last executing test programs: 3m4.026377571s ago: executing program 1 (id=397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000006c0)={0x8f, 0x0, 0xe}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={r4, 0x0, 0x2fa}) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x420, 0x3f4, 0x4, 0x70bd2b, 0x25dfdbff, {0x4, 0x1, 0x5, [0x8, 0x2, 0x80000001, 0x5, 0x6, 0x7ff, 0x2, 0x800, 0x8, 0x8, 0x6, 0x8, 0x7fff, 0x6, 0x3, 0x8, 0x800, 0x8f89, 0x3, 0x0, 0x80, 0x4f2a, 0x8a7, 0x2, 0x0, 0x6, 0x6, 0x8000, 0xfa1, 0x4, 0x7, 0xfffff800, 0xa459, 0x1, 0x401, 0x7, 0xfffffeff, 0x7fffffff, 0x2, 0x101, 0x7, 0x8, 0x7, 0x180000, 0xfffffffb, 0x5, 0x2, 0x37, 0xb, 0x6, 0xb, 0xfffffffd, 0x0, 0x80000001, 0x4, 0x6, 0x1, 0x5d6, 0xffffffff, 0x6, 0x2, 0x2, 0x3, 0x3], [0x5, 0xfffffff0, 0x8, 0x26, 0x9, 0x1, 0xfffffff9, 0x6, 0xe, 0x3, 0x10001, 0x8, 0x100, 0x698c, 0x6, 0xa, 0x0, 0x3, 0x1425, 0x2, 0x1, 0x8, 0x100, 0x40, 0x3, 0x5, 0x7, 0x4, 0x7, 0x6, 0x3355, 0xa, 0x6, 0xff, 0x40, 0x8, 0xfffff001, 0x2, 0x7981d514, 0x80, 0xb, 0x8, 0x200, 0x5, 0x8, 0xffffffff, 0x0, 0x2, 0x7, 0xfffffffd, 0x5, 0x4, 0x5, 0xe8, 0x6, 0x8, 0x5, 0x24083025, 0x2, 0x800, 0x2, 0x9, 0xc, 0xea6], [0x2, 0x4, 0x7, 0x2, 0x48, 0x6, 0xffffffff, 0x3, 0x7ff, 0x7c9f, 0x2, 0xa, 0x0, 0x0, 0xff, 0x10000, 0x8, 0x3, 0x1, 0x7e, 0x81, 0x1ff, 0x3, 0xfffffff8, 0x51918090, 0x3, 0x5, 0xfffffffa, 0x8000, 0x101, 0x7fff, 0x56de, 0x5, 0x9, 0xff, 0x7, 0x2, 0x9, 0x72c, 0x9, 0x9, 0xffffffff, 0x0, 0x5, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x5, 0x7, 0x8, 0x3, 0x6, 0x80000000, 0x8, 0xc6b, 0x5, 0x2, 0x3, 0x6, 0x1000, 0x6, 0x5], [0x8, 0x8, 0x100, 0x2, 0x3b, 0x35df4793, 0x7, 0x0, 0x3, 0x6, 0xffff89ec, 0x9, 0xbef, 0x3, 0x9, 0x8, 0x4, 0x4, 0x3, 0x7, 0xff, 0xff, 0x9, 0x6, 0x9b3, 0xfffffffd, 0x6, 0xd4f, 0x8, 0x9, 0x8, 0x5, 0x6, 0xf0e, 0x7fff, 0x2, 0x4, 0x0, 0x0, 0xffffffff, 0x3, 0xa93, 0xfff, 0x9, 0x7ff, 0x100, 0x4, 0x8000, 0xfffffff8, 0x5, 0x0, 0x6f98, 0x1, 0x9, 0x100, 0x1, 0x1, 0xffffffff, 0xffffff7a, 0x9, 0x5, 0x9, 0x7f, 0xffff]}}, 0x420}, 0x1, 0x0, 0x0, 0x40000a0}, 0x5000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 3m3.898889533s ago: executing program 1 (id=400): setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) (async) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_test={0x1a, 0x4, 0x80000001, 0x3, [0x7, 0xffffffffffffffff, 0x0]}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_test={0x1a, 0x4, 0x80000001, 0x3, [0x7, 0xffffffffffffffff, 0x0]}}) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40) mkdir(&(0x7f00000001c0)='./bus\x00', 0x1ac) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) lseek(r1, 0xfffd, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000200) 3m3.896859184s ago: executing program 1 (id=402): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x80002, 0x20) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x1, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x1, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) syz_usb_connect$cdc_ncm(0x4, 0x87, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0xd1, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'I'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0xfffe, 0x5, 0xe}, {0x6, 0x24, 0x1a, 0x62, 0x2a}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x981a, 0x1, 0xe7, 0x7, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xb0a7, 0x9, 0xfc, 0x0, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa3, 0x2, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6a, 0xc2, 0x7}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xfe, 0x5, 0x8, 0x8, 0x2}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x102, &(0x7f0000000480)=@string={0x102, 0x3, "f729c9b88a759c343262ac8241f0bf3426e10ce132ec9f7d8bd2b54b52122692c73e441372ba86bd0807104d94eae33bd0a47ad5b448e40377646f726c81b7c281c7034f479e533ecf9ad6c54bca8550b6256bcc5bff46d7d69b3a79a7ba24a1d596af92b0d2e327f606435f90a45d34c3163950ba8f9e27dab5dec57328b7790e029622607c9f32cc0dcc60b2cbb19f65df4f5589f588ad8863a4c6b92c258cc679c83803b87fcfdbfa65178b93c99f5a8b20db7819e28ac2bc63c6f934f507b0b30fb19c2b34333f8e109e919bdf35c0722ef8be46eec24b60e762f44ff39a4b378825576c0cda31d5b9ea350630d8025b6c03d072944e9cdd61fa55d70d49"}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "e942"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2809}}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xfffffffe) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') 3m3.276665992s ago: executing program 1 (id=404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = dup2(r0, r0) getdents(r1, &(0x7f0000000100)=""/249, 0xf9) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) (async) dup2(r0, r0) (async) getdents(r1, &(0x7f0000000100)=""/249, 0xf9) (async) 3m3.214933788s ago: executing program 1 (id=405): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xfff, 0x1, 0x100, 0x9}, 0x6, [0x0, 0x6, 0xa58, 0x0, 0x9, 0xfffffffb, 0x200, 0xe, 0x1, 0x3, 0x9, 0x5, 0x400, 0x5, 0xa, 0x3, 0x0, 0x6, 0x1ff, 0x0, 0xfae, 0x400, 0x6, 0x0, 0x1, 0x5, 0x1, 0x1ff, 0xb86, 0x10000, 0x80000001, 0x7, 0xffffffff, 0x0, 0x800, 0xc75, 0x1, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x0, 0x400, 0x1, 0xe231, 0x4, 0x5, 0x101, 0x3, 0x0, 0x10000, 0x200, 0x6, 0x9, 0x7, 0x1, 0x2, 0x4, 0xf, 0x8000, 0x500000, 0x12fe, 0x327129ec], [0xc, 0xe0a, 0xdd5d, 0x0, 0x8000, 0xded, 0x4, 0x2, 0x401, 0x0, 0x2, 0x4, 0x7, 0xe6b9, 0x1, 0x2, 0x7f, 0x10000, 0xffffff4a, 0x0, 0x3, 0x8, 0x821, 0xf74c, 0x3, 0xb73b, 0x3, 0xfffffff7, 0x8, 0x1, 0x3, 0x808, 0x5, 0x3, 0x2a, 0x8, 0x7, 0x8, 0x3bc, 0xfffff801, 0x7, 0x97, 0x3, 0x7f, 0x6, 0xfffffffe, 0xcc1, 0x6, 0x9, 0x3, 0x6171, 0x8, 0x6, 0x7, 0x5, 0x180, 0x9, 0xc7b, 0x0, 0x6, 0x1000, 0x6, 0xc4, 0x3], [0x2, 0x8000, 0x6, 0xd4a, 0x6, 0x6, 0x2, 0x1, 0x6, 0x4, 0x200, 0x7ff, 0x200, 0xfffffff7, 0x8, 0x2, 0x4, 0x7, 0x3ff, 0x5, 0x9, 0x7, 0x10, 0x3ff, 0x89, 0x8, 0x80000001, 0x8, 0x0, 0x7edf, 0x80, 0xffffff8d, 0x2, 0x0, 0x1b, 0xf, 0x1de000, 0x565, 0x5, 0x7, 0x40, 0x10001, 0x606f, 0x2, 0x3, 0x2, 0x0, 0x80000000, 0x2, 0x0, 0x3, 0xa, 0x3, 0xa99d, 0xf, 0x1, 0x3, 0xa, 0x0, 0x1, 0x5, 0x8325, 0x7, 0x10001], [0xe61, 0x8000, 0x1, 0xfdf, 0xfff, 0x2, 0x6, 0x80, 0x8, 0xcb, 0x7, 0x650, 0x7dcd, 0x5, 0x6f51, 0x1, 0x5, 0x3, 0xfffffffb, 0x2, 0xd468, 0x1, 0x60000000, 0x17, 0x1ff, 0x9, 0x7, 0xa, 0x100, 0x11e, 0x173, 0x5, 0x6, 0x400, 0x8, 0x5, 0x8, 0x7f, 0x8, 0x800, 0x63, 0x1ff, 0x3, 0x3, 0x80, 0x401, 0xf, 0x401, 0x2, 0x2, 0xbd3f, 0x6c0, 0x0, 0x8, 0x6, 0x0, 0x80800, 0x9, 0x3, 0x20000000, 0x0, 0x3, 0x786, 0xb]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3m3.202562689s ago: executing program 1 (id=406): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1508000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 2m48.155212454s ago: executing program 32 (id=406): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1508000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 2m3.695105715s ago: executing program 0 (id=855): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12000, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) close_range(0xffffffffffffffff, r2, 0x2) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000040)=0x8000) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "fd99270e44fe7a80", "6f76e2270b948e00ff5398c5b5c0f9bc", "13bebf01", "42aa8d2f26ca6fd1"}, 0x28) shutdown(r3, 0x1) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = dup(r5) capset(&(0x7f0000000740)={0x20080522}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="e16d231da825730acaccb9c58ba9395206e65befd8537cc4df5fb660fc07b63676dcf63a793197b7d328ad2bed64d9412ebc99182536c964fae9bbefd47bb4f6e6c5a8e04c59bdd541cbe8c68ddbca81f52b1ada93b0c16f5c3ab666bac0bb0a803389d31ea3040a86cb5af53ba76945348b2c742c42eff9f5a538371faf4a662154a74ba42ff6598ab04412c9bee084bed1fcca81176b8fbbade4ce55fd3e9ce76b6f3ed6b8a1a605bcfbd046c9fd6de842bdcb1c14fd6ac4b718374ed1be3ec401c8f3accd710f4c6c8c5701", &(0x7f00000000c0)="c9f98b3353e774caf7e6198610185d403d088739fd0be35fa1ce5abf10fa4374369b93ec9a63466765bc3bf561b5073ecd1b7442b08633d9e8ad"}}, &(0x7f0000bbdffc)) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) flistxattr(r7, &(0x7f0000001500)=""/4096, 0x1000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x402, 0x10000, @local}, 0x1c) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x200f}) sigaltstack(&(0x7f0000000200)={&(0x7f0000000380)=""/113, 0x80000003, 0x71}, &(0x7f0000000440)={&(0x7f0000000400)=""/54, 0x0, 0x36}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) 2m0.65476834s ago: executing program 0 (id=890): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) io_setup(0xf0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00000001c0)={0x3, 0x1, 0x8}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000080005"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x1c}) 2m0.44274175s ago: executing program 0 (id=892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ftruncate(r1, 0x398a0bdb) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2m0.424619542s ago: executing program 0 (id=893): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x9, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9000000000000000ff000000000000000300000000000000ace500000000"], 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) r6 = dup(r2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000300)=ANY=[], 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) setns(0xffffffffffffffff, 0x20000) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e1e, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf5}, 0x1c) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x21) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x12713, 0x5, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) sendmmsg$inet6(r10, &(0x7f0000003b80), 0x0, 0x4000020) 2m0.262960248s ago: executing program 0 (id=894): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0xa, 0x9) ioctl$KVM_RUN(r0, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x3814800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = signalfd4(r2, &(0x7f0000000080)={[0x100]}, 0x8, 0xc00) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 2m0.192407494s ago: executing program 0 (id=895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800, 0x0, 0x2, 0x1}, 0x20) syz_open_procfs(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800, 0x0, 0x2, 0x1}, 0x20) (async) syz_open_procfs(0x0, 0x0) (async) 2m0.167075867s ago: executing program 33 (id=895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800, 0x0, 0x2, 0x1}, 0x20) syz_open_procfs(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800, 0x0, 0x2, 0x1}, 0x20) (async) syz_open_procfs(0x0, 0x0) (async) 1m40.832874134s ago: executing program 5 (id=1088): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b40)={0x158, 0x3e, 0x1, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x14e, 0x0, 0x0, @u32=0x3}, @nested={0xdc, 0x90, 0x0, 0x1, [@generic="0f8382b3b5428602fbe7ff85dd33fdff84f6713593c181df55be06e441092c23f135f38777964044ac4bdeb70f1e3a8abf8bd8ca22efa9ec9dfa7031b8a07c91b476aebb15b2094ae0040afa8e3b7a22348aa9e5cfe719892d56a5f341e19509adf2ff2400536c320b7851327cd95cbb87e817d9c6406228903d9dd474352a062bf664516712dd415f454426579c0c9dd9280e674aaa2886dc128c8c200f8b95f61d5ffd631cd0a29e5956dda03a5b8ef2e19fae6e9e1610e1a02c5434ab5800d8ecdfbdfad4acebced556f297d6fbb7fabc693bfda1a289"]}, @typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x4, 0xa1}, @nested={0x8, 0x24, 0x0, 0x1, [@nested={0x4, 0x114}]}, @nested={0x1c, 0x87, 0x0, 0x1, [@nested={0x4, 0xf5}, @nested={0x4, 0xdd}, @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x10000}, @typed={0x8, 0x47, 0x0, 0x0, @pid=r2}]}, @generic="96d7c545e29cab9d8ddeae500c04b2ce76", @typed={0x8, 0x98, 0x0, 0x0, @pid}, @nested={0x4, 0x109}, @typed={0x8, 0x106, 0x0, 0x0, @pid}]}, 0x158}, {&(0x7f0000000cc0)={0x10c, 0x3b, 0x400, 0x70bd27, 0x25dfdbfc, "", [@generic="cf5b575550cb91df90841de1e161cf85fa9b3c8ba1c253d44400748e031d9e443b98b177d5230ba02c0c97f3c59f8a01b477bbf818b6eb2b1a79307ed9", @typed={0x8, 0x62, 0x0, 0x0, @pid=r2}, @generic="fc1e3a4936420ea8c5691774da36f9b3bf6ee4f125440491db1143ffab6ffe8e406f9c78820896a97bafa5e6233f49dde5c32c8a5fb958aed581183375", @generic="38a2d46af519c2cb50412c37f9414585debecc3a7b4923c32226526444053eef11277f007960fb9f03503e7913dd6b29fa4b4d0bfb5daa2f713d4e729d73156ee1ea8001bc60e938462c850b8db23fc91ac4b3307403a881f933bf64a06929ccee269003a0c82b4ae3d3891226562652d662afbaacf30235"]}, 0x10c}, {&(0x7f0000000e00)={0xd4, 0x2c, 0x800, 0x70bd29, 0x25dfdbfc, "", [@generic="0f47ada7f7b0313597d5f451988eb856f9d6222357e0ed2c85c91cd5dc0abc85397797311941c6c75e1367b19eabb7ee1b2e26d02cef0d49c8f8d4fe0d1f16f73b32661af4f6f6b245974fee307c2685a02cc7e750b69fd372f86531c88a512117afdb05500c858ad61f6e683d842e56678760d05e4676fec4fb4c9503f2b09c2ce0945ac5a7a3ce829ecdb75ac7184e8aba", @generic="289717daa1e2764eba7536c920becb7f967fd3d10871b027df4c99cd9fd547610bde435f0e0665fde16d6238797361aebc"]}, 0xd4}, {&(0x7f0000003080)={0x27c, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@nested={0xef, 0xbd, 0x0, 0x1, [@typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@remote}, @generic="9012e1702e1b193811c6baf130dd72ae1cc4f1670f6b8b4752e4a8814a0336a759191fedf1acf6a222d4a59735367ec1c72a5f2351876fe89c1d1cafdef8912e30d4d0fc90f655268a4ad56aba28d2521f8b863e50055e2f8ea72a1bba5a8f5c89be7965cb52e9052d5bcc8aaf515de20481a0f1ae75a70723e3e56bf1ce213bdf1b5dc799a00d5b64b148fa3d5a3dc95cc71006168d0e841687c0a8e3d14835d95c4d362a94c7729733905ca9781fca691a1ded5f07a96559ac5d30c2ca5efd6164cd43eda4c099adb3ae", @nested={0x4, 0xf8}, @typed={0x8, 0x14b, 0x0, 0x0, @fd}]}, @generic="e3b27695ceefd8fafe0c372ad255d0815e7e2549c61847c5e92a6104428c5fb4f7161d6e226de433fdc5f62ff4d95e6ce2dc2891d138377a6de3e84849764d197ae32b", @typed={0x8, 0x46, 0x0, 0x0, @pid}, @typed={0x8, 0x118, 0x0, 0x0, @pid}, @generic="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", @generic="2645e3a97b13fb16d0e17a70096cb1a2365b1ef08ef7e367d6e15ed596e29e718f08750ca7c722a2fa4260"]}, 0x27c}, {&(0x7f0000003300)={0x21c, 0x40, 0x10, 0x70bd27, 0x25dfdbff, "", [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@local}, @nested={0x9e, 0x13a, 0x0, 0x1, [@nested={0x4, 0xc6}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0xe7, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x148}, @generic="121ca693e061c8f2a0c7c679680eb756334b21005480d88b9d979a333c09b4de042b00d6743af89681e76e0a9f50c1d1d8b79d6030998d9067b0614a49b75ea6397a45ec76c329be3483b8fd177407e6236cc801bac2ccec748e90a39ecd3fc9c9305d1a8ec41bb71a2cef75ab4cf10f6f44aebd9f5b"]}, @nested={0x107, 0x62, 0x0, 0x1, [@generic, @typed={0x8, 0x20, 0x0, 0x0, @fd}, @typed={0x37, 0x10d, 0x0, 0x0, @binary="497ed5f4a8725a1511ecfcbfdadb95154c43ea9180d8c54422b72b808d8c096582c8b37abc9232109f382980e32d526c235bc2"}, @typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="4d15936529f335284b5f3b4c7d92fc6538ce7bb5aea372779c3f9e3cd2312c3ca72fd0836c28dde4f4b374fd606041af7357f2c30d678f8de45038a40ecff899d6c3c74b5f6d1581568a87594487b2888dec7a78dfe2deedcaaa41baa4ea895d7e8f07a34e8257fe42d675c2aa7a472910db45469948c3f1f224250d99deda3815c3e136e237277f9dcf72fa58a8ac17fc0d28e1f78729affe05be0e17d43ab78189e21864a80872cb17445fda2eb10b7a4732d470fa3b", @nested={0x4, 0xc}]}, @typed={0xc, 0x5c, 0x0, 0x0, @u64=0x10}, @generic="220f206312462364f462eac4575f95192d213b85acdff0a2862895cdf5cb4819e83cf08a8876411ad3b5c74c86a6378128f2789572ebde68650bbf405f21ceb01438"]}, 0x21c}], 0x5, 0x0, 0x0, 0x4001000}, 0x4000080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x7fff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f00000002c0)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/11, 0xb, 0x0, 0xb}, @fda={0x66646185, 0x5}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}}], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, &(0x7f0000000340)='./file1\x00') readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000a40)=""/125, 0x7d}], 0x7) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/nf_conntrack_expect\x00') read$FUSE(r6, &(0x7f0000004640)={0x2020}, 0x2020) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x98, 0x0, &(0x7f00000007c0)=[@free_buffer={0x40086303, r5}, @acquire_done={0x40106309, 0x2}, @register_looper, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}}], 0x29, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def15973bb88f9681daaf870436e821da0bd6350d981151041f99854174eafdb"}) 1m40.761492721s ago: executing program 5 (id=1089): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000", 0x4) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) unshare(0x2040600) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 1m40.677499299s ago: executing program 5 (id=1090): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r1, "dcf46ed248af0af32be848d5f14b83a1"}) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x12, 0x1}, &(0x7f0000044000)=0x0) futex_waitv(&(0x7f0000003f40)=[{0x8000000000000001, &(0x7f0000002180)=0x8, 0x82}, {0x65c, &(0x7f00000021c0)=0x9, 0x2}, {0x3, &(0x7f0000002200)=0x3, 0x82}, {0x6, &(0x7f0000002240)=0x6, 0x2}, {0xfffffffffffffffe, &(0x7f0000002280)=0x6, 0x82}, {0x0, &(0x7f00000022c0)=0x5, 0x2}, {0x7, &(0x7f0000002300)=0x400, 0x2}, {0x1, &(0x7f0000002340)=0xf0e4, 0x2}, {0x67b82121, &(0x7f0000002380)=0x1, 0x2}, {0x8, &(0x7f00000023c0)=0x7, 0x82}, {0x7, &(0x7f0000002400)=0x5d, 0x82}, {0x8001, &(0x7f0000002440)=0x1d5, 0x82}, {0x3, &(0x7f0000002480)=0x7, 0x2}, {0x8, &(0x7f00000024c0)=0xe6a, 0x2}, {0x0, &(0x7f0000002500)=0x9, 0x2}, {0x9, &(0x7f0000002540)=0x80000000, 0x82}, {0x3, &(0x7f0000002580)=0x7, 0x82}, {0x100000001, &(0x7f00000025c0)=0xffffffffffff0a88, 0x2}, {0xffff, &(0x7f0000002600)=0x4, 0x82}, {0x8, &(0x7f0000002640)=0x4, 0x2}, {0x4, &(0x7f0000002680)=0x7, 0x2}, {0xfffffffffffff801, &(0x7f00000026c0)=0x10, 0x2}, {0x0, &(0x7f0000002700)=0x1, 0x2}, {0x7, &(0x7f0000002740)=0x4, 0x2}, {0xe, &(0x7f0000002780)=0xfffffffffffffff7, 0x82}, {0xffff, &(0x7f00000027c0)=0xfffffffffffffff8, 0x80}, {0x1, &(0x7f0000002800)=0xa, 0x82}, {0x401, &(0x7f0000002840)=0x4, 0x2}, {0x1, &(0x7f0000002880)=0x6, 0x82}, {0x7fffffff, &(0x7f00000028c0)=0x1, 0xe45d36fdfb1f5617}, {0x1, &(0x7f0000002900), 0x82}, {0x5, &(0x7f0000002940)=0x8001, 0x2}, {0xfffffffffffffffb, &(0x7f0000002980)=0xfffffffffffffffc, 0x2}, {0x1, &(0x7f00000029c0)=0x1ff, 0x2}, {0x2, &(0x7f0000002a00)=0xffffffff, 0x2}, {0x6, &(0x7f0000002a40)=0x40, 0x2}, {0x5, &(0x7f0000002a80)=0x3, 0x2}, {0x7f3a, &(0x7f0000002ac0)=0x81, 0x2}, {0x7, &(0x7f0000002b00)=0x7, 0x82}, {0x1, &(0x7f0000002b40)=0xf483}, {0x6a6, &(0x7f0000002b80)=0x8, 0x2}, {0x8, &(0x7f0000002bc0)=0xffffffffffffffff, 0x2}, {0x7b6, &(0x7f0000002c00)=0x1, 0x82}, {0x2000000000000, &(0x7f0000002c40), 0x2}, {0x0, &(0x7f0000002c80)=0x8001, 0x82}, {0x48, &(0x7f0000002cc0)=0xfff, 0x82}, {0x1, &(0x7f0000002d00)=0x80, 0x2}, {0x7, &(0x7f0000002d40)=0x9, 0x2}, {0x2, &(0x7f0000002d80)=0x8001, 0x2}, {0x1, &(0x7f0000002dc0)=0x8}, {0x401, &(0x7f0000002e00)=0xfffffffffffffffe, 0x2}, {0x2, &(0x7f0000002e40)=0xfffffffffffffffb, 0x82}, {0x7, &(0x7f0000002e80)=0x8, 0x82}, {0x9, &(0x7f0000002ec0)=0xd8, 0x82}, {0x8, &(0x7f0000002f00)=0x100000001, 0x82}, {0x9, &(0x7f0000002f40)=0x7, 0x82}, {0x9, &(0x7f0000002f80)=0x7, 0x2}, {0x8001, &(0x7f0000002fc0)=0x10, 0x2}, {0x7, &(0x7f0000003000)=0x384, 0x2}, {0x6f1, &(0x7f0000003040)=0x5, 0x2}, {0x2, &(0x7f0000003080)=0x88, 0x2}, {0x601, &(0x7f00000030c0)=0x100000000, 0x82}, {0xffffffffffffffff, &(0x7f0000003100)=0x9, 0x2}, {0x9, &(0x7f0000003140)=0xa, 0x82}, {0x8, &(0x7f0000003180)=0x1, 0x2}, {0x3fffffff80, &(0x7f00000031c0)=0x2, 0x82}, {0x3, &(0x7f0000003200)=0x8, 0x82}, {0x1, &(0x7f0000003240)=0x6e5, 0x82}, {0x4, &(0x7f0000003280)=0xb0b}, {0x2, &(0x7f00000032c0)=0x3ff, 0x80}, {0xfffffffffffffc00, &(0x7f0000003300)=0x2, 0x2}, {0xfffffffffffff67b, &(0x7f0000003340)=0x8000000000000000, 0x82}, {0x0, &(0x7f0000003380)=0x8, 0x2}, {0x2, &(0x7f00000033c0)=0xc, 0x82}, {0x6, &(0x7f0000003400)=0xc, 0x82}, {0x2, &(0x7f0000003440)=0x9, 0x82}, {0x8000000000000001, &(0x7f0000003480)=0xfffffffffffffffd, 0x2}, {0x2, &(0x7f00000034c0)=0x222, 0x2}, {0xcb, &(0x7f0000003500)=0x7fff, 0x2}, {0x2, &(0x7f0000003540)=0x1, 0x2}, {0xa, &(0x7f0000003580)=0x9, 0x2}, {0x3ff, &(0x7f00000035c0)=0x8, 0x2}, {0xfff, &(0x7f0000003600)=0x100, 0x82}, {0x2, &(0x7f0000003640)=0xf, 0x82}, {0x2, &(0x7f0000003680)=0x2, 0x82}, {0xffffffff, &(0x7f00000036c0)=0xffffffffffffffff, 0x82}, {0xd4e4, &(0x7f0000003740), 0x82}, {0x4, &(0x7f0000003780), 0x2}, {0x8, &(0x7f0000003800)=0x5, 0x2}, {0x5, &(0x7f0000003840), 0x2}, {0x8, &(0x7f0000003880)=0x9538, 0x2}, {0x18a3, &(0x7f00000038c0)=0xfffffffffffffffe, 0x82}, {0x7, &(0x7f0000003900)=0x8, 0x82}, {0x45071e79, &(0x7f0000003940)=0x3ff, 0x2}, {0x3, &(0x7f0000003980)=0x18c, 0x82}, {0x0, &(0x7f00000039c0)=0x8000000000000001, 0x2}, {0x2400000000000, &(0x7f0000003a00), 0x82}, {0x6, &(0x7f0000003a40), 0x80}, {0x1, &(0x7f0000003a80)=0x7, 0x2}, {0x3, &(0x7f0000003ac0)=0x9, 0x82}, {0x8, &(0x7f0000003b00)=0x5, 0x82}, {0x9, &(0x7f0000003b40), 0x82}, {0x8, &(0x7f0000003b80)=0x1000, 0x82}, {0x3, &(0x7f0000003bc0)=0x5, 0x82}, {0x64, &(0x7f0000003c00), 0x2}, {0x3d96a165, &(0x7f0000003c40)=0x9, 0x82}, {0xfff, &(0x7f0000003c80)=0x7, 0x2}, {0x8, &(0x7f0000003cc0)=0x9, 0x2}, {0xc5e2, &(0x7f0000003d00), 0x82}, {0x3, &(0x7f0000003d40)=0x5, 0x82}, {0x7fffffffffffffff, &(0x7f0000003d80)=0x3, 0x82}, {0x5, &(0x7f0000003dc0)=0xa}, {0x400, &(0x7f0000003e00)=0x5e79df73, 0x2}, {0xfffffffffffffffb, &(0x7f0000003e40)=0x3, 0x2}, {0x4, &(0x7f0000003e80)=0x9, 0x2}, {0x3849, &(0x7f0000003ec0)=0x7, 0x2}, {0xfffffffffffffff8, &(0x7f0000003f00), 0x2}], 0x75, 0x0, &(0x7f0000004a40)={0x0, 0x989680}, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000020c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578ae274ff79e0df300e148023eeadb18b44c0bc6649b5fd84d7667685e9d4d9700b127120d3b7957adde4c0f99a941a6c2e2e894953a7ac576d282b951314477c78a1002a1bd76992d7a915d2087fdba1cd2b48db5039a0600000077e9290420c1a5f268706019d025c5b8c3d091108e6f106e2701d111c9abb13e638ce899054b28cdec56a15a31b1d12479d782ca6ef132bc4a"], 0x96) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB]) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x121201, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f00000005c0)={0x120003, 0x0, {[0x2, 0x6, 0x3, 0x0, 0x8000010000000, 0x3, 0xb4, 0x3]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m40.550643931s ago: executing program 5 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x2a) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f000015d000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@obj_type}, {@euid_lt={'euid<', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '##,$\x97*@.'}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xffffc000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000093c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) (async) getdents64(r4, 0x0, 0x0) (async) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x2a) (async) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) madvise(&(0x7f000015d000/0x4000)=nil, 0x4000, 0x0) (async) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}], [{@obj_type}, {@euid_lt={'euid<', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '##,$\x97*@.'}}]}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xffffc000) (async) 1m40.334930671s ago: executing program 5 (id=1099): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) poll(&(0x7f0000000140)=[{r1, 0x1010}], 0x1, 0x10) munlockall() madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 1m40.224531712s ago: executing program 5 (id=1103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x90, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000009c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x0, 0x2e}, @ptr={0x70742a85, 0x1, &(0x7f0000000b40)=""/175, 0xaf, 0x2, 0x18}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0xa, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000001d80)=0xa) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000002000020ff7fa1a440000000010109024400010100c07d090400fe1602020000052406000005240000000d240f01000001000000000000090581030000087f810905820220000400000905c802"], 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) sendto$inet6(r5, &(0x7f0000000080)="8a", 0x1, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/120, 0x78, 0x6632cb14ac0275d5, 0x0}, &(0x7f00000006c0)=0x40) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r7 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r6, 0x700, 0x7800, 0xffff, 0xffffffff, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="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", 0xff}], 0x1, &(0x7f00000004c0)="78d37014887ecf23bb3a054e07f5adcfbeb5d1cc99e4d6dd2b7bb6886cb7f61a2d390fc2ebe8d7a8efb52bd2947c0c8d307dfe0664b9463e1c6a9e242dcb67cf75e175dde9e95851401906d823974e0c4e1c2399ec3157c94143f2576e478f6f5130c898625f77ab90442fc065f639ae465192ccaf9592a36f16800360d22117030ad56678be9998b41b86e229d5c73fbefc49068d64eeabaf2bbceb4b28bbede031a952cbeb34e25d927dcf2015c32010fc7f9c60997dde42f4cb9af291e019015f977cb5e7832144b2b65c6def6da5ec32977f53c921a920c2a56f514e1f985f372d4867c85697de626bd33f839e", 0xef, 0x44850}, 0x43ff4ad4da43ebca) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_GET_PIT(r8, 0xc048ae65, &(0x7f00000007c0)) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000600)) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x9, @local}, 0x1, {[0x0, 0x7ff]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r2) 4.429031132s ago: executing program 2 (id=2080): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) setpriority(0x2, 0x0, 0xd2f4) (async, rerun: 32) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000040)=@ax25={{}, [@null, @default, @bcast, @remote, @bcast, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000280)=""/74, 0x4a}], 0x4, &(0x7f0000000380)=""/160, 0xa0}, 0x63) (rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/image_size', 0x10400, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000500)=0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 64) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)="e2", 0xfdef}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000480)={{0x3fbfd9ebfca7f228, 0x1, 0x3ff, 0x1, 0xf}}) 2.399430046s ago: executing program 6 (id=2169): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x3b9ac9ff, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) 2.398236406s ago: executing program 7 (id=2170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 2.396971257s ago: executing program 3 (id=2171): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1003}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x4}}, 0x10, 0x0}, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0700000080478c7ab783c8e8a9d194041611096efb8e04b93fd577781193460cd02ea2e660c33d14c5255a133401ad92f3577c0c77212c129f81626d0105c12da7ca7dad9af7b04b9c5c101b25b70406e866a7685bc5d0e0c2e70f57f0db9d74fe3917ff304cdfbf1cd48640d5eab96fd5e809fc2114030ffdf243e6feab90b1f5b815f407c3c44342f4046f229b064bcb46a8decb33ea507afbd984740ca8f890a6c77f2de8528d93c7e10bc555316126456d0a7174fb1ca88691cbc6de3d73d45cd000", @ANYRES16=r2, @ANYBLOB="1cdf25050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20800) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x4000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x1008840, &(0x7f0000000600)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00\x00\rE\xeb\x8d\x02}\x0e7\x81\xa3FrEO\xd8g-Q\xfe\x86\x8d{*B?\xba\x98\xcc@4W\x1c\x00\xe2\xc9\xa0P\x02\x9b\xa1_\xa3L\xb3\t75\xe1\xfd\nk#\xef\xa7j[\x86\x84\x9fL\xc9\xbbYHt\x9d\x95\xba\x8e*\x96_(l\xf6\xbd\x03\xa4\x10\xb5\xd8$\xfd0^R\x9e\xa9;y\xae\xdc\x81\xca\xa2\xf7\xee\xa1\xd3\xbb\xaa\x9brk4!\xd3x\x01\xe0\xb4\xc7/=\x99#\b\xa7\x1cz\x04\x95a\xae\nM\xc6U\xe9\xe2\xde\r\xb6X\xacY{\xaf\x93O\xd3\xaf\x11\xdbZ\a\xd4\xeb\xa9\xe9$T\x18\xff:\xa3\x96\xc3TKsdy\xfap\xf1V\x87=\xeaEs{\xe4\xd1N\x04\x98\n\\4\x16\tO\xc0\xe4\xef\a\x9d\"\x9e\xa0\xbd1\xfb\x95\xcc\x9b\x04\xbd\tH\x1eL\xd8y\xac\x8d\x16t\x80f\x93\xc5<\x18\xf5\xa8\xfaFR[\xe4e\x80e\xbd\xb8\x8df\xd2\xb7BU7\x87N\x14\xf9\xeb\xb5\v\xdb,\xc6<\x8e\xc69>\r>\f\x10\x17\x11@`.\xc9c]\x1a\xadQ\x02t\xfc0&.\xaf\x05\xcdip\x17\xc9}\x90\xa6\x0f\x10\xb36\x12=\xe65M\xcc\a\x83\x1d=\xe9\b\xb7\x8dd\xbaW\x9e\xe0\xf8\xbax\x86\xde\x9e\x8a\xe0\xd4\xa1|\xc8M\x92\x90i\xf7\x83+\x1cB\x12\xfd@\x13\x18HEq\x82\xbc\x8cm\xaf\x7f\xc2\xb6\xden>\xb1\xe9\xa2_$_=P\x99\x05\x95Uo\xc0^\x0f\xd7U\x04\xde\x94\xe9>G\b\xff\xdc\xe5\xc9\xfd\x96\x02\xe3\xce\xa7\x84jt\xed\xdb\xfe\x1fu\xd1\t\xfd\x83\x0f\x03T\xdc\xa8\xa7-\x96\x9b]\xf2\xdd\xba0\xc3$E\xe6\x99\xd1\xb8)\x17'}}], 0x2f}) openat$dir(0xffffffffffffff9c, 0x0, 0x6a0000, 0x0) r4 = socket(0x1a, 0x800, 0x0) write(r4, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsmount(r0, 0x0, 0xa) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x2, 0x4) keyctl$read(0xb, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x34a0086, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.36632574s ago: executing program 6 (id=2172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) stat(&(0x7f0000000b40)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000040)={@private2, 0x60}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup(r8) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x7, 0x10, 0x80000000, 0x0, 0x0, 0x0, 0x100}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x714f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x3f5f41, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x14, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10"}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r13, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) 2.304962226s ago: executing program 2 (id=2080): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) setpriority(0x2, 0x0, 0xd2f4) (async, rerun: 32) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000040)=@ax25={{}, [@null, @default, @bcast, @remote, @bcast, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000280)=""/74, 0x4a}], 0x4, &(0x7f0000000380)=""/160, 0xa0}, 0x63) (rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/image_size', 0x10400, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000500)=0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 64) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)="e2", 0xfdef}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000480)={{0x3fbfd9ebfca7f228, 0x1, 0x3ff, 0x1, 0xf}}) 137.056375ms ago: executing program 6 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x701, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x0, 0xf, 0x3ff, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x8]}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x20000041) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000000c0)=ANY=[@ANYBLOB="72772c00d6961b5a5149d2bbf1508c86573e86da03012438827219bffd976ab49daefe369e32cb678264d20989a205000000834ee9d96ac86dfde58e828dbecb4141e010fe7c90fed92fa176e1c8"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x130, 0x130, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) 131.677506ms ago: executing program 7 (id=2176): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001d00011b651506950000000000000000000a0080ee3319f3d4870f6246040001", @ANYBLOB="2ef61e8cfc440478ec219830efa8cbe84179020e59419ed97fbd1b1a159cb2359f0875ce063c2964b002779845632b506835247ac9065429fae89276941fbdbb1c26380681e34d7c055cf16ecdad5c206fce9b6b40669da47bb0c20cfa0fd65709e6dea1", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x20000004) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fbdbdf252800000006000600020000000a0001007770616e3400000005002e00060000000c0005000203aaaaaaaaaaaa05002e000200000008000200", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20048001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 130.939066ms ago: executing program 3 (id=2177): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x3f, 0x0, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) setreuid(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000088c0)="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", 0x2000, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 96.03281ms ago: executing program 7 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = gettid() ioprio_get$pid(0x3, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100e2ffffffffff400101c0"]) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf00"]) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$FUSE(r6, &(0x7f00000012c0)={0x2020}, 0x2020) sendto$packet(r6, &(0x7f00000002c0)="24df9e3bf5ec2b229d4086ca9887626920eddd6398019c1589523e1ab507782c917b96633eeb35f25042a8fca5a543f25d7bbb83e3f31a699f4b6fde9efdb5336253ee50f9", 0x45, 0xc804, &(0x7f0000000100)={0x11, 0x18, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x339) sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000340)=@rc={0x1f, @none, 0x10}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="f92cf7630e0ea850fe57a0d2d80b1ffdcc565956ba62231d1475ea151a6885419e6ea117cbe23729eb32dac5c177eb73ecfe10ba99579626f19ceb4492cd0e28952de61ca6c5fe4e413618086942674192de2e9f7c7cd95bf88cb52525f364a3ac", 0x61}, {&(0x7f0000000440)="cd5ba603cccd7e095039658d55a9f9546d97304c50029c54805dc377a9bf0d572dd65627cb925a9572d6f4a1af3bda0b206f086fa488290483302c7fc694d8e795647b78e3e4cc521a2c8f6dfd304969f7dc894eee78117922b47884c1ea956518c242682f24701845839114df8df4c3a42edbd9b5a0daed93fe2ff58f1f193540b729b9e188772365e1e8b886383afc1b0e522027e68fc5eca505f7ce1d86e74ca17ed6d45a60810245693af9377f1e7a01dea5d1fe7961cf09401cca6c0597382b6288d014517ab83e78b51c0b6f9654115dedf2399473e9c04667f32d4803", 0xe0}, {&(0x7f0000000540)="edc1361d73b3ee8a89c31d2e785e5ad5f1803794cd64df29124c4b62ceefcbc95bca2aab624f31471487c78173e9c0e77c020a87448702e852f7580fc9b4f8fd39e6752bfd794401acee40d2f31c30646120cb0add921353948fd01aa1d1f04b6ae2aa63d2ef05c1f731fb31fbafe89041e63fd0a9eb", 0x76}, {&(0x7f00000001c0)}], 0x4, &(0x7f00000005c0)=[{0x110, 0x11, 0x7fffffff, "9c6360268b5244e4dfa8b6ef08a0a7edb201bdf18cc44143642cf3bb8ff40b2ac1702583572076a97afc8a841dc8a9d3453441bb1def3678f26b96c42ec2a1d9674bbd6e7f00912ebc5c5ed9efca4d707f1358c05b18a3c02683f58c9e4510e6238241a244fab23f3a971ad17a0acf864e457563ad6c4595a96732d774b7a59f6178a9d09670025101388e6232ad295083b5ba813d8606abd348200a6cd983ddf568a5a21c3012e8ded1b440c5cad572e58329df4c5521ead2afddd049bc7375d5510713a9214a1fefd6d1b9bdcb876d96dad55c79b81a7ea59839d4731ffa54e573be6f971eaa4b44f797d088c553a96ddbaadbfe5656eb5c"}, {0x108, 0x119, 0x10000, "67394062f9a2618db40716a35c71b75361a86cb071034c61df95499ceddcc811fcccb1e8ed55f83ec0218bf156490c19bc9cee8c5fc8dd9f495817d0767eabb2fa7885666b7d10e6e23a269b52e123864242f95ee0cd771f735c61500d071c6589f37d76c65de31f9c740576429c77e3fc246b21c20f3d375bf2880d867f717ebbbf65bd90f6f7c31abc9d6e7efe901d37efd9265b980f6578176449ba35d9fb3e64ab7dd2c182d9751aa0a8616d3ddb47929bb8f3222ef803438a8ef0f2bf335db20edd0c4350b90902da69039a0a753c9738e025f3446dac551130b4084dbad38d0cfedc2d073953480ca031d58c5f63e806156ea2f9"}, {0x10, 0x0, 0x1a}], 0x228}}, {{&(0x7f0000000880)=@llc={0x1a, 0x33a, 0x5, 0x7, 0x48, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000900)=[{0x28, 0x29, 0x6, "bcec8745bc014cddd5cc2f71c8ea36408bdb004eb3a60c6f"}, {0x110, 0x114, 0x7, "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"}, {0x40, 0x10b, 0x0, "d506895c9c7f33fbb3cccd1d37d793a56131b6ad10fcfc3fd50f90ad58b645ff62c0adf9b7b88bc0a8dfb0344833"}, {0x50, 0x84, 0x6, "faf497d93a9b1c4e643b07f48b8f76ca4f73c0d3a8c58c04fc54fb371438a47ebee11ae41c75528c567efc3befd27fbf61e7ae5cf8a88f420ffcf9"}, {0x100, 0x0, 0xb23, "6c07a8d1c4fd18e251a3f1686a52b4f4097eed9f09fb4594fcc33184396dfb3316a1c00ffa5dd99fe184af3a4f0e04bafaf8a76b077fb9e2de1a480625f3861dc61bf1e9681e03a58fe22385ef95f0793d3cfe8fc1746e019728fb7ba9fa0047cfcd894348e56a4973243d03854b62fad0248392faa2202350858c44dae5da1182e2e67321bd931370304fe91a600c468fcfb1d73f11a062615f874f9227c4530f8640a6e9d8e96a05bd6f10d8e5ec49952749052e1273a5130565e0fd121dff2da151d0ac9f84dcae89ae9aa349c50e9523bac1e3cc158aee36c43ee7f44ada5cdb141c5b467746a2129e88"}, {0xc8, 0x10b, 0xfffffffb, "f94154fc6054d56e16dd28620de65aebd487909db0044091c10dc5e7e544cfd0349fcf1689392a91599f88a072e70f8cb4d183c49c6f927669aa6b3780c3a494bd3cc11c40d67f97316ff5994ebd367e47c1f9816996017e235193cc711579c05d9c1388065f01632f958b9a3b5937ddfcbcf90b4f202e69ae4674865ab11d65e1b04e4c222da938e878beec8e7a37f9f872eeeb68a54961482a0dc2b26ac1ba88acf96ea904d8713b14168c9f7ba3097c7552fd"}, {0xb8, 0xff, 0x1, "5ab45d631417ad6f1584f31d06db6d98a177cda7fe57157df66b93256f7d17a73e9b8012b2f4e49bac175d6300103ebb03e276bf88f03b8e91c22d5843b71bb1a34ce19e81c641942627617cfd251624642d8a87fa90ddbbe475d5281049e14e83adc12bb9ff697c99b699555eaf934291074794a28d357f8c91b4c145f1a5f1a699eef91629c51172a59a3db73f258b42193569ab83e67b915bc08db29c3109da32a0aa6e"}], 0x448}}, {{&(0x7f0000000d80)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="eec77d0fddee033991d12e371c69613529f53f65c2ef78a9a34e263c35cc9f30be52061c2550a3f0f778cf6c9580ff1e6675082ec13b4bb0491067414ce43f7742e9e8e741d701fc88858d36a39e842670534499582c42ceffda4ae9a684a8dfffc05de43b30020f2713405760fadd7b5da7b9803afcf117282738e0ae669058fb8d5941c39572eb28fec6626fc50a96093a1397767b357b9b17c248748bc27b31cee817ed8b99553ad521102b7b05623fa78727322f8c91145905bfd38fe827f7873a4e22233e", 0xc7}, {&(0x7f0000000f00)="e04ce6588079fc926eff684a9be8d72b07e704447a8ed5b4d9eaa2f3bc361600acfdf41ecc971595bd81f1fc58b9becd740c8806916acf51aeaf6660b715cf34ef7e93ec09f7dd7700a7a0378e8bda03b83ec4d13ae5fac664d1db2b9ae4e12312cbd0f208604cff2985b457c09989453606eadc41f9a0cf0c09ace48cde7dba26e002a98152004948e94b706d8c97c4dec4149f5a7e31bf7372020773b7555a8b684f8734f72b22ed061d24a8c0fc", 0xaf}], 0x2, &(0x7f0000001000)=[{0x98, 0x103, 0x0, "27ffdada91f99a36138ac7a49131b3ffaa8977c779696bec3b5d93d3c5b697fc95a57c119809edce3f20df45e5958602108d7240b18fa9ccf3d20a3eff9da5289a1fb683d71c66112a693aa97c1feacf3a9ce083bf1e07ea3af7388482aa8efa0dc8401ae22299a7915c2c577a1b7fc91b1eb21426c222594c561f10269b3cd6712d"}, {0xa0, 0x29, 0x2, "51182bff17516a2de482c024f4518c800536272dc8424c1ff55e306b6b29df11ef2ae34ed0342298633756130c3ecaf7820f0045b380273be2670fc50fe2a30ea4abb3fcccda892c7ddf4b2a716f197d5826d84eaafe5dc6fcfb2e76d58474702535617ab016057c96c134eeb7f249313e1357c1149f39cc2224f85078d2426ff40f3d2d337010421c"}, {0x20, 0x10c, 0x6, "b5fc320e05fe1c07ef"}, {0xa8, 0x10c, 0x0, "80c7fb3f8e96ad3ee03d2a21c6881238a1b39811898748517ac3be399a9740c247ef648583f76a25f793eb40b45dbb639aa6e52fe3128043314c1cf926c476a8df026257ad5c23c22a156f68a7181f55f3d425513e27bb8cfea73758cac8678587e88eeae44333abdad0d8733c6a7c9a004a7acada419ef0e3fb806e81c3159f6e5306f9a2aaf940ddb8fb921d9f84e734ce965755"}, {0x40, 0x13c, 0x9, "df3352bd0b0b6a129c0e78aa11cc54224fe71a25f85e67d984011605c0cd685bcf4ad8420161fc5f913a174767b43d"}], 0x240}}], 0x3, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 52.698094ms ago: executing program 6 (id=2179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x5}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x8004, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 49.997964ms ago: executing program 3 (id=2180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@private2, 0x6f, r3}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c5) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r0, 0x8226b000) 49.808855ms ago: executing program 6 (id=2181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sigaltstack(0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 49.286945ms ago: executing program 7 (id=2182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf00000000000000010001c0"]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff0b050c0220000606030905071000020104070824", @ANYRES8=r5], 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dda865694e08605b702200000018000180140002006970365f7674693000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x740, 0x7, 0x9, 0x1, {{0x17, 0x4, 0x2, 0x8, 0x5c, 0x68, 0x0, 0x4, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, {[@lsrr={0x83, 0x13, 0x62, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x42, 0x3, 0xe, [{@private=0xa010102, 0x5}, {@empty, 0x7}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x7fff}, {@local}]}, @noop]}}}}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r8, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="e9de0fd6f586a953a2800755c1ac0e95be9e082a10225e24c2382e753f5466dea58a8d6d3e053ef4d04f6db51aa5462ba714c768db2c70e2a134831673604b926e2efab0acf812294121ab440e9093467dc34f37d1f44315ec0afd1ac77db8268532b56972de92103257a17e87170439393eb0c9ef728229619abaf9a7b946bd2590f91ad051ecce7eb85426583046848b05e6db9bc727f8b843d7b428f5381ee362fa25e312145bcb3de6d2f1a279f6179acd170bb9732b7b1e9e9640429f8888292f0f5bbc30fe8eb13eb1c5522714a3c599d0d773419fa6a5c03d8b793f30bc591e0f7472fa48b24ac13b338eb5f82839c518634036cfc98270f7addf47fba2e5340b56459cbc10779dc1bebf908f2c77ba036d733ae918073c60a2284e3de8036ab9fa4f9b53b0c0df83e624ab4fb62fb822aa66484d21699245f7d294d05565ac3409a9b93c4f2483a16e50e8e94f0e2c736caeb6637da5c9fb19ba177b5cfac1ee17e72e6275f83b37aafc303d49332a27fb7fbb406cc7dc3725c638ef557843ba636145e02f1929dd1cd282207324c5fb3d0b829062ca9ba8c2e2c3f75487ab7ddeeabe3d3e1f873ec0a22c3d0e00811eb7a56a55e335b1423ca8d8956e9a40d2813f2829e658ff58cfe7a49ab6ad963837676bbc439db44113a3bf4aaed705561db2059e305508585fdf80192ab55747f570b83b4ca7ea748ed6a2ec89ae0bde7433b5b23b029c1b3125e8b10bbe6d13159628276fe1d2152cd6e2b0aa6df9c3b1e09361f9391e1de21259073d8e0aaf2de5f49cef68a198c428d4e3e83d7e81459ec96fdbff74a015ecb632edb0442e603b062566293185eca87cd2c85ee421fa160258e384fa8aa72750d5196424d110750bf09ba46e7a8b10dbd5c8d7a0692c3a748b90d97df6dd6bf1e0031ce01fe6d443e714b2309d3d6765f04e6ed571f34f35c3b20d0eaa38562841baa3bf7c7121ffaa483c394fbc79c9b16fc46af3fc49b59cad84b3385a41e211d41e643044036889c4a151a61216a5c92bafc7678a2335ea7497c30d715a274a4f95b2a11e44aabde10709314d97fd637b25db3b5a09cb83793279dc1608cdb98657c61698e75e30d0da98dc5ed0ae70db3acdc9d04595b7d8ae93986754ea8576433dd036f27f3a07ba77aa97214316605c9e7f22282ea7e7b0a3d4277a20fd1dad56e1c17b6d92f14bf6217f5ce8581821bb9a74fdf8169c04eaef447d38a84a8262529535001b5f1fe59cb2f66539d9831e1f20acc9bbb07a27559e3660910581f94bd0758796f5231f75c9713b4645b051e9c99f10932398549eed2650b4fe7be14220a9b3b3687c0827644fd1843b7b92d763a08475a38373e44cecb713e59aec6673b78a226489bcd8ff9330378917d9c8918ae497a3ed7e6d79943718eef1aa05730cb498b40f4086ef35517bd2fa12918bdc82e9dc6946cad479d40c64fc4392e0c45eaeb92a75b685ef9d3b54c6294756c1114488d03368c4026b641d717304303b02d9548defa73b279e995c7b9a5a823b91af8f1012d689173b6dccb8a393efda637a4ed22432abc966aaac288cca15772ea9948e672747680df3178635d0319d2468f86f1a17c6262de315434513322896fa547e3dc7ae0cfda2c7e4334c051549b8245213ec7d731949cf83023fe999e463956ac334617fa429f78adeb125cfc577bc551d414769f81913e39ddc58230296386207b04fb525ebe9604ca24d6f901f1a11fdfef428c27fea860318a0e7431afce1809944f07333546937c09cd571f94ad38bbcd4de858686c4629e55a8d067a5c3b979dc18760b1f927784b38b87ca2515b902439d2b43d1cff03f6d63d0f76700725ab8f76d4bbe4ad6e6da76457e69cc9613e5d9fd2866257671189a60016372ee2e0f1cb89e2df873b799415f6d877bb693a7f3fd9cba5edcadc8ae3b3a7883ec01723f25b273a7ff832d6bc6f8f6d9e92ee4500516756e84a7ebfe0de88f081de758ef7ac0d921fb07f6ffecb5d3a7d93da94cbae5337f488c8aa9a677190da65cb2ef315850b4a94c1a1575fa89a2f561dc7ba992d86c76a72ab89c2bf4a9941e963ac655adafc358d7ba177dcd0e3d42a7310ee50e79a63d5843448243dc3ab1c3b7e6cf110ee5b5f7f93df8e1d4e420e3c63d1c000dae2b3bdc3c2da3e4c908519d65407a54bead2d45f45a45ea7408b417ce5f7f8a8ace2273a83297ebafe90000000000", 0x631}], 0x1}}], 0x1, 0xd0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fddbdf250400000050000180140004000000000065670000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="140002006d61637674617030000000000000000014000200697036746e6c300000000000000000000800030003000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40004) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$FUSE(r9, &(0x7f00000012c0)={0x2020}, 0x2020) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvfrom(r11, 0x0, 0x62, 0x40000160, 0x0, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_hci(r12, 0x0, 0x1, &(0x7f0000000440)=""/161, &(0x7f0000000500)=0xa1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07000000000000000000050000000c0003800400038004000100180001801400020073797a5f74756e000000000000000000050006000600000008000900010000000500070003"], 0x50}}, 0x0) 38.350176ms ago: executing program 3 (id=2183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001806ff73c1400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e8006000340000300000c00028005000100930000001400018008000100ac1414bb0800060064010102"], 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') (async) prlimit64(0x0, 0x9, &(0x7f0000000040)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) (async) r5 = eventfd(0x9) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x7fffffffffffffff, 0x618203) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) (async) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="4c0000001400050925bd7000fbdbdf250a0603004e"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810) (async) r10 = eventfd(0x1ff) (async) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r11 = eventfd2(0x0, 0x40000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0) (async) io_submit(r4, 0x4, &(0x7f0000000640)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f00000000c0)="d0f54e7c1d0c673a7c2cecbff9ee972b1b6d8be7a85373abd6b48e2d", 0x1c, 0x801, 0x0, 0x1, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f00000006c0)="4eef38f435b856e25e6db36eb67412f23827410000007c753404338d77fd0fe81e7a4102d0900fc0179bb83f99653a80659a6326ff670a6c7c37563c7d45776d4f44fb3606530300000000000000c1e596d0f39337488bbcaec138b32f6942e0bc44a80745fa58ccf6d897335e10e48b7f0760efe7f37c62939ada138a2c2e8e0ceb046054af6469f6ce00ea8058ed30a49a02fcb6b1d55cf2c73d5a370d5b583354ded50a3b16a3ec426637d563ebedc71a80a946bd4e0211651b0c95920e53417779d319301957a66c440c8d80e3d97ee8e6ec8ab378ca9007ba170792a8c70a7f8e088c05b948d7b8951cec5160b4741783b5f95b0546", 0xb7, 0xcd1, 0x0, 0x3, r10}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f00000004c0)="254bbe9d996892cf80b1dcbadb00dd12b6583193b3360b4db1a8dff7d30d230931c9de3b64677d2db747ce58e53e671668941681fab1b1cc1cc181ac396a2c621d0cc676864540da88f8b539dfc9444928d04165aaceb5de2ec33f24734868ab7bb57ed05d3a17c5e16aa53b8400962b79b96c0ba6", 0x75, 0x8, 0x0, 0x2, r11}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x7f, r0, &(0x7f0000000540)="c127d4e51e2ae14064cc5d4088b4df8193fe0bdd5d3e2765a447d269c3d823102050bebf4af526f223fb14052aaa9a6ec82fdad2bc957c02a3fb9b77167b994f3d4e0bc6ed7757f4789983939a20cac4b13fa1c25b5ec73d0089e68a03f9640c50662b298010e6422c889049092b792a8c3b36315d8a0acfff0ab3def8e06fcc4ef5fa0403e40ac0d29bd0fe09ade10c84a3d13a5c04244710e4c25935b0816fc216d04cb242340d00a337729a21cbec8b25804d341405a96d21001a47ed1ffa6aed72051690f9244e1e14f2f9138963a1", 0xfffffffffffffe65, 0x5, 0x0, 0x2, r10}]) brk(0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"}) 0s ago: executing program 2 (id=2080): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) setpriority(0x2, 0x0, 0xd2f4) (async, rerun: 32) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000040)=@ax25={{}, [@null, @default, @bcast, @remote, @bcast, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000280)=""/74, 0x4a}], 0x4, &(0x7f0000000380)=""/160, 0xa0}, 0x63) (rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/image_size', 0x10400, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000500)=0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 64) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)="e2", 0xfdef}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000480)={{0x3fbfd9ebfca7f228, 0x1, 0x3ff, 0x1, 0xf}}) kernel console output (not intermixed with test programs): TEXT_MGR already set [ 139.788279][ T36] audit: type=1400 audit(1762838666.288:4932): avc: denied { remount } for pid=3694 comm="syz.4.1051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.855845][ T3705] rust_binder: Write failure EFAULT in pid:458 [ 139.889930][ T31] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 139.911583][ T384] usb 3-1: device descriptor read/all, error -61 [ 140.040517][ T384] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 140.061644][ T31] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 140.074885][ T31] usb 4-1: config 0 has no interface number 0 [ 140.081268][ T31] usb 4-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 140.092461][ T31] usb 4-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 140.107928][ T31] usb 4-1: config 0 interface 101 has no altsetting 0 [ 140.114783][ T31] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 140.123941][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.134161][ T31] usb 4-1: config 0 descriptor?? [ 140.160601][ T36] audit: type=1400 audit(1762838666.647:4933): avc: denied { map } for pid=3720 comm="syz.5.1061" path="socket:[28617]" dev="sockfs" ino=28617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.186545][ T36] audit: type=1400 audit(1762838666.677:4934): avc: denied { accept } for pid=3720 comm="syz.5.1061" path="socket:[28617]" dev="sockfs" ino=28617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.191064][ T384] usb 3-1: device descriptor read/64, error -71 [ 140.348150][ T31] usb 4-1: string descriptor 0 read error: -71 [ 140.357004][ T31] usb 4-1: Cannot read MAC address [ 140.362330][ T31] MOSCHIP usb-ethernet driver 4-1:0.101: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 140.363134][ T3747] rust_binder: Write failure EFAULT in pid:709 [ 140.376068][ T31] usb 4-1: USB disconnect, device number 59 [ 140.449080][ T3753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.457672][ T3753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.462088][ T384] usb 3-1: device descriptor read/64, error -71 [ 140.466486][ T3753] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 140.522326][ T330] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 140.555859][ T3755] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 140.673653][ T330] usb 6-1: Using ep0 maxpacket: 32 [ 140.679866][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.690882][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.700643][ T330] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.709710][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.713028][ T384] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 140.718672][ T330] usb 6-1: config 0 descriptor?? [ 140.731461][ T330] hub 6-1:0.0: USB hub found [ 140.744121][ T384] usb 3-1: device descriptor read/8, error -71 [ 140.874669][ T384] usb 3-1: device descriptor read/8, error -71 [ 140.934017][ T330] hub 6-1:0.0: 1 port detected [ 141.114542][ T384] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 141.135972][ T384] usb 3-1: device descriptor read/8, error -71 [ 141.266204][ T384] usb 3-1: device descriptor read/8, error -71 [ 141.375738][ T391] usb 3-1: USB disconnect, device number 55 [ 141.505983][ T391] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 141.543385][ T330] hub 6-1:0.0: activate --> -90 [ 141.636879][ T391] usb 3-1: device descriptor read/64, error -71 [ 141.745877][ T330] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 141.745917][ T65] usb 6-1: USB disconnect, device number 11 [ 141.780030][ T3762] rust_binder: Error while translating object. [ 141.780062][ T3762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 141.786242][ T3762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:719 [ 141.887387][ T391] usb 3-1: device descriptor read/64, error -71 [ 142.138382][ T391] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 142.268870][ T391] usb 3-1: device descriptor read/64, error -71 [ 142.293952][ T3770] rust_binder: Write failure EFAULT in pid:793 [ 142.609435][ T335] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.669637][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 142.686268][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 142.686282][ T36] audit: type=1326 audit(1762838669.168:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.3.1081" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f915bf8f6c9 code=0x0 [ 142.715509][ T3784] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 142.715532][ T3784] rust_binder: Read failure Err(EFAULT) in pid:495 [ 142.725780][ T391] usb 3-1: device descriptor read/64, error -71 [ 142.850062][ T391] usb usb3-port1: attempt power cycle [ 143.128258][ T36] audit: type=1326 audit(1762838669.606:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872fb8f6c9 code=0x7fc00000 [ 143.185825][ T36] audit: type=1400 audit(1762838669.666:4938): avc: denied { remount } for pid=3802 comm="syz.5.1087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.206079][ T391] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 143.216452][ T3805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=3805 comm=syz.5.1088 [ 143.228977][ T3805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3805 comm=syz.5.1088 [ 143.233803][ T391] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 143.252021][ T391] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1015 [ 143.254998][ T3805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 143.262136][ T391] usb 3-1: config 1 interface 0 has no altsetting 0 [ 143.264923][ T3805] rust_binder: inc_ref_done called when no active inc_refs [ 143.272767][ T391] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.278136][ T3805] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 143.285171][ T391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.294380][ T3805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 143.302724][ T391] usb 3-1: Product: ࠾ [ 143.322576][ T391] usb 3-1: Manufacturer: ч [ 143.327311][ T391] usb 3-1: SerialNumber: 齳绁䵍黂ਐ뉅㺛孯推뤖꽰እᇐᅯ䈛䕑㾇嗘뻪愋舸⻑襮쪈ꊇ居㬙퇶漺詺ᣄ蕂䀨ż泷渱팡䔘㉈៶캹⊌鸞 [ 143.345882][ T3774] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.355938][ T3774] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.448244][ T3809] rust_binder: Error while translating object. [ 143.448282][ T3809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 143.454506][ T3809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:176 [ 143.567510][ T391] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 143.587574][ T391] usb 3-1: USB disconnect, device number 58 [ 143.639449][ T3822] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 143.640731][ T3824] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.661837][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.679148][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.749773][ T36] audit: type=1400 audit(1762838670.224:4939): avc: denied { execute } for pid=3842 comm="syz.3.1101" path="/248/cpuacct.usage_percpu" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.848099][ T128] bridge_slave_1: left allmulticast mode [ 143.853803][ T128] bridge_slave_1: left promiscuous mode [ 143.860054][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.868058][ T128] bridge_slave_0: left allmulticast mode [ 143.873735][ T128] bridge_slave_0: left promiscuous mode [ 143.879544][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.993005][ T128] veth1_macvtap: left promiscuous mode [ 143.998550][ T128] veth0_vlan: left promiscuous mode [ 144.031207][ T3850] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.038324][ T391] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 144.038331][ T3850] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.038380][ T3850] bridge_slave_0: entered allmulticast mode [ 144.059086][ T3850] bridge_slave_0: entered promiscuous mode [ 144.065281][ T3850] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.072357][ T3850] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.079494][ T3850] bridge_slave_1: entered allmulticast mode [ 144.086132][ T3850] bridge_slave_1: entered promiscuous mode [ 144.138415][ T3855] netlink: 'syz.2.1105': attribute type 27 has an invalid length. [ 144.146763][ T3855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.147172][ T3855] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 144.169217][ T36] audit: type=1400 audit(1762838670.652:4940): avc: denied { mounton } for pid=3863 comm="syz.2.1106" path="/259/file0" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.171362][ T3850] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.206994][ T3850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.214261][ T3850] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.221327][ T3850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.246746][ T391] usb 4-1: not running at top speed; connect to a high speed hub [ 144.246780][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.255597][ T391] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 144.270052][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.277756][ T391] usb 4-1: can't read configurations, error -22 [ 144.289487][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.296560][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.307359][ T3873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.323271][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.326494][ T3873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.330366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.395908][ T3882] rust_binder: Error while translating object. [ 144.395967][ T3882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.397291][ T3850] veth0_vlan: entered promiscuous mode [ 144.412905][ T3882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512 [ 144.418729][ T391] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 144.448669][ T3850] veth1_macvtap: entered promiscuous mode [ 144.472250][ T36] audit: type=1400 audit(1762838670.951:4941): avc: denied { mounton } for pid=3884 comm="syz.4.1111" path="/proc/514/task" dev="proc" ino=29564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 144.578096][ T391] usb 4-1: not running at top speed; connect to a high speed hub [ 144.586876][ T391] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 144.617658][ T391] usb 4-1: can't read configurations, error -22 [ 144.628731][ T391] usb usb4-port1: attempt power cycle [ 144.681637][ T65] usb 5-1: USB disconnect, device number 6 [ 144.687753][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.688708][ T376] Bluetooth: hci0: command 0x1003 tx timeout [ 144.766099][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.799497][ T12] bridge_slave_1: left allmulticast mode [ 144.805208][ T12] bridge_slave_1: left promiscuous mode [ 144.810903][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.818637][ T12] bridge_slave_0: left allmulticast mode [ 144.824285][ T12] bridge_slave_0: left promiscuous mode [ 144.830101][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.978773][ T391] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 145.001940][ T12] veth1_macvtap: left promiscuous mode [ 145.007481][ T12] veth0_vlan: left promiscuous mode [ 145.029940][ T391] usb 4-1: not running at top speed; connect to a high speed hub [ 145.038821][ T391] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 145.049906][ T391] usb 4-1: can't read configurations, error -22 [ 145.138074][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.150182][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.157346][ T3894] bridge_slave_0: entered allmulticast mode [ 145.164610][ T3894] bridge_slave_0: entered promiscuous mode [ 145.172020][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.179157][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.186492][ T3894] bridge_slave_1: entered allmulticast mode [ 145.189466][ T391] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 145.198805][ T3894] bridge_slave_1: entered promiscuous mode [ 145.220569][ T391] usb 4-1: not running at top speed; connect to a high speed hub [ 145.229534][ T391] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 145.237587][ T391] usb 4-1: can't read configurations, error -22 [ 145.250770][ T391] usb usb4-port1: unable to enumerate USB device [ 145.309383][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.316468][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.323750][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.330789][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.354704][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.362522][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.372655][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.379706][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.390320][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.397368][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.428582][ T3894] veth0_vlan: entered promiscuous mode [ 145.441686][ T3894] veth1_macvtap: entered promiscuous mode [ 145.485668][ T3905] /dev/rnullb0: Can't open blockdev [ 145.539932][ T3909] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 145.547507][ T3909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 146.775152][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.785216][ T3914] Bluetooth: hci0: command 0x1003 tx timeout [ 146.819939][ T3916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.855453][ T376] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 146.891111][ T3931] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.891363][ T3931] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 146.899331][ T3931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'. [ 146.966899][ T3935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.966921][ T3936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.995673][ T3941] rust_binder: 770: no such ref 3 [ 147.007620][ T3941] rust_binder: inc_ref_done called when no active inc_refs [ 147.007642][ T3941] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 147.022166][ T3941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:770 [ 147.420400][ T3949] binder: Unknown parameter 'defcontext01777777777777777777777' [ 147.458934][ T3951] netlink: 'syz.6.1130': attribute type 16 has an invalid length. [ 147.507587][ T3960] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 147.516433][ T3960] rust_binder: Write failure EINVAL in pid:13 [ 147.658276][ T3892] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 147.705844][ T3968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.915768][ T36] audit: type=1400 audit(1762838674.379:4942): avc: granted { setsecparam } for pid=3982 comm="syz.7.1144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 147.957065][ T3985] rust_binder: Error while translating object. [ 147.957106][ T3985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.961298][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.965883][ T3985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 147.972729][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.988191][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.994671][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.001109][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.007532][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.013983][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.020424][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.026829][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.033257][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.039699][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.046117][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.052550][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.058962][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.065397][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.071833][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.078248][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.084675][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.091108][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.097514][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.103939][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.110377][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.116784][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.123216][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.129626][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.136061][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.142505][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.148902][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.155360][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.161805][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.168209][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.174647][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.181074][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.187471][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.193896][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.200339][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.206756][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.213180][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.219590][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.226041][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.232488][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.238893][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.245327][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.251754][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.258191][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.264618][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.271046][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.277443][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.283900][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.290313][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.296749][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.303180][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.309585][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.316008][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.322424][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.328828][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.335251][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.341677][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.348072][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.354495][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.360922][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.367320][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.373743][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.380150][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.386575][ T3988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.521309][ T391] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 148.693701][ T391] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.705244][ T391] usb 4-1: not running at top speed; connect to a high speed hub [ 148.713706][ T391] usb 4-1: config 15 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 148.723505][ T391] usb 4-1: config 15 interface 0 has no altsetting 0 [ 148.731557][ T391] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=db.4d [ 148.740624][ T391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.749066][ T391] usb 4-1: Product: syz [ 148.753239][ T391] usb 4-1: Manufacturer: syz [ 148.757827][ T391] usb 4-1: SerialNumber: syz [ 148.777984][ T4011] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.786091][ T4011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.787158][ T4011] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 148.829162][ T4021] SELinux: security_context_str_to_sid () failed with errno=-22 [ 148.845948][ T4021] binder: Unknown parameter 'uid' [ 148.926469][ T4027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.960080][ T4027] kvm: kvm [4024]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 148.975410][ T4027] kvm: kvm [4024]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 149.028099][ T4025] rust_binder: Failed to allocate buffer. len:1128, is_oneway:true [ 149.186873][ T4039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.195603][ T4039] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 149.639240][ T4054] kvm: pic: non byte write [ 150.063917][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 150.064125][ T376] Bluetooth: hci0: command 0x1003 tx timeout [ 150.543460][ T4059] /dev/md0: Can't lookup blockdev [ 150.561300][ T4061] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 150.561330][ T4061] rust_binder: Error while translating object. [ 150.572256][ T4061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.581296][ T4061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 150.665186][ T4072] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1172'. [ 150.684360][ T13] tipc: Subscription rejected, illegal request [ 150.836619][ T391] snd-usb-audio 4-1:15.0: probe with driver snd-usb-audio failed with error -22 [ 150.853456][ T391] usb 4-1: USB disconnect, device number 64 [ 150.873355][ T2276] udevd[2276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:15.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.949703][ T4085] /dev/rnullb0: Can't open blockdev [ 151.040778][ T4089] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1178'. [ 151.063911][ T4088] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1178'. [ 151.153788][ T391] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 151.189584][ T4094] rust_binder: Write failure EFAULT in pid:43 [ 151.189604][ T4093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.202590][ T4093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 151.314804][ T391] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 151.338861][ T4098] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 151.348075][ T391] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.393253][ T391] usb 4-1: config 1 interface 0 has no altsetting 0 [ 151.405370][ T391] usb 4-1: New USB device found, idVendor=0dfc, idProduct=010a, bcdDevice= 0.40 [ 151.414534][ T391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.422531][ T391] usb 4-1: Product: ఁ [ 151.432200][ T391] usb 4-1: Manufacturer: Ђ [ 151.436755][ T391] usb 4-1: SerialNumber: Ћ [ 151.444716][ T4080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.446149][ T4100] rust_binder: inc_ref_done called when no active inc_refs [ 151.451908][ T4080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.475281][ T4102] rust_binder: 33: no such ref 1 [ 151.480315][ T4102] rust_binder: Write failure EINVAL in pid:33 [ 151.505321][ T4104] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 151.511449][ T4104] rust_binder: Error while translating object. [ 151.523639][ T4104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.529871][ T4104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 151.553720][ T4106] rust_binder: Write failure EFAULT in pid:37 [ 151.577076][ T4108] /dev/rnullb0: Can't open blockdev [ 151.590962][ T4108] /dev/rnullb0: Can't open blockdev [ 151.886132][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.894708][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.905912][ T391] usbhid 4-1:1.0: can't add hid device: -71 [ 151.913045][ T391] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 151.922759][ T391] usb 4-1: USB disconnect, device number 65 [ 152.026560][ T4123] rust_binder: Error while translating object. [ 152.026593][ T4123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.032787][ T4123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 152.252842][ T4134] rust_binder: Error while translating object. [ 152.261957][ T4134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.268131][ T4134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 152.286931][ T4136] netlink: 'syz.6.1195': attribute type 27 has an invalid length. [ 152.330094][ T4138] tipc: Started in network mode [ 152.331672][ T36] audit: type=1400 audit(1762838678.785:4943): avc: denied { create } for pid=4137 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 152.336576][ T4138] tipc: Node identity 4, cluster identity 4711 [ 152.361294][ T4138] tipc: Node number set to 4 [ 152.432276][ T4143] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 152.432295][ T4143] rust_binder: Error while translating object. [ 152.444627][ T4143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.450892][ T4143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:780 [ 152.713859][ T65] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 152.873813][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 152.879969][ T65] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 152.888168][ T65] usb 4-1: config 0 has no interface number 0 [ 152.895687][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 152.904761][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.912737][ T65] usb 4-1: Product: syz [ 152.916944][ T65] usb 4-1: Manufacturer: syz [ 152.921530][ T65] usb 4-1: SerialNumber: syz [ 152.926763][ T65] usb 4-1: config 0 descriptor?? [ 153.133131][ T4148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.141718][ T4148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.153799][ T65] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 153.160172][ T65] usb 4-1: No valid video chain found. [ 153.166659][ T65] usb 4-1: USB disconnect, device number 66 [ 153.665104][ T4155] rust_binder: Error while translating object. [ 153.665127][ T4155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.671299][ T4155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:787 [ 153.702482][ T4160] /dev/rnullb0: Can't open blockdev [ 153.738525][ T4165] /dev/rnullb0: Can't open blockdev [ 153.783654][ T4167] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2670080939 (5340161878 ns) > initial count (411158038 ns). Using initial count to start timer. [ 153.852084][ T4169] rust_binder: Error while translating object. [ 153.852119][ T4169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 153.858377][ T4169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:799 [ 154.673942][ T36] audit: type=1400 audit(1762838681.135:4944): avc: denied { execute_no_trans } for pid=4170 comm="syz.3.1209" path="/267/file0" dev="tmpfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.913782][ T384] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 155.063756][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 155.070217][ T384] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.078731][ T384] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 155.087099][ T384] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 155.097373][ T384] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 155.111030][ T384] usb 4-1: config 128 has no interface number 0 [ 155.117600][ T384] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.128076][ T384] usb 4-1: config 128 interface 127 has no altsetting 0 [ 155.136449][ T384] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 155.145516][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.153481][ T384] usb 4-1: Product: syz [ 155.157644][ T384] usb 4-1: Manufacturer: syz [ 155.162229][ T384] usb 4-1: SerialNumber: syz [ 155.353785][ T330] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 155.368828][ T4171] rust_binder: Write failure EFAULT in pid:803 [ 155.374472][ T384] usb 4-1: USB disconnect, device number 67 [ 155.381524][ T2276] udevd[2276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.505223][ T330] usb 8-1: unable to get BOS descriptor or descriptor too short [ 155.513223][ T330] usb 8-1: not running at top speed; connect to a high speed hub [ 155.523084][ T330] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.532163][ T330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.540160][ T330] usb 8-1: Product: syz [ 155.544338][ T330] usb 8-1: Manufacturer: syz [ 155.548908][ T330] usb 8-1: SerialNumber: syz [ 155.755305][ T4179] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 155.755352][ T4179] rust_binder: Error while translating object. [ 155.764163][ T4179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.770334][ T4179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 155.781717][ T330] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 155.801260][ T330] usb 8-1: USB disconnect, device number 2 [ 156.113782][ T384] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 156.263765][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 156.270224][ T384] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 156.278798][ T384] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 156.281087][ T4184] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 156.292416][ T384] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 156.316205][ T384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.327579][ T384] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.338766][ T4192] fuse: blksize only supported for fuseblk [ 156.342377][ T384] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.346260][ T4192] rust_binder: Error while translating object. [ 156.357796][ T384] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 156.362617][ T4192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 156.364149][ T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.374685][ T4192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:63 [ 156.391483][ T384] usb 4-1: config 0 descriptor?? [ 156.413583][ T4200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.420262][ T4198] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 156.487376][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1220'. [ 156.505492][ T4203] binder: Unknown parameter 'defcontext01777777777777777777777' [ 156.607513][ T384] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.620189][ T384] usb 4-1: USB disconnect, device number 68 [ 156.626795][ T384] usblp0: removed [ 156.653758][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 156.783906][ T31] usb 8-1: device descriptor read/64, error -71 [ 157.024431][ T31] usb 8-1: device descriptor read/64, error -71 [ 157.043823][ T384] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 157.111340][ T4209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 157.193755][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 157.207692][ T4213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.209120][ T384] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 157.216629][ T4213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.225639][ T384] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 157.241019][ T384] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 157.249989][ T384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.259655][ T384] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.269312][ T384] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 157.282343][ T384] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 157.291445][ T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.293749][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 157.303383][ T384] usb 4-1: config 0 descriptor?? [ 157.433778][ T31] usb 8-1: device descriptor read/64, error -71 [ 157.512939][ T384] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 157.673781][ T31] usb 8-1: device descriptor read/64, error -71 [ 157.783885][ T31] usb usb8-port1: attempt power cycle [ 157.866861][ T330] usb 4-1: USB disconnect, device number 69 [ 157.874562][ T330] usblp0: removed [ 157.982448][ T4227] rust_binder: Error while translating object. [ 157.982470][ T4227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 157.988841][ T4227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:819 [ 158.123791][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 158.154795][ T31] usb 8-1: device descriptor read/8, error -71 [ 158.283775][ T391] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 158.284812][ T31] usb 8-1: device descriptor read/8, error -71 [ 158.352068][ T4242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.352176][ T4242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.358835][ T4242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:912 [ 158.371663][ T4242] tipc: New replicast peer: 255.255.255.255 [ 158.387438][ T4242] tipc: Enabled bearer , priority 10 [ 158.394709][ T4242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.413763][ T391] usb 4-1: device descriptor read/64, error -71 [ 158.464020][ T36] audit: type=1400 audit(1762838684.925:4945): avc: denied { create } for pid=4243 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 158.543819][ T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 158.564693][ T31] usb 8-1: device descriptor read/8, error -71 [ 158.663772][ T391] usb 4-1: device descriptor read/64, error -71 [ 158.696205][ T31] usb 8-1: device descriptor read/8, error -71 [ 158.748487][ T4260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.800033][ T4261] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 158.804001][ T31] usb usb8-port1: unable to enumerate USB device [ 158.903809][ T391] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 159.033736][ T391] usb 4-1: device descriptor read/64, error -71 [ 159.273779][ T391] usb 4-1: device descriptor read/64, error -71 [ 159.383849][ T391] usb usb4-port1: attempt power cycle [ 159.478254][ T36] audit: type=1400 audit(1762838685.935:4946): avc: denied { map } for pid=4262 comm="syz.7.1239" path="socket:[33393]" dev="sockfs" ino=33393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 159.503823][ T330] tipc: Node number set to 4278321153 [ 159.585504][ T36] audit: type=1400 audit(1762838686.045:4947): avc: denied { create } for pid=4268 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 159.723764][ T391] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 159.744774][ T391] usb 4-1: device descriptor read/8, error -71 [ 159.874774][ T391] usb 4-1: device descriptor read/8, error -71 [ 160.113758][ T391] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 160.134760][ T391] usb 4-1: device descriptor read/8, error -71 [ 160.268964][ T4295] rust_binder: Error while translating object. [ 160.269006][ T4295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 160.275975][ T4295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 160.285701][ T391] usb 4-1: device descriptor read/8, error -71 [ 160.381615][ T4303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.403891][ T391] usb usb4-port1: unable to enumerate USB device [ 160.433098][ T4305] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 160.435693][ T36] audit: type=1400 audit(1762838686.895:4948): avc: denied { execute } for pid=4304 comm="syz.7.1253" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.073461][ T4314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:835 [ 161.074086][ T4314] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 161.083352][ T4314] rust_binder: Error while translating object. [ 161.095488][ T4314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.102182][ T4314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:835 [ 161.281296][ T4324] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 161.292719][ T4337] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1263'. [ 161.311030][ T4337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4337 comm=syz.7.1263 [ 161.365191][ T4346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.365310][ T4346] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 161.408194][ T4354] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 161.423432][ T4354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:960 [ 161.432350][ T36] audit: type=1400 audit(1762838687.885:4949): avc: denied { accept } for pid=4356 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.434123][ T4357] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1271'. [ 161.442996][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1268'. [ 163.503766][ T376] Bluetooth: hci0: command 0x1003 tx timeout [ 163.503812][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.992396][ T4386] binder: Bad value for 'max' [ 165.070593][ T4391] /dev/rnullb0: Can't open blockdev [ 165.073783][ T384] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 165.233733][ T384] usb 4-1: Using ep0 maxpacket: 16 [ 165.240692][ T384] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 165.249968][ T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 165.258130][ T384] usb 4-1: SerialNumber: syz [ 165.263190][ T384] usb 4-1: config 0 descriptor?? [ 165.269429][ T384] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 165.277235][ T384] usb 4-1: Detected FT232A [ 165.282027][ T384] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 165.470121][ T45] usb 4-1: USB disconnect, device number 74 [ 165.476725][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 165.486326][ T45] ftdi_sio 4-1:0.0: device disconnected [ 166.147117][ T4411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.147142][ T4411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:854 [ 166.199510][ T4413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:121 [ 166.273739][ T45] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 166.444836][ T45] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.456592][ T45] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.474956][ T45] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.491095][ T45] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 166.500607][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.508840][ T4426] rust_binder: Write failure EFAULT in pid:121 [ 166.752917][ T45] usb 3-1: string descriptor 0 read error: -71 [ 166.768656][ T45] hub 3-1:32.0: USB hub found [ 166.774123][ T45] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 166.814225][ T45] usb 3-1: USB disconnect, device number 60 [ 166.900231][ T4444] rust_binder: 4443 RLIMIT_NICE not set [ 166.900569][ T4443] rust_binder: 858: no such ref 3 [ 166.911240][ T4443] rust_binder: inc_ref_done called when no active inc_refs [ 166.911266][ T4443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 166.925545][ T4443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:858 [ 167.031991][ T36] audit: type=1400 audit(1762838693.485:4950): avc: denied { create } for pid=4451 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 167.088099][ T4459] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 167.100021][ T36] audit: type=1400 audit(1762838693.565:4951): avc: denied { relabelto } for pid=4457 comm="syz.7.1304" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 167.128192][ T36] audit: type=1400 audit(1762838693.565:4952): avc: denied { associate } for pid=4457 comm="syz.7.1304" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 167.177479][ T4466] rust_binder: Error while translating object. [ 167.177523][ T4466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 167.183798][ T4466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 167.193612][ T36] audit: type=1400 audit(1762838693.645:4953): avc: denied { setattr } for pid=4465 comm="syz.7.1306" name="L2CAP" dev="sockfs" ino=34868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.370606][ T4478] netlink: 'syz.7.1311': attribute type 2 has an invalid length. [ 167.444070][ T4481] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 167.454915][ T36] audit: type=1400 audit(1762838693.915:4954): avc: denied { relabelfrom } for pid=4480 comm="syz.7.1312" name="NETLINK" dev="sockfs" ino=35029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 167.479776][ T4481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 167.501149][ T4483] tap0: tun_chr_ioctl cmd 1074025676 [ 167.515786][ T4483] tap0: owner set to 0 [ 167.520253][ T4483] tap0: tun_chr_ioctl cmd 1074025681 [ 167.613853][ T384] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 167.765101][ T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.776285][ T384] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 167.785852][ T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.803979][ T384] usb 3-1: config 0 descriptor?? [ 167.813737][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 167.973757][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 167.984580][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 167.993206][ T10] usb 8-1: config 0 has no interface number 0 [ 167.999390][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 168.007624][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 168.017052][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.025200][ T10] usb 8-1: Product: syz [ 168.029428][ T10] usb 8-1: Manufacturer: syz [ 168.034078][ T10] usb 8-1: SerialNumber: syz [ 168.040989][ T10] usb 8-1: config 0 descriptor?? [ 168.047398][ T10] smsc75xx v1.0.0 [ 168.126346][ T4493] 9pnet_fd: Insufficient options for proto=fd [ 168.239405][ T4499] kvm: kvm [4498]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000034) = 0x8 [ 168.283826][ T384] hid-picolcd 0003:04D8:C002.001B: No report with id 0x11 found [ 168.329131][ T4510] netlink: 'syz.3.1324': attribute type 7 has an invalid length. [ 168.336932][ T4510] netlink: 'syz.3.1324': attribute type 5 has an invalid length. [ 168.344703][ T4510] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1324'. [ 168.353821][ T4511] netlink: 'syz.3.1324': attribute type 7 has an invalid length. [ 168.361625][ T4511] netlink: 'syz.3.1324': attribute type 5 has an invalid length. [ 168.369585][ T4511] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1324'. [ 168.581829][ T384] usb 3-1: USB disconnect, device number 61 [ 168.649821][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 168.660719][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 168.941014][ T4520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1326'. [ 169.203746][ T45] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 169.353976][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 169.360849][ T45] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 169.370612][ T45] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 169.380458][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 169.388562][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 169.397657][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.405689][ T45] usb 3-1: Product: 芤쟺竅㳒փ符ܱꤚ殅堶힅鵣፥ᕽ语碪搣抠ᔎ紧삻ﭯ㚨ᜓ䏚籭ꒇ絣ఒ庶鴽㎶ၰ弘婳皩ౢ찊ၛ冫‚隘繞洱龤庵혳욛姼걟찹㚂퀅Ȝ녢署㴢섪躸高澻뾃蒇 [ 169.427726][ T45] usb 3-1: Manufacturer: 뵃⡋힗፳﹢묎鎛켉锱쉋毃뱘䵻몳㸆䝸櫯ᴒ≨⚜扑⚛฼⦓გ뽿ﴹ귫둿牏텚Ђ폂쀌ꠢ괎ꔚ䐭멞〰몾쒍핈ꪞ㍤옳都嗸넱벶楁걶忨⢛윋¤䂊鏤㾢풩㟍✌鍕옸犠韊殺 [ 169.451522][ T45] usb 3-1: SerialNumber: ꂶ쯥╢嗹얲ۈ줒礸禂⾚䎗搒嫰橙龶쫬仉规⡂칧䶠㞔⾎刳ꔮ趜嫗䃆蹕ठ春ẃↁ⌧Δ鶝즇뚳恠녰⃋ᅵ⏀ᙶ츪鳇竬㘬猙⿃藉䘝刂훅躜⣅ᏰǾ엵텢㙁쎀驲燹㱃겋ᇾ怰Ჳ㲲旴윍늤惒ۗ⩛鮎欅輢걒ꈬ⻬京㨙迀輊쥉ᅫ [ 169.482837][ T4523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.490040][ T330] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 169.490264][ T4523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.644408][ T330] usb 4-1: not running at top speed; connect to a high speed hub [ 169.653246][ T330] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 169.661208][ T330] usb 4-1: can't read configurations, error -22 [ 169.712474][ T45] usblp0: Disabling reads from problematic bidirectional printer [ 169.733769][ T45] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 3 proto 2 vid 0x03F0 pid 0x0004 [ 169.761234][ T45] usb 3-1: USB disconnect, device number 62 [ 169.767084][ T4541] /dev/rnullb0: Can't open blockdev [ 169.772421][ T45] usblp0: removed [ 169.803784][ T330] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 169.823651][ T36] audit: type=1400 audit(1762838696.275:4955): avc: denied { accept } for pid=4538 comm="syz.6.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 169.954514][ T330] usb 4-1: not running at top speed; connect to a high speed hub [ 169.965778][ T4545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.966955][ T330] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 169.981467][ T330] usb 4-1: can't read configurations, error -22 [ 169.987970][ T330] usb usb4-port1: attempt power cycle [ 170.333739][ T330] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 170.354843][ T330] usb 4-1: not running at top speed; connect to a high speed hub [ 170.363808][ T330] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 170.371945][ T330] usb 4-1: can't read configurations, error -22 [ 170.513748][ T330] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 170.534865][ T330] usb 4-1: not running at top speed; connect to a high speed hub [ 170.543839][ T330] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 170.551997][ T330] usb 4-1: can't read configurations, error -22 [ 170.558656][ T330] usb usb4-port1: unable to enumerate USB device [ 170.769797][ T4559] random: crng reseeded on system resumption [ 170.790088][ T36] audit: type=1326 audit(1762838697.245:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.1338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f321b38f6c9 code=0x0 [ 170.884558][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 170.895466][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 170.905059][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 170.914504][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 170.925065][ T10] usb 8-1: USB disconnect, device number 7 [ 171.073755][ T607] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 171.223735][ T607] usb 3-1: Using ep0 maxpacket: 8 [ 171.229797][ T607] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.238209][ T607] usb 3-1: config 179 has no interface number 0 [ 171.244492][ T607] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 171.255719][ T607] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 171.267332][ T607] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.278562][ T607] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.291885][ T607] usb 3-1: config 179 interface 65 has no altsetting 0 [ 171.298761][ T607] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 171.307794][ T607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.319731][ T607] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 171.363947][ T95] input input33: unable to receive magic message: -110 [ 171.371296][ T95] input input33: unable to receive magic message: -32 [ 171.378724][ T95] input input33: unable to receive magic message: -32 [ 171.403771][ T4562] rust_binder: Error in use_page_slow: ESRCH [ 171.403788][ T4562] rust_binder: use_range failure ESRCH [ 171.409806][ T4562] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 171.415365][ T4562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.423286][ T4562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:147 [ 171.443792][ T36] audit: type=1326 audit(1762838697.895:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.7.1340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eedd8f6c9 code=0x0 [ 171.545702][ T4565] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 171.545738][ T4565] rust_binder: Read failure Err(EFAULT) in pid:149 [ 172.272436][ T4571] fuse: Bad value for 'group_id' [ 172.284058][ T4571] fuse: Bad value for 'group_id' [ 172.305866][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.316150][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.340829][ T4581] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 172.340850][ T4581] rust_binder: Read failure Err(EFAULT) in pid:157 [ 172.510301][ T4594] rust_binder: 169: no such ref 0 [ 172.528388][ T4596] rust_binder: Write failure EFAULT in pid:172 [ 172.653940][ T607] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 172.783737][ T330] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 172.813744][ T607] usb 4-1: Using ep0 maxpacket: 32 [ 172.819887][ T607] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.828123][ T607] usb 4-1: config 0 has no interface number 0 [ 172.834243][ T607] usb 4-1: config 0 interface 184 has no altsetting 0 [ 172.842292][ T607] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 172.851388][ T607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.859495][ T607] usb 4-1: Product: syz [ 172.863840][ T607] usb 4-1: Manufacturer: syz [ 172.868450][ T607] usb 4-1: SerialNumber: syz [ 172.873627][ T607] usb 4-1: config 0 descriptor?? [ 172.879324][ T607] smsc75xx v1.0.0 [ 172.944582][ T330] usb 8-1: Using ep0 maxpacket: 32 [ 172.950819][ T330] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.959269][ T330] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.967948][ T330] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.976950][ T330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.986622][ T330] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.996273][ T330] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.009267][ T330] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 173.018314][ T330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.027520][ T330] usb 8-1: config 0 descriptor?? [ 173.080618][ T607] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 173.091474][ T607] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 173.101145][ T607] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 173.111418][ T607] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 173.235079][ T330] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 173.247231][ T330] usb 8-1: USB disconnect, device number 8 [ 173.253746][ T330] usblp0: removed [ 173.673745][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 173.775896][ T384] usb 3-1: USB disconnect, device number 63 [ 173.775978][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 173.790192][ T384] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 173.822675][ T330] usb 4-1: USB disconnect, device number 79 [ 173.833756][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 173.839257][ T128] tipc: Subscription rejected, illegal request [ 173.841050][ T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 173.866764][ T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 173.875835][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 173.885003][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.896076][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.905883][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.918947][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 173.928070][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.954003][ T10] usb 8-1: config 0 descriptor?? [ 174.029662][ T4631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.029990][ T4631] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 174.050243][ T4633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.059410][ T36] audit: type=1400 audit(1762838700.525:4958): avc: denied { create } for pid=4632 comm="syz.2.1359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 174.163642][ T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.343748][ T330] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 174.405400][ T4648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.405432][ T4648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:936 [ 174.503808][ T330] usb 3-1: Invalid ep0 maxpacket: 64 [ 174.521837][ T31] usb 8-1: USB disconnect, device number 9 [ 174.531024][ T31] usblp0: removed [ 174.555833][ T4654] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1365'. [ 174.565049][ T4654] tc_dump_action: action bad kind [ 174.578889][ T4656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 174.643331][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.643815][ T330] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 174.664202][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.666548][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.679462][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.679488][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.686202][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.692384][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.702474][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.712598][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.713035][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.719791][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.732859][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.732884][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.739435][ T4670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.763895][ T4676] netlink: 'syz.6.1372': attribute type 30 has an invalid length. [ 174.772141][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1372'. [ 174.803812][ T330] usb 3-1: Invalid ep0 maxpacket: 64 [ 174.809306][ T330] usb usb3-port1: attempt power cycle [ 175.023776][ T65] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 175.153768][ T330] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 175.173739][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 175.174106][ T330] usb 3-1: Invalid ep0 maxpacket: 64 [ 175.180065][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.195087][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.208031][ T65] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 175.217091][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.225589][ T65] usb 4-1: config 0 descriptor?? [ 175.263398][ T4684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.263428][ T4684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 175.313757][ T330] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 175.344089][ T330] usb 3-1: Invalid ep0 maxpacket: 64 [ 175.353334][ T330] usb usb3-port1: unable to enumerate USB device [ 175.593765][ T384] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 175.632504][ T65] elecom 0003:056E:00FD.001C: unknown main item tag 0x4 [ 175.640054][ T65] elecom 0003:056E:00FD.001C: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 175.753754][ T384] usb 8-1: Using ep0 maxpacket: 16 [ 175.760012][ T384] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.770908][ T384] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.780650][ T384] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.793423][ T384] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.802453][ T384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.811015][ T384] usb 8-1: config 0 descriptor?? [ 175.834755][ T10] usb 4-1: USB disconnect, device number 80 [ 176.219304][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.227010][ T384] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 176.235684][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.242891][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.250176][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.257418][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.264641][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.271846][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.279074][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.286301][ T384] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 176.385228][ T4698] __vm_enough_memory: pid: 4698, comm: syz.3.1381, bytes: 18014402804453376 not enough memory for the allocation [ 176.420445][ T384] microsoft 0003:045E:07DA.001D: No inputs registered, leaving [ 176.434319][ T384] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 176.456106][ T384] microsoft 0003:045E:07DA.001D: no inputs found [ 176.468832][ T384] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 176.480329][ T384] usb 8-1: USB disconnect, device number 10 [ 176.695358][ T4710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.934481][ T607] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 177.093741][ T607] usb 4-1: Using ep0 maxpacket: 16 [ 177.099992][ T607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.121818][ T607] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 177.130502][ T4724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.133534][ T607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.152299][ T607] usb 4-1: config 0 descriptor?? [ 177.318932][ T4733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.326573][ T4735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1058 [ 177.333749][ T65] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 177.493787][ T65] usb 8-1: Using ep0 maxpacket: 16 [ 177.499995][ T65] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.511641][ T65] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.518296][ T65] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 177.527352][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.536000][ T65] usb 8-1: config 0 descriptor?? [ 177.743347][ T65] usbhid 8-1:0.0: can't add hid device: -71 [ 177.749621][ T65] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 177.760237][ T607] usbhid 4-1:0.0: can't add hid device: -71 [ 177.769391][ T65] usb 8-1: USB disconnect, device number 11 [ 177.775559][ T607] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 177.786580][ T607] usb 4-1: USB disconnect, device number 81 [ 178.123763][ T65] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 178.273773][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 178.279934][ T65] usb 8-1: config 2 has an invalid interface number: 106 but max is 0 [ 178.288319][ T65] usb 8-1: config 2 has no interface number 0 [ 178.294837][ T65] usb 8-1: config 2 interface 106 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 178.296856][ T4752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.306400][ T65] usb 8-1: config 2 interface 106 altsetting 1 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 178.324052][ T65] usb 8-1: config 2 interface 106 has no altsetting 0 [ 178.332234][ T65] usb 8-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=75.78 [ 178.341879][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.350175][ T65] usb 8-1: Product: syz [ 178.354483][ T65] usb 8-1: Manufacturer: syz [ 178.359118][ T65] usb 8-1: SerialNumber: syz [ 178.364017][ T4755] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 178.413225][ T4760] netlink: 679 bytes leftover after parsing attributes in process `syz.3.1402'. [ 178.430436][ T4759] netlink: 679 bytes leftover after parsing attributes in process `syz.3.1402'. [ 178.572209][ T65] usbhid 8-1:2.106: couldn't find an input interrupt endpoint [ 178.581988][ T65] usb 8-1: USB disconnect, device number 12 [ 178.697190][ T4773] rust_binder: 4772 RLIMIT_NICE not set [ 178.697220][ T4773] rust_binder: 174: no such ref 0 [ 178.721054][ T4775] netlink: 'syz.6.1407': attribute type 58 has an invalid length. [ 178.729139][ T36] audit: type=1400 audit(1762838705.185:4959): avc: denied { bpf } for pid=4774 comm="syz.6.1407" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.803817][ T31] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 178.953739][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 178.960132][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.968550][ T31] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 178.976563][ T31] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 178.985436][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.995518][ T31] usb 4-1: config 1 has no interface number 1 [ 179.001594][ T31] usb 4-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 179.014460][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.025328][ T31] usb 4-1: config 1 interface 4 has no altsetting 0 [ 179.033221][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.042283][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.050544][ T31] usb 4-1: Product: syz [ 179.054702][ T31] usb 4-1: Manufacturer: syz [ 179.059279][ T31] usb 4-1: SerialNumber: syz [ 179.142358][ T36] audit: type=1400 audit(1762838705.595:4960): avc: denied { map } for pid=4789 comm="syz.7.1412" path="socket:[36533]" dev="sockfs" ino=36533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.179426][ T36] audit: type=1400 audit(1762838705.635:4961): avc: denied { ioctl } for pid=4791 comm="syz.7.1413" path="socket:[36538]" dev="sockfs" ino=36538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.214578][ T4794] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1414'. [ 179.223647][ T4794] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1414'. [ 179.233675][ T36] audit: type=1400 audit(1762838705.685:4962): avc: denied { lock } for pid=4793 comm="syz.7.1414" path="socket:[36550]" dev="sockfs" ino=36550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 179.258556][ T4794] fuse: Bad value for 'group_id' [ 179.263500][ T4794] fuse: Bad value for 'group_id' [ 179.275224][ T31] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 179.296023][ T4801] /dev/rnullb0: Can't open blockdev [ 179.298439][ T31] usb 4-1: USB disconnect, device number 82 [ 179.321781][ T2276] udevd[2276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.573769][ T65] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 179.613745][ T31] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 179.693056][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.700006][ T4824] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 179.723731][ T65] usb 8-1: Using ep0 maxpacket: 8 [ 179.730582][ T65] usb 8-1: config 255 has an invalid interface number: 59 but max is 2 [ 179.738951][ T65] usb 8-1: config 255 has an invalid interface number: 43 but max is 2 [ 179.747436][ T65] usb 8-1: config 255 has an invalid interface number: 100 but max is 2 [ 179.755977][ T65] usb 8-1: config 255 has no interface number 0 [ 179.762316][ T65] usb 8-1: config 255 has no interface number 1 [ 179.768652][ T65] usb 8-1: config 255 has no interface number 2 [ 179.775033][ T65] usb 8-1: config 255 interface 59 altsetting 8 bulk endpoint 0xB has invalid maxpacket 8 [ 179.785150][ T65] usb 8-1: config 255 interface 59 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 179.796375][ T65] usb 8-1: config 255 interface 59 altsetting 8 endpoint 0x9 has invalid maxpacket 2047, setting to 64 [ 179.796388][ T31] usb 4-1: No LPM exit latency info found, disabling LPM. [ 179.796408][ T65] usb 8-1: config 255 interface 59 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 16 [ 179.824881][ T65] usb 8-1: config 255 interface 100 altsetting 15 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 179.836256][ T65] usb 8-1: config 255 interface 100 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 179.838879][ T31] usb 4-1: config 250 has an invalid interface number: 250 but max is 2 [ 179.847352][ T65] usb 8-1: config 255 interface 100 altsetting 15 endpoint 0xE has an invalid bInterval 129, changing to 11 [ 179.863724][ T31] usb 4-1: config 250 has an invalid interface number: 17 but max is 2 [ 179.867380][ T65] usb 8-1: config 255 interface 100 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 179.883731][ T31] usb 4-1: config 250 has an invalid interface number: 73 but max is 2 [ 179.886557][ T65] usb 8-1: config 255 interface 59 has no altsetting 0 [ 179.901617][ T65] usb 8-1: config 255 interface 43 has no altsetting 0 [ 179.901624][ T31] usb 4-1: config 250 has an invalid interface number: 125 but max is 2 [ 179.901648][ T31] usb 4-1: config 250 contains an unexpected descriptor of type 0x2, skipping [ 179.908729][ T65] usb 8-1: config 255 interface 100 has no altsetting 0 [ 179.932810][ T31] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 179.933277][ T65] usb 8-1: language id specifier not provided by device, defaulting to English [ 179.952354][ T31] usb 4-1: config 250 has 4 interfaces, different from the descriptor's value: 3 [ 179.953399][ T65] usb 8-1: New USB device found, idVendor=19d2, idProduct=1278, bcdDevice=94.98 [ 179.961518][ T31] usb 4-1: config 250 has no interface number 0 [ 179.961538][ T31] usb 4-1: config 250 has no interface number 1 [ 179.970936][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.983733][ T31] usb 4-1: config 250 has no interface number 2 [ 179.991300][ T65] usb 8-1: Product: syz [ 180.001662][ T65] usb 8-1: Manufacturer: syz [ 180.003716][ T31] usb 4-1: config 250 has no interface number 3 [ 180.012498][ T31] usb 4-1: config 250 interface 250 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 180.023646][ T31] usb 4-1: config 250 interface 250 altsetting 92 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 180.027873][ T65] usb 8-1: SerialNumber: syz [ 180.034774][ T31] usb 4-1: config 250 interface 250 altsetting 92 endpoint 0xB is Bulk; changing to Interrupt [ 180.034797][ T31] usb 4-1: config 250 interface 250 altsetting 92 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 180.048132][ T4805] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 180.049628][ T31] usb 4-1: too many endpoints for config 250 interface 17 altsetting 27: 182, using maximum allowed: 30 [ 180.070408][ T4805] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 180.081246][ T31] usb 4-1: config 250 interface 17 altsetting 27 endpoint 0x5 has invalid maxpacket 1023, setting to 0 [ 180.099315][ T31] usb 4-1: config 250 interface 17 altsetting 27 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 180.123744][ T31] usb 4-1: config 250 interface 73 altsetting 9 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 180.134603][ T31] usb 4-1: config 250 interface 73 altsetting 9 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 180.145406][ T31] usb 4-1: config 250 interface 73 altsetting 9 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 180.157431][ T31] usb 4-1: config 250 interface 73 altsetting 9 endpoint 0x8F has invalid maxpacket 49333, setting to 8 [ 180.168580][ T31] usb 4-1: config 250 interface 73 altsetting 9 endpoint 0x8 is Bulk; changing to Interrupt [ 180.178689][ T31] usb 4-1: config 250 interface 73 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 180.189478][ T31] usb 4-1: config 250 interface 73 altsetting 9 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 180.200285][ T31] usb 4-1: config 250 interface 73 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.213429][ T31] usb 4-1: config 250 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 180.227735][ T31] usb 4-1: config 250 interface 250 has no altsetting 0 [ 180.234722][ T31] usb 4-1: config 250 interface 17 has no altsetting 0 [ 180.241582][ T31] usb 4-1: config 250 interface 73 has no altsetting 0 [ 180.248495][ T31] usb 4-1: config 250 interface 125 has no altsetting 0 [ 180.264919][ T31] usb 4-1: New USB device found, idVendor=050d, idProduct=905c, bcdDevice=d7.1e [ 180.274002][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.281991][ T31] usb 4-1: Product: ఄ [ 180.286177][ T31] usb 4-1: Manufacturer: 〉 [ 180.290768][ T31] usb 4-1: SerialNumber: 볷湬邢၍ꄄ䧭秡龇㇁⥮廊꽥﵌濥䅕졻Ⱗ䇍蒤䋚ⲓ攈ᑇﯿ諷﨡扢ꫵ㭲㭟0ₖ来䅛㏩ㅴ䟟鈯幈㢂毜詻貸໗삆ǯ瑢쟜㡅藧뻟ԗ⥹鹳䨙ࠀ䂯褎欳ꣴ쇥ꯖধ [ 180.314610][ T4803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.322272][ T4805] rust_binder: Error while translating object. [ 180.322349][ T4805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.328579][ T4805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 180.343787][ T65] usbhid 8-1:255.100: couldn't find an input interrupt endpoint [ 180.368240][ T65] usb 8-1: USB disconnect, device number 13 [ 180.595250][ T31] usb 4-1: USB disconnect, device number 83 [ 180.885852][ T4827] rust_binder: Failed to allocate buffer. len:184, is_oneway:true [ 181.156310][ T4832] netlink: 'syz.3.1426': attribute type 2 has an invalid length. [ 181.743740][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.808197][ T4841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.831173][ T4845] fuse: Bad value for 'fd' [ 181.880103][ T4850] rust_binder: Write failure EFAULT in pid:183 [ 181.936896][ T4863] /dev/rnullb0: Can't open blockdev [ 181.938188][ T36] audit: type=1400 audit(1762838708.399:4963): avc: denied { mounton } for pid=4860 comm="syz.3.1436" path="/syzcgroup/unified/syz3" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 181.945270][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1437'. [ 181.981171][ T4862] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 181.981193][ T4862] rust_binder: Error while translating object. [ 182.017926][ T4862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.031243][ T4862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185 [ 182.202362][ T4881] kvm: pic: non byte write [ 182.381330][ T4886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4886 comm=syz.7.1443 [ 182.630072][ T4903] syz.2.1449 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 182.713754][ T65] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 182.729499][ T4912] overlayfs: failed to clone upperpath [ 182.766425][ T4920] overlayfs: failed to clone upperpath [ 182.814619][ T4932] netlink: 'syz.2.1462': attribute type 4 has an invalid length. [ 182.824156][ T4932] netlink: 'syz.2.1462': attribute type 4 has an invalid length. [ 182.841419][ T4934] overlayfs: failed to clone upperpath [ 182.849179][ T36] audit: type=1326 audit(1762838709.309:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.2.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x0 [ 182.873762][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 182.880398][ T65] usb 8-1: unable to get BOS descriptor or descriptor too short [ 182.888175][ T65] usb 8-1: too many configurations: 158, using maximum allowed: 8 [ 182.897027][ T65] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 182.904665][ T65] usb 8-1: can't read configurations, error -61 [ 183.033760][ T65] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 183.183746][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 183.190172][ T65] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.197856][ T65] usb 8-1: too many configurations: 158, using maximum allowed: 8 [ 183.206663][ T65] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 183.214258][ T65] usb 8-1: can't read configurations, error -61 [ 183.220587][ T65] usb usb8-port1: attempt power cycle [ 183.563771][ T65] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 183.584206][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 183.590678][ T65] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.598415][ T65] usb 8-1: too many configurations: 158, using maximum allowed: 8 [ 183.607229][ T65] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 183.614843][ T65] usb 8-1: can't read configurations, error -61 [ 183.743795][ T65] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 183.764131][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 183.770635][ T65] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.778450][ T65] usb 8-1: too many configurations: 158, using maximum allowed: 8 [ 183.787267][ T65] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 183.794865][ T65] usb 8-1: can't read configurations, error -61 [ 183.801215][ T65] usb usb8-port1: unable to enumerate USB device [ 184.269385][ T4957] overlayfs: failed to clone upperpath [ 184.891889][ T4977] overlayfs: failed to clone upperpath [ 185.283791][ T31] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 185.434857][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 185.445840][ T31] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 185.454908][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.463369][ T31] usb 4-1: config 0 descriptor?? [ 185.468683][ T4987] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 185.693985][ T4996] rust_binder: inc_ref_done called when no active inc_refs [ 185.764765][ T5005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 185.772063][ T5005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:208 [ 185.782076][ T5006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.879109][ T31] hid-generic 0003:04F3:0755.001E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 185.906574][ T5023] 9pnet_fd: p9_fd_create_tcp (5023): problem connecting socket to 127.0.0.1 [ 185.915953][ T5023] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1495'. [ 186.077665][ T65] usb 4-1: USB disconnect, device number 84 [ 186.639723][ T5058] syz.7.1508 uses obsolete (PF_INET,SOCK_PACKET) [ 186.696340][ T5066] 9pnet_fd: Insufficient options for proto=fd [ 186.734752][ T36] audit: type=1326 audit(1762838713.199:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.765025][ T36] audit: type=1326 audit(1762838713.199:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.788625][ T36] audit: type=1326 audit(1762838713.199:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.812807][ T36] audit: type=1326 audit(1762838713.199:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.836695][ T36] audit: type=1326 audit(1762838713.199:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.860444][ T36] audit: type=1326 audit(1762838713.199:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.863767][ T65] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 186.891502][ T36] audit: type=1326 audit(1762838713.199:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.917833][ T36] audit: type=1326 audit(1762838713.199:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.947035][ T36] audit: type=1326 audit(1762838713.199:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 186.971802][ T36] audit: type=1326 audit(1762838713.199:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5075 comm="syz.2.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 187.083733][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 187.089882][ T65] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.101041][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.107839][ T65] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 187.116943][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.125460][ T65] usb 4-1: config 0 descriptor?? [ 187.531865][ T65] hid (null): report_id 0 is invalid [ 187.538327][ T65] hid-multitouch 0003:0EEF:72D0.001F: unknown main item tag 0x0 [ 187.546316][ T65] hid-multitouch 0003:0EEF:72D0.001F: report_id 0 is invalid [ 187.553938][ T65] hid-multitouch 0003:0EEF:72D0.001F: item 0 0 1 8 parsing failed [ 187.562348][ T65] hid-multitouch 0003:0EEF:72D0.001F: probe with driver hid-multitouch failed with error -22 [ 187.738762][ T65] usb 4-1: USB disconnect, device number 85 [ 188.256786][ T5118] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 188.256804][ T5119] rust_binder: Error while translating object. [ 188.256815][ T5118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 188.264911][ T5119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 188.271256][ T5118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1030 [ 188.280421][ T5119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1030 [ 188.318036][ T5123] overlayfs: failed to resolve './bus': -2 [ 188.643766][ T31] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 188.793744][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 188.799940][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 188.808380][ T31] usb 4-1: config 179 has no interface number 0 [ 188.814822][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 188.826024][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 188.837439][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.848699][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 188.860111][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 188.873380][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 188.882480][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.891461][ T5139] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 189.404579][ T330] usb 4-1: USB disconnect, device number 86 [ 189.404606][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 189.404624][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.478683][ T5195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5195 comm=syz.2.1558 [ 189.478935][ T5199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5199 comm=syz.2.1558 [ 190.049282][ T5224] tipc: Started in network mode [ 190.054237][ T5224] tipc: Node identity 4, cluster identity 4711 [ 190.060456][ T5224] tipc: Node number set to 4 [ 190.283749][ T65] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 190.320923][ T5242] input: syz1 as /devices/virtual/input/input34 [ 190.434779][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.446009][ T65] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 190.455073][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.463569][ T65] usb 4-1: config 0 descriptor?? [ 190.877156][ T65] kovaplus 0003:1E7D:2D50.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 191.058504][ T5254] 9pnet_fd: Insufficient options for proto=fd [ 191.155212][ T384] usb 4-1: USB disconnect, device number 87 [ 191.220883][ T5268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.223574][ T5268] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 191.230190][ T5268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 191.238152][ T5268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:243 [ 191.829619][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 191.829636][ T36] audit: type=1400 audit(1762838718.289:5052): avc: denied { bind } for pid=5281 comm="syz.7.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.500926][ T36] audit: type=1400 audit(1762838718.959:5053): avc: denied { watch } for pid=5296 comm="syz.2.1593" path="/413/file0" dev="tmpfs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 192.555612][ T36] audit: type=1400 audit(1762838719.019:5054): avc: denied { ioctl } for pid=5306 comm="syz.2.1597" path="socket:[38974]" dev="sockfs" ino=38974 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.619805][ T5315] cgroup: Bad value for 'name' [ 192.621155][ T5317] netlink: 'syz.3.1601': attribute type 4 has an invalid length. [ 192.633998][ T5317] rust_binder: 1063: no such ref 0 [ 192.639133][ T5317] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 192.646314][ T5317] rust_binder: 1063: no such ref 2 [ 192.649529][ T36] audit: type=1400 audit(1762838719.109:5055): avc: denied { create } for pid=5314 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 192.651446][ T5317] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 192.767289][ T5330] binder: Unknown parameter 'fscontext?}' [ 193.322406][ T5371] netlink: 8540 bytes leftover after parsing attributes in process `syz.7.1621'. [ 193.331684][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1621'. [ 193.339413][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 193.622689][ T5335] overlayfs: statfs failed on './file0' [ 194.285868][ T36] audit: type=1400 audit(1762838720.749:5056): avc: denied { read append } for pid=5391 comm="syz.6.1628" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.312722][ T36] audit: type=1400 audit(1762838720.749:5057): avc: denied { open } for pid=5391 comm="syz.6.1628" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.337826][ T36] audit: type=1400 audit(1762838720.769:5058): avc: denied { ioctl } for pid=5391 comm="syz.6.1628" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.394838][ T5399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.395776][ T5399] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 194.402277][ T36] audit: type=1400 audit(1762838720.859:5059): avc: denied { read write } for pid=5397 comm="syz.6.1630" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 194.442383][ T5399] rust_binder: Error while translating object. [ 194.442414][ T5399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.450727][ T5399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 194.460449][ T36] audit: type=1400 audit(1762838720.859:5060): avc: denied { open } for pid=5397 comm="syz.6.1630" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 194.503146][ T36] audit: type=1400 audit(1762838720.859:5061): avc: denied { ioctl } for pid=5397 comm="syz.6.1630" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 194.613913][ T5414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 194.613941][ T5414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1084 [ 194.634189][ T5417] rust_binder: Write failure EFAULT in pid:1088 [ 194.721726][ T5421] loop2: detected capacity change from 0 to 8388607 [ 194.867902][ T5442] overlayfs: failed to resolve './bus': -2 [ 195.110877][ T5460] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5460 comm=syz.7.1652 [ 195.772253][ T5482] rust_binder: 5481 RLIMIT_NICE not set [ 195.772746][ T5481] rust_binder: 1113: no such ref 3 [ 195.783565][ T5481] rust_binder: inc_ref_done called when no active inc_refs [ 195.783586][ T5481] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 195.797831][ T5481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1113 [ 195.926459][ T5496] /dev/rnullb0: Can't open blockdev [ 196.173750][ T330] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 196.323747][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 196.330989][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.341892][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.351636][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.364420][ T330] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.373536][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.382123][ T330] usb 4-1: config 0 descriptor?? [ 196.836824][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 196.842855][ T330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 196.851548][ T330] usb 4-1: USB disconnect, device number 88 [ 197.351852][ T5520] cgroup: release_agent respecified [ 197.357722][ T5520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.357813][ T5520] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 197.359850][ T5522] overlayfs: failed to clone upperpath [ 197.364371][ T5520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 197.377704][ T5520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1124 [ 197.451632][ T5533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.461146][ T5533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.554955][ T5534] fuse: Bad value for 'fd' [ 197.586242][ T5536] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1684'. [ 197.596184][ T5536] rust_binder: Error while translating object. [ 197.596232][ T5536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.602422][ T5536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 197.959315][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 197.959343][ T36] audit: type=1400 audit(1762838724.419:5068): avc: denied { associate } for pid=5560 comm="syz.7.1691" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 198.585997][ T5603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.639966][ T5607] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 198.646467][ T5607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 198.657410][ T5607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:273 [ 198.875822][ T5618] netlink: 'syz.3.1713': attribute type 28 has an invalid length. [ 198.893201][ T5618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.893298][ T5618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1144 [ 199.491020][ T5647] 9pnet_fd: Insufficient options for proto=fd [ 199.502115][ T5649] overlay: Unknown parameter 'obj_user' [ 199.528989][ T5649] netlink: 'syz.6.1723': attribute type 63 has an invalid length. [ 199.544808][ T5649] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1723'. [ 200.103348][ T5666] 9pnet_fd: Insufficient options for proto=fd [ 200.374034][ T5694] binder: Unknown parameter 'defcontext01777777777777777777777' [ 200.452092][ T5706] rust_binder: 1185: no such ref 3 [ 200.458500][ T5706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1185 [ 200.492446][ T5720] netlink: 'syz.7.1751': attribute type 25 has an invalid length. [ 200.493792][ T5721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.511969][ T5721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1188 [ 200.518856][ T5721] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 200.528163][ T5721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 200.536243][ T5721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1188 [ 200.603039][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1754'. [ 200.635993][ T5732] netlink: 'syz.7.1754': attribute type 5 has an invalid length. [ 200.708308][ T5761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1764'. [ 200.873469][ T5793] netlink: 'syz.2.1774': attribute type 4 has an invalid length. [ 200.939611][ T5811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.939913][ T5811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1214 [ 200.960189][ T5817] rust_binder: Write failure EFAULT in pid:1216 [ 200.997449][ T5819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8978 sclass=netlink_route_socket pid=5819 comm=syz.7.1784 [ 201.075060][ T5831] 9pnet_fd: Insufficient options for proto=fd [ 201.112007][ T5839] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 201.135999][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 201.145861][ T5844] tipc: Enabling of bearer rejected, failed to enable media [ 201.293880][ T65] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 201.443737][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 201.450209][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.461167][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.470962][ T65] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 201.480041][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.488545][ T65] usb 4-1: config 0 descriptor?? [ 201.895424][ T65] elecom 0003:056E:010D.0021: unknown main item tag 0x7 [ 201.904081][ T65] elecom 0003:056E:010D.0021: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 201.971143][ T5901] cgroup: name respecified [ 202.449901][ T607] usb 4-1: USB disconnect, device number 89 [ 202.460560][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.460702][ T5911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.508717][ T5921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.511958][ T36] audit: type=1400 audit(1762838728.969:5069): avc: denied { remount } for pid=5918 comm="syz.7.1820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 202.833746][ T607] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 202.849315][ T5943] 9pnet_fd: Insufficient options for proto=fd [ 202.929706][ T36] audit: type=1400 audit(1762838729.385:5070): avc: denied { mounton } for pid=5950 comm="syz.6.1830" path="/101/file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.929952][ T5951] /dev/nbd6: Can't lookup blockdev [ 203.004320][ T607] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 203.012585][ T607] usb 4-1: config 8 has no interface number 0 [ 203.018706][ T607] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 203.029628][ T607] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 203.042037][ T607] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 203.051093][ T607] usb 4-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 203.059094][ T607] usb 4-1: Product: syz [ 203.063313][ T607] usb 4-1: Manufacturer: syz [ 203.067922][ T607] usb 4-1: SerialNumber: syz [ 203.287165][ T5921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1232 [ 203.287652][ T5921] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 203.297215][ T5921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 203.305346][ T5921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1232 [ 203.318959][ T607] usb 4-1: USB disconnect, device number 90 [ 203.684126][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 203.715606][ T5991] overlayfs: failed to clone lowerpath [ 203.715773][ T5992] overlayfs: failed to clone lowerpath [ 203.973678][ T6009] netlink: 'syz.3.1851': attribute type 4 has an invalid length. [ 203.981485][ T6009] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1851'. [ 204.059530][ T6012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6012 comm=syz.3.1852 [ 204.073150][ T6012] netlink: 'syz.3.1852': attribute type 11 has an invalid length. [ 204.477204][ T6016] 9pnet_fd: Insufficient options for proto=fd [ 205.110952][ T36] audit: type=1400 audit(1762838731.430:5071): avc: denied { create } for pid=6041 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 205.160307][ T36] audit: type=1400 audit(1762838731.477:5072): avc: denied { getopt } for pid=6055 comm="syz.2.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.966881][ T36] audit: type=1400 audit(1762838732.237:5073): avc: denied { setattr } for pid=6065 comm="syz.2.1871" name="secretmem" dev="secretmem" ino=41543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 206.062004][ T65] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 206.145926][ T6074] binder: Unknown parameter 'pcr' [ 206.197871][ T6082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.232531][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 206.247157][ T65] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.257795][ T6084] rust_binder: Error while translating object. [ 206.257859][ T6084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 206.260386][ T65] usb 4-1: config 0 has no interface number 0 [ 206.264125][ T6084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 206.274931][ T65] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.302766][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.310943][ T36] audit: type=1400 audit(1762838732.547:5074): avc: denied { map } for pid=6085 comm="syz.6.1879" path="socket:[42416]" dev="sockfs" ino=42416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 206.335100][ T6088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.340412][ T65] usb 4-1: Product: syz [ 206.342159][ T6088] IPv6: syztnl0: Disabled Multicast RS [ 206.346875][ T65] usb 4-1: Manufacturer: syz [ 206.362554][ T65] usb 4-1: SerialNumber: syz [ 206.367805][ T65] usb 4-1: config 0 descriptor?? [ 206.373461][ T65] smsc95xx v2.0.0 [ 206.420940][ T6095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.432287][ T6095] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 206.439491][ T6095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 206.447715][ T6095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:314 [ 206.800332][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 206.820197][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.109767][ T6117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.110966][ T6117] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 207.117560][ T6117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 207.125616][ T6117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:321 [ 207.135705][ T6118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.157905][ T36] audit: type=1400 audit(1762838733.345:5075): avc: denied { nlmsg_read } for pid=6121 comm="syz.6.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.387199][ T6138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.393243][ T6138] rust_binder: Error while translating object. [ 207.399783][ T6138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 207.406085][ T6138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 207.440441][ T6142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.067638][ T36] audit: type=1400 audit(1762838734.208:5076): avc: denied { relabelfrom } for pid=6150 comm="syz.7.1903" name="" dev="pipefs" ino=42587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 208.098902][ T36] audit: type=1401 audit(1762838734.227:5077): op=setxattr invalid_context="" [ 208.673278][ T36] audit: type=1326 audit(1762838734.780:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 208.696764][ T36] audit: type=1326 audit(1762838734.780:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 208.720382][ T36] audit: type=1326 audit(1762838734.780:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f321b38f6c9 code=0x7ffc0000 [ 208.863167][ T6165] tmpfs: Unknown parameter 'mpoO' [ 210.679145][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1928'. [ 210.887376][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000002c: -71 [ 210.898376][ T65] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 210.908491][ T65] usb 4-1: USB disconnect, device number 91 [ 211.842347][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 211.842363][ T36] audit: type=1400 audit(1762838737.745:5130): avc: denied { map } for pid=6245 comm="syz.7.1939" path="socket:[41903]" dev="sockfs" ino=41903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.339194][ T384] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 212.500088][ T384] usb 4-1: config 4 has an invalid descriptor of length 67, skipping remainder of the config [ 212.510339][ T384] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 212.521113][ T384] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 212.530266][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.541814][ T384] usb 4-1: Product: syz [ 212.545996][ T384] usb 4-1: Manufacturer: syz [ 212.552207][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 212.553201][ T384] usb 4-1: SerialNumber: syz [ 212.585673][ T36] audit: type=1400 audit(1762838738.449:5131): avc: denied { map } for pid=6288 comm="syz.2.1955" path="socket:[41942]" dev="sockfs" ino=41942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 213.787168][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1966'. [ 213.881278][ T6394] netlink: 'syz.6.1968': attribute type 12 has an invalid length. [ 214.031306][ T36] audit: type=1400 audit(1762838739.800:5132): avc: denied { ioctl } for pid=6439 comm="syz.2.1981" path="socket:[42865]" dev="sockfs" ino=42865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.067873][ T6444] overlayfs: failed to clone upperpath [ 214.110171][ T6452] fuse: Bad value for 'fd' [ 214.672979][ T36] audit: type=1326 audit(1762838740.401:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.7.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eedd8f6c9 code=0x7ffc0000 [ 214.696481][ T36] audit: type=1326 audit(1762838740.401:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.7.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eedd8f6c9 code=0x7ffc0000 [ 214.736641][ T36] audit: type=1326 audit(1762838740.410:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.7.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1eedd8f6c9 code=0x7ffc0000 [ 214.737580][ T6482] netlink: 13432 bytes leftover after parsing attributes in process `syz.7.1993'. [ 214.760425][ T36] audit: type=1326 audit(1762838740.410:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.7.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eedd8f6c9 code=0x7ffc0000 [ 214.793978][ T36] audit: type=1326 audit(1762838740.410:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.7.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eedd8f6c9 code=0x7ffc0000 [ 214.817450][ T36] audit: type=1326 audit(1762838740.410:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.7.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1eedd8f6c9 code=0x7ffc0000 [ 214.841017][ T36] audit: type=1326 audit(1762838740.410:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.7.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eedd8f6c9 code=0x7ffc0000 [ 215.293859][ T31] usb 4-1: USB disconnect, device number 92 [ 215.303764][ T6501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.304993][ T6503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1263 [ 215.608279][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 215.652819][ T6518] netlink: 'syz.7.2003': attribute type 27 has an invalid length. [ 215.667505][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.674719][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.201389][ T6533] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2009'. [ 216.216982][ T6533] netlink: 'syz.2.2009': attribute type 4 has an invalid length. [ 216.374989][ T6574] overlayfs: failed to clone upperpath [ 216.452935][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 216.504900][ T6580] overlayfs: failed to clone upperpath [ 216.591475][ T10] usb 4-1: device descriptor read/64, error -71 [ 216.847246][ T10] usb 4-1: device descriptor read/64, error -71 [ 217.103031][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 217.208663][ T6634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.208748][ T6634] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 217.215303][ T6634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 217.223377][ T6634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:359 [ 217.252285][ T10] usb 4-1: device descriptor read/64, error -71 [ 217.499204][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 217.499220][ T36] audit: type=1326 audit(1762838743.056:5158): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.2.2046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f321b38f6c9 code=0x0 [ 217.529365][ T10] usb 4-1: device descriptor read/64, error -71 [ 217.646610][ T10] usb usb4-port1: attempt power cycle [ 218.008886][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 218.031154][ T10] usb 4-1: device descriptor read/8, error -71 [ 218.169868][ T10] usb 4-1: device descriptor read/8, error -71 [ 218.424231][ T6674] overlayfs: missing 'lowerdir' [ 218.429187][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 218.457485][ T10] usb 4-1: device descriptor read/8, error -71 [ 218.596116][ T10] usb 4-1: device descriptor read/8, error -71 [ 218.712362][ T10] usb usb4-port1: unable to enumerate USB device [ 218.852594][ T6688] devpts: called with bogus options [ 218.870976][ T6690] netlink: 'syz.7.2062': attribute type 1 has an invalid length. [ 218.996126][ T6701] netlink: 'syz.2.2066': attribute type 46 has an invalid length. [ 219.064885][ T36] audit: type=1400 audit(1762838744.529:5159): avc: denied { map } for pid=6716 comm="syz.2.2072" path="socket:[43480]" dev="sockfs" ino=43480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.089194][ T36] audit: type=1400 audit(1762838744.529:5160): avc: denied { accept } for pid=6716 comm="syz.2.2072" path="socket:[43480]" dev="sockfs" ino=43480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.122792][ T6721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.128790][ T6723] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 219.145598][ T36] audit: type=1400 audit(1762838744.605:5161): avc: denied { relabelto } for pid=6722 comm="syz.2.2075" name="NETLINK" dev="sockfs" ino=43496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 219.402856][ T36] audit: type=1400 audit(1762838744.839:5162): avc: denied { read write } for pid=6746 comm="syz.6.2082" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.431999][ T36] audit: type=1400 audit(1762838744.839:5163): avc: denied { open } for pid=6746 comm="syz.6.2082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.472612][ T6751] netlink: 'syz.7.2084': attribute type 11 has an invalid length. [ 219.481735][ T36] audit: type=1400 audit(1762838744.839:5164): avc: denied { ioctl } for pid=6746 comm="syz.6.2082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.539209][ T6756] batadv_slave_0: mtu less than device minimum [ 219.937879][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 220.097703][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 220.103877][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.112244][ T10] usb 4-1: config 0 has no interface number 0 [ 220.118339][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 220.126594][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 220.135733][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.143734][ T10] usb 4-1: Product: syz [ 220.147891][ T10] usb 4-1: Manufacturer: syz [ 220.152500][ T10] usb 4-1: SerialNumber: syz [ 220.157587][ T10] usb 4-1: config 0 descriptor?? [ 220.163338][ T10] smsc75xx v1.0.0 [ 220.803524][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 220.814441][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 221.464601][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 221.475451][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 221.485019][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 221.494466][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 221.688235][ T6801] 9pnet_fd: Insufficient options for proto=fd [ 221.766343][ T36] audit: type=1326 audit(1762838747.063:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.7.2099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1eedd8f6c9 code=0x0 [ 222.869098][ T31] usb 4-1: USB disconnect, device number 97 [ 223.620262][ T6825] rust_binder: 403: no such ref 2 [ 224.581308][ T6831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.581409][ T6831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 224.581728][ T36] audit: type=1400 audit(1762838749.700:5166): avc: denied { listen } for pid=6830 comm="syz.3.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.588027][ T6831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1281 [ 224.662993][ T6844] __vm_enough_memory: pid: 6844, comm: syz.3.2109, bytes: 18014402804453376 not enough memory for the allocation [ 224.664225][ T36] audit: type=1400 audit(1762838749.775:5167): avc: denied { map } for pid=6843 comm="syz.3.2109" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.674021][ T6903] fuse: Bad value for 'user_id' [ 228.679045][ T6903] fuse: Bad value for 'user_id' [ 231.802996][ T6942] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸAi] is not valid (left unmapped). [ 231.820837][ T36] audit: type=1400 audit(1762838756.493:5168): avc: denied { create } for pid=6941 comm="syz.3.2138" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B807D0F2F94169AE115DDD [ 231.853262][ T6942] fuse: Bad value for 'fd' [ 231.855098][ T36] audit: type=1400 audit(1762838756.493:5169): avc: denied { associate } for pid=6941 comm="syz.3.2138" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B807D0F2F94169AE115DDD [ 231.896677][ T36] audit: type=1400 audit(1762838756.502:5170): avc: denied { read write open } for pid=6941 comm="syz.3.2138" path="/449/file0" dev="tmpfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B807D0F2F94169AE115DDD [ 231.981919][ T36] audit: type=1400 audit(1762838756.502:5171): avc: denied { mounton } for pid=6941 comm="syz.3.2138" path="/449/file0" dev="tmpfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B807D0F2F94169AE115DDD [ 232.017721][ T36] audit: type=1400 audit(1762838756.531:5172): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B807D0F2F94169AE115DDD [ 233.617873][ T6960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6960 comm=syz.3.2144 [ 233.643001][ T6962] netlink: 'syz.3.2145': attribute type 22 has an invalid length. [ 235.437353][ T6973] /dev/rnullb0: Can't open blockdev [ 235.455182][ T6974] netlink: 'syz.7.2148': attribute type 1 has an invalid length. [ 235.479033][ T6974] netlink: 'syz.7.2148': attribute type 3 has an invalid length. [ 235.489497][ T6974] netlink: 296 bytes leftover after parsing attributes in process `syz.7.2148'. [ 235.511021][ T6984] overlayfs: failed to clone upperpath [ 235.543473][ T6990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.543663][ T6990] fuseblk: Bad value for 'source' [ 235.561766][ T6993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.516198][ T7017] cgroup: fork rejected by pids controller in /syz7 [ 239.516192][ T7089] netlink: 'syz.7.2161': attribute type 64 has an invalid length. [ 239.524048][ T7089] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2161'. [ 239.570017][ T7100] fuse: Bad value for 'fd' [ 239.575060][ T7100] overlayfs: failed to clone lowerpath [ 241.690542][ T7115] overlay: Unknown parameter 'mask' [ 241.695024][ T7117] rust_binder: 440: no such ref 1 [ 241.730386][ T7119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.850163][ T7127] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 241.856628][ T7127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 241.864856][ T7127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:442 [ 243.954902][ T7133] cannot load conntrack support for proto=3 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=2080 state=3 status=67 (errno 9: Bad file descriptor) [ 244.129405][ T36] audit: type=1400 audit(1762838768.037:5173): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2632]" dev="pipefs" ino=2632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1