed10524bbd4189526fe5c0fbfad86665892d43a871a2742c578e05ee1835d60fa8c1cb55511b42efd6c3730ca4d6b784c2f5c47b5a5800f07965a9869638e3b555dbd000716c86d73ae8f50a5d7949d15d6aaa8c2aead3e8de94c979430253eadce5907c27914d25405035ee4684cc24142269fe783131661bbff758dc003dbca24a16f48c75dfdd2881681157757eb0bdfb8b86c39a174a2670b04bcf582b417fbf670929c7e7744852f99f626f21080eb1693c56f549db676d34797f09d9d2e7940946de35e2818a9364afbe894d36936c115fcf756f6a5df06eeef0a3f8ab1382645781dab1bce07159271e944d69fa343fbce57bc2f27857bf8c50e594f7587a5897f91a169535a84714e0a75ce2540cb2693c0cecbfc207b1ec051a28be819190fec544fce6c9cd97eddce2e7fbe820c4fae0abc8f4d5160c2d323c2a842df77eca5442c180254cbf0b4625070e284453bdf6fd68e5dd3d8f87efcc1ecbf8968aa80c00178fd7bef5dff6523b70d365c20d5bcfd4ae1f9ce65d687b90e05bf6e179eaf2f0e6b3c6fa732cd40c53b45aea926babfc5180a37a73e880ecc91ba92020e250b77c7c4346d7c6efff26b1e8838b90056d2c8096c5acacf9aab44af26276ee9a8ca3613042f368b44e1ab257f2d666ee022c2cf3da29eeddc935246a3b580c4499d907d4399c908a26cfa3fe5685112c256d33575de075c877704f3539dae4a609d5a68fbfc4b12b49598ed8a515d71cafc40b85cc57a349bd58b4247a53b997ffc3ffa1e4fbabf8dce6c14c795e725a7d29196c9188b71b913f47ba0fb36a1fd7c1ec67b1a606c6226407dd27a59a31e800f4d8b0c4dbb06df51f7b9010fe8050d7ca9d388a5f5631a8f83c3efc4a802d6e1dddad0e15cc62e3329eba13289dbfab7192a88a341fff53d620723cd2ebe36a4c5d4c91ac0f8a622f855b5cfef183373976add7ec31524934c6364a0bb639951146bc8ada1adadc0c4164aa1cdd2aae7db5840c31781ebed7b3f1dba82001a86258891ff4a670f064c84b7f4b45cc2aad9404329f6c8e8630aff0fff3238ec049b71f08f5bbcca68e0a087f4cf8a16ebf2cf6c04f97d18621b87190cf2d817043da083ece8afd30ee971e834ab99d3a5770348be1f17f50c4c5844ac828015db36e8fd49ea3a4f06826a3fb3823175d9b7293af1c04858b748777f52f2d115019abf4018b9bbd7bde5f7521c0b1c61ea83bed906c3892c101d1e4cc1deb4012de7c8a3da48814b339893b03404666f73cb5ca8af0fcc84a04f7989bbff19294c17ec0dbc65ea42d4b55ebc77e936c08b70b6893b6b41eb3a68243515a66d76074c8fd9da30afc4bdfbf6e424b224610540726b3dc158aad41cf4ebf7af18b4a4a6313ed87c2597ab5b92ddccd9906b46e5dcbb5f400f9254b4e5bb72a48964ccd2708edb28b36aa3051d0d34faa9f0b04908fe6f8f5e27d8e11969885ba25210485d9a3bafa4b1b79842f602a5cd0e2a186ce71f21ca4b087e16d84724de6ca2d329a2369aa26a3bbff1e908f62010831ed0b205fc57347efbfabb5275d914ab5f95308789475d4c1ad615b9b3803b7e0d86fa52dd5f54b5484744c3d6f75d2a3759390d9299147e67c249d641caf3fb3c3773536806ed600b3e7ad5dbe708064cd3e81a5813c100413ab03ba97b27efc7324c7a1e9c2ab0a72fb86f8679360e167d0444323a93d2e369242d1aa3ea2feac525df3d5b2f5871ebbb9c3799164ee02153b7f3ef9bd4cfce3775c399cfdddf3ee470c8716309b27f5ffc7b0035211bbee78c57e6228aba6ab59a9ad7fd0c27bfef51e05d56b70669bdb8a8940b152c11a6900d2d1efbef2bcb276b068a3d789910b1cd9b823ce6a5fd8802b04333b2ba5c217630d0878d360b9ca3e77935f32643a8ff8315753abff12b41d224bc051f601db2b6b0151f73ef7adc8cb5177abbaa3a0491a978d333d31891da94692e9163e302b05e3e37207bf06daaacc42d8007481597a550c6ac7edc6667963ae439816d9da70d7fca3ae1fd1751b0cf3f77d5b862a0db0987c09da31cbe8cb2af175b0625f64a10b7f93bb37bf853c9ccef83c7cd5e5ab0f1303af2d12bd1c1e88eaf7e50889ec7ec221fc002970cd1ab88c05384889fdb5e597a268efce5e7b9eceb5a6b1b4618686ee739233b9bb5d7a4ea42ce43208aaeef706c0800ef399c018a2ff1b50b52bdfa9e6fdd09a95b87874f67e8b8012be0db236a401fab207ea7618cd75536edcfc472d7187df729006e099c311885857d38a8b02618b45ba671f17c5c6a362a8237f4fbd542926db4f38eef6bea9f913e790c3b1d3ead0d6504f749dec64931cbc94688e5a004bcd605a095ad5db8dc451f77a0ceca4d8feddfb6a1fa8fd35552bfb564fc86eab50ba63f7db4c225f96a759d67d62c0d0054600f6effcffce5efad7a4133483c8a49a97a28557aab8267fccd02bac9229b12f5fd1650e1ccb2833b167ccdc5270e096bd217754de89a065707fba71a9d49b583a318674598e1160e8513a1b6dcbd19f656f9e695cbed4810ce7db26949b222dbe91c8d521603f3d30c9b0fe220da0ec1d0c77b210d8d3e6996c5f8e348897cdb3f4357849cc0ea1840e6f40ffd8a6f53283a0e3a6ee95d1fb0fde75daf12e7f7fa618253933fe032d333881324ec0b95c3e", [{0x5, 0x0, 0x7f}, {0xd, 0x4, 0x8001}, {0x8000, 0x21b61809, 0x3c}, {0x6, 0x0, 0x3ff}, {0x5e4b, 0x2, 0x6}, {0x2, 0x8}, {0x80000000, 0x10000, 0x3}, {0x5, 0x8000, 0x4}, {0x8, 0x5, 0x6}, {0x8f32, 0xda50}, {0x4, 0xd, 0xa}, {0x1, 0x3, 0x3}, {0x7, 0x6, 0x101}, {0x8, 0xbe28, 0x8}, {0x2e95, 0x7, 0x3}, {0x8, 0x8, 0x5}, {0x7e, 0x6, 0xc}, {0x5, 0x3e911e63, 0x3}, {0x2, 0x80000000, 0x7}, {0x1, 0x80, 0x5}, {0x9, 0x9, 0x6}, {0x8, 0x8, 0x6}, {0x7, 0xffffffff, 0x7}, {0xfffffffc, 0x0, 0x10000}, {0x6, 0x3, 0x9}, {0x0, 0x59a3, 0x4}, {0x3, 0x6, 0xffff0000}, {0x4, 0x6, 0x8}, {0x1000, 0x5, 0xec5}, {0x8, 0x3ff, 0x1}, {0xb, 0x7, 0xb}, {0x8001, 0x401, 0xb}, {0x6, 0x2, 0xa}, {0x7, 0x1, 0x2}, {0x7, 0x1}, {0xcf42, 0x3, 0xffff0001}, {0x4, 0xe4, 0x8}, {0xd, 0x3ff, 0x7}, {0x3, 0x2}, {0x5, 0x9, 0x3}, {0x3fa8, 0xa6, 0x9}, {0xb, 0xbe9, 0x80000001}, {0x40, 0x6, 0x3ff}, {0x1, 0x3ff, 0x6}, {0x7d, 0x0, 0x2}, {0x8, 0x7f, 0x2}, {0x3, 0x2a36fe16, 0xe6}, {0x2, 0x3, 0x6a2}, {0xea, 0x506e48d, 0x7c9}, {0x5, 0x5, 0x4}, {0xffff45d9, 0x5, 0x2}, {0x10000, 0x0, 0x2}, {0x8, 0x4118, 0x9b5}, {0x2, 0x2, 0x6}, {0x10001, 0x4, 0x7ed3}, {0x0, 0x10, 0x9}, {0x4, 0x31, 0x5}, {0x4, 0x3, 0x9}, {0x2, 0x1ff, 0x4}, {0x8, 0x6, 0x68}, {0x10000, 0x0, 0x100}, {0x8, 0xa, 0xe3}, {0x0, 0xffff, 0x5}, {0x4, 0x170000, 0x4}, {0x0, 0x10, 0x4}, {0x2, 0x0, 0x7fffffff}, {0x5, 0x0, 0xffff9881}, {0x3, 0x6, 0x7}, {0x33, 0x800, 0xb7e2}, {0xee5d, 0x7, 0x9}, {0x403, 0x4, 0x38}, {0x5, 0xb, 0x333}, {0x5, 0xcc4, 0x7}, {0x0, 0x7b1, 0x5}, {0x400000, 0x0, 0xc}, {0xb, 0xd3ea, 0x3}, {0x9, 0x100, 0x2}, {0x8, 0x3, 0x1}, {0x4, 0x3, 0x8}, {0x5, 0xfffffff9, 0x100}, {0x4, 0x3a3, 0x1}, {0x3, 0x80000001, 0x9}, {0x401, 0x81, 0x6}, {0x3, 0x9, 0x8}, {0x1ff, 0x80, 0x40b}, {0x2, 0x1, 0xfffffffb}]}) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000002bc0)={0x14, &(0x7f0000002b00)={0x20, 0x7, 0x5a, {0x5a, 0x23, "49063f7fb54512d9ef4d4e5ea78678f070e45f324cf0113858d14b10253bc270bb74fe45f7e228280548c040fee1b12504ad48b9d6465106cc7889235ed4828292608d1e097053bbdb4aedce7e0f6b3f35cb6d5c5bc65f9b"}}, &(0x7f0000002b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002ec0)={0x44, &(0x7f0000002c00)={0x40, 0xd, 0xe0, "3dad3237cd041b13b37fdaf993cb3bf5183d05f7196fb813868f1d47683f1ed420d3c702f5edc672b3806a9649296431e8895652cafa0edd5149871433f1e9a5efa6102426a7f256710b07f08953d9e69145b40be335c6302b802ec3e2a961f64b26af4d5f7c2509e29cd4cb7df2bd18761cfbe479d5d47c041d27d53944b513c1abaa24bfbb87b970e242607cf7bac74e0b5930e7281351c351b3105eeb61f1831dbeafef13540057509feb4602acbec3f236aaa006abb5b2e356cc830d2b639d537bb39935da2c41b0ae076c853357d01713910cf1f4ffc1b6dba7633cdc04"}, &(0x7f0000002d00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002d40)={0x0, 0x8, 0x1}, &(0x7f0000002d80)={0x20, 0x80, 0x1c, {0x8, 0x95d2, 0xc, 0xd, 0x7, 0x9, 0x3fda, 0x0, 0xbd, 0x2, 0x0, 0x9}}, &(0x7f0000002dc0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000002e00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002e40)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000002e80)={0x20, 0x89, 0x2}}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000002f40)=@gcm_128={{0x303}, "00db56bd14402cdc", "0880c6679db065fc0754281f0af3efec", "5d20c3a8", "026fce34426dbe99"}, 0x28) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r8, &(0x7f0000002f80)='6}!\x00', 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000003000)={0x1, 0x18, '\x00', 0x0, &(0x7f0000002fc0)=[0x0, 0x0, 0x0]}) r9 = syz_open_dev$hidraw(&(0x7f0000003040), 0x1, 0x3) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000003080)={0xa, 0x7, 0x4}) close_range(r7, r2, 0x0) close_range(r9, r5, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003200)={&(0x7f0000003140)={0x8c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x126}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) 2.298777825s ago: executing program 8 (id=2805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x11, r6, 0x100000000, &(0x7f0000000540)) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10008, 0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r5, 0x0, 0x80000000) 2.204310613s ago: executing program 8 (id=2806): r0 = gettid() rt_sigqueueinfo(r0, 0x34, &(0x7f0000000000)={0x35, 0x9, 0x8}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='./binderfs/binder0\x00', &(0x7f0000000500)="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", 0x1000) r4 = dup3(r2, r1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000035c0)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 1.811267884s ago: executing program 7 (id=2811): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000804, &(0x7f0000000240)={[{@uuid_on}, {@default_permissions}, {@xino_auto}, {@verity_off}], [{@obj_user={'obj_user', 0x3d, '{){*#'}}, {@uid_lt={'uid<', r1}}, {@dont_appraise}]}) ppoll(&(0x7f0000000040)=[{r0, 0x16}, {0xffffffffffffffff, 0x90c0}], 0x2, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000400)={0x9, {{0xa, 0x4e23, 0x9, @private1, 0x25a7}}, 0x0, 0x3, [{{0xa, 0x4e21, 0xfffffff7, @loopback, 0x40}}, {{0xa, 0x4e21, 0xb, @loopback, 0x6}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}}]}, 0x210) 1.734044641s ago: executing program 7 (id=2813): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa0002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "7510"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x11, r0, 0x45809000) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x5cb581, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 1.464504742s ago: executing program 4 (id=2815): r0 = memfd_secret(0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000080)={{0x1, 0x0, 0x80, {0xffff1000, 0x2}}, "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", "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"}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002140), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x68, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000050}, 0x1604c000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3f, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000180)={0x51, 0xfffe, 0x0, {0x7}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}]}) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='\x00') ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2012, r2, 0x4d757000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40060}, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc47, 0x46}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "90c8988454c05461546ce9799f11a19e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_SSID={0x15, 0x34, @random="c373afc59ef0f7ce04dbb6aa829fd34ab6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) 1.396912487s ago: executing program 4 (id=2816): pread64(0xffffffffffffffff, 0x0, 0x0, 0x911) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e23, @empty}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x1260, 0x3) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.285408047s ago: executing program 4 (id=2817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/164, 0xa4, 0x7fffffffffffffff, 0x37}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @exit_looper, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x3}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf0}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff8, 0x0, &(0x7f0000000300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.284299167s ago: executing program 4 (id=2818): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x80800) r2 = dup3(r0, r1, 0x80000) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0xffff, @multicast1}, {0x2, 0x4e23, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='dvmrp1\x00', 0xffffffffffff8001, 0xff, 0x81}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x3, 0x3, 0x526, 0x101, 0x6}) r3 = dup3(r0, r2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000200)={'veth1_macvtap\x00', {0x2, 0x0, @remote}}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000240)) r4 = signalfd(r2, &(0x7f0000000280)={[0x200]}, 0x8) sendto$inet6(r4, &(0x7f00000002c0)="4d327acdeb58d55a9d0ca8b15578a0ddff15167bcf3d4433c0fce4e06824f0c065cda1dca18cf5f1fc30b9e5383e7ea1db2db40027284d99d52a9116333d8cfa75e4b18e90c9613028c57e9ab891666e9d43fed3a780a45c07ce4dd137a5aed3b3366402e73cab04e200f1bbf47e5f4a3f82b5c9b8bdf65f07d8340a749c7baba4775770994c8a512ac56e2b71161cdb574a9826372c3b58f6af62a8e0f52d602960b485453af7bddffa98dd735c5e8a81b81d484bff0c2ce358d71a9a39b31ff053b1e70a8ff656cabf58f5b2ed8a607c7a4262507936", 0xd7, 0x20008000, 0x0, 0x0) r5 = accept4(r2, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x80, 0x800) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x0, [0x9, 0x0, 0x2]}, &(0x7f0000000500)=0x44) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='nv\x00', 0x3) sendto$inet6(r0, &(0x7f0000000580)="9e361adafaccc64fb85c152fa1", 0xd, 0x40000, &(0x7f00000005c0)={0xa, 0x4e21, 0xf7, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x9, @private=0xa010100}, {0x2, 0x4e24, @remote}, 0x6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)='pimreg\x00', 0xffffffff7fffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000085}, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000800), 0x4) lsm_set_self_attr(0x65, &(0x7f0000000840)={0x69, 0x5, 0x112, 0xf2, "4bee3a86327a178c3401b6d17a64147c32b8a594885fc43c4aeeaf246899faceccfbdc6855cff6a8f5d3d4d96581a1aea17833fdfdd62d91308fa4721beb12e584e71547691da0d8d85967235703be0b6b8ab82b742849c2ff7d5849d629d82c5348d5a686a3f31d4bd6e2c584ec54a52f21c6eeed789dc0400acde2c745d5238ee1c7e688b422a4519d757aa05eb4526e0172d0bfdbafb01ac9a7c9aed0f88f87b5270c954ac3c9c658b55e566687e5b6c9d3e4b98e3b16df95e46a4f9dfb5d39cdeef409db6a20e79cdb6de43156ffb1c1d6427542e334066b1a9125b846c6c8b1cbd9c25f2a298e944fc9e4957fff465d"}, 0x112, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000980)={0x0, 0x0}) r9 = getpgrp(0x0) kcmp(r8, r9, 0x1, r4, r6) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a00)=[@text32={0x20, 0xfffffffffffffffe}], 0x1, 0x30, &(0x7f0000000a40)=[@dstype3={0x7, 0x7}], 0x1) syz_open_dev$usbfs(&(0x7f0000000a80), 0x2, 0x8201) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000ac0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r3) process_vm_readv(r9, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/202, 0xca}], 0x1, &(0x7f0000000e80)=[{&(0x7f0000000c80)=""/214, 0xd6}, {&(0x7f0000000d80)=""/140, 0x8c}, {&(0x7f0000000e40)=""/9, 0x9}], 0x3, 0x0) 1.251795809s ago: executing program 4 (id=2819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'sit0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xffdd) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000240)={0xc7, 0x0, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x200}) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000001c0)={0x75, @broadcast, 0x4e20, 0x2, 'fo\x00', 0x10, 0x6, 0x7c}, 0x2c) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) 1.109807751s ago: executing program 4 (id=2820): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0x8}, 0x8, 0x0, 0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000500)="51c2dacf9e5ff348adafdf8771f00008923ce9194b2663fed09d50d3aa17c3a21a5c8a1a040a5bf7d86b0df066214bffc1ce25ea424382029aa5925209d70a0e2af76e1af7bb574431575506424b2280fa9e15e32f48dbfb73f8cc0210c5c3829dcaec5f27edffe29f66e52d675970599b826676a04e397666b4ecf156b89c5848962e6eb9d7b4e551eb8c890631c83ac509d0742df266fce77d9d4762defb2c8c26785be2b8980d9de6614a176a68be59c2213faea23fb5a72d8eb214adc4b1552a505114caedda02834a77940a152c01a104868a57d03f86a7f993781dd972c404de7d29d20cadf86c85cc4d81ad87501d205a2bfaa5d42525f7a6c626e122d2c114418d3cd61a99cc3c480b9399c9c96341503033b4b22c8ea1450d1c4f0d1c7643cc4f5d67f87c95ec7dac5d91b2d7e180d60c67d4fe3cab3182c91f628ec64b6c829db5c3c2dd4213c5942df2f55c6071d1eedd546fc9cade2f4dc9837969bff62d3e68a49638dfdaf5528d0486a4692f106718a621e4dc2d1a8f7ddc39195af108589dd48f2e60dc6b3aa9999c7b1b9f54c404f7920673eb836e57c3ddc412525768775a082c553b119997d0cb7c785e715232eb0c5041917ec11ba3acb67560ec5501c9dd51", 0x1c9, 0x0, &(0x7f00000002c0)={0x2, 0x4d, {0x0, 0xc, 0x2f, "24d332c98061a49a3cf801124a8ae732bfb7406fabb3d7f60cb384f52516eba65662efd13aba83d9ff1258ce408c06", 0x11, "4c061203ac84ca0ae5654c3b831f4a1107"}, 0x77, "3860d15d005463fe6b63721a5b77c497c42af083bd530c32433cadc3c5901a66d34a8a63d022f3299e3ff8d86c61f55f5db14c3ce06ec24d9a6af3e06ff820718cf789a7b0665462c53b8f44b836300f31e126011fa9514f204ed216b652d84154a166753389b3840d16301fe32e83331bc2107f8df2cc"}, 0xd0}) syz_usb_connect(0x3, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x310, 0x18, 0x3d, 0xea, 0x8, 0x5dc, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xfb, 0x8, 0x7f, [{{0x9, 0x4, 0x96, 0x5, 0x0, 0x3f, 0x3c, 0x63, 0xaa}}]}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0}) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7461608b"], 0x17) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) syz_clone(0x200080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async, rerun: 64) r4 = memfd_secret(0x80000) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44084) (async) sendmsg$netlink(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e"], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xfdef) (async, rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, &(0x7f0000000100)) (async) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x36) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 548.382686ms ago: executing program 3 (id=2821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) dup(r0) (async) r1 = dup(r0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000380)=@x86={0xf, 0x3, 0x8, 0x0, 0x4, 0xa3, 0xa, 0xf5, 0x0, 0x58, 0x5, 0x8, 0x0, 0xfff, 0x5, 0x3, 0x2, 0x1b, 0x5, '\x00', 0x30, 0x8}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008ef17096000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20092f0000002f0956c3d9408b98b01c60772ef476f1cac0216c9a4d70eae5d6a593277ce3a6f12aa9edf945e9ff00f8397f3de1ba"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000600)="f30f23080f5e373e82d68d66b827cb00000f23c00f21f86635030007000f23f866f3a70f221b26660fc7352e660f3880bf050026f36d0f30", 0x38}], 0x1, 0x65, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000600)="f30f23080f5e373e82d68d66b827cb00000f23c00f21f86635030007000f23f866f3a70f221b26660fc7352e660f3880bf050026f36d0f30", 0x38}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x200000000088}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x200000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) open(&(0x7f0000000300)='./file2\x00', 0x101042, 0xa3) (async) open(&(0x7f0000000300)='./file2\x00', 0x101042, 0xa3) r6 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) (async) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000180)=0x140, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 505.807949ms ago: executing program 8 (id=2822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10002, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0x3, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x8, 0x1, 0x0, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0x4, 0xe3, 0x11, 0xa39a, 0x8, 0x200073, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x0, 0x0, 0x6, 0x8001, 0x7, 0xf075, 0x3, 0x7, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8246, 0x9, 0xacf, 0xedb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0xfffff000, 0x6, 0x9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0xffffffff, 0x8, 0x3ff, 0x4, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xb, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0x5, 0x1, 0x3db1], [0x0, 0x3, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x15, 0x2, 0x24, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x4, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x0, 0xffffffff, 0x5, 0x8]}, 0x45c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xe, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x142, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x401, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x7, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x4, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0), 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005940)=0x14, 0x80400) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r9, 0x29, 0x2d, 0x0, &(0x7f00000001c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)=@keyring={'key_or_keyring:', r7}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000009740)=[{{&(0x7f00000032c0)={0xa, 0x4e22, 0x10000, @local, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000003840)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff}}], 0x18}}], 0x1, 0x24008085) recvmmsg(r10, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/186, 0xba}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000940)=""/137, 0x89}], 0x6, &(0x7f0000000a80)=""/49, 0x31}, 0x101}, {{&(0x7f0000000ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000b40)=""/223, 0xdf}, {&(0x7f0000000c40)=""/55, 0x37}, {&(0x7f0000000c80)=""/86, 0x56}, {&(0x7f0000000d00)=""/56, 0x38}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/68, 0x44}], 0x6, &(0x7f0000001e40)=""/54, 0x36}, 0x20b}, {{&(0x7f0000001e80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f00)=""/182, 0xb6}, {&(0x7f0000001fc0)=""/15, 0xf}, {&(0x7f0000002000)=""/112, 0x70}, {&(0x7f0000002080)=""/9, 0x9}, {&(0x7f00000020c0)=""/12, 0xc}, {&(0x7f0000002100)=""/21, 0x15}], 0x6, &(0x7f00000021c0)=""/76, 0x4c}, 0x3}, {{&(0x7f0000002240)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000005680)=[{&(0x7f00000022c0)=""/90, 0x5a}, {&(0x7f0000002340)=""/223, 0xdf}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/168, 0xa8}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/198, 0xc6}, {&(0x7f0000005600)=""/123, 0x7b}], 0x8, &(0x7f0000005700)=""/135, 0x87}, 0x9cd7}], 0x4, 0x0, 0x0) truncate(&(0x7f00000058c0)='./file0\x00', 0xef) 167.226097ms ago: executing program 8 (id=2823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x2, 0x0, 0xa}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x18e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x21}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x48061) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 72.557544ms ago: executing program 8 (id=2824): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x7, 0x8000, 0xc4a, 0x8000, 0x1, 0x7, 0x6}, 0x1c) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000aa6401010100000000000000000000000000002400100000000200002084000000", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) 0s ago: executing program 8 (id=2825): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)={0x0, 0x13, 0x2, "b720"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00030400000004030000"]}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000140)={0x2, 0x8000, 0x1}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000140)={0x2, 0x8000, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x3, &(0x7f0000000680)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x2c, 0x2, 0x1, 0x3}, {0x6, 0xd5, 0x9, 0x5}]}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="3e0f709cf9ff71640f1af8660f09f20f38f00ff3dff60f35f466b9c209000066b810dc840e66ba000000000f3067f08126b10066b9800000c00f326635000800000f30", 0x43}], 0x1, 0x29, &(0x7f0000000100)=[@cr0={0x0, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffe}], 0x2) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="3e0f709cf9ff71640f1af8660f09f20f38f00ff3dff60f35f466b9c209000066b810dc840e66ba000000000f3067f08126b10066b9800000c00f326635000800000f30", 0x43}], 0x1, 0x29, &(0x7f0000000100)=[@cr0={0x0, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffe}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 417253][ T6366] syz.4.1772 uses obsolete (PF_INET,SOCK_PACKET) [ 222.484711][ T439] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 222.635466][ T439] usb 8-1: Using ep0 maxpacket: 8 [ 222.669642][ T439] usb 8-1: unable to get BOS descriptor or descriptor too short [ 222.701633][ T439] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 222.712578][ T439] usb 8-1: can't read configurations, error -71 [ 223.233407][ T6400] rust_binder: pid 6400 performed invalid decrement on ref [ 223.306150][ T6404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.360511][ T6405] rust_binder: Error in use_page_slow: ESRCH [ 223.366981][ T6405] rust_binder: use_range failure ESRCH [ 223.372957][ T6405] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 223.378431][ T6405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 223.386456][ T6405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:471 [ 224.173844][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1794'. [ 224.245436][ T6432] rust_binder: Write failure EINVAL in pid:476 [ 224.245998][ T6432] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 224.339926][ T36] kauditd_printk_skb: 613 callbacks suppressed [ 224.339937][ T36] audit: type=1400 audit(1754546808.878:18661): avc: denied { ioctl } for pid=6433 comm="syz.7.1796" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 224.370976][ T36] audit: type=1400 audit(1754546808.878:18662): avc: denied { read } for pid=6433 comm="syz.7.1796" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 224.392263][ T36] audit: type=1400 audit(1754546808.878:18663): avc: denied { read open } for pid=6433 comm="syz.7.1796" path="net:[4026532386]" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 224.417880][ T36] audit: type=1400 audit(1754546808.878:18664): avc: denied { create } for pid=6433 comm="syz.7.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.458218][ T36] audit: type=1400 audit(1754546808.998:18665): avc: denied { read write } for pid=3613 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.482608][ T36] audit: type=1400 audit(1754546808.998:18666): avc: denied { read write open } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.513267][ T36] audit: type=1400 audit(1754546808.998:18667): avc: denied { ioctl } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.539240][ T36] audit: type=1400 audit(1754546809.068:18668): avc: denied { read write } for pid=3613 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.589371][ T36] audit: type=1400 audit(1754546809.068:18669): avc: denied { read write open } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.620377][ T36] audit: type=1400 audit(1754546809.078:18670): avc: denied { ioctl } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.682925][ T6446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 224.756282][ T6457] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 225.551658][ T6469] net_ratelimit: 31533 callbacks suppressed [ 225.551676][ T6469] veth1_vlan: mtu greater than device maximum [ 226.211907][ T6514] overlayfs: failed to clone upperpath [ 226.602804][ T6530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.602838][ T6530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 226.667639][ T6532] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 226.683941][ T6532] rust_binder: Write failure EINVAL in pid:509 [ 226.779989][ T6538] overlayfs: failed to clone upperpath [ 227.174930][ T31] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 227.304470][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1855'. [ 227.354899][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 227.355748][ T6617] overlayfs: failed to clone upperpath [ 227.365304][ T31] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 227.382786][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.403393][ T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.434739][ T31] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.443811][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.452446][ T31] usb 8-1: Product: syz [ 227.456624][ T31] usb 8-1: Manufacturer: syz [ 227.461207][ T31] usb 8-1: SerialNumber: syz [ 227.872275][ T31] usb 8-1: 0:2 : does not exist [ 228.490380][ T31] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 228.504830][ T31] usb 8-1: USB disconnect, device number 12 [ 228.535251][ T5331] udevd[5331]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.055746][ T36] kauditd_printk_skb: 326 callbacks suppressed [ 244.055788][ T36] audit: type=1400 audit(1754546828.600:18997): avc: denied { create } for pid=6628 comm="syz.7.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.113955][ T36] audit: type=1400 audit(1754546828.630:18998): avc: denied { write } for pid=6628 comm="syz.7.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.148308][ T6631] syz.7.1862: attempt to access beyond end of device [ 244.148308][ T6631] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 244.161971][ T36] audit: type=1400 audit(1754546828.630:18999): avc: denied { read } for pid=6628 comm="syz.7.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.182500][ T6631] FAT-fs (loop7): unable to read boot sector [ 244.183110][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1867'. [ 244.221560][ T36] audit: type=1400 audit(1754546828.630:19000): avc: denied { read } for pid=6628 comm="syz.7.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.250949][ T36] audit: type=1400 audit(1754546828.630:19001): avc: denied { read } for pid=6628 comm="syz.7.1862" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.273761][ T36] audit: type=1400 audit(1754546828.630:19002): avc: denied { read open } for pid=6628 comm="syz.7.1862" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.297571][ T36] audit: type=1400 audit(1754546828.630:19003): avc: denied { ioctl } for pid=6628 comm="syz.7.1862" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.322945][ T36] audit: type=1400 audit(1754546828.660:19004): avc: denied { execmem } for pid=6633 comm="syz.4.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 244.342359][ T36] audit: type=1400 audit(1754546828.660:19005): avc: denied { execute } for pid=6633 comm="syz.4.1864" path="/dev/rnullb0" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 244.365272][ T36] audit: type=1400 audit(1754546828.660:19006): avc: denied { execmem } for pid=6633 comm="syz.4.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 244.570893][ T6669] netlink: 'syz.5.1874': attribute type 1 has an invalid length. [ 244.587423][ T6671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.707514][ T6676] rust_binder: Error in use_page_slow: ESRCH [ 244.714817][ T6676] rust_binder: use_range failure ESRCH [ 244.720869][ T6676] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 244.727917][ T6676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 244.741571][ T6676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:528 [ 245.149599][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1891'. [ 245.309819][ T6737] netlink: 'syz.3.1897': attribute type 3 has an invalid length. [ 245.317650][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 245.516363][ T6746] rust_binder: 535: no such ref 0 [ 245.668426][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1901'. [ 246.001702][ T6772] rust_binder: inc_ref_done called when no active inc_refs [ 246.016245][ T6776] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1909'. [ 246.512774][ T6814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.571455][ T6818] rust_binder: Error in use_page_slow: ESRCH [ 246.577931][ T6818] rust_binder: use_range failure ESRCH [ 246.583957][ T6818] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 246.595405][ T6818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 246.604314][ T6818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:556 [ 246.949388][ T6833] netlink: 'syz.5.1926': attribute type 3 has an invalid length. [ 246.966321][ T6833] netlink: 944 bytes leftover after parsing attributes in process `syz.5.1926'. [ 247.346447][ T6860] rust_binder: Write failure EFAULT in pid:559 [ 248.270841][ T6881] binder: Bad value for 'stats' [ 248.439709][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1950'. [ 248.457257][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1950'. [ 248.470154][ T6896] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 248.741317][ T6901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.819584][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1954'. [ 248.931061][ T6911] netlink: 'syz.3.1956': attribute type 33 has an invalid length. [ 248.938936][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 249.048678][ T6922] overlayfs: failed to clone upperpath [ 249.078397][ T36] kauditd_printk_skb: 714 callbacks suppressed [ 249.078413][ T36] audit: type=1400 audit(1754546833.617:19721): avc: denied { create } for pid=6925 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.106676][ T36] audit: type=1400 audit(1754546833.627:19722): avc: denied { write } for pid=6925 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.128269][ T36] audit: type=1400 audit(1754546833.627:19723): avc: denied { nlmsg_write } for pid=6925 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.151314][ T36] audit: type=1400 audit(1754546833.627:19724): avc: denied { execmem } for pid=6925 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 249.171787][ T36] audit: type=1400 audit(1754546833.627:19725): avc: denied { execute } for pid=6925 comm="syz.4.1961" path="/dev/rnullb0" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.195326][ T36] audit: type=1400 audit(1754546833.627:19726): avc: denied { create } for pid=6925 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.216591][ T36] audit: type=1400 audit(1754546833.647:19727): avc: denied { create } for pid=6928 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.237463][ T36] audit: type=1400 audit(1754546833.647:19728): avc: denied { create } for pid=6928 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.257141][ T36] audit: type=1400 audit(1754546833.647:19729): avc: denied { setopt } for pid=6928 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.276803][ T36] audit: type=1400 audit(1754546833.647:19730): avc: denied { setopt } for pid=6928 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.554201][ T6958] rust_binder: 580: no such ref 0 [ 249.704420][ T6968] tipc: Started in network mode [ 249.709310][ T6968] tipc: Node identity 7, cluster identity 4711 [ 249.715547][ T6968] tipc: Node number set to 7 [ 249.721309][ T6968] binder: Bad value for 'stats' [ 249.796745][ T6970] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1976'. [ 250.082341][ T64] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 250.111196][ T6988] overlayfs: failed to clone upperpath [ 250.234805][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.252334][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.262179][ T64] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 250.272259][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.281992][ T64] usb 8-1: config 0 descriptor?? [ 250.354494][ T7020] 9pnet_fd: Insufficient options for proto=fd [ 250.386325][ T7028] netlink: 'syz.4.1994': attribute type 6 has an invalid length. [ 250.673882][ T7047] 9pnet_fd: Insufficient options for proto=fd [ 250.712480][ T64] hid-led 0003:27B8:01ED.000D: unbalanced delimiter at end of report description [ 250.721880][ T64] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -22 [ 250.743010][ T7051] netlink: 'syz.3.2003': attribute type 27 has an invalid length. [ 250.942276][ T7064] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 250.951227][ T7064] overlayfs: missing 'lowerdir' [ 251.060332][ T64] usb 8-1: USB disconnect, device number 13 [ 251.402363][ T64] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 251.552358][ T64] usb 8-1: Using ep0 maxpacket: 16 [ 251.559405][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.570363][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.580146][ T64] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.592935][ T64] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.601958][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.611466][ T64] usb 8-1: config 0 descriptor?? [ 252.022998][ T64] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 252.037429][ T64] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 252.051682][ T64] microsoft 0003:045E:07DA.000E: no inputs found [ 252.059743][ T64] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 252.228337][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.242534][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.306382][ T7126] overlayfs: failed to clone upperpath [ 252.366337][ T64] usb 8-1: USB disconnect, device number 14 [ 252.919197][ T7145] overlayfs: failed to clone lowerpath [ 253.092772][ T7164] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.2041'. [ 253.496689][ T7205] bpf: Bad value for 'gid' [ 253.875678][ T7237] 9pnet_fd: Insufficient options for proto=fd [ 253.907062][ T7239] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2066'. [ 253.983956][ T7247] netlink: 'syz.3.2068': attribute type 2 has an invalid length. [ 254.090781][ T36] kauditd_printk_skb: 473 callbacks suppressed [ 254.090797][ T36] audit: type=1400 audit(1754546838.627:20204): avc: denied { create } for pid=7254 comm="syz.3.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.156652][ T36] audit: type=1400 audit(1754546838.677:20205): avc: denied { read write } for pid=3613 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.207782][ T36] audit: type=1400 audit(1754546838.677:20206): avc: denied { read write open } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.257747][ T36] audit: type=1400 audit(1754546838.677:20207): avc: denied { ioctl } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.284324][ T36] audit: type=1400 audit(1754546838.697:20208): avc: denied { create } for pid=7256 comm="syz.5.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.304852][ T36] audit: type=1400 audit(1754546838.697:20209): avc: denied { connect } for pid=7256 comm="syz.5.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.329577][ T36] audit: type=1400 audit(1754546838.697:20210): avc: denied { create } for pid=7258 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.355640][ T36] audit: type=1400 audit(1754546838.697:20211): avc: denied { create } for pid=7258 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.378529][ T36] audit: type=1400 audit(1754546838.697:20212): avc: denied { write } for pid=7258 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.400764][ T36] audit: type=1400 audit(1754546838.697:20213): avc: denied { read } for pid=7258 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.791615][ T7317] netlink: 'syz.3.2092': attribute type 3 has an invalid length. [ 254.799458][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 254.853068][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 254.996640][ T7330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2097'. [ 255.073321][ T7332] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 255.761501][ T7350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.811593][ T7352] overlay: ./file1 is not a directory [ 256.012361][ T439] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 256.152354][ T439] usb 8-1: device descriptor read/64, error -71 [ 256.239216][ T7671] tipc: Enabling of bearer rejected, failed to enable media [ 256.248305][ T7672] tipc: Enabling of bearer rejected, failed to enable media [ 256.357466][ T7679] fuse: Bad value for 'rootmode' [ 256.402338][ T439] usb 8-1: device descriptor read/64, error -71 [ 256.424890][ T7686] tipc: Started in network mode [ 256.429854][ T7686] tipc: Node identity c263861063bb, cluster identity 4711 [ 256.437796][ T7686] tipc: Enabled bearer , priority 8 [ 256.642357][ T439] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 256.782600][ T439] usb 8-1: device descriptor read/64, error -71 [ 257.022371][ T439] usb 8-1: device descriptor read/64, error -71 [ 257.066665][ T7717] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2129'. [ 257.133076][ T439] usb usb8-port1: attempt power cycle [ 257.197424][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2132'. [ 257.209219][ T7727] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 257.482352][ T439] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 257.504094][ T439] usb 8-1: device descriptor read/8, error -71 [ 257.552354][ T31] tipc: Node number set to 2715321872 [ 257.634591][ T439] usb 8-1: device descriptor read/8, error -71 [ 257.873266][ T439] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 257.896288][ T439] usb 8-1: device descriptor read/8, error -71 [ 258.034280][ T439] usb 8-1: device descriptor read/8, error -71 [ 258.142453][ T439] usb usb8-port1: unable to enumerate USB device [ 258.161010][ T7774] tipc: Enabling of bearer rejected, failed to enable media [ 258.711901][ T7790] fuse: Unknown parameter '/wRŗ O+$_&lC 莛3i' [ 258.837632][ T3605] Bluetooth: hci0: Frame reassembly failed (-84) [ 258.845444][ T60] Bluetooth: hci1: Frame reassembly failed (-84) [ 258.988417][ T7809] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004rootmode' [ 259.115246][ T36] kauditd_printk_skb: 816 callbacks suppressed [ 259.115263][ T36] audit: type=1400 audit(1754546843.659:21030): avc: denied { create } for pid=7824 comm="syz.4.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.162331][ T36] audit: type=1400 audit(1754546843.679:21031): avc: denied { connect } for pid=7824 comm="syz.4.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.182882][ T36] audit: type=1400 audit(1754546843.689:21032): avc: denied { setopt } for pid=7824 comm="syz.4.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.202711][ T36] audit: type=1400 audit(1754546843.699:21033): avc: denied { create } for pid=7826 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.223778][ T36] audit: type=1400 audit(1754546843.699:21034): avc: denied { setopt } for pid=7826 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.243910][ T36] audit: type=1400 audit(1754546843.699:21035): avc: denied { create } for pid=7826 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.264594][ T36] audit: type=1400 audit(1754546843.709:21036): avc: denied { create } for pid=7826 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.285138][ T36] audit: type=1400 audit(1754546843.709:21037): avc: denied { write } for pid=7826 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.305570][ T36] audit: type=1400 audit(1754546843.709:21038): avc: denied { read } for pid=7826 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.330787][ T36] audit: type=1400 audit(1754546843.739:21039): avc: denied { write } for pid=7826 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.377782][ T7840] overlayfs: failed to clone upperpath [ 259.890755][ T7858] 9pnet_fd: Insufficient options for proto=fd [ 260.143740][ T7870] overlayfs: failed to clone upperpath [ 260.149015][ T7871] overlayfs: failed to clone upperpath [ 260.543402][ T7896] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2187'. [ 260.555025][ T7896] overlayfs: failed to clone upperpath [ 260.783947][ T7911] overlayfs: failed to clone upperpath [ 260.862354][ T5170] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 260.869175][ T1316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 260.875282][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 260.881341][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 260.994181][ T7939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.004479][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2200'. [ 261.669886][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.677848][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.691370][ T8009] bridge_slave_0: entered allmulticast mode [ 261.697732][ T8009] bridge_slave_0: entered promiscuous mode [ 261.704542][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.711558][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.718620][ T8009] bridge_slave_1: entered allmulticast mode [ 261.724764][ T8009] bridge_slave_1: entered promiscuous mode [ 261.789784][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.796839][ T8009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.804137][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.811165][ T8009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.874719][ T8024] rust_binder: Write failure EFAULT in pid:629 [ 261.886038][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.911707][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.927631][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.934698][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.947280][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.954347][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.050454][ T8033] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2225'. [ 262.120190][ T8009] veth0_vlan: entered promiscuous mode [ 262.170223][ T8009] veth1_macvtap: entered promiscuous mode [ 262.297667][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2227'. [ 262.586733][ T8059] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2232'. [ 263.335075][ T8061] netlink: 'syz.3.2233': attribute type 27 has an invalid length. [ 264.345002][ T36] kauditd_printk_skb: 411 callbacks suppressed [ 264.345019][ T36] audit: type=1400 audit(1754546848.889:21451): avc: denied { create } for pid=8083 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.370388][ T8085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.373619][ T36] audit: type=1400 audit(1754546848.889:21452): avc: denied { create } for pid=8083 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.380492][ T8085] audit: audit_lost=94 audit_rate_limit=0 audit_backlog_limit=64 [ 264.400290][ T36] audit: type=1400 audit(1754546848.889:21453): avc: denied { write } for pid=8083 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.407486][ T8085] audit: backlog limit exceeded [ 264.428202][ T36] audit: type=1400 audit(1754546848.889:21454): avc: denied { read } for pid=8083 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.453278][ T36] audit: type=1400 audit(1754546848.889:21455): avc: denied { read } for pid=8083 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.474667][ T36] audit: type=1400 audit(1754546848.889:21456): avc: denied { create } for pid=8083 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.496603][ T36] audit: type=1400 audit(1754546848.889:21457): avc: denied { write } for pid=8083 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.518745][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 264.534257][ T8092] overlayfs: failed to clone upperpath [ 265.291332][ T8122] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 265.300179][ T8122] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 265.500509][ T31] rust_binder: 8129: removing orphan mapping 0:24 [ 265.543289][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.543552][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.564554][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.564838][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.571516][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.578651][ T8135] rust_binder: Error in use_page_slow: ESRCH [ 265.595699][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.596014][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.604074][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.609195][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.617052][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.623121][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.629886][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.636607][ T8135] rust_binder: use_range failure ESRCH [ 265.639011][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.643078][ T8135] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 265.649719][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.664122][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.669276][ T8135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 265.669457][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.675732][ T8135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:10 [ 265.686644][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.701876][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.707791][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.715388][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.720902][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.728735][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.734633][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.741205][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.749772][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.755126][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.761662][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.769937][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.777337][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.785246][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.789761][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.797617][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.803585][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.810315][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.818229][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.826392][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.833771][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.845028][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.846863][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.857879][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.860000][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.870888][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.873854][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.881602][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.889835][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.897309][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.904764][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.919920][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.922060][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.933429][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.940031][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.948071][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.955507][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.962265][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.990268][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.990526][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.001243][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.031853][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.032124][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.044378][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.045779][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.054412][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.061258][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.069181][ T8133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.316222][ T8171] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 266.316248][ T8171] rust_binder: Read failure Err(EFAULT) in pid:14 [ 266.717494][ T8194] 9pnet_fd: Insufficient options for proto=fd [ 267.003815][ T8212] /dev/rnullb0: Can't lookup blockdev [ 267.115577][ T8221] rust_binder: Read failure Err(EAGAIN) in pid:670 [ 267.121825][ T8221] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 267.131907][ T8221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 267.152358][ T8221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:670 [ 267.373822][ T8238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 267.403746][ T8242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 267.479692][ T8244] netlink: 'syz.7.2301': attribute type 4 has an invalid length. [ 267.511022][ T8244] netlink: 'syz.7.2301': attribute type 6 has an invalid length. [ 267.520199][ T8244] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2301'. [ 267.542227][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2301'. [ 268.072379][ T432] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 268.235666][ T432] usb 8-1: Using ep0 maxpacket: 16 [ 268.247772][ T432] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.267988][ T432] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.295219][ T432] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.313670][ T432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.328501][ T432] usb 8-1: Product: syz [ 268.332764][ T432] usb 8-1: Manufacturer: syz [ 268.337538][ T432] usb 8-1: SerialNumber: syz [ 268.615442][ T8290] kvm: kvm [8289]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x405 [ 268.629054][ T31] usb 8-1: USB disconnect, device number 19 [ 268.646544][ T8290] kvm: kvm [8289]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0x2c05 [ 268.683414][ T8290] kvm: kvm [8289]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0x6505 [ 268.706501][ T8290] kvm_intel: kvm [8289]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0xa705 [ 269.061250][ T8333] netlink: 'syz.5.2326': attribute type 11 has an invalid length. [ 269.337750][ T8357] can0: slcan on ptm0. [ 269.359232][ T36] kauditd_printk_skb: 773 callbacks suppressed [ 269.359247][ T36] audit: type=1400 audit(1754546853.899:22231): avc: denied { connect } for pid=8360 comm="syz.7.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.442346][ T36] audit: type=1400 audit(1754546853.899:22232): avc: denied { connect } for pid=8360 comm="syz.7.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.445803][ T8372] /dev/sr0: Can't lookup blockdev [ 269.475426][ T36] audit: type=1400 audit(1754546853.899:22233): avc: denied { connect } for pid=8360 comm="syz.7.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.479671][ T8356] can0 (unregistered): slcan off ptm0. [ 269.498186][ T36] audit: type=1400 audit(1754546853.899:22234): avc: denied { connect } for pid=8360 comm="syz.7.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.539740][ T36] audit: type=1400 audit(1754546853.899:22235): avc: denied { connect } for pid=8360 comm="syz.7.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.559569][ T36] audit: type=1400 audit(1754546853.899:22236): avc: denied { connect } for pid=8360 comm="syz.7.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.580634][ T36] audit: type=1400 audit(1754546853.929:22237): avc: denied { read write } for pid=3613 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.604836][ T36] audit: type=1400 audit(1754546853.929:22238): avc: denied { read write open } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.630237][ T36] audit: type=1400 audit(1754546853.929:22239): avc: denied { ioctl } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.672040][ T8380] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.2342'. [ 269.686153][ T36] audit: type=1400 audit(1754546853.979:22240): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 269.818858][ T8380] rust_binder: inc_ref_done called when no active inc_refs [ 269.834247][ T8390] overlayfs: failed to clone upperpath [ 269.918166][ T8402] overlayfs: failed to clone upperpath [ 270.302391][ T432] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 270.452333][ T432] usb 8-1: Using ep0 maxpacket: 8 [ 270.464912][ T432] usb 8-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 270.484092][ T8415] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 270.490203][ T432] usb 8-1: config 1 interface 0 altsetting 111 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.505689][ T432] usb 8-1: config 1 interface 0 has no altsetting 0 [ 270.515989][ T432] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.40 [ 270.525092][ T432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.533191][ T432] usb 8-1: Product: syz [ 270.537354][ T432] usb 8-1: Manufacturer: syz [ 270.542110][ T432] usb 8-1: SerialNumber: syz [ 270.784852][ T8436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.793554][ T8435] rust_binder: Error while translating object. [ 270.798179][ T8436] rust_binder: Error while translating object. [ 270.800100][ T8435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.806225][ T8436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.813698][ T8435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 270.832030][ T8436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 270.881153][ T8446] fuse: Unknown parameter '00000000000000000000' [ 270.901544][ T8446] overlay: ./file0 is not a directory [ 270.938005][ T8445] netlink: 37 bytes leftover after parsing attributes in process `syz.5.2366'. [ 270.986560][ T432] usbhid 8-1:1.0: can't add hid device: -71 [ 270.992613][ T432] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 271.002428][ T432] usb 8-1: USB disconnect, device number 20 [ 271.307457][ T8481] tmpfs: Unknown parameter 'no ' [ 271.345984][ T8489] netlink: 'syz.5.2380': attribute type 28 has an invalid length. [ 271.607002][ T8525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.649424][ T8525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:698 [ 271.745921][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.755310][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.761949][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.769061][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.775726][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.782398][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.789002][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.795723][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.802377][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.808957][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.815692][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.822280][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.829201][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.835897][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.842542][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.849211][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.968909][ T8541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.036928][ T8542] rust_binder: Error in use_page_slow: ESRCH [ 272.036952][ T8542] rust_binder: use_range failure ESRCH [ 272.043190][ T8542] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 272.048676][ T8542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 272.056700][ T8542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:713 [ 272.288424][ T8554] overlayfs: failed to clone upperpath [ 273.122402][ T45] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 273.272363][ T45] usb 8-1: Using ep0 maxpacket: 32 [ 273.279453][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.290432][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.300192][ T45] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.309272][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.318560][ T45] usb 8-1: config 0 descriptor?? [ 273.326027][ T45] hub 8-1:0.0: USB hub found [ 273.527807][ T45] hub 8-1:0.0: 1 port detected [ 274.128250][ T292] bridge_slave_1: left allmulticast mode [ 274.137696][ T292] bridge_slave_1: left promiscuous mode [ 274.141156][ T45] usb 8-1: USB disconnect, device number 21 [ 274.143916][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.149287][ T31] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 274.174074][ T292] bridge_slave_0: left allmulticast mode [ 274.186186][ T292] bridge_slave_0: left promiscuous mode [ 274.191824][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.358942][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.366018][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.373078][ T8599] bridge_slave_0: entered allmulticast mode [ 274.379211][ T8599] bridge_slave_0: entered promiscuous mode [ 274.386322][ T8599] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.393358][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.400396][ T8599] bridge_slave_1: entered allmulticast mode [ 274.406697][ T8599] bridge_slave_1: entered promiscuous mode [ 274.418152][ T36] kauditd_printk_skb: 696 callbacks suppressed [ 274.418166][ T36] audit: type=1400 audit(1754546858.959:22937): avc: denied { sys_module } for pid=8599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.445978][ T36] audit: type=1400 audit(1754546858.959:22938): avc: denied { sys_module } for pid=8599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.469096][ T36] audit: type=1400 audit(1754546859.009:22939): avc: denied { sys_module } for pid=8599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.490552][ T292] veth1_macvtap: left promiscuous mode [ 274.496269][ T292] veth0_vlan: left promiscuous mode [ 274.526772][ T36] audit: type=1400 audit(1754546859.069:22940): avc: denied { sys_module } for pid=8599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.553416][ T36] audit: type=1400 audit(1754546859.099:22941): avc: denied { sys_module } for pid=8599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.574958][ T36] audit: type=1400 audit(1754546859.099:22942): avc: denied { sys_module } for pid=8599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.623223][ T36] audit: type=1400 audit(1754546859.169:22943): avc: denied { create } for pid=8599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.640569][ T8599] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.651048][ T8599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.652382][ T36] audit: type=1400 audit(1754546859.169:22944): avc: denied { write } for pid=8599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.658332][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.680320][ T36] audit: type=1400 audit(1754546859.169:22945): avc: denied { read } for pid=8599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.685805][ T8599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.708450][ T36] audit: type=1400 audit(1754546859.169:22946): avc: denied { read } for pid=8599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.753922][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.761114][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.774147][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.781215][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.793932][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.800980][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.900110][ T8599] veth0_vlan: entered promiscuous mode [ 274.948430][ T8599] veth1_macvtap: entered promiscuous mode [ 275.097810][ T8624] rust_binder: Write failure EINVAL in pid:720 [ 275.271261][ T8633] /dev/rnullb0: Can't lookup blockdev [ 275.855562][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2432'. [ 275.866241][ T8646] futex_wake_op: syz.5.2432 tries to shift op by 32; fix this program [ 275.945904][ T8654] 9pnet_fd: Insufficient options for proto=fd [ 276.042356][ T432] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.192355][ T432] usb 4-1: device descriptor read/64, error -71 [ 276.442428][ T432] usb 4-1: device descriptor read/64, error -71 [ 276.702372][ T432] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 276.842401][ T432] usb 4-1: device descriptor read/64, error -71 [ 277.082361][ T432] usb 4-1: device descriptor read/64, error -71 [ 277.201683][ T432] usb usb4-port1: attempt power cycle [ 277.215157][ T8691] 9pnet: Could not find request transport: f)ǎ;5$"x4=/93W"{>Ʊ0< [ 277.416284][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.423459][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.430594][ T8693] bridge_slave_0: entered allmulticast mode [ 277.437511][ T8693] bridge_slave_0: entered promiscuous mode [ 277.444849][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.453063][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.460590][ T3605] tipc: Resetting bearer [ 277.474445][ T3605] tipc: Disabling bearer [ 277.552388][ T432] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 277.566228][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.573568][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.580747][ T8693] bridge_slave_1: entered allmulticast mode [ 277.588223][ T8693] bridge_slave_1: entered promiscuous mode [ 277.598014][ T432] usb 4-1: device descriptor read/8, error -71 [ 277.615260][ T3605] tipc: Left network mode [ 277.740087][ T432] usb 4-1: device descriptor read/8, error -71 [ 277.802755][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.809827][ T8693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.817132][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.824178][ T8693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.902994][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.921130][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.938374][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.945475][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.953318][ T8713] __vm_enough_memory: pid: 8713, comm: syz.7.2452, bytes: 18014402804453376 not enough memory for the allocation [ 277.970365][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.977450][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.992814][ T432] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 278.016070][ T432] usb 4-1: device descriptor read/8, error -71 [ 278.072029][ T8715] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 278.079958][ T8715] rust_binder: Write failure EINVAL in pid:743 [ 278.086879][ T3605] Bluetooth: hci0: Frame reassembly failed (-84) [ 278.097042][ T8693] veth0_vlan: entered promiscuous mode [ 278.115033][ T8715] rust_binder: 743: no such ref 0 [ 278.123698][ T8715] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 278.134178][ T8715] rust_binder: 743: no such ref 0 [ 278.144901][ T432] usb 4-1: device descriptor read/8, error -71 [ 278.148552][ T8693] veth1_macvtap: entered promiscuous mode [ 278.262972][ T432] usb usb4-port1: unable to enumerate USB device [ 278.482380][ T439] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 278.634376][ T439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.645471][ T439] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 278.654580][ T439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.665314][ T439] usb 6-1: config 0 descriptor?? [ 278.939389][ T8726] @: renamed from vlan0 (while UP) [ 279.076906][ T439] hid-generic 0003:04F3:0754.000F: unknown main item tag 0x0 [ 279.084444][ T439] hid-generic 0003:04F3:0754.000F: unknown main item tag 0x0 [ 279.091838][ T439] hid-generic 0003:04F3:0754.000F: unknown main item tag 0x0 [ 279.100022][ T439] hid-generic 0003:04F3:0754.000F: unknown main item tag 0x0 [ 279.107637][ T439] hid-generic 0003:04F3:0754.000F: unknown main item tag 0x0 [ 279.116791][ T439] hid-generic 0003:04F3:0754.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.5-1/input0 [ 279.286661][ T31] usb 6-1: USB disconnect, device number 2 [ 279.834378][ T36] kauditd_printk_skb: 855 callbacks suppressed [ 279.834395][ T36] audit: type=1400 audit(1754546864.379:23802): avc: denied { read write } for pid=8693 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.878973][ T36] audit: type=1400 audit(1754546864.379:23803): avc: denied { read write open } for pid=8693 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.923347][ T36] audit: type=1400 audit(1754546864.379:23804): avc: denied { ioctl } for pid=8693 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.923382][ T8734] input: syz1 as /devices/virtual/input/input27 [ 279.949017][ T36] audit: type=1400 audit(1754546864.419:23805): avc: denied { read write } for pid=8599 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.949048][ T36] audit: type=1400 audit(1754546864.419:23806): avc: denied { read write open } for pid=8599 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.949072][ T36] audit: type=1400 audit(1754546864.419:23807): avc: denied { ioctl } for pid=8599 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.040606][ T36] audit: type=1400 audit(1754546864.419:23808): avc: denied { write } for pid=8733 comm="syz.5.2458" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.072254][ T36] audit: type=1400 audit(1754546864.419:23809): avc: denied { write open } for pid=8733 comm="syz.5.2458" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.103152][ T36] audit: type=1400 audit(1754546864.459:23810): avc: denied { read write } for pid=8733 comm="syz.5.2458" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 280.133024][ T8741] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 280.133297][ T36] audit: type=1400 audit(1754546864.459:23811): avc: denied { read write open } for pid=8733 comm="syz.5.2458" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 280.167086][ T1315] Bluetooth: hci0: command 0x1003 tx timeout [ 280.173289][ T7931] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.372897][ T8754] /dev/rnullb0: Can't lookup blockdev [ 280.599300][ T8768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.600903][ T8768] rust_binder: Error in use_page_slow: ESRCH [ 280.607423][ T8768] rust_binder: use_range failure ESRCH [ 280.613439][ T8768] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 280.618905][ T8768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 280.627395][ T8768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:758 [ 281.142391][ T31] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 281.172365][ T515] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 281.322360][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 281.333183][ T515] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.346440][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 281.354214][ T515] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.364345][ T515] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.372642][ T515] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 281.382402][ T515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.390481][ T31] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 281.405071][ T515] usb 4-1: config 0 descriptor?? [ 281.423173][ T31] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.442551][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.450627][ T31] usb 8-1: Product: syz [ 281.454939][ T31] usb 8-1: Manufacturer: syz [ 281.460286][ T31] usb 8-1: SerialNumber: syz [ 281.844505][ T31] usb 8-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 281.869166][ T31] usb 8-1: failed to enable PITCH for EP 0x82 [ 281.878490][ T31] usb 8-1: 2:1: cannot set freq 14811412 to ep 0x82 [ 281.891947][ T31] usb 8-1: USB disconnect, device number 22 [ 281.968317][ T6632] udevd[6632]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 282.030264][ T515] usbhid 4-1:0.0: can't add hid device: -32 [ 282.040653][ T515] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 282.043930][ T8783] loop7: detected capacity change from 0 to 7 [ 282.069833][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.079028][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 282.092324][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.101507][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 282.110259][ T8783] loop7: unable to read partition table [ 282.124198][ T8783] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 282.146366][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.155553][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 282.171836][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.177709][ T432] usb 4-1: USB disconnect, device number 45 [ 282.181000][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 282.210267][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.219465][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 282.232364][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.241524][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 282.251684][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.260914][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 282.392632][ T8810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.401582][ T8810] rust_binder: Error in use_page_slow: ESRCH [ 282.409909][ T8810] rust_binder: use_range failure ESRCH [ 282.419816][ T8810] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 282.425464][ T8810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 282.433560][ T8810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:776 [ 282.553896][ T8821] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.616357][ T8822] rust_binder: 780: no such ref 3 [ 282.773535][ T8826] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551500) [ 282.773562][ T8826] rust_binder: Error while translating object. [ 282.785835][ T8826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 282.792180][ T8826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 283.041186][ T8838] rust_binder: Error while translating object. [ 283.050783][ T8838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 283.057193][ T8838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 283.243645][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'. [ 283.485800][ T8856] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.487500][ T8856] rust_binder: Error in use_page_slow: ESRCH [ 283.494010][ T8856] rust_binder: use_range failure ESRCH [ 283.500102][ T8856] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 283.505991][ T8856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 283.514041][ T8856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:783 [ 283.676387][ T8864] veth1_macvtap: left promiscuous mode [ 283.692146][ T8864] macsec0: entered promiscuous mode [ 283.697423][ T8864] macsec0: entered allmulticast mode [ 283.734308][ T8864] veth1_macvtap: entered promiscuous mode [ 283.740078][ T8864] veth1_macvtap: entered allmulticast mode [ 283.746113][ T8864] macsec0: left promiscuous mode [ 283.751119][ T8864] macsec0: left allmulticast mode [ 283.756209][ T8864] veth1_macvtap: left allmulticast mode [ 283.803333][ T8864] /dev/rnullb0: Can't lookup blockdev [ 284.371137][ T8897] rust_binder: Error while translating object. [ 284.371195][ T8897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.381843][ T8897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 284.612355][ T432] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 284.762358][ T439] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 284.792642][ T432] usb 8-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 284.814336][ T8922] fuse: Bad value for 'user_id' [ 284.816164][ T432] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 284.819231][ T8922] fuse: Bad value for 'user_id' [ 284.842887][ T36] kauditd_printk_skb: 841 callbacks suppressed [ 284.842905][ T36] audit: type=1400 audit(1754546869.389:24653): avc: denied { ioctl } for pid=8904 comm="syz.3.2515" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.880738][ T432] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.903455][ T36] audit: type=1400 audit(1754546869.399:24654): avc: denied { read write } for pid=8923 comm="syz.4.2521" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.928033][ T8926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 284.930338][ T36] audit: type=1400 audit(1754546869.399:24655): avc: denied { read write open } for pid=8923 comm="syz.4.2521" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.967285][ T432] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.977213][ T432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.985284][ T432] usb 8-1: Product: Џ [ 284.989432][ T432] usb 8-1: Manufacturer: ᰉ [ 284.995613][ T439] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 285.002033][ T36] audit: type=1400 audit(1754546869.399:24656): avc: denied { read write } for pid=8923 comm="syz.4.2521" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.005143][ T439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.036257][ T8928] rust_binder: Error while translating object. [ 285.036298][ T8928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.038192][ T432] usb 8-1: SerialNumber: ᖼ赀҄ [ 285.052434][ T8928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 285.057249][ T36] audit: type=1400 audit(1754546869.399:24657): avc: denied { read write open } for pid=8923 comm="syz.4.2521" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.092478][ T439] usb 4-1: config 0 descriptor?? [ 285.113005][ T8929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 285.128913][ T36] audit: type=1400 audit(1754546869.409:24658): avc: denied { read } for pid=8923 comm="syz.4.2521" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.172749][ T36] audit: type=1400 audit(1754546869.409:24659): avc: denied { read open } for pid=8923 comm="syz.4.2521" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.196696][ T36] audit: type=1400 audit(1754546869.409:24660): avc: denied { ioctl } for pid=8923 comm="syz.4.2521" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.221693][ T36] audit: type=1400 audit(1754546869.429:24661): avc: denied { read write } for pid=8923 comm="syz.4.2521" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.245080][ T36] audit: type=1400 audit(1754546869.429:24662): avc: denied { read write open } for pid=8923 comm="syz.4.2521" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.332881][ T432] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 285.340243][ T432] cdc_ncm 8-1:1.0: bind() failure [ 285.548500][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.561977][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.626306][ T1812] usb 8-1: USB disconnect, device number 23 [ 286.076561][ T8938] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 286.083836][ T8938] rust_binder: Write failure EINVAL in pid:116 [ 286.206498][ T8942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.214816][ T8942] rust_binder: Error in use_page_slow: ESRCH [ 286.221358][ T8942] rust_binder: use_range failure ESRCH [ 286.227644][ T8942] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 286.233497][ T8942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 286.241571][ T8942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:812 [ 286.648778][ T8959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.659967][ T8959] rust_binder: Error in use_page_slow: ESRCH [ 286.666455][ T8959] rust_binder: use_range failure ESRCH [ 286.672764][ T8959] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 286.678372][ T8959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 286.686458][ T8959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:829 [ 286.952346][ T439] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 287.013058][ T439] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 287.032400][ T439] asix 4-1:0.0: probe with driver asix failed with error -71 [ 287.038301][ T8982] binder: Unknown parameter '/dev/fuse' [ 287.050033][ T439] usb 4-1: USB disconnect, device number 46 [ 287.106778][ T8987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.114373][ T8987] rust_binder: Error in use_page_slow: ESRCH [ 287.149237][ T8987] rust_binder: use_range failure ESRCH [ 287.176439][ T8987] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 287.210164][ T8987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 287.234560][ T8987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:848 [ 287.396818][ T8997] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 287.556335][ T9004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.566531][ T9004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.583223][ T9004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 287.774430][ T9018] rust_binder: 9015 RLIMIT_NICE not set [ 287.817072][ T31] rust_binder: 9014: removing orphan mapping 0:4240 [ 287.833910][ T9020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.954834][ T9027] rust_binder: Write failure EFAULT in pid:141 [ 287.955982][ T9026] binder: Unknown parameter 'ma{D;q߬x' [ 288.036891][ T9028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:865 [ 288.172993][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.207581][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.892594][ T439] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 288.952364][ T1812] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 289.042354][ T439] usb 6-1: Using ep0 maxpacket: 8 [ 289.051976][ T439] usb 6-1: unable to get BOS descriptor or descriptor too short [ 289.060963][ T439] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 289.075501][ T439] usb 6-1: can't read configurations, error -71 [ 289.104470][ T1812] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 289.114412][ T1812] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 289.127497][ T1812] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 289.136683][ T1812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.145547][ T1812] usb 8-1: Product: syz [ 289.149896][ T1812] usb 8-1: Manufacturer: syz [ 289.154650][ T1812] usb 8-1: SerialNumber: syz [ 289.160518][ T1812] usb 8-1: config 0 descriptor?? [ 289.167021][ T9062] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 289.174793][ T9062] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 289.396088][ T1812] dm9601 8-1:0.0: probe with driver dm9601 failed with error -71 [ 289.422186][ T1812] usb 8-1: USB disconnect, device number 24 [ 289.732392][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 289.749123][ T9082] overlayfs: overlapping lowerdir path [ 289.836702][ T9090] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 289.853794][ T36] kauditd_printk_skb: 906 callbacks suppressed [ 289.853811][ T36] audit: type=1400 audit(1754546874.399:25569): avc: denied { connect } for pid=9089 comm="syz.5.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.856972][ T9090] binder: Bad value for 'stats' [ 289.876645][ T36] audit: type=1400 audit(1754546874.399:25570): avc: denied { write } for pid=9089 comm="syz.5.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.920250][ T36] audit: type=1400 audit(1754546874.399:25571): avc: denied { map } for pid=9089 comm="syz.5.2573" path="socket:[45105]" dev="sockfs" ino=45105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.958548][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 289.965864][ T9095] batadv_slave_1: entered promiscuous mode [ 289.969833][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 289.987228][ T9091] batadv_slave_1: left promiscuous mode [ 289.996797][ T36] audit: type=1400 audit(1754546874.399:25572): avc: denied { read accept } for pid=9089 comm="syz.5.2573" path="socket:[45105]" dev="sockfs" ino=45105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.005296][ T31] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 290.022662][ T36] audit: type=1400 audit(1754546874.399:25573): avc: denied { mounton } for pid=9089 comm="syz.5.2573" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.032681][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.063482][ T31] usb 4-1: Product: syz [ 290.067836][ T31] usb 4-1: Manufacturer: syz [ 290.083619][ T31] usb 4-1: SerialNumber: syz [ 290.094290][ T31] usb 4-1: config 0 descriptor?? [ 290.112428][ T36] audit: type=1400 audit(1754546874.399:25574): avc: denied { read write } for pid=3613 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.155994][ T36] audit: type=1400 audit(1754546874.399:25575): avc: denied { read write open } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.210531][ T9100] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.218363][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2575'. [ 290.227483][ T9100] audit: audit_lost=95 audit_rate_limit=0 audit_backlog_limit=64 [ 290.238269][ T9098] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.332484][ T31] usb 4-1: USB disconnect, device number 47 [ 290.420372][ T6975] udevd[6975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 290.482396][ T10] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 290.622378][ T439] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 290.635494][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 290.644628][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 290.655618][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.671899][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.40 [ 290.681119][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.689231][ T10] usb 8-1: Product: 䀢 [ 290.694006][ T10] usb 8-1: Manufacturer: ࠐ [ 290.698627][ T10] usb 8-1: SerialNumber: Ⳓ曒欘䚏峐䙴䎔띂奠袮헮ᑗ✛䰗䧑撵㣶尫怑彯ꋑἏ雿谮酱䌹졨靊㩙崾镯禳뛽鿤桺곦輁됲욄郤쇍隥ｘ冩毓 [ 290.720076][ T9098] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 290.772347][ T439] usb 6-1: Using ep0 maxpacket: 16 [ 290.779589][ T439] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 290.787801][ T439] usb 6-1: config 0 has no interface number 0 [ 290.793916][ T439] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 290.803870][ T439] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 290.813803][ T439] usb 6-1: config 0 interface 41 has no altsetting 0 [ 290.823476][ T439] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 290.832631][ T439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.840646][ T439] usb 6-1: Product: syz [ 290.844871][ T439] usb 6-1: Manufacturer: syz [ 290.849489][ T439] usb 6-1: SerialNumber: syz [ 290.856141][ T439] usb 6-1: config 0 descriptor?? [ 290.862632][ T9103] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 290.870306][ T9103] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 290.908595][ T9105] /dev/rnullb0: Can't lookup blockdev [ 290.950790][ T9107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.954650][ T9107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.961211][ T9108] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 290.967820][ T9108] rust_binder: Read failure Err(EFAULT) in pid:84 [ 290.976964][ T9107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84 [ 291.015011][ T9110] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 291.093825][ T9103] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 291.101466][ T9103] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 291.171658][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.180254][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.191224][ T10] usbhid 8-1:1.0: can't add hid device: -71 [ 291.209309][ T10] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 291.218825][ T10] usb 8-1: USB disconnect, device number 25 [ 291.618529][ T9121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.645097][ T9121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.748254][ T439] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 291.819853][ T9124] can0: slcan on ptm0. [ 291.868561][ T9129] SELinux: Context system_u:object_r:semanage_store_t:s0 is not valid (left unmapped). [ 291.880390][ T9124] can0 (unregistered): slcan off ptm0. [ 292.203520][ T9141] fuse: Bad value for 'rootmode' [ 292.332353][ T515] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 292.512222][ T515] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.524826][ T515] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.537971][ T515] usb 8-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 292.547857][ T515] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.558809][ T515] usb 8-1: config 0 descriptor?? [ 292.892363][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 292.970702][ T515] hid-generic 0003:04F3:0754.0010: unknown main item tag 0x0 [ 292.978426][ T515] hid-generic 0003:04F3:0754.0010: unknown main item tag 0x0 [ 292.986656][ T515] hid-generic 0003:04F3:0754.0010: unknown main item tag 0x0 [ 292.996335][ T515] hid-generic 0003:04F3:0754.0010: unknown main item tag 0x0 [ 293.004741][ T515] hid-generic 0003:04F3:0754.0010: unknown main item tag 0x0 [ 293.012367][ T515] hid-generic 0003:04F3:0754.0010: failed to start in urb: -90 [ 293.016249][ T439] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 293.036813][ T439] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 293.037789][ T515] hid-generic 0003:04F3:0754.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.7-1/input0 [ 293.046519][ T439] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 293.069689][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.083781][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 293.093384][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 293.101414][ T10] usb 4-1: SerialNumber: syz [ 293.109295][ T439] usb 6-1: USB disconnect, device number 5 [ 293.122597][ T10] usb 4-1: config 0 descriptor?? [ 293.470620][ T31] usb 8-1: USB disconnect, device number 26 [ 293.546129][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 293.560421][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 293.572859][ T10] usb 4-1: USB disconnect, device number 48 [ 294.010216][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2602'. [ 294.023364][ T9180] can0: slcan on ptm0. [ 294.262403][ T439] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 294.432357][ T439] usb 8-1: Using ep0 maxpacket: 8 [ 294.449011][ T439] usb 8-1: unable to get BOS descriptor or descriptor too short [ 294.472378][ T439] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 294.483128][ T439] usb 8-1: can't read configurations, error -71 [ 294.513924][ T9180] can0 (unregistered): slcan off ptm0. [ 294.530671][ T9202] /dev/rnullb0: Can't lookup blockdev [ 294.790731][ T9215] 9pnet_fd: Insufficient options for proto=fd [ 294.792343][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 294.863077][ T36] kauditd_printk_skb: 972 callbacks suppressed [ 294.863094][ T36] audit: type=1400 audit(1754546879.409:26545): avc: denied { create } for pid=9218 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.901474][ T9222] netlink: 'syz.3.2611': attribute type 2 has an invalid length. [ 294.928128][ T36] audit: type=1400 audit(1754546879.409:26546): avc: denied { search } for pid=9219 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.982338][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 294.993465][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 295.012448][ T36] audit: type=1400 audit(1754546879.409:26547): avc: denied { search } for pid=9219 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.039764][ T10] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.071127][ T10] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 295.084516][ T36] audit: type=1400 audit(1754546879.409:26548): avc: denied { search } for pid=9219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.103277][ T9228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.119694][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.126634][ T9227] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.137801][ T10] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 295.142331][ T9228] audit: audit_lost=97 audit_rate_limit=0 audit_backlog_limit=64 [ 295.147027][ T9227] audit: audit_lost=98 audit_rate_limit=0 audit_backlog_limit=64 [ 295.167129][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.173365][ T9233] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.176152][ T36] audit: type=1400 audit(1754546879.409:26549): avc: denied { search } for pid=9219 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.212984][ T10] usb 6-1: config 0 descriptor?? [ 295.532370][ T439] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 295.548975][ T9255] rust_binder: Write failure EFAULT in pid:172 [ 295.682379][ T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 295.695923][ T439] usb 8-1: unable to get BOS descriptor or descriptor too short [ 295.704513][ T439] usb 8-1: not running at top speed; connect to a high speed hub [ 295.713726][ T439] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.723934][ T439] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.732873][ T439] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.755824][ T439] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.765591][ T439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.773683][ T439] usb 8-1: SerialNumber: syz [ 295.854325][ T9202] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.855557][ T45] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 295.865944][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 295.881363][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 295.885833][ T45] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 295.892532][ T10] usb 6-1: USB disconnect, device number 6 [ 295.907431][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.917753][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 295.926936][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.936168][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.945795][ T45] usb 4-1: config 0 descriptor?? [ 296.062603][ T439] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 296.069985][ T439] cdc_ncm 8-1:1.0: bind() failure [ 296.078436][ T439] usb 8-1: USB disconnect, device number 28 [ 296.479891][ T9269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2088 sclass=netlink_route_socket pid=9269 comm=syz.5.2626 [ 297.429387][ T9314] binder: Unknown parameter '' [ 297.617780][ T9325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.621173][ T9325] rust_binder: Error in use_page_slow: ESRCH [ 297.628458][ T9325] rust_binder: use_range failure ESRCH [ 297.635255][ T9325] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 297.640802][ T9325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 297.648889][ T9325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:921 [ 298.182373][ T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 298.322381][ T10] usb 8-1: device descriptor read/64, error -71 [ 298.342378][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 298.431622][ T31] usb 4-1: USB disconnect, device number 49 [ 298.495329][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.506711][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.516573][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.530226][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.539307][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.548648][ T45] usb 6-1: config 0 descriptor?? [ 298.572381][ T10] usb 8-1: device descriptor read/64, error -71 [ 298.812381][ T10] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 298.952446][ T10] usb 8-1: device descriptor read/64, error -71 [ 298.959461][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 298.968517][ T45] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 298.979260][ T45] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 299.161071][ T9342] incfs: Can't find or create .incomplete dir in ./file0 [ 299.168217][ T9342] incfs: mount failed -17 [ 299.192410][ T10] usb 8-1: device descriptor read/64, error -71 [ 299.244105][ T9337] rust_binder: Error while translating object. [ 299.244138][ T9337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 299.250301][ T9337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:147 [ 299.261246][ T45] usb 6-1: USB disconnect, device number 7 [ 299.302429][ T10] usb usb8-port1: attempt power cycle [ 299.598459][ T9348] SELinux: policydb string length 1836477231 does not match expected length 8 [ 299.607641][ T9348] SELinux: failed to load policy [ 299.642409][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 299.664707][ T10] usb 8-1: device descriptor read/8, error -71 [ 299.668889][ T9349] rust_binder: 9348 RLIMIT_NICE not set [ 299.796525][ T10] usb 8-1: device descriptor read/8, error -71 [ 299.912793][ T36] kauditd_printk_skb: 762 callbacks suppressed [ 299.912810][ T36] audit: type=1400 audit(1754546884.452:27263): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.944098][ T36] audit: type=1400 audit(1754546884.452:27264): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.982780][ T36] audit: type=1400 audit(1754546884.522:27265): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.042410][ T10] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 300.063024][ T36] audit: type=1400 audit(1754546884.602:27266): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.088080][ T36] audit: type=1400 audit(1754546884.602:27267): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.089570][ T10] usb 8-1: device descriptor read/8, error -71 [ 300.113697][ T36] audit: type=1400 audit(1754546884.622:27268): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.144214][ T36] audit: type=1400 audit(1754546884.622:27269): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.170199][ T36] audit: type=1400 audit(1754546884.622:27270): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.195181][ T36] audit: type=1400 audit(1754546884.652:27271): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.247346][ T10] usb 8-1: device descriptor read/8, error -71 [ 300.250107][ T36] audit: type=1400 audit(1754546884.782:27272): avc: denied { ioctl } for pid=9331 comm="syz.7.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.278454][ T9353] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 300.362439][ T10] usb usb8-port1: unable to enumerate USB device [ 300.384698][ T439] rust_binder: 9346: removing orphan mapping 0:4248 [ 300.449655][ T9363] rust_binder: 9355 RLIMIT_NICE not set [ 300.694755][ T9368] binder: Bad value for 'max' [ 300.877267][ T9383] can0: slcan on ptm1. [ 300.932348][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 301.095033][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 301.105383][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 301.115334][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 301.125590][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 301.140191][ T10] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 301.149989][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.158855][ T10] usb 6-1: Product: syz [ 301.163717][ T10] usb 6-1: Manufacturer: syz [ 301.168764][ T10] usb 6-1: SerialNumber: syz [ 301.176219][ T10] usb 6-1: config 0 descriptor?? [ 301.184732][ T10] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 301.266371][ T9401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.302436][ T439] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 301.334307][ T9404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:173 [ 301.428997][ T10] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 301.464576][ T439] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.476230][ T439] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.487308][ T439] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.498643][ T439] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 301.507701][ T439] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.518290][ T9385] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 301.649660][ T515] usb 6-1: USB disconnect, device number 8 [ 302.191636][ T9412] rust_binder: Write failure EFAULT in pid:167 [ 302.290746][ T9409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.332988][ T439] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 302.354663][ T439] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input30 [ 302.440057][ T9426] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 302.533206][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 302.533221][ T9434] usb 8-1: USB disconnect, device number 33 [ 302.557202][ T8792] udevd[8792]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 302.568477][ T8792] udevd[8792]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 302.922392][ T515] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 303.062354][ T515] usb 6-1: device descriptor read/64, error -71 [ 303.081540][ T9441] binder: Binderfs stats mode cannot be changed during a remount [ 303.302390][ T515] usb 6-1: device descriptor read/64, error -71 [ 303.542410][ T515] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 303.672372][ T515] usb 6-1: device descriptor read/64, error -71 [ 303.896617][ T9383] can0 (unregistered): slcan off ptm1. [ 303.912735][ T515] usb 6-1: device descriptor read/64, error -71 [ 304.044146][ T515] usb usb6-port1: attempt power cycle [ 304.113739][ T9457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.122977][ T9454] rust_binder: Write failure EFAULT in pid:187 [ 304.146292][ T9454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 304.164922][ T9454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 304.390445][ T9465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 304.392365][ T515] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 304.412347][ T9465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 304.488424][ T515] usb 6-1: device descriptor read/8, error -71 [ 304.646871][ T515] usb 6-1: device descriptor read/8, error -71 [ 304.892344][ T515] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 304.923451][ T36] kauditd_printk_skb: 1555 callbacks suppressed [ 304.923469][ T36] audit: type=1400 audit(1754546889.462:28828): avc: denied { ioctl } for pid=9482 comm="syz.3.2682" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.951874][ T9456] audit: audit_backlog=65 > audit_backlog_limit=64 [ 304.961212][ T9456] audit: audit_lost=115 audit_rate_limit=0 audit_backlog_limit=64 [ 304.982968][ T9437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 304.989525][ T9437] audit: audit_lost=116 audit_rate_limit=0 audit_backlog_limit=64 [ 304.990293][ T36] audit: type=1400 audit(1754546889.462:28829): avc: denied { write } for pid=9455 comm="syz.7.2677" laddr=172.20.20.170 lport=2 faddr=172.20.20.40 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 305.003938][ T9490] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.023962][ T36] audit: type=1400 audit(1754546889.462:28830): avc: denied { write } for pid=9455 comm="syz.7.2677" laddr=172.20.20.170 lport=2 faddr=172.20.20.40 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 305.029991][ T9456] audit: backlog limit exceeded [ 305.054504][ T9437] audit: backlog limit exceeded [ 305.062361][ T334] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 305.085034][ T515] usb 6-1: device descriptor read/8, error -71 [ 305.218192][ T515] usb 6-1: device descriptor read/8, error -71 [ 305.239950][ T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.266866][ T334] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.285214][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.302546][ T334] usb 4-1: Product: syz [ 305.311305][ T334] usb 4-1: Manufacturer: syz [ 305.322141][ T334] usb 4-1: SerialNumber: syz [ 305.332813][ T515] usb usb6-port1: unable to enumerate USB device [ 305.480981][ T9512] fuseblk: Unknown parameter 'smackfshat' [ 305.805004][ T9528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9528 comm=syz.5.2689 [ 305.835361][ T9528] rust_binder: 9524 RLIMIT_NICE not set [ 305.836337][ T9528] rust_binder: got new transaction with bad transaction stack [ 305.845185][ T9528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 305.967188][ T334] cdc_ncm 4-1:1.0: bind() failure [ 306.023831][ T334] usb 4-1: USB disconnect, device number 50 [ 306.465519][ T9562] input: syz1 as /devices/virtual/input/input31 [ 306.821600][ T9581] /dev/rnullb0: Can't lookup blockdev [ 306.982218][ T9585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 306.982255][ T9585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:218 [ 307.134007][ T292] bridge_slave_1: left allmulticast mode [ 307.149309][ T292] bridge_slave_1: left promiscuous mode [ 307.156429][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.164939][ T292] bridge_slave_0: left allmulticast mode [ 307.171119][ T292] bridge_slave_0: left promiscuous mode [ 307.178027][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.305892][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.313022][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.320276][ T9587] bridge_slave_0: entered allmulticast mode [ 307.326508][ T9587] bridge_slave_0: entered promiscuous mode [ 307.333649][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.340673][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.348235][ T9587] bridge_slave_1: entered allmulticast mode [ 307.354613][ T9587] bridge_slave_1: entered promiscuous mode [ 307.365828][ T292] veth1_macvtap: left promiscuous mode [ 307.371949][ T292] veth0_vlan: left promiscuous mode [ 307.474960][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.482033][ T9587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.489443][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.496591][ T9587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.532652][ T9599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.532855][ T9598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.545576][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 307.565430][ T9599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 307.565428][ T9600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 307.565452][ T9599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:230 [ 307.591704][ T9600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:230 [ 307.596445][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.613703][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.625758][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.633016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.644524][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.651615][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.714354][ T9587] veth0_vlan: entered promiscuous mode [ 307.743218][ T9587] veth1_macvtap: entered promiscuous mode [ 308.145883][ T9605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.204951][ T9606] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2709'. [ 308.791327][ T9623] input: syz1 as /devices/virtual/input/input32 [ 308.876337][ T9625] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 308.966453][ T9628] rust_binder: 12: no such ref 3 [ 308.971540][ T9628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 308.973713][ T9629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.261822][ T9651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.279761][ T9651] rust_binder: Read failure Err(EFAULT) in pid:246 [ 309.321169][ T9653] rust_binder: validate_parent_fixup: fixup_min_offset=44, parent_offset=36 [ 309.328069][ T9653] rust_binder: Error while translating object. [ 309.337036][ T9653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.344747][ T9653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 309.385599][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2725'. [ 309.403869][ T9655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2725'. [ 309.458369][ T9658] /dev/rnullb0: Can't lookup blockdev [ 309.636947][ T9668] rust_binder: Write failure EINVAL in pid:263 [ 309.982396][ T334] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 309.997010][ T36] kauditd_printk_skb: 1592 callbacks suppressed [ 309.997026][ T36] audit: type=1400 audit(1754546894.532:30316): avc: denied { ioctl } for pid=9672 comm="syz.3.2731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.028474][ T36] audit: type=1400 audit(1754546894.532:30317): avc: denied { ioctl } for pid=9672 comm="syz.3.2731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.054773][ T36] audit: type=1400 audit(1754546894.532:30318): avc: denied { ioctl } for pid=9672 comm="syz.3.2731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.080998][ T36] audit: type=1400 audit(1754546894.572:30319): avc: denied { read write } for pid=9587 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.106132][ T36] audit: type=1400 audit(1754546894.572:30320): avc: denied { read write open } for pid=9587 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.131237][ T36] audit: type=1400 audit(1754546894.572:30321): avc: denied { ioctl } for pid=9587 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.157005][ T334] usb 4-1: Using ep0 maxpacket: 8 [ 310.157544][ T36] audit: type=1400 audit(1754546894.592:30322): avc: denied { read write } for pid=9675 comm="syz.8.2732" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.186763][ T36] audit: type=1400 audit(1754546894.592:30323): avc: denied { read write open } for pid=9675 comm="syz.8.2732" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.187832][ T334] usb 4-1: config 1 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 64 [ 310.213985][ T36] audit: type=1400 audit(1754546894.602:30324): avc: denied { ioctl } for pid=9672 comm="syz.3.2731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.246885][ T334] usb 4-1: config 1 interface 0 has no altsetting 0 [ 310.250385][ T334] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 310.254870][ T36] audit: type=1400 audit(1754546894.612:30325): avc: denied { read } for pid=9675 comm="syz.8.2732" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.264476][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.300537][ T334] usb 4-1: Product: 茲ᘯꄯ菺欂헼퍢蘆䋸膼捸绾䷟利㢶䌽訥麵ꠒ쫯嵇鮯딚鏎⠇㑱๧犔輖낊Ꚁ⚡鲎탯Ք蕡鱲퟽슌涀ᙛ햘姹뺌즙蓱窮뎯鏌ꁩ廆격¨鿢헡ﭔ虘囐ﶚ킋迃桥㪫盟䧆洕䵽효튤咕ꃇꜩᰬ喘쀃暨ᖫ衣ު⧍붵哒츗썅陇᫄꓂椶퇎 [ 310.330555][ T334] usb 4-1: Manufacturer: 㛁ጂ礋㦋䋵될촑毬晩흱 [ 310.337539][ T334] usb 4-1: SerialNumber: syz [ 310.353624][ T9674] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 310.571782][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2731'. [ 310.611846][ T9688] __vm_enough_memory: pid: 9688, comm: syz.8.2735, bytes: 18014402804453376 not enough memory for the allocation [ 310.636539][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.645302][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.079400][ T9700] netlink: 'syz.8.2739': attribute type 4 has an invalid length. [ 312.013076][ T9753] 9pnet_fd: Insufficient options for proto=fd [ 312.671444][ T9779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.671923][ T9779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:274 [ 312.704859][ T334] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 249 proto 1 vid 0x0525 pid 0xA4A8 [ 312.739133][ T334] usb 4-1: USB disconnect, device number 51 [ 312.746929][ T334] usblp0: removed [ 312.923628][ T9794] rust_binder: Write failure EINVAL in pid:73 [ 313.162354][ T334] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 313.219360][ T9809] netlink: 'syz.8.2769': attribute type 32 has an invalid length. [ 313.305753][ T9815] __vm_enough_memory: pid: 9815, comm: syz.8.2770, bytes: 18014402804453376 not enough memory for the allocation [ 313.343784][ T334] usb 4-1: config 125 has an invalid interface number: 116 but max is 2 [ 313.355859][ T334] usb 4-1: config 125 contains an unexpected descriptor of type 0x2, skipping [ 313.365258][ T334] usb 4-1: config 125 has an invalid interface number: 231 but max is 2 [ 313.374873][ T334] usb 4-1: config 125 has an invalid interface number: 21 but max is 2 [ 313.390301][ T334] usb 4-1: config 125 has an invalid interface number: 127 but max is 2 [ 313.398723][ T334] usb 4-1: config 125 has 4 interfaces, different from the descriptor's value: 3 [ 313.408021][ T334] usb 4-1: config 125 has no interface number 0 [ 313.414317][ T334] usb 4-1: config 125 has no interface number 1 [ 313.420586][ T334] usb 4-1: config 125 has no interface number 2 [ 313.426905][ T334] usb 4-1: config 125 has no interface number 3 [ 313.433222][ T334] usb 4-1: config 125 interface 116 altsetting 190 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 313.444589][ T334] usb 4-1: config 125 interface 116 altsetting 190 has a duplicate endpoint with address 0x2, skipping [ 313.455671][ T334] usb 4-1: config 125 interface 116 altsetting 190 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 313.467017][ T334] usb 4-1: config 125 interface 116 altsetting 190 has a duplicate endpoint with address 0x2, skipping [ 313.478078][ T334] usb 4-1: config 125 interface 116 altsetting 190 has a duplicate endpoint with address 0x4, skipping [ 313.489149][ T334] usb 4-1: config 125 interface 116 altsetting 190 has a duplicate endpoint with address 0x4, skipping [ 313.500331][ T334] usb 4-1: config 125 interface 116 altsetting 190 has a duplicate endpoint with address 0xA, skipping [ 313.511894][ T334] usb 4-1: config 125 interface 116 altsetting 190 has a duplicate endpoint with address 0x2, skipping [ 313.523122][ T334] usb 4-1: config 125 interface 231 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 313.534039][ T334] usb 4-1: config 125 interface 21 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 313.545051][ T334] usb 4-1: config 125 interface 21 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 313.556087][ T334] usb 4-1: config 125 interface 21 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 313.567801][ T334] usb 4-1: config 125 interface 21 altsetting 4 bulk endpoint 0xC has invalid maxpacket 8 [ 313.578043][ T334] usb 4-1: config 125 interface 21 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 313.591357][ T334] usb 4-1: too many endpoints for config 125 interface 127 altsetting 187: 218, using maximum allowed: 30 [ 313.607322][ T334] usb 4-1: config 125 interface 127 altsetting 187 has a duplicate endpoint with address 0x4, skipping [ 313.627412][ T334] usb 4-1: config 125 interface 127 altsetting 187 has a duplicate endpoint with address 0xC, skipping [ 313.638527][ T334] usb 4-1: config 125 interface 127 altsetting 187 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 313.650976][ T334] usb 4-1: config 125 interface 127 altsetting 187 has a duplicate endpoint with address 0xF, skipping [ 313.662251][ T334] usb 4-1: config 125 interface 127 altsetting 187 has a duplicate endpoint with address 0xF, skipping [ 313.673639][ T334] usb 4-1: config 125 interface 127 altsetting 187 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 313.685174][ T334] usb 4-1: config 125 interface 127 altsetting 187 has an invalid descriptor for endpoint zero, skipping [ 313.696538][ T334] usb 4-1: config 125 interface 127 altsetting 187 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 313.707961][ T334] usb 4-1: config 125 interface 127 altsetting 187 has a duplicate endpoint with address 0x4, skipping [ 313.719571][ T334] usb 4-1: config 125 interface 127 altsetting 187 has 10 endpoint descriptors, different from the interface descriptor's value: 218 [ 313.733803][ T334] usb 4-1: config 125 interface 116 has no altsetting 0 [ 313.740760][ T334] usb 4-1: config 125 interface 231 has no altsetting 0 [ 313.753888][ T334] usb 4-1: config 125 interface 21 has no altsetting 0 [ 313.761598][ T334] usb 4-1: config 125 interface 127 has no altsetting 0 [ 313.772863][ T334] usb 4-1: Dual-Role OTG device on HNP port [ 313.783206][ T334] usb 4-1: New USB device found, idVendor=0424, idProduct=b832, bcdDevice=96.25 [ 313.792481][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.800570][ T334] usb 4-1: Product: ⧉⪓拗쏩᫑엷좗躩䧧䡦몠봍顟つ⿒⯴璓텆䆮夰㥈嵚퓾ᐃՖ汲瓠⺅韽抗緯ꦍ㔴阂쌝ꑲ닥䋞첒Ἃᰳ뇾곅㵢䝡譫⍤鸧ⅆঠ清썡郎콛ꈧꛚᙷﻲ烷 [ 313.833327][ T334] usb 4-1: Manufacturer: 벌朲凈쳫⧭쳹릌↦顬１灠⯉ꏔ簑ᘲ灔⹫칊 [ 313.852376][ T334] usb 4-1: SerialNumber: 흄眗줏䬓㖑﬒⏾ᅸ⭆떄솟祘㮵鞈댷넮아睉痼▆ת浢蓒巒ず抆拽쑏㮀ｌ挪㑕㩗姣撛돓蚃랯䗶쌠䷝썫⻠뼙듮ꅑ㸥廂圂৹눩萌쫓飯ᯏ쮬싸絷ɝᦺ橬畦鰜원㢍俄ﶛ闡冈齙췼넿⵭ى䎜덶톎揧⥊轰⿸洑꒒ﻈ퓉ʐꎎ朴ﷇ垑㟂圓폖 [ 314.142486][ T439] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 314.295602][ T439] usb 9-1: config 0 has an invalid interface number: 160 but max is 0 [ 314.303928][ T439] usb 9-1: config 0 has no interface number 0 [ 314.310015][ T439] usb 9-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 314.324495][ T439] usb 9-1: New USB device found, idVendor=05ac, idProduct=8506, bcdDevice=9e.4e [ 314.333613][ T439] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.341700][ T439] usb 9-1: Product: syz [ 314.345902][ T439] usb 9-1: Manufacturer: syz [ 314.350506][ T439] usb 9-1: SerialNumber: syz [ 314.356801][ T439] usb 9-1: config 0 descriptor?? [ 314.535009][ T334] usbhid 4-1:125.127: couldn't find an input interrupt endpoint [ 314.553025][ T334] usb 4-1: USB disconnect, device number 52 [ 314.635163][ T439] usb 9-1: Found UVC 0.00 device syz (05ac:8506) [ 314.662350][ T439] usb 9-1: No valid video chain found. [ 314.677738][ T439] usb 9-1: USB disconnect, device number 2 [ 314.690429][ T6632] udevd[6632]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:125.116/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 314.936863][ T9839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.012172][ T36] kauditd_printk_skb: 1089 callbacks suppressed [ 315.012190][ T36] audit: type=1400 audit(1754546899.542:31415): avc: denied { read write } for pid=3613 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.053444][ T36] audit: type=1400 audit(1754546899.552:31416): avc: denied { read write open } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.106209][ T36] audit: type=1400 audit(1754546899.552:31417): avc: denied { ioctl } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.147954][ T36] audit: type=1400 audit(1754546899.562:31418): avc: denied { execute } for pid=9841 comm="syz.7.2778" path="/dev/rnullb0" dev="devtmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 315.172086][ T36] audit: type=1400 audit(1754546899.582:31419): avc: denied { read write } for pid=3613 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.197123][ T36] audit: type=1400 audit(1754546899.582:31420): avc: denied { read write open } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.223359][ T36] audit: type=1400 audit(1754546899.582:31421): avc: denied { ioctl } for pid=3613 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.252962][ T36] audit: type=1400 audit(1754546899.622:31422): avc: denied { create } for pid=9843 comm="syz.7.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.291967][ T36] audit: type=1400 audit(1754546899.632:31423): avc: denied { read write } for pid=8599 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.317654][ T36] audit: type=1400 audit(1754546899.632:31424): avc: denied { read write open } for pid=8599 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.475057][ T9854] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 316.022459][ T9858] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2785'. [ 316.032388][ T9858] rust_binder: 287: no such ref 1 [ 316.158920][ T9862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.397469][ T9878] rust_binder: Error while translating object. [ 316.404046][ T9878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 316.410502][ T9878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:298 [ 316.685619][ T9895] /dev/rnullb0: Can't lookup blockdev [ 316.972362][ T334] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 317.122368][ T334] usb 9-1: Using ep0 maxpacket: 16 [ 317.130580][ T334] usb 9-1: unable to get BOS descriptor or descriptor too short [ 317.140205][ T334] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 317.149240][ T334] usb 9-1: config 1 has no interface number 1 [ 317.155379][ T334] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 317.175521][ T334] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.198441][ T334] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.217061][ T334] usb 9-1: Product: syz [ 317.221351][ T334] usb 9-1: Manufacturer: syz [ 317.245909][ T334] usb 9-1: SerialNumber: syz [ 317.634860][ T334] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 317.653645][ T334] usb 9-1: USB disconnect, device number 3 [ 317.697722][ T8792] udevd[8792]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 318.324139][ T9918] rust_binder: Read failure Err(EAGAIN) in pid:310 [ 318.512552][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 318.515143][ T9920] rust_binder: Read failure Err(EFAULT) in pid:312 [ 318.558855][ T9925] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2809'. [ 318.647080][ T9928] netlink: 'syz.4.2810': attribute type 4 has an invalid length. [ 318.660265][ T9928] netlink: 'syz.4.2810': attribute type 5 has an invalid length. [ 318.669172][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 318.675915][ T9928] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2810'. [ 318.688508][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 318.707228][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.722614][ T10] usb 9-1: config 0 descriptor?? [ 319.016481][ T9943] input: syz1 as /devices/virtual/input/input34 [ 319.140576][ T9947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:334 [ 319.148411][ T10] wacom 0003:056A:006B.0012: unknown main item tag 0x0 [ 319.191141][ T10] wacom 0003:056A:006B.0012: unknown main item tag 0x0 [ 319.208488][ T10] wacom 0003:056A:006B.0012: unknown main item tag 0x0 [ 319.222349][ T10] wacom 0003:056A:006B.0012: unknown main item tag 0x0 [ 319.229781][ T10] wacom 0003:056A:006B.0012: unknown main item tag 0x0 [ 319.238054][ T10] wacom 0003:056A:006B.0012: unknown main item tag 0x0 [ 319.245329][ T10] wacom 0003:056A:006B.0012: unknown main item tag 0x0 [ 319.252710][ T10] wacom 0003:056A:006B.0012: Unknown device_type for 'HID 056a:006b'. Assuming pen. [ 319.263645][ T10] wacom 0003:056A:006B.0012: hidraw0: USB HID v10.00 Device [HID 056a:006b] on usb-dummy_hcd.8-1/input0 [ 319.276840][ T10] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:006B.0012/input/input35 [ 319.382783][ T9916] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 319.407183][ T439] usb 9-1: USB disconnect, device number 4 [ 320.029669][ T36] kauditd_printk_skb: 565 callbacks suppressed [ 320.029688][ T36] audit: type=1400 audit(1754546904.572:31990): avc: denied { create } for pid=9960 comm="syz.8.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.056322][ T36] audit: type=1400 audit(1754546904.572:31991): avc: denied { relabelfrom } for pid=9960 comm="syz.8.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 320.076471][ T36] audit: type=1400 audit(1754546904.572:31992): avc: denied { relabelto } for pid=9960 comm="syz.8.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 320.096302][ T36] audit: type=1400 audit(1754546904.572:31993): avc: denied { create } for pid=9960 comm="syz.8.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.116151][ T36] audit: type=1400 audit(1754546904.572:31994): avc: denied { bind } for pid=9960 comm="syz.8.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.136395][ T36] audit: type=1400 audit(1754546904.602:31995): avc: denied { ioctl } for pid=9956 comm="syz.3.2821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.162044][ T36] audit: type=1400 audit(1754546904.672:31996): avc: denied { ioctl } for pid=9956 comm="syz.3.2821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.192432][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 320.200767][ T36] audit: type=1400 audit(1754546904.732:31997): avc: denied { ioctl } for pid=9956 comm="syz.3.2821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.226256][ T36] audit: type=1400 audit(1754546904.732:31998): avc: denied { ioctl } for pid=9956 comm="syz.3.2821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.252228][ T36] audit: type=1400 audit(1754546904.732:31999): avc: denied { ioctl } for pid=9956 comm="syz.3.2821" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.321180][ T9965] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2823'. [ 320.352350][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 320.366807][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.378701][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.390736][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 320.400473][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.403879][ T9967] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2824'. [ 320.411297][ T31] usb 4-1: config 0 descriptor?? [ 320.428766][ T9967] __vm_enough_memory: pid: 9967, comm: syz.8.2824, bytes: 18014402804453376 not enough memory for the allocation [ 320.712468][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 320.830134][ T31] lenovo 0003:17EF:6009.0013: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 320.862354][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 320.870354][ T10] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 320.880340][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.891281][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.904608][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.914287][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.922373][ T10] usb 9-1: Product: syz [ 320.926668][ T10] usb 9-1: Manufacturer: syz [ 320.931284][ T10] usb 9-1: SerialNumber: syz [ 321.032761][ T9957] ------------[ cut here ]------------ [ 321.038310][ T9957] WARNING: CPU: 0 PID: 9957 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 321.049016][ T9957] Modules linked in: [ 321.053077][ T9957] CPU: 0 UID: 0 PID: 9957 Comm: syz.3.2821 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 321.066604][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.077269][ T9957] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 321.083760][ T9957] Code: 7e 3b e8 84 03 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 61 03 6a 00 <0f> 0b e9 e4 fc ff ff e8 55 03 6a 00 0f 0b e9 0e fd ff ff e8 49 03 [ 321.103964][ T9957] RSP: 0018:ffffc90006f379c0 EFLAGS: 00010293 [ 321.110950][ T9957] RAX: ffffffff811bc81f RBX: ffff88813516c300 RCX: ffff88815b2cb900 [ 321.119001][ T9957] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 321.127104][ T9957] RBP: ffffc90006f37c70 R08: ffff88815b2cb907 R09: 1ffff1102b659720 [ 321.135219][ T9957] R10: dffffc0000000000 R11: ffffed102b659721 R12: ffff888130e4d000 [ 321.143351][ T9957] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88813516c378 [ 321.151573][ T9957] FS: 00007face6b106c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 321.160973][ T9957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.167680][ T9957] CR2: 00007fbb2bbf2b60 CR3: 0000000125296000 CR4: 00000000003526b0 [ 321.175704][ T9957] Call Trace: [ 321.178985][ T9957] [ 321.181911][ T9957] ? kthread_queue_work+0xbb/0x100 [ 321.187070][ T9957] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 321.193123][ T9957] ? __futex_wait+0x218/0x2a0 [ 321.197820][ T9957] ? should_fail+0xf/0x20 [ 321.202244][ T9957] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 321.207956][ T9957] ? ioctl_has_perm+0x1aa/0x4d0 [ 321.212961][ T9957] ? ioctl_has_perm+0x3e0/0x4d0 [ 321.218043][ T9957] ? has_cap_mac_admin+0xd0/0xd0 [ 321.223019][ T9957] ? synchronize_rcu+0x77/0x2e0 [ 321.227985][ T9957] ? __cfi_synchronize_rcu+0x10/0x10 [ 321.233411][ T9957] ? futex_wait+0x29a/0x7a0 [ 321.237931][ T9957] ? __kasan_check_write+0x18/0x20 [ 321.243085][ T9957] kvm_vcpu_ioctl+0x96f/0xee0 [ 321.247780][ T9957] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 321.253014][ T9957] ? do_futex+0x309/0x500 [ 321.257358][ T9957] ? __cfi_do_futex+0x10/0x10 [ 321.262033][ T9957] ? __fget_files+0x2c5/0x340 [ 321.266778][ T9957] ? bpf_lsm_file_ioctl+0xd/0x20 [ 321.271734][ T9957] ? security_file_ioctl+0x34/0xd0 [ 321.276953][ T9957] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 321.282349][ T9957] __se_sys_ioctl+0x135/0x1b0 [ 321.287133][ T9957] __x64_sys_ioctl+0x7f/0xa0 [ 321.291732][ T9957] x64_sys_call+0x1878/0x2ee0 [ 321.297074][ T9957] do_syscall_64+0x58/0xf0 [ 321.301703][ T9957] ? clear_bhb_loop+0x50/0xa0 [ 321.306458][ T9957] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.312652][ T9957] RIP: 0033:0x7face5d8ebe9 [ 321.317084][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.336987][ T9957] RSP: 002b:00007face6b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.345889][ T9957] RAX: ffffffffffffffda RBX: 00007face5fb5fa0 RCX: 00007face5d8ebe9 [ 321.353998][ T9957] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 321.362246][ T9957] RBP: 00007face5e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 321.370729][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.379625][ T9957] R13: 00007face5fb6038 R14: 00007face5fb5fa0 R15: 00007fffa0698a48 [ 321.387902][ T9957] [ 321.390991][ T9957] ---[ end trace 0000000000000000 ]--- [ 321.397756][ T10] usb 9-1: 0:2 : does not exist [ 321.407590][ T31] usb 4-1: USB disconnect, device number 53 [ 322.140160][ T31] usb 9-1: USB disconnect, device number 5