last executing test programs: 4.368759365s ago: executing program 2 (id=24): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x806080) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x3, 0x2, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x6, 0x6, 0x89, 0x7, 0x8, 0x4, 0xfb, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x5, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x0, 0xfffffffffffffffa}, {0x1, 0x6, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x3, 0xe}], 0x1ff}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) (async) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x35, 0xffffffffffffffff, 0x0, 0x182, 0x4, 0x10, 0xf3, 0x2, 0x8000000000002, 0x9, 0x1, 0x9, 0x0, 0x5, 0x80000, 0xbdb], 0x1, 0x100204}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000080)={0xfffffffffffffffd, 0xffffffffffffffff, 'id1\x00'}) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x8000) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000100)={r0}) (async) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, 0x0) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x300000c, 0x30, r5, 0xcaa58000) 4.279930876s ago: executing program 2 (id=26): ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x7) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1f6) syz_usb_connect(0x2, 0x878, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x82, 0xbc, 0xb5, 0x40, 0x1199, 0x907b, 0x3ad1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x866, 0x2, 0x0, 0xb3, 0x80, 0x81, [{{0x9, 0x4, 0xa, 0x6, 0xb, 0x8, 0x50, 0xf1, 0x2c, [], [{{0x9, 0x5, 0x80, 0x8, 0x200, 0x17, 0x1, 0xb, [@generic={0x7a, 0x1, "8a66df818e6b034d4593242734e72a1d983d9e7ae604008940498ea065217b129c48b3e202b98545e807ca85650411409cc198f1c7e597be25a9f8a63f425b1d7ba441aeaa56fbb2b84c0a014a191e01ba62f951b72b16eb8302559f50508bf74ef592c8c43a5f1aec781aeac19c0015cd330eb86b1e3d10"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7c, 0xe}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x4, 0x2, 0x2, [@generic={0xac, 0xc, "10d5cc6b5cd90dfac214ed3e3a3b9b9bcca7e3abe6d781e3068e622a8d3a429b897f1db75e86087d961c0b95af9fb0579f9e5e7c1588778f08fc35e77a11d8514ace6822a9fb117ae395401247ff66bd4ab46d2f1fca3fae8eb1b5cfb4924bf064491a69a54035b8cd0114815d86eed4ef0598bfb037527315437813d7d42e4e554934385f5ea5e9563d397f59c59c0bd9c8c097b30d4b065b13e17cdd9c2c29ca73117faeada5f95d32"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x2, 0x1, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xe21b}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x6779}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x40, 0x2, 0x7, [@generic={0xe1, 0x5, "983c7fcaa7f8617e2959f1b84a7945af076cc7bb4e1619162e94f51c3f8eaef1ed3bf6e6a75f5e17117ef17282d8869e555819a4f01a3171f28d88891edd9378c2b5bf0a119319a13d8acc36d6d1e52995e93008acd3223cba7e04ce3ad991018da1e772cf0ddad99381a84790df21761d1c4a85436b12d6248dd400d3d6451a5b2692094c017d83fcf3391e85668f5a5194bac535a23bc1232ba9777d3a3ca0cd2681db216470df0c470c4b6304e41cf1b45329aee334b29f01e1b81ada723bd10076ffd7eecc875575327c8d47f8e4bc68d3d10b878ad86070f313ad6004"}]}}, {{0x9, 0x5, 0xd, 0x8, 0xdea0277d03aa682f, 0x3, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x8}, @generic={0x9b, 0x22, "54c077dfacc538b207ee96ca0d665109d0d5b0c159c4b044f6a45058e84bcbb212bc38240b41055fc013c139f025c0879c0008f3d69417ec486bcdbb5d3f3f27c9f19faaba21e9426b8184daec89cf6629e9abb3498701032153a3dadeecb5dbf2b7d6ea0e653e88a32620dcdb67fff3728bdc16d21c86b5a38ad7654b8adc24b5a7bdb9b4c03a3206c316492683c05ef55273149740ecef91"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x2, 0x9, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xde, 0xfc, 0x8, [@generic={0x4b, 0x21, "39f96b74a2af951eb2e00fa4cbc66fc17f50e91f62c170d6cbd4914df317d6b8055f7d030a3a27e73888471bf99c736c63871a88f1a2a7d8e5803f173fa966c790b21241ded0c59315"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x1, 0x1, 0x40}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0xf3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @generic={0x5c, 0x8, "e1c0cb036b73e8b47d345685b6633940d949fe2cdc9676f39a460a84e934bee18584acb7f739e77daf1c7a285597f6db98aa90bceb57f30c0376c522f9bb2a1e5caf6935f1af728d1d57996e4d3ab0624bd94bab60aef6122714"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x9, 0x40, 0xa4, [@generic={0x8f, 0x8, "511ee59657f4b0a8bb3001700459abbd35026b2a2a9b78a6d2722ed496e1dfa72acf7b6c9eb506f41a2dd754fdb64882ce17d6aacc647d6561dd019f6a6f2d038d9c0a458948955a7c2ce4567a1a699c19256c7e9f6b693d8fc01e65b66cc5d24fc634552d03754412d9338dec585cd456b6165fbfd628cc924c944d2da0a15e8fc962f30edd064e83b9a1dce1"}]}}]}}, {{0x9, 0x4, 0x28, 0x8, 0xb, 0x36, 0x91, 0xc, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "8985507381"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x0, 0xf0}, [@dmm={0x7, 0x24, 0x14, 0xca39, 0x945}, @dmm={0x7, 0x24, 0x14, 0x1, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x401, 0x6}, @acm={0x4, 0x24, 0x2, 0x9}, @country_functional={0x12, 0x24, 0x7, 0xbb, 0x9, [0xfff7, 0x8, 0x8, 0x4, 0x9, 0xc469]}]}], [{{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x9, 0x1, 0x3e, [@generic={0xc4, 0x0, "1e158eaded612e1599946b8dbc41ab1baf5b033d433281a3475815fae69d82d313cb402ad5851c9a289043d2ea26bca5f0a4433cb55b45662377941939c5adb98ee9c9db223f70877f90abba415c9332efb52ff9917b212de3a1d6166c0d4c733a034b53f5523d2d6ed6fc050b6f46fdf5833a9be65f85bbad5e3c2ab406c98167056cd77f88c3c51d890fd53437294ab038332a0018c35481d587e1f7fb9fae5ca7919059794bb2af3b7a746e039f97c320729f82b7bbb49c69b552265a9d0a4c5f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7, 0x5, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0xff, 0x7f, 0xea}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xfd, 0xfb, 0x80, [@generic={0x20, 0x22, "2f5224b799edb464e725d5abf9ad575c33ce65fbb9b1ee01078c8232df9c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x5, 0xf8, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x7, 0x24, 0x2}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x9, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfc}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x2, 0xa5, 0x8, [@generic={0xea, 0x23, "c334457727148fca536a70033df6d6f7d5cb165360b6ff9fe8f011f743dba95dded820c43e386e241ac229d65b1ce650e3461cb453cd338220f2a36680c6a9085b9a7701e69f000903fbed290506f3687a992efe7306bfe14a744f0f1a0c3441f7489855b875508f9c5be52e780ef34215a51bba250e57d72979a84e361684f4f6eccede9472acaeb07f71735139162c7f00106584b7393ddae7ab29358a3c91d800e81bbe6b37debf8b636a1a7710db57deb564a8a9316030aed767159dd9536796f4519cf83d40c34732bb4f19bb6023d98ba4dfa9e65f18072993d1491fd44078c3d9d8237324"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x40, 0x3, 0xb, [@generic={0x4f, 0xe, "b0db5fdce89b55e5d2ce750bbfe1faa2f332d4343bb5d43d4369af3462207fefeafcc9e7bbbe3d12cd8790d90b6560e5c38e897333da39b57636afd7b36eb2a982a059790a78abcec0c68bfc81"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2e, 0x5}, @generic={0xf6, 0x30, "fcd4bedba2c246126dd33e4974d372f847d772798b2957b8cf73c2dad4d2933c3cf028f0c72151bcfc5465cc8fcb09381aa9d1a7452a4df797784d677b3620156f4688c8ffd1f6b6dbe0e684d6fcb2736359a7d5d3e88b6bfce12ff6ebdd4d8029cfe504c9302061de0e1b761bbcc45b0d807985acce23614c8cfea97971245a3541ca4c1c94cf2c9d32e4b7f1fd7c4cc05624cd22c6e244623750b82bc53a4780aa10acdc31da69ac208c409bae10307ca4894929dbdb53188deaa8f8d3009a486a0309e1a7b215aa44a97e4db7addac0774bb7b0d782405d6202a7d4b1cd27028483d238cf723f67dd0348d28e1c1da08695e3"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x6, 0x5, 0x81}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x201, 0x9, 0x0, 0xd, 0x8, 0xff}, 0x29, &(0x7f0000000900)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "9e31ada5cd678c9ca4cda88462b0aafb"}, @ssp_cap={0x10, 0x10, 0xa, 0x9e, 0x1, 0x4, 0x11f0f, 0x7, [0x0]}]}, 0x3, [{0x42, &(0x7f0000000940)=@string={0x42, 0x3, "8a727a08ec2182051604031ba0e3534628a175bd062530b4d65570337ba9089819ed8752ec5221c7db330cabd010e1eae7ce50b748102b53fe256e9c1697bd1f"}}, {0xfc, &(0x7f00000009c0)=@string={0xfc, 0x3, "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"}}, {0x52, &(0x7f0000000ac0)=@string={0x52, 0x3, "2d63cdf0ae0ba6e821c266e080153bbe214fa25db50960914ee89d768987631141e6825a775f9f55746ce00ffffa9c8cb881fab6506c2d0beda41e5dd6dfb34b9863ae22ebc77ee3fc7ef84fdc87a91a"}}]}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000b80)=0x2, 0x1) r1 = openat2(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x800, 0x1, 0x12}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000083) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x40}, 0x1, 0x0, 0x0, 0xccb9f0b690d75336}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x161100, 0x0) mknodat(r0, &(0x7f0000000f40)='./file0/file0\x00', 0x200, 0xfffffffa) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000f80)) recvfrom(r0, &(0x7f0000001080)=""/130, 0x82, 0x60, &(0x7f0000001140)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @empty, 0x5}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000011c0)={'batadv_slave_0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001240), r0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8b37618b8f38b3ac}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x154, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x29}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x842c}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8225}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x59077305dde8f0f1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000094) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000001480)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000014c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, {0x306, @multicast}, 0x4, {0x2, 0x4e22, @multicast1}, 'geneve1\x00'}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000001540)='/selinux/avc/hash_stats\x00') r7 = syz_genetlink_get_family_id$smc(&(0x7f00000015c0), r4) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x44, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x24040800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x402c850}, 0x40) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001840)={{r3}, "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"}) 2.375380554s ago: executing program 2 (id=46): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4050) 2.360466075s ago: executing program 2 (id=47): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000dc0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x400, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x13, 0x8, 0x5, 0xb577}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r5}) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000007640)={0x0, 0x0, 0x0}, 0x4000854) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4}) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=r0, @ANYRES64], 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000190001001d00000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a58cb43e4e90a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500fe80000000000000000000000000001a000000003c00000000000000ffffffff000000000000000000000000fbffffff02000000000000000000000040000000ff010000000000000000000000000001000000043c00000002000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003c0000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000fc000000000000000000000000000001000000006c0000000000000064010101000000000000000000000000000000000400"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'geneve1\x00', &(0x7f00000002c0)=@ethtool_test={0x1a, 0x6, 0x2, 0x8, [0x7, 0x7, 0xfa3000000000, 0x6, 0x100, 0x7, 0x8, 0x605e]}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1.561222296s ago: executing program 2 (id=49): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)=""/4111, 0x100f}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/146, 0x92}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) fadvise64(r1, 0x7, 0x0, 0x1) (async) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x1ff) socket(0x1d, 0x4, 0x2) (async, rerun: 32) read(r1, &(0x7f0000000040)=""/106, 0x6a) (rerun: 32) 1.469240828s ago: executing program 2 (id=51): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x203, 0x0, 0x2, r4, 0xf}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x55, &(0x7f0000000240)=@generic={0x4, 0x2, 0x4d, "609508bc", "e5ef47f3fa8db8f95302cf51786aeacccf60b62ea523321bdaa5d38f3d9d7a8edf6ec1bd5984ce5357c6ceec7964a9ca382ede4ac3f6252e9bfdb05ecd3970e655affa4d08eddd01683ed1ff06"}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000180)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000100)=0x4}) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) dup(r1) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r9 = socket$inet6(0xa, 0x3, 0x3a) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x66, 0x3, 0x10004}]}) dup3(r10, r9, 0x80000) socket$inet6(0xa, 0x8cf18a333a1cdbac, 0x1c07) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.33412984s ago: executing program 1 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000dc0)={0x2, 0x0, @ioapic={0x1000, 0x7, 0x2, 0x9, 0x0, [{0xe8, 0x2c, 0x5, '\x00', 0x7f}, {0xf, 0x5, 0x75, '\x00', 0x2}, {0x1, 0x7, 0x4, '\x00', 0x6}, {0xd3, 0x8, 0xf7, '\x00', 0xf}, {0x57, 0x1, 0x19, '\x00', 0x29}, {0x0, 0x3, 0x54, '\x00', 0x2}, {0xa9, 0x40, 0xd, '\x00', 0x7f}, {0xf, 0x1, 0x1, '\x00', 0x9}, {0x9, 0x7, 0x1, '\x00', 0x1}, {0x7, 0x3, 0x80, '\x00', 0x6}, {0x80, 0x9, 0x7, '\x00', 0x73}, {0xb0, 0x6, 0x0, '\x00', 0x1}, {0x27, 0x1, 0x0, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x54}, {0x2, 0x3, 0x6, '\x00', 0x7}, {0xef, 0x8, 0x10, '\x00', 0x2}, {0x0, 0xe, 0x0, '\x00', 0x33}, {0x0, 0x4, 0xd, '\x00', 0x2}, {0x93, 0x79, 0x0, '\x00', 0xc}, {0x9, 0x0, 0x40, '\x00', 0x9}, {0x92, 0x8, 0x3, '\x00', 0x7}, {0x4, 0x80, 0x6, '\x00', 0xc3}, {0x5, 0x2, 0x4, '\x00', 0x3}, {0x8b, 0x5, 0x0, '\x00', 0xea}]}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x5}) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r6, 0x6, &(0x7f0000000080)={0x100007, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r2, r2, 0x0, 0x7ffff000) 651.10244ms ago: executing program 0 (id=64): stat(0x0, &(0x7f0000000300)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000351000/0x2000)=nil, 0x2000, 0x300000d, 0x50, r3, 0x79db7000) getdents(r2, &(0x7f00000003c0)=""/176, 0x142) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getpid() syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 649.83025ms ago: executing program 3 (id=65): ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x800) sendfile(r0, r1, 0x0, 0x7ffff000) 609.759621ms ago: executing program 3 (id=66): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 587.753921ms ago: executing program 0 (id=67): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03723ce3", 0xcf}, {&(0x7f0000000f80)="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", 0x212}], 0x2}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000e00)='cpuset.mems\x00', 0x2, 0x0) read(r4, 0x0, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) clock_nanosleep(0x9, 0xfcfd, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000140)={'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x20, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 509.548502ms ago: executing program 3 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x400c0) recvmmsg(r0, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/226, 0xe2}], 0x5}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x12040, 0x0) 509.173952ms ago: executing program 3 (id=69): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x4) dup3(r1, r2, 0x80000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 383.809984ms ago: executing program 0 (id=70): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$TUNSETVNETLE(r0, 0x5452, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0x7fff, @remote, 0x94}}}, 0x3a) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000000000000000180000000702000000000066"], 0x18}}], 0x1, 0x8010) dup3(r1, r2, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140), 0x1555551f, 0xfffffffffffffff7, 0x0, 0x48) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0x30000008}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) dup3(r6, r7, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x810, r3, 0x8f9b5000) 350.987025ms ago: executing program 3 (id=71): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="9c020000", @ANYRES16=r2, @ANYBLOB="00032abd7000fddbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) (async) syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) (async) getsockopt(r4, 0x81, 0x1, &(0x7f0000000380)=""/208, &(0x7f0000000180)=0xd0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x880, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x4}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xb4, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x1100}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @release], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000480)={0x10000, r4, 'id0\x00'}) (async) r7 = getpid() prlimit64(r7, 0x7, &(0x7f00000006c0)={0x4, 0x7}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000001c0)={0x3, 0x44, 0x5, 0x2, 0x2}, 0x14) 257.265176ms ago: executing program 3 (id=72): unlinkat(0xffffffffffffffff, 0x0, 0x200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) close(0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000b00)={0xa, 0xfe01, 0x0, @remote, 0xa}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x100, 0x100, 0x320, 0x210, 0x320, 0x4, 0x0, {[{{@arp={@multicast1, @multicast2, 0x0, 0xffffffff, 0x10, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x7f, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x9, 0x3, 0x5, 0x1bc, 0x5, 'veth0_to_bond\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "39db3a550fcaab438400000000b64093e6072fc889bea60bdd26beacd802"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x8, 0x1}}}, {{@arp={@loopback, @empty, 0xff000000, 0xff, 0x5, 0xd, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x0, 0x6, 0x40, 0x12, 'veth1_to_bridge\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @remote, @rand_addr=0x64010100, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x2, 0x1, 0x6, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb3a9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0xc, 0x14}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x5, 0x58}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x2, 0xa9, 0xc, 0x9, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0x44, 0x24, 0x13, 0x80, "ae0d62dced1e43f3661806f2f73f4b9c36d86a093869c2cd3c8b264833bfbdcb10547b267c48acfc0657fbf61a64cad281fd82d136aed1be294c5ca5efb29cda"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x6, 0x5, 0x6, 0x8f, 0xb, 0xb, 0x9, 0x1, 0x5c, 0x4, 0x7, 0x6, 0x3, 0xa4, 0x80, 0x5}}) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000380)={0xa, 0x7}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="a5fffd14abfe8c792c00"]) 251.969706ms ago: executing program 0 (id=73): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xfffffffffffffffc) fcntl$setsig(r4, 0xa, 0x12) r6 = dup2(r4, r5) sendmsg$sock(r6, &(0x7f0000000840)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000000c0)="cd75ac0a28f7cc721f19834cf5d81c09a22829e290df", 0x16}, {&(0x7f0000000240)="37fbe44e4fa141ab217c5f9f93aa4cec4167a4a5d5c6e8833d53b5991ab672cecfa019594c899fee06ef825df56ebf7872eeeddd14ed2c4713281afc823c634a383cad9d01", 0x45}, {&(0x7f00000002c0)="12de92234a800c8db1e7b79ba5f2c8a3e2c438424dc558afcf0841b5bc7834cd5bcd901533", 0x25}, {&(0x7f0000000300)="23cad91f6a42a203f8e1831e3d1eb4ee895e407c96a48ef20435cf56d800eedc6fcd6812d71fdea56fc310e2dce154bb9943df46fff1185e6fbabf61d10e0c817533e5b5d32b640381944e919aa5cdcdc133f0c859b4da0c6fb327b2d342e5812f1dd0fab3953221db092987418fe108a4a66f594091aee8c4eeb01cd72f318c326d54c9b10ae4e34e33243a2f12cad40326173ce8ff20cdc6b6ae52de04f86fccb8fe4f0e294354d4d33786dbd5afa63f8438a435bd", 0xb6}, {&(0x7f00000003c0)="aea6", 0x2}, {&(0x7f0000000400)="89d8bccd3790536bbac922785ea2724ad66d1974da4e7f57c34f4f2961b24d5a6a178cbf98f6797fed27554edc0434eaa3700db2bc70128577fe3dc8ce5f2681e2f72484f69fb6ec74a4037e855d45a7fd966cac7d84001ba66092754b714b67f1fec4bc73efe0af174ed4ece25263c034a99d9d467a7643c2a2bf17", 0x7c}, {&(0x7f0000000480)="010fc8b955b2ffcb1bceed005a5a333acd8237c5494b1163d3c7fab6fd569e61a3c2da2e28fe49034ecb4487b2ff9b178cec4ecda651bcf9f9604a6a7a7dc4c114543c36491d72ee34082c8041ac3f92dc0f6bec62ac7b7dc5ec54f7c32df0ca6168093199b43a444c97dd3e87e07b361be53a9a83276768233f0b7720449ba18e35d37584c551fd3641e8e3651bbea96a3f5f6e0f69bbae693830752ca1556ee469eff06669b26a89faeb7932b940ee33a0a112700ee897bb2b0ea4b4ee6faf80d6e4d7b2589137fb09b552f361e8169950", 0xd2}, {&(0x7f0000000580)="de422956db7b9385db7bcc05206f85598a92712d62ba88ac71ceaeaeb12a3b715975ca54d42a2c66102cd26f4de5915438eb6c3ee7a467f859ec892ab1df", 0x3e}, {&(0x7f00000005c0)="6f77ffe92abb906f8e2d", 0xa}, {&(0x7f0000000600)="029e69b55306d7bfdb3a1c94bc16914b386fa495ee9140cf795609d89b05685b1c36b828dbd79fcf0d7a5d5aa516d0ed80168f1c63069377e73fa27e4d9f5e849ed1177fa6e1c96ee94654c795972e2a3d22620eee1f5806916539b3be1c9c15576b7ddafc9a441a14a0a8862a8296da7ae5dd05e3ac1e06d79482f3eedaf672cdc3d91ac5924d86639966d16738b86d1607a252b18b56c0a227859845e7a26c5a11bf1c11", 0xa5}], 0xa, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0xfffffff3}}, @mark={{0x14, 0x1, 0x24, 0x2c}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x80}}], 0x90}, 0x20000011) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x40047705, 0x2) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x4, 0x3, 0x1}}, 0x14) 213.097817ms ago: executing program 0 (id=74): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000640000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 184.556947ms ago: executing program 0 (id=75): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000000000000074d564b0000000000000000000000001ec8a0cfbf5c3378cbc9f34ddb277d5374691b02ccb789470486cbdcd3eb95b78c5f7c99c5bebc8d491b9c05c5952f6486f8fe0b3625df7aac5e01c92da350c25f54e0f97e66c1d693d416054c8798211a79f7fc0e877a903434a7eceffbcafd7102d0f7f5b2ea54de"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) write$P9_RLERROR(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007010013002e2f62696eef7e9c79f60fe00c0c6465726673"], 0x1c) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000440)={[{0xf20f, 0x42, 0x9, 0x2, 0xd, 0x7a, 0xe, 0x5, 0x7f, 0x24, 0x2, 0x4, 0x9}, {0x200, 0x7, 0x5, 0xfc, 0x3, 0x1, 0x5, 0x80, 0x6, 0x3, 0x4, 0x76, 0x1}, {0xfffffffd, 0xfffa, 0x8, 0xf1, 0x3, 0x9, 0x2, 0x6, 0x0, 0x1, 0x3, 0x8}], 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010400000009045f00020103df000905050008000200e509050102"], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="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"], 0xf0, 0x1}}], 0x1, 0x44015) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r9 = openat$cgroup_int(r7, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa651]}}, 0x5c) write$cgroup_int(r9, &(0x7f0000000100), 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 109.413058ms ago: executing program 1 (id=76): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) r2 = socket$inet6(0xa, 0x3, 0x3a) dup3(r0, r2, 0x80000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_SET_GS(0x1e, r3, 0xfffffffffffffffc, 0x1001) prctl$PR_GET_NAME(0x35, &(0x7f0000000000)=""/4096) munlockall() syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 77.169309ms ago: executing program 1 (id=77): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jffs2\x00', 0x200000, 0x0) 59.930659ms ago: executing program 1 (id=78): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x56d182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0xd, 0x3) waitid$P_PIDFD(0x3, r1, 0x0, 0x1, &(0x7f0000000100)) 5.4196ms ago: executing program 1 (id=79): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 32) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async, rerun: 64) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) (rerun: 64) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0xffffffffffffff80) (async, rerun: 64) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (rerun: 64) 0s ago: executing program 1 (id=80): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002340)='net/protocols\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x18) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x30, 0x2b, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x921}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf, 0x7f, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x23, 0x7, {0x7, 0x21, "4c0de4e8eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000240)="26b2a8dd3bb50b8ceb62f430e5885746b5fd58b5a47a2bf28b373c8660a05cf8181b4b7a61b8ce127e9a2c0e92dea9379d5ca6b58c15037915bb4319621bdbead01cade5fc0535760d2286578af05881b83e2c2007508ed17ff1e44b5f91fd57e1077aaaf77b6741f58c4e426bb9b1ac269ddb81ba7c1d6ee457f1bb8ceb4e8a69db85ebb1df95fec7f3b5bd95dd726c920792e9a54f1641d5578f4347df0d583f76f962383980e8c6a1c123a70212d089e9b35900b052f0ee59eed7cf1e133398f5f5bd78d5c9820ee007f32894a57377a97af57c6d6dd108231b10a94c67f18552a65b870b7a9afcdfb72b57b81b1e424f739df21dfeebfaca906901b2626cfa482aabcc62b510255ee5010b4c1b260471011275c7f242659df63a8de398c2b0dfa67422e519853a439752898451f9f02defd4ae71ecc8aadd28d21a339d35cb425e109a5452d01d1ca2fc9cd2572a1252582d4b179876cc489b1b3fe4767d0356c29e6e0b891991f1dd5acc3c3e35f9d0048ed0e28b9771295729aeb5a1e262ec2fcbb545c3e24799bc424924294928312b42be902842083b4d7383ed289b307b66c8568277b3c17fea747ee49b750d83dd7ea1f18a5eae198451bd2968f823e03a4656cbbb154145465ddc7bcdd0c7b1d07366c0a4090e4023fd98d0f77d3949d7788bf0b31c52c7704bbfd681c4691d16ef610708ad2ae5af88301c5b0451ae9f292f16aa44230e53874a432be156fc74c9690983928aff88c8d817c86913fdc8425cf2cc43297e89321dfbbba3f4f1b8bcb602a17f1f5918c0657a9e0230f2722f2aca5f2f931c8c91dca589c02a711db5b7ca36f3a49282c4ec3b447ddcbb2f94e257a384d8c17980a3962b2c7b5c0b661899fd1451ce783dfb29355650454b65479ef40a319e37e90757ec3e3e08a2bbe0b9bed99d8bb31e5d240ffa66d5162748f30635658f92d864dc6ee1d95d9b6e19e554f6a4a5cb4a067b3c7d7d882ed4f908337febfd5cf00a6fd68e95fe62f5c374399f6d3201d3482a0637ac4d9d8253fbbf6bfdc3feb9db0a3d8a85cb337dc7a1328973e20bb82bcc2ec03a637f4f29e1efcf4fec09568a42ece4ee0508a0da8206989d12e522a65e76c4d64bbaec9f328b927391f2b15c7e8b3f138ef345afcac4d566448f327f84ed41f69b4d40c8309d9d5ed6846f788198e151a48f654d29b659f923858d443e118409541cea176cda5c518a938d10086148efdecda55cd4990922cffc06633c59db0c21d12e4b311e3858e82001c24c2225844019f9d633679ee75a70521da58cb8809c193c0f3389dcf540884ff0b44f224cbe03623ee16ad37e00abd1bdda5972379bfb097aa2ffe5e881ff988644b1364d8117feb6859fa4a942260aa6ac51387bc4c9173b8656813929744af772742e69d78f5b127b3ec8a64a3781a603a56e05eb948a003e54f3095e56899dc6413c4317e12141b3409ee8d33dc77ff33b10c5294c5e6b969848dee370c19e732f3e75a6bf21ad433c99d3978f8a8254fcc589eb067e3663e6179cd7904e080048565f0d8aae47d0dec7830d5eb48cd386ea8ff0cebf7bf86eda674cabd0d06f2068817d1d85f39bff655bda536ca5d9727545b8202a982818c388ab0219021fdf4dcdc5de8731edb03e9170a8867b614e5317f76f44c33563fabb73eb4cf8a766b6299e52d00646262e6e7704748a35322cdd7c52e6bae2654295f7804f68e807d5ce420213a278b751b360bffbc1bb9a027b98e65e9dab8fd143e02c2e6192eb8f411d80aad0fa5ff40ced48d26e076cda037ffed74f19b1a35839239b5d14e57fcba05aad705435f998d5a85c05d944bfc472ecda2974332b9b44c448365682d00e271f0fd2a436057adfb7b8eca4abdb8c1329121d6dae395dd1506a95c0de8191bd69cd1f68ec5af9a88fbb1a37c082b9df5cb390379f2db48c63e9f779b875ef9891a84181900bec4d6f512e4633f6b43b6abcb87e2e72f74d8cb0ea3019860339fdcff45dfe7e0817de819eef61d6e91b05a6b8ce8b0e1416e0210813429ff7a75cbd6e7a8f5c1e41012f8b092c6f0b45896a3de1a278b80104157dec7e210aab22aebb54ec881291fee48bc1c413f6a0704e45c1b00f39d4618147e4e11f429592bc92044a772bb33349d3ee4b6c2c5a5a8fdd5ad65434943c3987be2ab99807e23db8b9ec30a3030be076b7871c1bc7a9d4506f3a1e7b986d2ea1b60f9240db71a360c919dc6dc24f6af5878efd95d83f5a9529266f2fef29af2b60d214b21b6e3b8e5b3555849453f66e3b2fe46c2547690b745cf6b850312d825c73049a9a009d66d0d58801f254e2dc32897d9f3bf6fc3fd9ca6fef5d0f0dc55e85a99d735d1800f418010986d80f04e7f5a37109b73432db749b569966e781e646c0e373c94d7797960e1b73cb6cf58ffed290c567d7b5dc54f7a9c911d19fab72aded28cb7c063c46fd530b6ea9efef61c4da2bd5bad7d317743314ab01046b0f92d9d428a13bf5ff427fe25bdce29637f916b2da55f2f5ff05ea17002bf139a5740b7f2b60d6048844cc3909c76eb9ea0735ebed9c201efb8228245373c97d8c565e1ddb4c4d07c1ee7e3a942eea3cb88b2b263a0e4eef9b5cbc99f0b1fde017d01b15820f55f51d325c77c298b6973ad694b1f3bd5440fe8e8ea72fb10b53bbfb84c7d2b7be416df5cb60ad3607c71b387687752a119afb71cdc53b8a395e0398a5be4ac9a175df444ea715fbb2703911bcc6867a85ae2d76d25af06ed0e3688660dad6d69c1f356d43e655811e4169ff9f3f275a8417c44a9b7f5cc3e6ae05ed6a226da85946e84144191b4018d2a226e957e583fb34af3d4bdfbb59da087565fdd7faca17d652208c129549f16541f8addf7be170c6041459600364f025362ea0726f48cf82521d47eb478c341da8b0ba94e96942787d4046d04e86b3ecdbf4b3579aa8f00ca70e132609df358d9183f6cf6b200dfd16fac3e0bcdb13cc5bfb20bde3cc139967c70fefe3c39f484c442b75a5606a2b4952c799b04957e151d3dd76eeac764170a1929a88a668926fd6c22e9c2327f85fe88d388f4eed175a5c13e82bd6f42a7669341d2f3012c75c9871e419e0f3c7e50e347856415b8584eb2d2a0214d5bb03b10a26505ea9ffc7d5aca844e24af916eebe7513d8dd9145049aa0dd8e2a5a9fc53cef6239f56f2ba429601ead8223b5d89e5326e09f9d7c409a466fe5781435b9c324efc040cface76eb40b2da68b71a8baf2f916303726256c772cf27806d5208724cdf9f4eef7c7f3084a25242479fbe759bde637a7cb96d98510f0a68876d04cb47a3e7614b0b51f8812727b0881da22bf270d4a44206a581e71a7150c4096dc1fbd9e724ac572adfa13d6c2129e51df101bd5fd45bc57c356d67b65f270168bd0601e0241e887becb130fcb72c398c6e50d5123f5e8cef49d7ae92ae8e7de2221677a8aa6a285824ef679c68f87330224ce2c11299878adf4f46ed510fa4286f6110dd9965c189c21e85654d44992593ad75bb264fa4c9c7f600224b8eee14e6bac1aa0f9c9bc8c10caee2826cc6d8a787a9b98f908d062732ac0226268047fb44fd950d8ae380620c1f594a68a0813b492bfa3a8560dc1458ba84ddbf9b58f0f7317589a36c66493d1b1093c50719fe4e7b3a7f9dc61e961b0a36b0d65bd14029ad5b9dacdb4edbf090c2455c6c1af080e5447ec7aad8d1a532a48ce280decb70918738b3dcd49d3ffe16e1a2099f7e083aec3a97866e51d43e2581530e53d269c4ff2a6f576ecadc018f4e233b6e7da57130bdd369bdf5973031b7280d7bfcfc443dfb578de9d60be87e741e3aabedffd7b46e6a1c342661b0a122d579623e6e86e745e6ec3ee53545e9a1f63c1db363f68ee2a693a8f8bcd5f97c575db2ce1e03fee213bbd7a38a288fb83a07b1adeb99932fa55dda4b7e6be199f8f008abaa88c63f59179b47c541d8707709c7cd5f5aa5ed5c4dc63093596b09858952e64133cbe6b7d02b60528d6a263c9b72aa3e751a99e9fd1664121fc0ba9018d61011edd23d29d05c2080e33c721e503113be23973351a68fb5da582205a0e89e69fc84e24f3d4e8629847f9b6ba77e2ffe6ce394f99b1a94576c677e7433aa8bdc4d9779cbb706c6e2f426806d111173ffb0cd4f7be3ccffcfc9e66a16ab2806b6118ce28bc935624f1cbef0c9c4da396e6dc0e87ff20d0fd0e07d49327d8c0c97c7d70c50b584fbe563cde1cb17f36a73ebbe6b331b6321ac5ceba510a35ee913c5542a9d7b12805a29a99d25a5d3bc13a330435d6f0305bf522cc71e261c39d82584440d47fd82b9b31ad4ea0d2922558e6bab6fb6d3f6da9eb2a2e824af6928ee2ce41baee61fd4b5f896bf92bb1cf06c0c5a1b9b81a8216084c8e90451823d6be884a735a2be130304a22d8168c06db9cb6d62ba30079ecc831952f2564b760153311226d2188bc523928aa63223e785e6cf67a01962eed4195d5b06f06f272fe27d38660153c1727cfb438b5d98da5778070791c5ace1fd3ae756c8f261ad9d1c6aec5722a8e0609c3bb672c628879b65fbba3692070781c13bd34a93a5b9fff4f9ac4cd6aa3fdf076eeb4c0cfa14d2a41193e723d6d013995f34c97bd5d438eae8ca9a8a2dfdadec39c84c11cc9e9506020e072908178a6b60c53321c0b857d12b9adb58d90197c090e558d20a29bfd9f2ae297c23f47a544daa537f5780ec75b1824be5c92c20785499143252dd2f6d1f8aaf47deccbabf74ee0d55793b046aee7dc763353249f03cf2f0c60f6dd6ff082a051ffe2c8ef4ae9b1d8a046af67ffab68a4587ccd0a503906cca13aac0b7309d5fed12abd5303d2803f928651b51dd8747db79c56c3e3f89e6799a9dac3a7c57257c6575e133379b6c616dbab839b530e7ede62dc529acf5a6fa061fd1244fbc82d6e883388291ecaf1130151c8da538f8bccb9b871d2ce3417a9212ad94fe94c6e13e06975d8ba285d7e937ac4c6fd89aae06db06940670463d6b86a18856cc978a49f7e407f2e4f042d7ee1b7791cb33697824c68b2535af6c803e7940512da7db39c98ed1030e615569c200bc3ab833156187c25c1f659dcde3434f47a8cce56d821617c58907f80d5628214a0a8aad3fa2087647d52ac1c9692c6b57b85d70cd12875f110e631f3a9e34f21afc401797d9a13753deabb43fef92d691efb19a7120167f838d283fc5f2f1d7b4c2ef736fb1c8a47befcfd320f98461756d6908f00cea4a252733db78b6f67620e1a209e39f788a8360b8f42ccf1776259c6f70ef7ca2b0ee8caf4bf27017730236669eab62ada6db1d381ec2f8c60bebf555425bab9fa4d46823d3b0a1b1f51add64961aa2a073929116f02ea230bfb354019e47800415edeacf72a7daf8930c64adff306aba841fbe75bb18da73441721c86d3a70f9e6025e7fc95516703372fcae04421b08d0edbc5f1b6b6a3c66225011dc19f575111180e8d173922c2e28123347036b3ff2418dd529c49beb2e335801a3a5473c73d71d084c8271c10d86f283a659deaa57fff6673519645e0ee4c915cc3b8c440584fe222b1bc0cc0888142b9753ad409ed41ca16a92a3126ee73f7237523c6c781959fd255c5c0dff4ff324dc3e2246da77281809ead68df57e4ae6c1f8001e6d292e8e42f897b59770ec26b508ac5d57b47ee9696f9d40ceb39f9653a14737ede3f3213147381417d9633d30cc1107dde46e5ead6e4e4dec617202e10b9093e3bb2dfd785dd96a6a64f44bef7465552dc2e391c978c7ac1ce2b8f774d7b3934d15fc6d96eb3de6f0e9402a8538c6081712e5affa5b67b4153217b38f3248b2565c804226f4a31688d5fafacfe2e4fc191791c7164cfa33a474f4a9cd90fb5f37f5268e1801a2a762b00e8b7b2bda1db7a90ccc74ccc0fb015eb49a6ed0236d8b6b0e67bcaeeb750a499cfc3b2dc34e9024ea9bf00e5f0013a15509992979b50617dc14aeb0bac46c6961eca1e96ab2b45d342bc68e88b765a79d73f1eec58167e8ea4752981fd898f1ce528e9ba947723bd4d2ce228b6e5787227697d52f2bd0d4ecbebf5c6164f5819313060579ebb3ddb3c6423adb999975427c2d3da65b3cf52849c75464b46ede138be670742b175474222a47755f8006d4752b6c271643aa622f8439903abe53595792e7856a6e5a5e1b309fa139c2e64e927620c87aec8f36b9509c1d5cdee296bdde21d2cc54e7738070d93552d9ecd799325fe6fae9f3d7046ef1459d401922e3da284b7f6ef67ae196f274f6ce94887bb5ec25c0101618d6118b4cf47e0dfcb8dc89e8f44b47ba19c326db51a75a5b790620a2e460110dbc0f923a7d3825e4ac1d04597c0693fd05d93aabe907b47b1581f915de89c16580ae484f864e583b43ddc0991d716e401f60b6f62ebd52178a9e0adfbecc706dfffe8eee93f67ba2c9da4515bdfffd764741527ec04c3503da653271f2051ddad922ae38cae98c9a2eba5f8470d2551d2224add25a32b9c4d573f69ed15445d2b72ab20d1cd07c2d897dd7c97edab293db9f217a5eee5de9ad08da2f734e617b9f5268a3b91336237f5e9738a65f4adde4279eea09ce40e577b97eb5c67772e4ebee5a33afc7de28c70d97a514cdcd95908d26ad62800900a7cb9dcb88955b5401ccd4d965d00ebf0da48bf43cd2f5b61331894f523685b17beb253c3f50db89e11e664d6427a2551b5bfb2cbbfbf1e8240909d5eef23ccfa23d185391713d1205078be21e99063ff6316c06cd77969dda4d7f3350d4f2f29a23f12e14788fd60cbe4c3c00685a5e42b861597fd3b70c5e0e4d9f02355b754bf353fa2bd5dc0225080c26eb39be11a5b3cfe5264f39399167ab55ae7286f09c1d7fd0fc69bc9c7fca34867b5bf11c43612d3e010d2918a0d9b620549402f2c56e9cf3aa53b7614337f0867fe08170ffb272c5d340f237cdca3e023d2e65b250acf4f265ab8794a5388c5358d7e1cccbf82d99dd1aeba50f3363b9c3b6ac43542334bde8cf2ffd29da1d516bb5d950938f410829e2e37684916e1eac5c2ea1352e7cf6d0bc19bf16bf4ee61e44cd339fadcdf18126c46c0aba43c927510f3b876b32f606bfd2f657254e9715f8151099da8897c287ec1eb9077c72a0a31171f5e2672c16d3907caf659a73a15ec1bbdf240cf5796c22a99933999dd36ab3c354736b45b990e1631be048cad72829f782504ccff0cfc2e1eb5fb3e52e9fa4c3a39ec9ae7ef7b4b9e7e9a721a3f6addace5ca68d525ab9dc0d26b05333dd638bba4e40ec0a716b29172fc84a26c046dcdd0a744af3a7da0eb295a6b0d2a4e45bd6222464cae11bdb5a6c02f8ebb9c8846ca03175d4cab8b9c9531ae686029cc740c296feee12fda2cfb130808a3fd435c13bfca388ab530b8c4b546c4fc9af86596daec4569b5e82c8fd452731e27f9dffdc5713562b99fde6b59948a46f2a44ed0e539469040bb04a54fdf390f589c6491f1057b3d44573838dd2a1271ef8ccec3796012d2debeddb9dd0e252bf622f2671d6940f1c89b3ae38b4fcaa37103d96f4504c5654e603b80f710dc575bfdf2f4fa01741ab79057c15b627cd03e7dc24aab3ee312dd1d7e96731c28e24df9b051fa5972615858f07572d07f6a6f947fecf8acb05d220b68a4962b0bb9e2bb6341b97b0bfb18dc92764ceca8f723592c02104a020dfb9ff06bebc81ea80c68a1fa6175ab4042abd3305c1a17b72ba5491dc812def91672873fdd98632871ed0387e00a80c173b9e8c75e185149d32a9945e2f9707301c96337cd1c44cc13a9f38dc23720558c31c4cf6ff72559794c04af4deccbeddb04f267308e220963bf64d0aa830af54a91ae3ae0eb1aa3d48dde97ddd0916e3c16f4d90ef3e66f06f8c4c3d4fcfe41094708f49ac8d4e7150a74d9378a75018dba062fd1ec331776aafdb64e5e1732ab0f0ce0bd8985ec4b1374a6245b6d714a1c02ababcdc1fe22481a6ad3276662d4c9adf65e9d275afa6d57d6c3bcc6ab68234f4a1dade56c852c86c0bb4f427387bc9ea23e7361b7f518039af614141a12499b9602f95e2a969c7f31cf1056fe3b1954ecaa3db219f546a28e954964268be0296ea2765a8194d88b14869d388996d645f34511d63a602d92e795a0b29773052ce44b008556b6a0fb418a9233ed13edf3bda3db479211d00c16d40ee6321241d884fffeb3c1e2c01707c7aa387778779a241699ef4bd5d7cb8e40986539d0778cc242e98f17e630a09d62155b469ef5dba920d2ef80686c8f9eaf1965b42935d6dc470de7fbe0f5083a4b6ced2fa06b255fc35c3325bcc57ae3ef95ef58edb0b45bbff699de88afa565ab9f98b1c98255dfd6bd3eb18af00b94cbe5f94421b2828b0583c91e7cecd4754003ad8f46a206da99e75056705f9cccc481b591d4c33d96b21acbbdb4e70dfd9b6a2fccaa6a0af7f97fca9da759e62a6fb222341cbab0c808d320ff13a5989ce707aabd7f7c569b3e22e0c91613c483c136fb5b94ff7bdc1f51cbb9f5c46e4b62a19cca73057b78d1f3f8a9b0e2a20b8b8d9f2e8d0459df86c18353fbb3cb6e8b804e28dee571349e16b5df662cdedf1aa5a44eea00b778bc79c16138d85fab98c15ad9f2b83eebdb9432634280768397d2895c10012da8c6659e02295cfa52d6d06ef1e6ed0546d46c676048e5a455261659c83492d355eee56596e520962467fa8b3ae99cea9547d99a6d6b674682363c0dd5c8bd5c63d3bc2d45a94fb4e090ca27028b29a61c53d96ade29f1c60cffb5053b494dd2d7c7ccffc7006e16eb2bdcb360a1e0a3fa1f380616d0298e315808db7ae9ad16b6c4bb7dece5c2c4ba52d514f7fdc9b00e66302d1b6c6a7b5b58adb313e0cec67448238f66f69dd480d304a9831833a1b94f8109c0d2f85e646077bbaf140f9c7e72301d8e452f13711be18bdb48e2f0031c38da789a9e4161b7f0a6da09075414aaf9984ab7f141647c532e3b2530f3fd8a93b4218ecbbff44c4a58cdde1f9d89eb60ebe8033dc10116cbc09d4903bfd0830ef8b0d33572ce61bc028133be720544872e4a205fed6b005e8ed240ceb6e9efdd313b6eb0aed6bdcd335cb1765f2d7ed7f1819e0c04a8989183abcaa3677c35c33d95b139ed63f9f67e51386206ee2a3ad54bd4312b1178ece5a5a76eac9534faf2bb8c7b5105811a34a110553c63f1b9168ec5758e39d1f1baa4fd3e8dec73026c08ddf1568fa04b1a36a98055b6912f4faa0741e0bb5f063dfab6e6a8605b997affc69369980188967e4655c954d31b3ebea8dff5face904366191f0695fd3ccdc5e82c5982243e16a895f8aaf9d63d37ee1d323b296862ad265760a392378bc2ae5d7b75039b77aec33aa00c134f554ca9e5fd162296e915ccd359976e7ce4099bcaa5494c8eb6fa4da2a2e245920762f3639fa4fd4eb0e5e167a5f2111bfa669576ff3e0711a4ad78d2f8477363b03e6a13cd5b479817a62614ef613ac2b03a340114909c7b21ee93adf74c2ee2d4c666f1ab8bc43368e7643f3ea8da5a919b1e3078875228d2b519387ac49b7b9990d7dc229fb9ff0d551d3dfbeb843c8b2782f50cf8c575dec6836259a160a9a047165791d1e759c74ea65f4f9da990fc0e789bcd4ddf716442864788be6f2c5b607b6ddc7f9575b4e8375eea50e98cd9320fe736114e03aa0a2c1430d5cb507b29b388ace6ab58393513724607102a0458a458998e94d71b758df51ed4ecb6c6f2b94c31fb480745fbc6f6dc595c9558161fa14462779952982adb70d70a9f9a734fcbde17652e1a91422f93a6ff7d6c80fc92a5005bedf58aefe9bbba9d0ab3441e86b863bb5a3fdfd2a9c6f6d10717d2cd35d3c2a892f0e58545b1794d9aae993d72c215a6673bbe38976cc7d03cda84999c637aec8036ea1a23b143ed6288dcbc7d1ee487b1b6a4f6e8ef63b378acd4ff888bf95d86336907939c29695b2e0cc58efab49056f88a9027cad6d724e635f94f45f4cbddd8188608663ec7e46547e2aac7dec6cc5609e9f5f41ef26a1f16ecf6bfe200b0a955f98d9a4d41a2a268f8857670e33fbd4f076aa11c49cebd8306a4de3c86f7726fde93c7fc984079ae60e63854ee9a14162c749d7e308530c6b84cb5cafdd09ec3411cc0302c77d316beff973e3108ddb9b249e206d5476d605b7b24603ca344c2263bda8d7d3db55b9e2fcdce69be9b1ce24f8c4df129cd62a299fcbbff3309031973b5da452654c0b8ca4cf65891a8bdb8dedd20f631a34964e3bb0fa45c618861da79b259d79ecde8394061c99c661851c016c35ee8c91d52bbbc25f52b5e2f77ef2f63c764b717e8cce4d291742d5a7ef7f5d7ec1a96620eda1f962fb2448c388873f8b8abea4d27a5da092833c43c57c4b14099597f83785a31190798826f4264ba8f998cfbf7f20f9678e10e05c793f5781f8accca245d047d3be6c10541b2610c02c6e916d3db9776c6964e4519cf2e30708c954ef2492d3418c552dd9b5db4320dab8be6ac3394cb4b3fb1b9d5222c6ca9bd06aae2fef510e541db1209cde21fae56507020e80862d0b875d958346c42ebb781955ab337be61a68534281100247904b81b86aed49544c2452ecffaf6cc116f9d3c7362fc2cc390ab2ad29928b6e8bf90a4f21442fb213dbeeea4b8f481792fc6579b608e3a9c4fbe2755010d7ab3cd122de7a40a1f7780350a31d83ee5006ade36854cbc8e8c648259b29f2f7042719ab4d4d4d1f0c5fe6b717d23a5504335922f84ea8b20c78a5f1ddf6009089ea221353c01963fb8cabd3d795831c86d084660fa7f7d08f3ff15780c5b301ee27ab8d98fb358b90e92de4c96687c37e327ac1f0f23208c41a36e67cc22356df854f2dc309c110cfae51c5cc69051d22477caa1d2a2f276ccfbe907b263bd79ad4c5f6ea2687466f325ff2b1a736fff687c14d477c4c744e9c82be5b8ebfb69db2b312ff540ec8cadfcba9b609cae7e54ff347ed3d2649f9214600870ecba27f98943b4fb72f93b5ecb6d64dc1c7b2e8c2f2cf1006e39a237c5818014df9281feb6e522f6cb2d5ca35aeada09a58d5a6bdc9a75cf81a1c51faa8a3824a58d192a27be9fee5098b2e71d0d3f12917d50667415e418b790e0942260f4d2589c57aa1bd36017bd2bece963f0776f9f76cc66876c3f88f8bdbc35e329ecb56887948fd2c05d49c664509a682c6ff60350070bfd111be86ad2eee8c0d76b851fdb75f08e11fa47b5fd29b57568abbf91d3760652d475558bce2a1393688c9e2b4ae06cb072c294e1396b58db00b09ba8dbdc047a1684cca6e5b04cb52a40dd7b7f72c55292e7af0f3b8dda380d45b4e71c6cf57179247923750551ffd955f815cfbc29dfe5e0b2689eafdf44ce362b9c5864e4003326b2f183df7d39de7632bf3b2a85dca04cda08d10a5bad9ed9b481227e39804c3fd52d8a8f03288e13eb09c9075e23f82123a416e58864d95a321a719f88c8633201eb7d5c429348dfd83b476510f71808f95ab3b11d521004acc6d9168771736ec0a5f7c73ca78a46787c19299a79b453e49317353d6bee5b", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x100000, 0x2000, &(0x7f00006d1000/0x2000)=nil}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x2) close_range(r5, r6, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x6000, 0x1000, &(0x7f0000a84000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200202}, 0xc, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="40000000bed7e3a0f7ef817c33a113a10ca95182d1eb9aecd02398927d5cbb89a067dced14b918ff804eead579000c1047e9eb1019b374c33576d9a48282840065f36b8887fdd237f6007baf841cd760cbf91cabafd4ce7301b538a5d86d96178af241d0e51c3f4cab7bf06dac92a27b8b29298cbd668f4d12a543373cfa140e48064802ef25c0697e", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf2503000000060001004e21000014000700fc000000000000000000000000000001080008000a010102050002000a000000"], 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x400c000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.217' (ED25519) to the list of known hosts. [ 331.949653][ T36] audit: type=1400 audit(1750670311.100:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 331.951135][ T281] cgroup: Unknown subsys name 'net' [ 331.972453][ T36] audit: type=1400 audit(1750670311.100:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 331.999823][ T36] audit: type=1400 audit(1750670311.130:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 332.000100][ T281] cgroup: Unknown subsys name 'devices' [ 332.179761][ T281] cgroup: Unknown subsys name 'hugetlb' [ 332.185440][ T281] cgroup: Unknown subsys name 'rlimit' [ 332.342238][ T36] audit: type=1400 audit(1750670311.490:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.365465][ T36] audit: type=1400 audit(1750670311.490:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 332.390381][ T36] audit: type=1400 audit(1750670311.490:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 332.396274][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 332.422309][ T36] audit: type=1400 audit(1750670311.570:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 332.447799][ T36] audit: type=1400 audit(1750670311.570:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 332.500908][ T36] audit: type=1400 audit(1750670311.650:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 332.501463][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 332.526453][ T36] audit: type=1400 audit(1750670311.650:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 333.693461][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.700718][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.707906][ T288] bridge_slave_0: entered allmulticast mode [ 333.714254][ T288] bridge_slave_0: entered promiscuous mode [ 333.720760][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.727880][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.735074][ T288] bridge_slave_1: entered allmulticast mode [ 333.741375][ T288] bridge_slave_1: entered promiscuous mode [ 333.792660][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.799809][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.807100][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.814171][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.836368][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.843761][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.854074][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.861191][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.870296][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.877379][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.904211][ T288] veth0_vlan: entered promiscuous mode [ 333.915724][ T288] veth1_macvtap: entered promiscuous mode [ 333.941771][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 333.970833][ T296] overlay: ./file0 is not a directory [ 353.211985][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 353.212005][ T36] audit: type=1400 audit(1750670332.360:102): avc: denied { ioctl } for pid=301 comm="syz.0.2" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 353.243334][ T302] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 353.263897][ T302] rust_binder: Write failure EINVAL in pid:4 [ 353.287531][ T36] audit: type=1400 audit(1750670332.360:103): avc: denied { set_context_mgr } for pid=301 comm="syz.0.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 353.316303][ T305] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 353.367634][ T36] audit: type=1400 audit(1750670332.460:104): avc: denied { read } for pid=304 comm="syz.0.6" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.407279][ T36] audit: type=1400 audit(1750670332.460:105): avc: denied { open } for pid=304 comm="syz.0.6" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.463978][ T36] audit: type=1400 audit(1750670332.460:106): avc: denied { ioctl } for pid=304 comm="syz.0.6" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.464790][ T311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 353.493916][ T36] audit: type=1400 audit(1750670332.640:107): avc: denied { setopt } for pid=310 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 353.507612][ T311] rust_binder: Read failure Err(EFAULT) in pid:9 [ 353.523221][ T36] audit: type=1400 audit(1750670332.650:108): avc: denied { create } for pid=310 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 353.569560][ T36] audit: type=1400 audit(1750670332.710:109): avc: denied { read write } for pid=312 comm="syz.0.8" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.595241][ T36] audit: type=1400 audit(1750670332.710:110): avc: denied { open } for pid=312 comm="syz.0.8" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.618304][ T36] audit: type=1400 audit(1750670332.710:111): avc: denied { ioctl } for pid=312 comm="syz.0.8" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.652723][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.660044][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.667149][ T306] bridge_slave_0: entered allmulticast mode [ 353.673981][ T306] bridge_slave_0: entered promiscuous mode [ 353.688191][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.695302][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.702463][ T306] bridge_slave_1: entered allmulticast mode [ 353.708827][ T306] bridge_slave_1: entered promiscuous mode [ 353.740240][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.747339][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.754413][ T308] bridge_slave_0: entered allmulticast mode [ 353.760806][ T308] bridge_slave_0: entered promiscuous mode [ 353.772309][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.779422][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.786601][ T308] bridge_slave_1: entered allmulticast mode [ 353.793010][ T308] bridge_slave_1: entered promiscuous mode [ 353.817342][ T300] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 353.832933][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.840069][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.847169][ T307] bridge_slave_0: entered allmulticast mode [ 353.853567][ T307] bridge_slave_0: entered promiscuous mode [ 353.863467][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.870587][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.878524][ T307] bridge_slave_1: entered allmulticast mode [ 353.884807][ T307] bridge_slave_1: entered promiscuous mode [ 353.989595][ T300] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 353.998790][ T300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.006824][ T300] usb 1-1: Product: syz [ 354.011279][ T300] usb 1-1: Manufacturer: syz [ 354.015936][ T300] usb 1-1: SerialNumber: syz [ 354.033889][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.040992][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.048318][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.055452][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.064118][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.071218][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.078548][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.085587][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.128066][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.135249][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.142706][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.149783][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.170397][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.178435][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.185777][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.193314][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.200791][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.208125][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.229032][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.236095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.244026][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.251122][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.264614][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.271741][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.284258][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.291389][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.309246][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.316354][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.324136][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.331314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.364396][ T308] veth0_vlan: entered promiscuous mode [ 354.385310][ T307] veth0_vlan: entered promiscuous mode [ 354.392180][ T308] veth1_macvtap: entered promiscuous mode [ 354.411394][ T306] veth0_vlan: entered promiscuous mode [ 354.430416][ T307] veth1_macvtap: entered promiscuous mode [ 354.443881][ T306] veth1_macvtap: entered promiscuous mode [ 354.520109][ T325] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 354.520150][ T325] rust_binder: Error while translating object. [ 354.552628][ T325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 354.571641][ T328] kvm: vcpu 0: requested 197696 ns lapic timer period limited to 200000 ns [ 354.589895][ T325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 354.593310][ T328] bridge0: port 3(syz_tun) entered blocking state [ 354.610117][ T328] bridge0: port 3(syz_tun) entered disabled state [ 354.616672][ T328] syz_tun: entered allmulticast mode [ 354.622907][ T328] syz_tun: entered promiscuous mode [ 354.628524][ T328] bridge0: port 3(syz_tun) entered blocking state [ 354.634975][ T328] bridge0: port 3(syz_tun) entered forwarding state [ 354.646355][ T328] binder: Unknown parameter '' [ 355.086382][ T345] loop2: detected capacity change from 0 to 7 [ 355.143421][ T347] tipc: Can't bind to reserved service type 2 [ 355.400651][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 355.494491][ T329] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 182) [ 355.494522][ T329] rust_binder: Error while translating object. [ 355.517456][ T329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.533957][ T329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 355.557607][ T300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 355.578171][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 355.589639][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.607313][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.621374][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.630762][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.640995][ T31] usb 4-1: config 0 descriptor?? [ 355.738378][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.749651][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.767509][ T300] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 355.786872][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.796253][ T300] usb 3-1: config 0 descriptor?? [ 356.011992][ T300] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 356.024271][ T300] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 356.034198][ T300] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 356.042364][ T300] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 356.051729][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.061980][ T300] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 356.076806][ T358] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 356.077977][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.099717][ T300] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 356.111862][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.120475][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.121289][ T358] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaa [ 356.128652][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.143403][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.151124][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.159163][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.166748][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.176820][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.184956][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.197997][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.205587][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.213552][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.221388][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 356.229424][ T31] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 356.241727][ T31] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 356.317996][ T347] /dev/rnullb0: Can't open blockdev [ 356.329306][ T347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.338634][ T347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.354612][ T31] usb 4-1: USB disconnect, device number 2 [ 356.622093][ T300] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 5: -71 [ 356.635158][ T31] usb 1-1: USB disconnect, device number 2 [ 356.641184][ T300] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense calibration info: -71 [ 356.653699][ T300] playstation 0003:054C:0DF2.0001: Failed to get calibration data from DualSense [ 356.666766][ T372] Zero length message leads to an empty skb [ 356.672804][ T300] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 356.681152][ T372] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 356.689664][ T300] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 356.693684][ T374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 356.703334][ T300] usb 3-1: USB disconnect, device number 2 [ 356.722210][ T374] ======================================================= [ 356.722210][ T374] WARNING: The mand mount option has been deprecated and [ 356.722210][ T374] and is ignored by this kernel. Remove the mand [ 356.722210][ T374] option from the mount to silence this warning. [ 356.722210][ T374] ======================================================= [ 356.757494][ T374] SELinux: security_context_str_to_sid (sytem_uÝGйEÏÐl€Æáirâ<aMqY÷°‘±¦UË™ý¹Í.‘ åš9Åfë]·û]«J\ÌP¢Ž?æ9P±[÷Á2æÆ9K9Ð$Y–ý3Ró)ÌrÌïØèAùÔ¼¹h¾A¸˜Œž;u=@‰Òņ ¬·HÛ­è) failed with errno=-22 [ 357.042109][ T389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 357.042136][ T389] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 357.051301][ T389] rust_binder: Read failure Err(EFAULT) in pid:14 [ 357.087093][ T398] capability: warning: `syz.1.28' uses deprecated v2 capabilities in a way that may be insecure [ 357.117165][ T402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 357.124308][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.140939][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.142837][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.156783][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.156900][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.170972][ T300] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 357.178687][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.178844][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.193110][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.194878][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.227548][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.227670][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.250925][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.258773][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.272986][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.273047][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.304719][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.307844][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.335934][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.336031][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.351987][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.352750][ T300] usb 3-1: config 0 has an invalid interface number: 10 but max is 1 [ 357.367400][ T300] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 357.376164][ T300] usb 3-1: config 0 has an invalid interface number: 40 but max is 1 [ 357.385628][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.393077][ T300] usb 3-1: config 0 has no interface number 0 [ 357.399518][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.399568][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.413119][ T300] usb 3-1: config 0 has no interface number 1 [ 357.419525][ T300] usb 3-1: config 0 interface 10 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 357.430589][ T300] usb 3-1: config 0 interface 10 altsetting 6 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 357.447408][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.447502][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.461029][ T300] usb 3-1: config 0 interface 10 altsetting 6 endpoint 0x4 has an invalid bInterval 64, changing to 4 [ 357.472418][ T300] usb 3-1: config 0 interface 10 altsetting 6 has an endpoint descriptor with address 0x98, changing to 0x88 [ 357.484285][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.487358][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 357.487704][ T300] usb 3-1: config 0 interface 10 altsetting 6 endpoint 0x88 has invalid maxpacket 51839, setting to 64 [ 357.512502][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.520532][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.520573][ T300] usb 3-1: config 0 interface 10 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 357.537556][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.545201][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.545249][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.558990][ T300] usb 3-1: config 0 interface 10 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 357.570039][ T300] usb 3-1: config 0 interface 10 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 357.582892][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.582982][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.596604][ T300] usb 3-1: config 0 interface 10 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 357.607768][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.607864][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.625113][ T300] usb 3-1: config 0 interface 10 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 357.635990][ T300] usb 3-1: config 0 interface 10 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 357.647301][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 357.649537][ T300] usb 3-1: config 0 interface 40 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 357.665292][ T300] usb 3-1: config 0 interface 40 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 357.673554][ T10] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 357.676322][ T300] usb 3-1: config 0 interface 40 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 357.687517][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.697821][ T10] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 357.714978][ T300] usb 3-1: config 0 interface 40 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 357.717283][ T10] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 64 [ 357.726709][ T300] usb 3-1: config 0 interface 40 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 357.745789][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.753596][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 357.753897][ T300] usb 3-1: config 0 interface 40 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 357.762053][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.771326][ T300] usb 3-1: config 0 interface 40 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 357.780128][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.791202][ T300] usb 3-1: config 0 interface 40 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 357.804072][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.809796][ T300] usb 3-1: config 0 interface 40 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 357.811485][ T10] usb 4-1: Product: 螯붰ç½é³ˆå„¢ä —蔈溻相ᓜâŒåŠ½áƒ³æ‡œáž‹éš­éœèž‰ë¤€ë€»Ö«ì¢½ë’„ì¦ì¡ï†½ê¯®æ´ä£‚詚ꤻ멞럨骮溱娺⒉疦棧弗⾿뫟鹷Ʌ㓿ⴴé¶î¬°à±¹á¨˜è¯—ᄚ溉댌ëŠâ‚Œâ¼½î†ï²½ë´‹â€Ÿï²Ÿï¿´í€¾ã’³ì–†ä»žïéšï¶›å† ï±¡ç¤å±ä‹¾î½Šë™°ïŽ§ì†´åŽ‰äšªá·ƒè‚¤â½˜ëå°¥ [ 357.815975][ T300] usb 3-1: config 0 interface 10 has no altsetting 0 [ 357.853260][ T10] usb 4-1: Manufacturer: è乃륜肎觽ã¯ã¬²çº¼é¦“싘己í‘玲켋剸湳㱷岌畹⊖àªç«—ë¬ë˜íš„æº´ã¨ ï£è™«é†ê—¶æŸ¤ï‘„〈ᒔ圕힎Ⓓꅮ♶䄊ဨ贈岹᫜諥î„⾂諃ܔ෩劉ﻵ轒⇠ä´à¸¦èš“뷬ﰻ嵕駃扙᫨鞇욄áŽä»íš†ç¦¦ê¾“洀蜤ê®ä•¹èžèœ•ãžîƒŸë¯ã®œéš†í‹¯è¸‰ãš˜å†—æ±žá°ŽíƒŸï›æ¾Œî›¯ê¸æ½”ì¶ì‰â˜ªâ¢¼é½¼ê´‹åž„æ–•ì¤é‹žê¹¿â£ŒæŒ€é¨è›ç‹™ [ 357.853304][ T10] usb 4-1: SerialNumber: Є [ 357.899059][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.906482][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.906548][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 357.906634][ T403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 357.912991][ T300] usb 3-1: config 0 interface 40 has no altsetting 0 [ 357.921942][ T405] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 357.943080][ T300] usb 3-1: New USB device found, idVendor=1199, idProduct=907b, bcdDevice=3a.d1 [ 357.944147][ T405] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 357.952481][ T300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.967620][ T300] usb 3-1: Product: 挭ïƒà®®î¢¦ìˆ¡î¦á–€ë¸»ä¼¡å¶¢à¦µé… î¡Žçšèž‰á…£î™åª‚彷喟汴࿠﫿貜膸뛺æ±à¬­ê“­å´žä®³æŽ˜âŠ®ìŸ«î¾ç»¼ä¿¸èŸœáª© [ 357.967867][ T403] rust_binder: Write failure EINVAL in pid:25 [ 357.981946][ T300] usb 3-1: Manufacturer: 㤰í›ì˜žì¬ê˜ˆî¥œâ°°ï–‰é¼ªã‰äª¦â°™éž»ã­¤å›¿ç¬µî°ˆï®‚ì€è‹¬ã‰­ëº“ì—á‹¿äªºå«šå’²çŒæºˆâ¼œë“¿å‰»í®ç†¡à¼žáŽ†å–€ë§”ì“䣶뾘癰籑é¼çڊ鷨㺥í»è¤¿à°¦ê¬ë²¸è伪䀨쉈쳠伎ꆇ쎹沸æ‰â¯âœ‰îç‹ë¸å¨¨è³°ãŽ¦ì˜«à¢¿ç¦˜è’Œâ”¦ë·¶ï½¨æ…¾é‹§ë£·ä¡žá‘‘éƒƒî¾¸á¤£îž¥å¦‘î™¾ä­“ãŸ¸å´„èª•è‘¤ä·±ä •à¨©ïˆ¥æ ‡í˜šî¬¡çƒˆå¨á®£äª…떠ﱊ脄䉜â‹â£¢ê¸ºà¤—鉎Δ켖䦶プ䡯̄꿱䆚 [ 358.024821][ T300] usb 3-1: SerialNumber: syz [ 358.035043][ T300] usb 3-1: config 0 descriptor?? [ 358.087526][ T45] usb 1-1: device descriptor read/64, error -71 [ 358.150847][ T428] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 358.170354][ T431] netlink: 'syz.1.39': attribute type 4 has an invalid length. [ 358.284856][ T300] usb 3-1: USB disconnect, device number 3 [ 358.327405][ T45] usb 1-1: device descriptor read/64, error -71 [ 358.389798][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 358.413867][ T10] usb 4-1: USB disconnect, device number 3 [ 358.567320][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 358.697449][ T45] usb 1-1: device descriptor read/64, error -71 [ 358.728048][ T436] netlink: 112 bytes leftover after parsing attributes in process `syz.1.41'. [ 358.739854][ T436] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 358.749271][ T436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 358.823329][ T448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.858286][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 358.858307][ T36] audit: type=1400 audit(2000000001.760:171): avc: denied { create } for pid=451 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 358.859509][ T452] incfs: Error accessing: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 358.891298][ T452] incfs: mount failed -36 [ 358.891696][ T453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60 [ 358.988698][ T45] usb 1-1: device descriptor read/64, error -71 [ 359.004514][ T452] netlink: 260 bytes leftover after parsing attributes in process `syz.2.47'. [ 359.012020][ T36] audit: type=1400 audit(2000000001.900:172): avc: denied { nlmsg_write } for pid=451 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.014388][ T452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.035109][ T452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 359.056309][ T36] audit: type=1400 audit(2000000001.920:173): avc: denied { ioctl } for pid=451 comm="syz.2.47" path="socket:[5150]" dev="sockfs" ino=5150 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.090555][ T36] audit: type=1400 audit(2000000001.950:174): avc: denied { write } for pid=455 comm="syz.3.48" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 359.113409][ T36] audit: type=1400 audit(2000000001.950:175): avc: denied { getopt } for pid=455 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.117457][ T45] usb usb1-port1: attempt power cycle [ 359.133310][ T36] audit: type=1400 audit(2000000001.990:176): avc: denied { read write } for pid=455 comm="syz.3.48" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 359.161834][ T36] audit: type=1400 audit(2000000001.990:177): avc: denied { open } for pid=455 comm="syz.3.48" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 359.477299][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 359.498365][ T45] usb 1-1: device descriptor read/8, error -71 [ 359.628473][ T45] usb 1-1: device descriptor read/8, error -71 [ 359.661398][ T36] audit: type=1400 audit(2000000002.560:178): avc: denied { ioctl } for pid=459 comm="syz.2.49" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.700056][ T36] audit: type=1400 audit(2000000002.580:179): avc: denied { create } for pid=459 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.743451][ T36] audit: type=1400 audit(2000000002.640:180): avc: denied { setopt } for pid=468 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.841567][ T477] FAT-fs (rnullb0): bogus number of reserved sectors [ 359.848426][ T477] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 359.855367][ T478] FAT-fs (rnullb0): bogus number of reserved sectors [ 359.862284][ T478] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 359.867354][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.900602][ T45] usb 1-1: device descriptor read/8, error -71 [ 359.967310][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 360.031593][ T45] usb 1-1: device descriptor read/8, error -71 [ 360.127266][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 360.138271][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 360.157802][ T45] usb usb1-port1: unable to enumerate USB device [ 360.164316][ T31] usb 3-1: config 179 has no interface number 0 [ 360.172453][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 360.183892][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 360.195372][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.206774][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 360.227266][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 360.251170][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 360.268360][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.283507][ T465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 360.615726][ T505] rust_binder: Error in use_page_slow: ESRCH [ 360.615755][ T505] rust_binder: use_range failure ESRCH [ 360.627497][ T505] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 360.634418][ T505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 360.642938][ T505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:58 [ 360.712356][ T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 360.745656][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input4 [ 360.747393][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:25 [ 360.937437][ T465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.963412][ T465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.177132][ T541] can0: slcan on ttyS3. [ 361.217304][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 361.297308][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 361.367309][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 361.373955][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 361.382435][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.392598][ T10] usb 4-1: config 0 has no interfaces? [ 361.400065][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.409350][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.417698][ T10] usb 4-1: Product: syz [ 361.422009][ T10] usb 4-1: Manufacturer: syz [ 361.426640][ T10] usb 4-1: SerialNumber: syz [ 361.433036][ T10] usb 4-1: config 0 descriptor?? [ 361.458484][ T45] usb 1-1: config 4 has an invalid interface number: 95 but max is 0 [ 361.466806][ T45] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 361.477074][ T45] usb 1-1: config 4 has no interface number 0 [ 361.483257][ T45] usb 1-1: config 4 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.487310][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 361.493187][ T45] usb 1-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.511665][ T45] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 361.521671][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.530176][ T45] usb 1-1: Product: syz [ 361.534785][ T45] usb 1-1: Manufacturer: syz [ 361.539525][ T45] usb 1-1: SerialNumber: syz [ 361.640767][ T525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.647340][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 361.650490][ T525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.656230][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.664771][ T31] usb 4-1: USB disconnect, device number 4 [ 361.670326][ T9] usb 2-1: config 0 has no interface number 0 [ 361.683229][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.694320][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.704233][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 361.713416][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.724203][ T9] usb 2-1: config 0 descriptor?? [ 361.747529][ T531] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 361.747529][ T531] attempt to subtract with overflow [ 361.761035][ T531] ------------[ cut here ]------------ [ 361.766984][ T531] kernel BUG at rust/helpers/bug.c:7! [ 361.772917][ T531] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 361.779920][ T531] CPU: 0 UID: 0 PID: 531 Comm: syz.0.75 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 361.793172][ T531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.803278][ T531] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 361.808626][ T531] Code: 3e 74 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 8d d3 3f 15 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 c7 17 76 99 90 90 90 90 90 90 90 90 90 [ 361.813496][ T294] usb 3-1: USB disconnect, device number 4 [ 361.813541][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 361.828359][ T531] RSP: 0018:ffffc9000c9f5a90 EFLAGS: 00010246 [ 361.834583][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 361.842490][ T531] [ 361.856995][ T531] RAX: 0000000000000061 RBX: 1ffff9200193eb54 RCX: 104741b386a39000 [ 361.860124][ T294] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 361.867324][ T531] RDX: ffffc900015f1000 RSI: 00000000000028c9 RDI: 00000000000028ca [ 361.885396][ T531] RBP: ffffc9000c9f5a90 R08: ffffc9000c9f5787 R09: 1ffff9200193eaf0 [ 361.893418][ T531] R10: dffffc0000000000 R11: fffff5200193eaf1 R12: 0000000000000000 [ 361.901429][ T531] R13: dffffc0000000000 R14: ffffc9000c9f5ac0 R15: ffffc9000c9f5af0 [ 361.909598][ T531] FS: 00007fbf3b3dd6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 361.918567][ T531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.925265][ T531] CR2: 00007f6b36ce5d20 CR3: 000000013853c000 CR4: 00000000003526b0 [ 361.933354][ T531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.941530][ T531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.949609][ T531] Call Trace: [ 361.952909][ T531] [ 361.955860][ T531] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 361.964085][ T531] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 361.972138][ T531] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 361.982418][ T531] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 361.996013][ T531] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 362.006669][ T531] ? __kasan_check_write+0x18/0x20 [ 362.011830][ T531] ? _raw_spin_lock+0x8c/0x120 [ 362.016648][ T531] ? __cfi__raw_spin_lock+0x10/0x10 [ 362.021890][ T531] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 362.029152][ T531] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 362.037099][ T531] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 362.047113][ T531] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 362.057751][ T531] ? __asan_memcpy+0x5a/0x80 [ 362.062381][ T531] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 362.072248][ T531] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 362.082374][ T531] ? __kasan_check_write+0x18/0x20 [ 362.087528][ T531] ? _raw_spin_lock+0x8c/0x120 [ 362.092329][ T531] ? __cfi__raw_spin_lock+0x10/0x10 [ 362.097569][ T531] ? __kasan_check_write+0x18/0x20 [ 362.102719][ T531] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 362.112329][ T531] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 362.117365][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 362.122283][ T531] ? is_bpf_text_address+0x17b/0x1a0 [ 362.135072][ T531] ? kernel_text_address+0xa9/0xe0 [ 362.140235][ T531] ? __kernel_text_address+0x11/0x40 [ 362.145564][ T531] ? unwind_get_return_address+0x51/0x90 [ 362.151237][ T531] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 362.157441][ T531] ? arch_stack_walk+0x10b/0x170 [ 362.162436][ T531] ? unwind_next_frame+0x3c2/0x750 [ 362.167587][ T531] ? __driver_probe_device+0x198/0x280 [ 362.173098][ T531] ? __driver_probe_device+0x198/0x280 [ 362.178603][ T531] ? __kernel_text_address+0x11/0x40 [ 362.184030][ T531] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 362.190230][ T531] ? arch_stack_walk+0x12a/0x170 [ 362.195206][ T531] ? __driver_probe_device+0x198/0x280 [ 362.200705][ T531] ? stack_depot_save_flags+0x38/0x800 [ 362.206219][ T531] ? stack_depot_save+0x12/0x20 [ 362.211127][ T531] ? save_stack+0x11c/0x1f0 [ 362.215672][ T531] ? unwind_next_frame+0x3c2/0x750 [ 362.220821][ T531] ? x64_sys_call+0xe69/0x2ee0 [ 362.225646][ T531] ? x64_sys_call+0xe69/0x2ee0 [ 362.230444][ T531] ? __kernel_text_address+0x11/0x40 [ 362.235773][ T531] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 362.241968][ T531] ? arch_stack_walk+0x12a/0x170 [ 362.246950][ T531] ? x64_sys_call+0xe69/0x2ee0 [ 362.251748][ T531] ? stack_depot_save_flags+0x38/0x800 [ 362.257266][ T531] ? stack_depot_save+0x12/0x20 [ 362.262162][ T531] ? save_stack+0x11c/0x1f0 [ 362.266790][ T531] ? free_contig_range+0x270/0x270 [ 362.271948][ T531] ? __reset_page_owner+0x450/0x450 [ 362.277172][ T531] ? kvm_sched_clock_read+0x15/0x30 [ 362.278556][ T31] usb 4-1: config index 0 descriptor too short (expected 227, got 149) [ 362.282414][ T531] ? post_alloc_hook+0x3b9/0x3f0 [ 362.282445][ T531] ? prep_new_page+0x1c/0x120 [ 362.282467][ T531] ? get_page_from_freelist+0x46bb/0x4750 [ 362.291835][ T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 362.295659][ T531] ? __alloc_pages_noprof+0x30d/0x6c0 [ 362.295695][ T531] ? get_free_pages_noprof+0x14/0x40 [ 362.302975][ T31] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 362.306125][ T531] ? selinux_genfs_get_sid+0x63/0x2d0 [ 362.306172][ T531] ? is_bpf_text_address+0x17b/0x1a0 [ 362.314976][ T31] usb 4-1: config 220 has an invalid descriptor of length 68, skipping remainder of the config [ 362.319800][ T531] ? kernel_text_address+0xa9/0xe0 [ 362.319835][ T531] ? __kernel_text_address+0x11/0x40 [ 362.319868][ T531] ? __kasan_check_write+0x18/0x20 [ 362.325749][ T31] usb 4-1: config 220 has no interface number 2 [ 362.334012][ T531] ? _raw_spin_lock+0x8c/0x120 [ 362.334059][ T531] ? __cfi__raw_spin_lock+0x10/0x10 [ 362.334093][ T531] ? cgroup_rstat_updated+0x132/0x7f0 [ 362.340167][ T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 362.344770][ T531] ? _raw_spin_unlock+0x45/0x60 [ 362.355719][ T31] usb 4-1: config 220 interface 0 has no altsetting 0 [ 362.360262][ T531] ? rust_helper_spin_unlock+0x19/0x30 [ 362.360298][ T531] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 362.366126][ T31] usb 4-1: config 220 interface 76 has no altsetting 0 [ 362.370819][ T531] ? detach_entity_load_avg+0x7b0/0x7b0 [ 362.370862][ T531] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 362.370901][ T531] ? xfd_validate_state+0x68/0x150 [ 362.377755][ T31] usb 4-1: config 220 interface 1 has no altsetting 0 [ 362.381978][ T531] ? save_fpregs_to_fpstate+0x196/0x230 [ 362.389614][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 362.392631][ T531] ? __kasan_check_write+0x18/0x20 [ 362.392673][ T531] ? __switch_to+0xc7b/0x1310 [ 362.406373][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.410634][ T531] ? pick_next_task_fair+0x870/0x900 [ 362.410671][ T531] ? _raw_spin_lock+0x8c/0x120 [ 362.418038][ T31] usb 4-1: Product: syz [ 362.422945][ T531] ? _raw_spin_unlock+0x45/0x60 [ 362.422994][ T531] ? finish_task_switch+0x13a/0x780 [ 362.434126][ T31] usb 4-1: Manufacturer: syz [ 362.440428][ T531] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 362.440475][ T531] ? __schedule+0x1463/0x1f10 [ 362.446568][ T31] usb 4-1: SerialNumber: syz [ 362.456904][ T531] ? avc_has_extended_perms+0x7c7/0xdd0 [ 362.456943][ T531] ? __asan_memcpy+0x5a/0x80 [ 362.456971][ T531] ? avc_has_extended_perms+0x921/0xdd0 [ 362.456999][ T531] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 362.574002][ T531] ? do_vfs_ioctl+0xeda/0x1e30 [ 362.579038][ T531] ? preempt_schedule_common+0x2d/0x60 [ 362.584576][ T531] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 362.590358][ T531] ? __cfi_preempt_schedule+0x10/0x10 [ 362.595784][ T531] ? preempt_schedule_thunk+0x1a/0x40 [ 362.601259][ T531] ? try_to_wake_up+0xe17/0x1aa0 [ 362.606262][ T531] ? ioctl_has_perm+0x384/0x4d0 [ 362.611153][ T531] ? has_cap_mac_admin+0xd0/0xd0 [ 362.616327][ T531] ? futex_wake+0x63a/0x900 [ 362.620881][ T531] ? __cfi_futex_wake+0x10/0x10 [ 362.625761][ T531] ? kernfs_fop_write_iter+0x3d9/0x4d0 [ 362.631256][ T531] ? selinux_file_ioctl+0x6e0/0x1360 [ 362.636577][ T531] ? vfs_write+0x8ba/0xe80 [ 362.641037][ T531] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 362.646646][ T531] ? do_futex+0x356/0x500 [ 362.651026][ T531] ? __cfi_do_futex+0x10/0x10 [ 362.655753][ T531] ? mutex_unlock+0x8b/0x240 [ 362.660395][ T531] ? __fget_files+0x2c5/0x340 [ 362.665115][ T531] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 362.673674][ T531] ? __se_sys_ioctl+0x114/0x1b0 [ 362.678576][ T531] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 362.687739][ T531] __se_sys_ioctl+0x135/0x1b0 [ 362.692464][ T531] __x64_sys_ioctl+0x7f/0xa0 [ 362.697091][ T531] x64_sys_call+0x1878/0x2ee0 [ 362.701815][ T531] do_syscall_64+0x58/0xf0 [ 362.706274][ T531] ? clear_bhb_loop+0x50/0xa0 [ 362.710983][ T531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 362.716924][ T531] RIP: 0033:0x7fbf3a58e929 [ 362.721269][ T565] binder: Unknown parameter '¥ÿý«þŒy' [ 362.721383][ T531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.746530][ T531] RSP: 002b:00007fbf3b3dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.755064][ T531] RAX: ffffffffffffffda RBX: 00007fbf3a7b5fa0 RCX: 00007fbf3a58e929 [ 362.763076][ T531] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 362.771093][ T531] RBP: 00007fbf3a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 362.779111][ T531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.787165][ T531] R13: 0000000000000000 R14: 00007fbf3a7b5fa0 R15: 00007ffe54d39e08 [ 362.795173][ T531] [ 362.798222][ T531] Modules linked in: [ 362.802669][ T531] ---[ end trace 0000000000000000 ]--- [ 362.809467][ T531] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 362.816261][ T531] Code: 3e 74 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 8d d3 3f 15 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 c7 17 76 99 90 90 90 90 90 90 90 90 90 [ 362.836251][ T531] RSP: 0018:ffffc9000c9f5a90 EFLAGS: 00010246 [ 362.842684][ T531] RAX: 0000000000000061 RBX: 1ffff9200193eb54 RCX: 104741b386a39000 [ 362.852501][ T9] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0003/input/input5 [ 362.864559][ T531] RDX: ffffc900015f1000 RSI: 00000000000028c9 RDI: 00000000000028ca [ 362.873434][ T531] RBP: ffffc9000c9f5a90 R08: ffffc9000c9f5787 R09: 1ffff9200193eaf0 [ 362.881535][ T531] R10: dffffc0000000000 R11: fffff5200193eaf1 R12: 0000000000000000 [ 362.881755][ T9] uclogic 0003:28BD:0094.0003: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 362.890180][ T531] R13: dffffc0000000000 R14: ffffc9000c9f5ac0 R15: ffffc9000c9f5af0 [ 362.909606][ T531] FS: 00007fbf3b3dd6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 362.919161][ T531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.925872][ T531] CR2: 00007f6b36f45f5c CR3: 000000013853c000 CR4: 00000000003526b0 [ 362.938758][ T531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.946915][ T531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.957947][ T31] usb 4-1: selecting invalid altsetting 0 [ 362.963843][ T31] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 362.974237][ T31] usb 4-1: No valid video chain found. [ 362.989266][ T524] can0 (unregistered): slcan off ttyS3. [ 363.007289][ T531] Kernel panic - not syncing: Fatal exception [ 363.013709][ T531] Kernel Offset: disabled [ 363.018050][ T531] Rebooting in 86400 seconds..