last executing test programs: 3.616002696s ago: executing program 2 (id=1049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000180004801300010062726f6164636173742d6c696e6bd5"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x3, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000180)={0x0}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x23, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) fchdir(r6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000180)) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[], [{@fsname={'fsname', 0x3d, '\")'}}]}}) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, &(0x7f0000000140)={r4}) (async) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d8e33a16f64653d30303030303030303030303030303030303132303030302c757365725f69643d", @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',max_read=0x0000000000000000,blksize=0x0000000000001400,max_read=0x0000000000000001,default_permissions,blksize=0x0000000000000800,max_read=0x0000000000000009,blksize=0x0000000000000800,fsuuid=02b66632-481a-be9d-1d09-f2/69536,\x00']) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.55287502s ago: executing program 2 (id=1060): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000280)=""/163, 0xbb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$USBDEVFS_RESET(r3, 0x5514) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 2.425583522s ago: executing program 2 (id=1062): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x80, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x4, {0x87, 0x0, 0x5, 0x3, 0x0, 0x7ffb}}) syz_io_uring_setup(0x3b0a, &(0x7f0000000780)={0x0, 0xb16c, 0x2000, 0x2, 0x103}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_complete(r3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz1\x00', {0x8381, 0x6, 0xff1e, 0x401}, 0x18, [0x8, 0x80000001, 0x81, 0x4, 0x10, 0x9c71, 0xe, 0xf, 0xfffffffc, 0x8, 0x8, 0x0, 0x7fffffff, 0x8, 0xc, 0x0, 0x0, 0xac, 0x4, 0x3, 0x100000, 0x2e8, 0x8, 0x41, 0x2, 0x80, 0x5, 0x1, 0x200008, 0x0, 0x229b, 0x8, 0x8, 0x4, 0x80, 0x6a5f, 0x5, 0x81, 0x51, 0x7dbf, 0x8, 0x81, 0x6, 0x8, 0x8, 0x8001, 0x6, 0x3, 0x0, 0xfffffeff, 0xd0, 0x69, 0x8000009, 0x1, 0x913, 0x8, 0x4507, 0x7, 0x2, 0x7, 0x8, 0x7f, 0xd, 0x4], [0x4, 0x0, 0x8, 0x3, 0x10d, 0x4, 0x4, 0x8, 0x4, 0x7f, 0x4, 0x4096, 0x9, 0x0, 0x9, 0x81, 0x80, 0xf7, 0x8, 0x7, 0x2, 0xc440, 0x7f, 0x9, 0x5, 0x6, 0x3ff, 0x10, 0x80, 0x1, 0x7, 0xffffffff, 0x80000001, 0x3, 0x2, 0xc, 0xfffffc00, 0x65b2, 0x4, 0x7, 0xfff, 0x3, 0x7, 0x7, 0x7, 0x0, 0x1, 0x7fffffff, 0xf342, 0x9, 0x4, 0x22e, 0x37, 0x90000000, 0x4, 0xd91b, 0x8, 0x0, 0x1, 0xf, 0x9, 0x6, 0x0, 0x1400], [0x400, 0x2, 0xdcf, 0x9, 0x95, 0x8, 0x11, 0x2, 0xa, 0x80000000, 0x4, 0x7c, 0x6, 0x6, 0xffffffff, 0x457, 0x983f, 0xfe, 0x0, 0x7, 0x4, 0x4, 0x1, 0x8, 0x8, 0xfff, 0x5, 0x0, 0xf7b, 0x6, 0x3, 0x6, 0x5, 0x10001, 0x8, 0x101, 0x0, 0x6, 0x4, 0xb33, 0xfae4, 0xfffffffb, 0x8, 0x68a2, 0x8, 0x35bd, 0x99, 0x4, 0x9, 0x2, 0x802, 0x20005, 0x7, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x9, 0x401, 0x2, 0x1, 0xfffffffc], [0x4, 0x6, 0x4, 0x8, 0x6, 0x4f83, 0x403, 0x7, 0x0, 0x9, 0x8, 0xffff, 0x1, 0x5, 0x6, 0x1, 0x108, 0x4, 0x7, 0x3, 0xa07, 0x2, 0xa, 0xeb13, 0x3ff, 0x7fff, 0x468, 0x6, 0x2, 0x2b2, 0x4, 0x3ff, 0x7f, 0x6c, 0x80000001, 0xd, 0x3, 0xc, 0xfffffc00, 0x3, 0x6, 0x7fff, 0x3, 0xb8f, 0x5, 0xff000000, 0x0, 0x3, 0x0, 0x7, 0x67, 0x6, 0x10001, 0x5, 0x8, 0x8, 0x10, 0x1, 0xff, 0x7, 0x7ffc, 0x10, 0x1002, 0x5]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) exit(0x3) read$FUSE(r1, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x27) socket$netlink(0x10, 0x3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r6 = socket(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe64, 0x7, @empty, 0x2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff8105000000ffff0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0xffffff12) write$FUSE_DIRENTPLUS(r9, 0x0, 0xb0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.588893744s ago: executing program 2 (id=1083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socket$inet_tcp(0x2, 0x1, 0x0) fchdir(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x80001, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.583915035s ago: executing program 2 (id=1085): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r0, 0x73ad3000) r2 = getpgrp(0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000001000)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x64040050}, 0x0) setpgid(0xffffffffffffffff, r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x200488d0}, 0x500d4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xfffffffffffffffe) ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, 0x0) ftruncate(r1, 0x3) write(r0, &(0x7f0000000400)="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", 0xc01) 1.583472475s ago: executing program 2 (id=1086): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x0, 0xb, 0xfffffffffffffffd}) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000280)=0xe, 0x80c00) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = getpid() r4 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x80, 0xed2, 0xffff, 0xb, 0x3f0c, 0x3009, 0xfffffffd, 0x200, 0x2, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0xea, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0x28, 0xcd, {0xcd, 0x21, "2ec211538645797d8750a3d8ed230e38b7842da48c62d6b3dfbd25fc6cdbc6dafd58c250d8ee02d98306b1356038d0b2f83d0df0a3ef9eb1cc143d237cf0f9d85b80fef7ef9683a833e4767e57de60ddefc808a7cdc426b89327e589032bdc14b48359cdc161b92fe397aaaa144b28e2de90c14930dcd8c9ec83988327d8af989479653bd61c78997a33928a8ac01bb35acc35ca7dbbf6e7928ed3facf131d8e8845e9ff72b67a89f091222d1bc441468e132a6e73c1ec6cea3bdd5628dd39ba2fd092a8f1082c9380d21b"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x40, 0xd, 0xb5, "601ce23353963c2ae9f7c66d5c9e06db83a14165f337d43186cab011f7a12ee434b998bf4365ad614ecf8decaeec621ded5b0672b3398731c2b4fc7713b54df9545b450020fcd636e38cb085d486d3fe183a3a928b35ed8248ce42b83c09beee5f3e093ac5f00d5a144b8c07d185b3c876dd65925b91eabdaeb9d7f1f2041c2377218986e6350bb20390ed0591b9b3614a4f0355894afc1302a0d9d6bfd632e279ecfa939990b0fce6ed364214e04de698567c503c"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x228, 0x7, 0xa, 0x7, 0x8, 0x1888, 0x5db4, 0x10, 0x8, 0x5, 0x780, 0x3ff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x3}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) timer_create(0xf, &(0x7f0000000200)={0x0, 0x30, 0x4, @tid=r3}, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) modify_ldt$write(0x1, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r7, 0x0, 0x0) 1.483990524s ago: executing program 0 (id=1087): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1e, 0x9, 0x70bd2a, 0x25dfdbff, {0x1d}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f00000003c0)="3272d630639ae25f9dd06983893b7c3e7844527f34ab1297c13d773f39bccb3841e3c9690c52d89fc260e8566619529feb67b704ae82a5e14cd0353673a708a19aaee8906dd38e9672662f2b83f73bd1eda788a12f8c7c38849541b4739d7b20178e979b605e3af29c249c1e7933b383216718ca6734ba4c7148") newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r2, r2, r2) setfsuid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) lsetxattr$security_capability(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), &(0x7f0000000300)=@v3={0x3000000, [{0x0, 0x5}, {0x80, 0x81}], r6}, 0x18, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, &(0x7f0000000500)={0x14, &(0x7f0000000c80)={0x40, 0xb, 0x2, {0x2, 0xa}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000b40)={0x40, 0x14}, 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640), 0x0}) socket$inet(0x2, 0xa, 0x3ff) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x5, 0xffffffff, 0xb3, 0x1, 0x5, 0x6, 0xa, 0x5, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 968.014945ms ago: executing program 0 (id=1095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/90, 0x5a}) (async) socket(0x10, 0x80000, 0x8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) (async) sendto$inet6(r1, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='Z', 0x1}], 0x1}}], 0x1, 0x404c484) (async) r3 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 967.271805ms ago: executing program 0 (id=1096): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) gettid() (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 967.022455ms ago: executing program 0 (id=1097): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x6}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14) ioctl$FIOCLEX(r1, 0x5451) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x830080, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 761.479046ms ago: executing program 3 (id=1106): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) close(0x3) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x5e, 0xc, "15842405f026dc3e91827dd89bd96b29ec3918edcf0f372b8c690b2de9fbad24a3bf19a539c4c7af993e9b8daeafd32c80390b72ae55c83321d1026f2e82ed03f6e1803091b77eaebeb80f0e066ceb50a3b6b9bc7632b3a3eca2"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x44, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x30, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x2a, 0x1, 'system_u:object_r:ldconfig_cache_t:s0\x00'}]}}, @NFT_MSG_NEWFLOWTABLE={0xf8, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x268}, 0x1, 0x0, 0x0, 0x20008050}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22842, 0x8d) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22842, 0x8d) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) write$binfmt_script(r1, 0x0, 0x6f4000) (async) write$binfmt_script(r1, 0x0, 0x6f4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 661.947465ms ago: executing program 3 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xe0, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_KEYS={0xb0, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "aa1090082f1050f023e507752b"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e87ba85c78"}, @NL80211_KEY_SEQ={0xb, 0x4, "4be2e1c9271d2f"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "de492232ec"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20060000}, 0x40800) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="eb3a519208b79770c36a84fffa7873375a09eccbbfa777ebc85f3160110ea7ce984e8c56a532cc1792a301f6e24260b07a7d63a741e3e6e79056d4ce039e340d3c32ddc27cffc1433b3c4af008b319eb7e462815da3b4adcff16cbf24fd9c4656e260176919e091a3a48060df3bd514fac664d3e26be76ebb5a488fa41a7362e7ebaa07cf256fcc5267ae1858d083f82cf7fdaa56f3066c15b31c8099888"], 0x14}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)={0x80000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) timer_create(0x2, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x62}, 0x14) timer_settime(0x0, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x1f}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 660.860545ms ago: executing program 3 (id=1110): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6083, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x45e3) 658.702445ms ago: executing program 1 (id=1111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) lseek(r1, 0x4, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x1000)=nil) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002030102000000000000000001000000080001000100001f0900020080000000010015da05dc0000"], 0x28}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f00000021c0)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x224, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7a9a5e82ffd272fc3bfd7357a9183602"}]}, @NL802154_ATTR_SEC_KEY={0xb4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7dc75edf4bff91130ac797db7b59e92d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8a}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4fb38ab5155ab71f23285787a8034237a430cbc791f89fbb2907d6a3091cf06f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b713568f5435b61837ec5c1196541537"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a68911d8568c9681fc3e4b4932a56bba"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9b8c24e6ba5b28f9fa48cd9c5193367f2994cf2db8158bc305de03aeaf7f5380"}]}, @NL802154_ATTR_SEC_KEY={0x9c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9634726bd61a253de4c24dd8cce7c7b84f856d35d09233e326280d4fc22653f3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "48ed77d5ad7760f18e8ca95cd4df07e0"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x70, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3e7f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "24fe7047fc2634d2fb4e15d11c17b4050e0024d059d35487f58434913a2cf8ea"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0xc015}, 0x811) 658.290605ms ago: executing program 3 (id=1112): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @rand_addr=0x64010100}, 0x1, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) writev(r4, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="a4f9c75ce5faec13c7683334664a337a96cb0e15869ff47948e2d3594a99b77ada08c33e25dee70fd4aa06e7663286e33ee5544f8287f4577dab231ca2f9635713b099aed18da796c0c2d2f5c2a13fb24f72ce76f6c3d888d0ff8a67b8355ab3af729ef04c4837ea8dc9d9cf13281d299dc99c28460f7667e6dfcd93f00c43eff02fdb05f72385a74755e3307d03b5e31b52a1ccb5d2bbb9d2f0b0aa7550cadcc26627156f87bb44bf5ff1667183fd654da1e2b35196d1d0651d831e5530e2f0386bc8c63ff1cd71c65d7583eb0228a0b0f4996b15716f0c862617133a64d22606296e7f73b17c319bdb0280bc1f28f00a48d5838acc30182c95d0083c1b1dccd5320c847051fa3d57c75b1b5628248e9834f5283ccb2eb6d013b7e97225a01f82e4c384d33c69d77755b1c340f8da44e87f13a1cb7ef779f68aee5034b7207b675fc76839475d3dc2661bd54cbf57b1535c7e4b7062a315beb469c505882c23adb120810ecc6f895720e498c98adadde8993edba182e68b62498afdee239e22207c3cc5e208a1d519793638d565fcf8f1fdc560909802ee3c8a479dd1c64ca94e36d74ad83ecd32eec2f93fd70d2c789e8aa8a58afcff177434956089fdcf88024edc97158c8d91b313a88e2973b32b65158a2f832b4515c2ba79f5242a3bcc63757e4d86fda87b9fa6179a9b2bed13f6a96d7d9ce87dcf53a08dd646f50d9dedce522de5217af2ae9d3a5c324e1c94ac1863177b824d15705c72a1d31568d8d9f7ea9bf06a8e0c8e0371d35becc2896be68d95d574534be552a5923fde8fac67e42b116b0d6801f7081263f0f9002ade20075eb4aa62386f253609655c4dfcab1bb963465d766a7ef1e9d00f3902c2eebbc6a6210246b76b2b7a2f318104b5e6acd863b98891bb366931f0307406dd0875cbbf4dd6601e813d96d83238bd0fa88aab97ed382ec2b00e7f093f10799c1b1cacce0eb1c69d32782ab27532c0dbea3d7bf5edc2e68ce14d04a889a6276d529f7722a68bf4747181a7999a6d62a35a411a815209d28c6aa5ebf6f8d90d561f0541341f42b67b6c50508dea6608b07a1dbedd04572d3c2e4506ff59445b5a3ecf82a4c4b6f1df0f31bc8f8c153f54ff74dfa20849f31473e5e05da4fbb619cd7262000d60771432a516ac372e12c8b2d966014752a6ef27e8d261b168cf9af53d68b5de9b269496c8114e7e0ec5d65deba477afafe7ba00ca418c3289eae530a144f52e7413477e35db5cf6b05884a7b1409ae38adabe0d1deebb280bc5ec35f94ea4e1b102874625ba65a850f06d3cd0dd0506aa1322859c12e2988aea106b27d61bfa914eed771ad485916b33274d3b9ebb9b7d3a1ebe1710f33c4f0fa97528181c78d34e49d66b4af2cc27c948e98e65592b48600deea7b97cfe976653a020a1aa1955f70f16b243bcbd45825c8cf6501972ec74a43d6690289a16dea63a23c248d9036fa171c3a690fd29cc5da91a6797315148a5f3b8c0e6023f40a46989a363ce4e5eb6ceecda0488dfc81a8e4cc0e8fdb5dc17ba4a3fb1d725420871205602e9c421fa8fb5be1957be05bc68486b4ed7588ed532d024439c9ba271efc1031ff9fdc55716726c15a19a62c4dd1b3d3460bd81a24aef083748b839c36b3447160f36d6c010b2af2e9ab7b82dd1600ab9b249b3fa905888aa5fa87bcf8d432e92af69e38347bba6773ee586962c248a1c7871fbccdf61ebe3be942e21e314e2bfbee135a649394641744105f5564d8cd2a5098f84b2075c7b67d205d1bdb54eb2308b66e24a8480ecb5bba60fde4bb78fe34817a81e96bb83cc37e19e7839c55fca388aa61d6718055a5bf2c9e4b619af0ac09050ef766c2f3624961efc203d0e2225c6b9269a515b5465e39ae5830bf66ca1dac95bb9e3d3de9636e720cf80df2ab43149670bd72917dfd5bc252ffe5b5a17014f3f95b4185db219448bebed2f05c8389d06ee60b058dbefa1e6ce630c68ed11383df6d0101158b330373f1b4a95d7d1b448609c40655a80ec9cd1368f68b525fea8e21461976952ae6a3916e855d8de49c2a1a607b8247fd8ba32bbdd429623e34d8947d80129cbb737711ab9908cb87902babde1941619d6d323aec54a99a042c438f46e4d3a2d3aeea4f26d83a791d5a96d6c04cb584042a19bba545c44adec7f5d6718769fcc1236b467b12031358ec3f21b4def005e2fda16f560dc055648bd2e5b5555690467f2fcd29183580966bb3a683856006c80ad617a68568332b461e01650f2bab983bb872e254b64b0f07b9f76a11861f2c3de70e9f3cc9f596eaff8347140f68610e0e778d75fc9b87313e525b2412a0fc35ef3821e814d6e2c56c7d462f09880582a8931325ac7a3e02417fb58f0d972427cf728190071ee8cfe88117365a862f20cf3d4205489afb4b366fb6b1f9c25bbf7d587ed41e3ae101ae7e543a25a966e99bd51b4da07ee3a56b99ee97364eea8d275a67a76112f02690bf10599cdda840b1b39befc2159b0f574678e260667ff9bf85ea4b736a1212e3217cbad4627ce85d02e69bd40c7f5a725d4a5fefc36f837c0d1e0221cfe14f0aed6d9e21d224144bdd6b44211aba0820470d0965a5f5ab57ecf779a12ddbc6e17b5d00b5cd22a35fb13abf3bd667d38e1cccc0b98c997cf7216126d620dcf86372243d8fa006afda3cfb42c564676d6c8fd8ecc32bf6ac6f9978297ef1aa7e97f145cd6d8490be49c01a543470795c6a82228c7d33366dc36809ed33490fe9a08ebd9ee27c09211fdd752cd32ba5697d5b229533b6588210a4e2e3755d9ee4a687e591d39e1b0a6e4058db67981b5ff7a983d1f92fc7d3cfdc9baa1ec3f2b3026caaf41279425e8edbf3b5248c67763054b57601ab9775641aaa273221f019309d5fef778b5d239b1e1b47d958064c3d53ad0f02c1fe20040ad7000e123157eeffdd6cfc9b36e6a517a626cdb9600cfad8f6af0fbf4f565f282204de2546fd97673bd0ac4954dffa7eb531e2ce88729da1c80294b9e74c5ef5070efa1a9e5daa0fa436cd7abff4c36243744a3f1d0c1a2851143362ada81f303acb9839f04a4311e52f8d199b167988a1adba156d6e152b76b5d4359f66d5e04582976fb6875ddf814e28157eeed0b5bcb0384250c9d10a9043be1ea9e02faf0a3f226a16a4ecb47f21fda4b456f99e2aef8f0c9ecd4701ac0832cfc40a4290286da25a5d87cd3dd88d6a0ea27076e2f248144cd64432c7fba88b469111d1007c0ac41d4c4ff7579b100c30cc66a2a61ff2b23d7d2678e74f59b1d34aca8c19f22972ba69b4ba819dc2b879ab8a052f58877ef1b7acf1dd9703abd7286e310ccf0749cdeff0bc1b32938ca80ff109fb17f41a6924ae340059ac472c430465d4ba38ac04d16b941a6c9c7501a2444f3590db0b696510aaf46f840a2d0e2c01d16475342b8e27e977c672f65786e9757a746be652321091402b4ac572c4e2f3610252db85dc4ee9622c2c72f6d8ef28109f8158ff3344a42aa04adac192761041dc92e1053ab44c05481fe3b4ce842d2ae1dfa389d77324c5a1425de45123f061c7a9d1398b26be8cdf199cc38e0dca5cf45cde1ba6c819efca55c0a06c75d870d02581243676c2f056ee149467a0ef463d4f267986c9ab29eccec654b2ed1b95998540512213ae6e8912e7ccdda90ad4e559c19e0a516e3e6386e2704d7b66a0c9675b71a4ca099cd1b97cee35a73a34b1f383a14410557191443f242d640bb4125a160a72553b93ffd137945fde22811c8390a2411ecf31197f6e6331b65f1635aefd4cb1540078515c2f3103a343a7f8323e94387900e026c62235bdd611a78f52812d4fc987dd20d7941a52bf61b8a2e51163f869f0a174c0e65a3337e42f2f99abe74ced5448516dc58ab655d863c616c20e1144ec9d197b82815cddb467f68a0993d41a9519e53e6be90acaac921f71bf4e9790423542a35f2c3a63fe1fdf8bbc94a2f4a7ab3df26b4f9f4d2b95210867d1fe1781633404fcce84975ff9855fb94d2e737e1a4bda737abbbc8b46752881ef1e69255a66bbe2abc72049234297a41f15c79f36cbdd8594e0b45e58e8ddb421b5e78205355cf00df006a7b63f8600cfe14b67f0819d750b9ad01a1ba6d4878330fb4c8aeda1a4725eebe814aa9f3dfa670ba05d03c1e909ed36d5a7adb490a4e9a321a78bfd3347af44a012af42001e94f4844373b37e2226c7c129ab99bba5cb83d9d17967f3d72ec8841bf14ef9f2df9c746d4de9c298ae726d850a3af310f7e7e1b3dc5b8ac3a6b8374ce8fa3240260acca3000fd3097ad25838c3dcdc4ba4656ab054bab120dc0e3baee4fb078b9d71027e61b59a281b52749da1287affe9472f47e608b3fdb5af9ef828021da2963a1cc97317c9cb42b1b241d928e980b043392f6c99cec49eac2e42e056520d05dcf5f464038f60b9917d3d7020b35ae72fa7699c9c7df21ac9353e8e6a01faa888e7e8e359f157beef4cd50565ff97998c6544cf57f227e8a665a3a0f725a9a6df59c59dc57e822b69c0cd7e6c3d385bc53a03d3f642367553e79f1f0926456ef34ff35108eb68fee979520632e3443efa662587a2d79b96228be373b1a43e0b0717c9b2b10c53b55149a09f81f13b019edd9ddcac4d044efd989323f787b465086033000b9c9e76fa503f8f179e7ac926eaf379323590df8c89d79b450a2c153c328b87f8d503d03dc6de93f65efff59e12873f581fcd500f7194274d1fb7ed3d9f70a5ab837a539e13551eea003ee772c73644f5a916990719b8cbd2bcbdab556d2e5dc882c99f4b3e3dc4afa4e9ad48023897b32fb9c4a7a15cb93cc5565f8ecae56bf7dc1d3f365e5646f64bf00229fc1bfde01885ef1ee8c234bea31e0b07a6a12f32d2ade473eceadc22d64412cc39c081707135a2648d0355228b430ffb0c05e1699b32fad3acc07cc32aec3cf10885505116eb6f969fb8e816f2c48f96eaf7b30cbe626ba04e22b7fb44d5395781f56b67236b3f9d75f44fdd8c5836a1ebd16fc5a63a4b24953647b4ac616796bffc3043533bd3270d0f718f36336f5d6a5ea6e7546c58a0a6257146fad5afef1dbbf38bd003dc6459b82d8de92e9c79fb606101e0be3fcd948bdf1a5e17afcee17bdc307f3a229adafc5f513a3639b425d746280f23f8f14fdd85a81e61231615c1d90ee96ec7cafa2328cc3b326abfb663ee21eb4b0c49354275343caead7ed6b0ee1ff591bcce3e76685498d22a2ef36f33b7ab6b37a150b1fb1e4f63614437134aedf7614a02c6dd412e3fec1108b09dd400e12ac72fa20d24187d7272b75498926f5ba5fc20023b2a7ecdc37514d9ebdf51b8c5cabc7b952ed7ae9c50e4ebba4fa5349718d153ef29eda4ebb4932d2fcad9e94ec4f06ae4607d15d82d70b5cfd7a20c2b8e22c3b43f7e0a0b64a79a00f51bac42155c89033254c3652dc572f2018e82ea9ed48429d7158505dcc7b8c06d0fef85552604f93a1ec8fabd6a07c80cbe063fabc860b88356dec3101ff1f18768cef63482da5a13fdcc035d14a79f098bb8eea072d8db228fc4339d65919dbabe12b9ac8ea99e2987cc20c08d46e5cc0def4b5a8ded5c8f94fc19ec4cff7c6c718a592fd0234d6068938054f1554864ecde4462415a2c94b7dbfab8ce6294dbcdb786bc88308b7ce617dd2423414850f3cab5d2687c5b49e96ecd014d9cb0907e7c8adc4a864931767ecffd6120c7cbf7d797d4b38ea053c1f5a99407961aed1243190b05bc20120021c7a7ee63aea03c1f9bb35", 0x1000}, {&(0x7f00000015c0)='o', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="b50b7735e866de8118f56a84a221d657412ab1195299ab1ff2df646c71c12a6689acbeda7f7acbc2f18ef19bc76edac9bd8ddc8cbbcebbbbce3fadc729e9a9ecd347ac8ab607400c735a22eefd4b3190f00ce804b93c53c8f51b6bb6957a828729cea973f7a4c4ed6ff07bae19f76981c4bd80e7ad0960039590ac0eeadda48a8fef0d0548f77531f49356579ce933566fddb1ad0f8e4839d1bc1d30d5e41ec32c0688c37bf8166e6bb555f37d8846e32cd27c218f68508d13701761dcf453ddf4bd6590c5c1ac1c1c8544a2448c8c18a37e7c30cdb234709cfeecc3129ca07af517a8e87fe10ef301f8daf7ac1dcae84704269130999ee766427f54e26773b2cfdf3d0f15de12cb9fe9634b4a0acbf5ef0c3b974dd094876f613707f5fa713324bcb7b7ea50910071522ef80d5e50d63c2a293fa65fdec67f779979d0355a0ccbbdadf40348bd1e03fbe54e0606a9dfbe1ec19d2272952a14a0e8d416fa8e6b664a26c4af9b68ed91e0b44d4e123d8f8ffd3d0533d59979964dc643a868b8074593b546aec6aff20097c582157316a9d9a543945315dbbc550a361fa21aa9dfe35506ff6aeb06b40255c5d4fe3662f106611a0ed3b8a47395f27b0991137516f8059e86287731fe51bbd5aa7843e053b306cae24f433b2a67547049df63e726581de02b02f2e3c520f8c0ede315b81bf8db5292ec41dbc9282135dc66681f271bdf6e99285eea0eda157687cb880ae379a2afe430d44fd156f03f75ee9da0fbb67bdf9a824cdf7d3540d5f85ab4a7570a108efa30f002842c22f87b6474ce49a0d1e0a21ad5e4f40a8f62214bccb9c1a9cb80d142ad92def11b20a3e3a9185feb3553a90301f4ae1f7e258af5ed51d0961864795d5aba5accf54d260e7978c73b4dd8bc80fe978a0787e98db2823275952120701469817e32ad5fef6cbf60eaf1862ffa9b93224f1778f8336bd4aa99eccc5ac03bbdb3fccf6d0b5b4f81be8cbfafd411b297a5146410a19401fb9539d378ec4b90897ac68efdcabf881dcd7042c00c12d9c57430bebeab0d3313ba56030acbf0b94b2bb4823d2895d202d9e521819fcd8b02af477f7d14b265ac4c4bf99801fe0278ebfd7ef276527b1e65ffa0df3275a6ddf16c569b9383017ab5437a33acac4cb7bd7c7b2103e895fa2f9d6eb3f90edc3fe4047d071aa4992e5d164ec762113cb9bc4b3689e44589be7f88a1e7db95b0547932c855676baeae9e076c26cca1799888630f56861b856721768d4ed04ec9ef5b2cadfbed5a845e4fb5f1648d7e1b5ec41702a101b9c30d8ffd33421523b8d287847a18fc65f5169e1e08b224526d30be36efff4c0f2df93f11e31390095ba4aa44dc84ba5a6e8c104e89fcb407e74c113b622a544afdb903dacd88bf9b113f7b7b5e547fdf339ec6a71586545f28b581ca3af4de4e27dcf29dab0a0935dbc0ff2e09481227cc35f3df463c8f72863075443afa87a6c6dac34450971f297533763db9539def955c7118056bc282b8e10759c0c7e472e7e8a10e615a5fae9e307dde753c0fe7fd4e152879c046e54fb7080c26b2e3810db85578f6bd608b7027c79760ad10afcd93a2f92a50cb0b6aff25cf2308cb55084ea955824bc04fee5916bea3e54fe0d02cbe2b871c48013fcc74884fa57751cf52a8ef86d107a7540053cfa664c34d867cce38c8b31358d04bb179a09abcdf0f0d7589545c5b275361deddb5158942fc7fcad629478cee6416fe773929aac9d3e6534b9c62b834067fd719c34bb806cd2f2f98fbedf8d40592bdae28bd43ec9e9388b82e4480f0f34b04984232284922d276de6905ca45f38ebccf9b15a361a88bc2b28e1a4d420a2b44d954dc8f88a25b1496bd3de3afb3f0fa053b8413250c63ccb3d9127e9b472c12c6176cd41885a13ea4182c4a18facae5ff1c9dd2e2e9d63336a9188ed1e8fefe88893b65492e59034f11f7bb62045c244689d7ff8bce339243d85dc571e85c6c7c6ab68bccd0be9224892ef80d06abd691e0a6cee5daffc92dde802a244023d0f190694a10802c69f6b6e9e34360114b89588ba94c0b05056f1fa449c3ad4a7e79ce07066a8ead14e1b021fdd5c0dcc4ee343b300eaa1df55724f99556dec042ac7327842e27239c45b029e1d493cb96d9bbc5057b135c2c62da1111b1a68d1737c6252338023db2916a5297ed20b181f4978f42564262e359f2fa0f26e99ed39953567011eeb9d94caf4221358f1b67a604a8268c42a536e21e7cd9f4ef2e6b585abb6346c3d30ae13a2e72a751c9f74cbbf5bafbf5783feaae226225d9f9f9ef472ec59f18dcb57a72398a14025e43398211e12b23f19e54e7302131967a99de9926c795e83f4b98ae9adf7e53f0b52d444f2973b572cdf37ee8dd973d84894bceef8dcb33f02742ee24667adc482ff6a374eb57c8d6a55fb31774536a28a8ab37693b77dfaeff2fc0ebafb4c3d21aa182995d0fb93803972d7070ec2fd69a68d4831b003a69487c736dfad52352489251ea785381cf132216b7d035d4e69a3d3d7e128bf8e294f516ed6ae2fc5806b7d28204324677c707eec67aea4eff8f360920d13ed50c380da17ee8743ce8160dc2fd1f44f8410575ae677728b466352bf1bcaff3bc713d32d01751de87acdd93159da702da4c8b3926ba1e65f255613a7fe43edcce6b57a9f0796855b495c89504eb906e2ada8e4494c07c944046389715129a848738875b91cadfd4219080d462ad4cd3f9b4f325aa2d3627ab65b6cc991868ae15f416e520c801d7622283a5e9a0d277a26627d05a7cf64f78dbd0b93108bd19b1cc25b6566f7a78af8f6e328336f509aa72f1d88d865d97112f4f85580d662ece4b5c8cc6257e779705687a0fa268f6ff049627fd9d923af8f343d8fb9cfaf97febc6ca0bfafb31462070f3c8e7ca1e91fd51b49960b1172c7ad2d5bfd9ed93e05b597728ec9c3ac613eec372392e7c5bcb645d0736d5c6347f948934462c47679487b59e903c0af34b3ff0f0f738c34fe8d41744e1c9f76b9fe4a3b938d6a9408ddef68bbda83e177349f8c9c13a813fb1c449a3009f51f4872f1bec75fc7e2704263e86b6f60bb0a8ec3c403b9fdc29bd1aa6d86bbece038ce8db90c6f310a704962e531cd487f0a2b272c254145d2754dfc50882eedad15b12cbd4ae3fea5358e09a0ae591f8adbb1453cb1334e10b50200de677a010f3496e07594accdd49f60ba0726d04b087c65c94d481811ca09b3fda75a4bdbbfb2151366a9d6e9ce62746844b64186e8327eae64ce7f3c3cf244a79e1804d6659efcba75c045faacc902c12a0481574ea461c546f1ce8a6cbe4f286e898d8cc10607cc2478d3969e5a448d7ca010bf8187d11e673ad9aae177ab69d6d6fc511f08d887d6e028230a5e4ddea05aec3c5507257b726bd6a1c210794ccbd05a7f73ea6aa52199bff0f8e77bf65c88c74db3a0a94f1190cb9f5c02c7ad5a5fedeaa71e5d4def8f02f5b4d66efeabe2949467be020fd7837c9ce5c333dbce87182c6dc52dc31560031e2c87efed03e70d7a2709af116b6641d6ac5e29c755a867ad23fe55329666597bb1992acb2d7c64cc1a1741ed1b4a51ec5923d1bb6cda994af163e92f6ac3d309611b7815fa3777c1fde7ec63ad63d1411020ef8a10142b3904954e11bef0a01a590f5dba0e85cf8fdf6c7224fdd510d091dbd68ba98fde026a439cb7462d54ab6f22870b9ac660f6fd278db8b65b084396d7bcb46755c3c04ec5b550d826ea61a99dd45c29869a10c31608051643920142df798774ab7c5ef402247169113514b777a7fbcb85a406e0a2c691c8b48175bdbf2d5c69c9d52a85bcf93c9384653218947e21965e208d2f6b0d6c4d531b37e43217e33cc8721b5e56083d9364ee10a5b3b2ac87a90b0993a264ba6f3908270948dc7a1d0ddc2cb2a9fb5dd8cb3e3446fec20232c51912a7b2b2194650541c1793439841e96954f4e894fae98a8b5c5c9286b6fd3a1318552c8b1554bc19a57ebf07c89e191524d7bf04a9be916286769e3a80287933a604c5ea8ac2f24eb0cf5b102c218896deb4665cf7b9aaa2f57ff295ddb279cad68ec01cea0f5e3f2eb513102e65e69220a9023ae4628d44c6b60b40017aa8dcbc02cd642a2f47632753ee3572642e5d0fbfcfd07dd55c3e3eda45a0938c05f2caf365c76b63379ba1d2f6a016855902650cf87efb0aac5b2fdff23ca9fc8a8956b266cb50676d2f46a9c40e550892bf4f9607e2e45c758615963210c84e18f4d71273c18aa97a16b0212f007e7ce2287ef40e5786441f2a010e854f38f2d45b9fcd5bf91cfe945a8a371e9c1c6210bfc03104f0a1a8494608e27681ff8ae67dc112f6f87c7e6627612f906e554e056680ed72efa07557ca463d5eac0bbfab934c3e76c0701000681ed4a0659038801667946a0870e11c6df049ea164d989644b0e6065378420b86fc1951bdf2b85bc4cc4a77ff87bdd257a03a2d290a65dda890189575e85833ce54e79585602595e1e15140df132acf51cc26b1a8440833be3c6c21e4de52e63cd01aa0d14a236a085d0e902d1d88c7e30ac45a024aece6400f8c9ab1255602ffe1f79ca6a40fc05ac81c77b7a38751cec8e47e1037db92a37255ae0d0927ee86c8e51fc99563ba67f8d946e53a9bde9ece37d91adbf410e91921ca90203ad594d7b03bd1a902c80ee14cc6988c9153c6632eb530226a92addf2b3e613e04b3813a4b0a69ceb7fcf1cc272b349bd16c76cd24d23cf5fe491efa23422d4ed98d7ec39f19c8b9199bc855f639d4994b5e34bf0d96b2985541a2be1a56734ed1452885939d82682701fb39998af13cf2cd67e38e9008ab3ccb6419e8d58d4433c787d66f41e5c7238b02804f2d3f2479baba44f32215add9594bf6b73bdba2156980111736ddc9cc9f027292c9299e78f5ebacd2a08e83b3ee40972d2b7a2c7bc7e6982dd48868217f16f901c78f13b29ac9a5ed479e214cdc7c5d8580a1e6fafa7922b719f0845638925342362be255662d511e85b3559b66756b5ea0a25862377061b4d7ffa0250685f60190b5aacc95f564d9fcd5ce238c2eb1481816ffe9b0aa70273d0a38c529d233d71e22bda39ad9276c6bc2b7e7acc4144ff8a5de05e82ca7fc2540b9d826c802f88ac8716e038e8d58de42cb9d652b95b1ff46d32d95e87bcd99b314b91501d3c30b082b98175e1afc158d0d4e94d30e3091f77f932a3e8773fce546b0934c418cc875f2abfe1db5250b5da562b6d731070fad5f24e1d99ef558c24e3defc0e050cfbcbcce8369ca0b3d847660114fe878f6316ba9fff1f4fe809336df78ba8b0f1ca3280ec37820b556eeee45ca0f3f9e87afd74780ffb13b62a7c3b73ecdddae6493ccb65cb6afd45f6df8b804650e8527047ed8824637f1efcfd6bfa3c383fb7bbe3b10453244bbb722dc9675061280b2c60bbdcc77fcf18090d59e7e544b290fcbae51b8898efe4764e5db68ac27d1e4174aac2a53be4725f136625f95ad5b252341bca4b65471070144dac13ff9dd98ab0346f2db4eb92a8745939c46785c4a7bd826f40907210dcc2da756e42d1224491cef2941991565e4450a4060fa39652dd8ec19e76359b0e2e39fdf8d7f93ba174f702ac1bccefdc467313b1ccd6adba8e8ad6990d735a7f1179fd0addb46d41e8df1e708fd679da5ab785b5ad9636a23343901e37085073bc002438293509c60d6ff86a9d762ab1e1269484a5e5cddac199201c5e2e35100811d032575097a06b936367ddde6b2292a8", 0xfffffffffffffff1}, {&(0x7f0000001500)="f75a82a0306ed5019342", 0xa}], 0x6) setsockopt(r4, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) close(0x3) getsockopt(r2, 0x111, 0x8, 0x0, &(0x7f00000001c0)=0x2b) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r5, &(0x7f00000000c0), 0x0, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="f2000000750000001000"/21], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r8, &(0x7f0000001480)={0x7d, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1ff, 0x0, 0x5}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2cb107000000e3", @ANYRESHEX=r8, @ANYBLOB=',k']) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r9, 0x0, 0x100000001) 657.758365ms ago: executing program 1 (id=1113): inotify_init() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5f7453821ce9495ef3f6a129fbfb48c45fc38a2fcd3dce73fd31e86f7df0350d2be89b0433a73de93f880b3889cfc64add0e069ff97ca53d9b5a356089325ab9fb717fb463fe2ccd647ff9b21bbf895c8c1c3b024298f660c941fd3b3ed5c08b4d1a21210a21199f84e7d8e0a100", 0x6e}, {0x0}, {0x0}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x18}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast1, 0xf}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000054c0)={0xa, 0x4e23, 0x2, @empty, 0x10}, 0x1c, &(0x7f0000005640), 0x0, &(0x7f0000005680)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0xc2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @rthdr={{0x18, 0x29, 0x39, {0xc, 0x0, 0x2, 0x9}}}], 0x50}}, {{&(0x7f0000005700)={0xa, 0x4e24, 0x600, @private1, 0x1}, 0x1c, &(0x7f0000005840), 0x0, &(0x7f0000005900)}}], 0x5, 0x884) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x1, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000089c0)={&(0x7f0000008900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) getdents(r3, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="2c7f3a6fc245d681b084e71bc56b18ce046e3a78ede7077c0fa7890497e6e51fd41654be1eb9c2d19317839140b4519f3e8565dc8567eb4b60ef31856b8e5102bce08854a96fa59e2f9514cc941a2e3504fc642f22ba91631cb35ba6f5efaa8802c2daedb17217aa436fd3590f633dec00a56bca002732e08f28d42af0e9bb20e30a34ffedf9471ab60e2f7648d568edb191c6732ecf6704e27e979602663071244e9155fb4408944b5e4a60149debcab2f2e13b8200e917010b4f2dc8ea98d45a77ef00daec0f4852d2ea050606cae921869f9c5f6e5eeb4b1e83ab8bb7b28a69abd09e9221a22bab9f4be89261775b6932c5cb364895849722c4b46ed80289a881638b763d84ce5f70509a47f08c4f20e02119d15f1d85ac57c9ed6fb042fcca5cfac8fa563254ba5d093ee77d00ba8a73e328777d8b4e8bfc298e2d51ad63d8c546480093883aece2e0692c240f45b6771adb53c79731488afbf6231364c546daf3f55c48c79412c1b2c7b2170e29c514046d095e5fcaa7bf5d18d06ee00b067a23f8287929f977e9740469f479103d44df9368f5961998829cb66cf61ed458b1a55d3328cb757894d3202e886645122d995d3cd2c30c47ff46897cb880cd1409026cee957dbc154665664cfb725eef87cc39992dcc7b740693050e32398c91f1cd13a9fe7ef5268e8602149275c512a2aafcb4e9b3d484f7814516c569299b9b81a02facf43c0c5753b3000fb68f29c88d1e920c26f9ca0c002a20fe64857a025b249cebef97915dd708f9006cde6a7dab39422cf537ff9ef14802526a70bf477504c3d1059a75d8eb5378528c5edaaa096019bfe89cf9ed8b9aded0d93bc5f0e6dc21294948b630a5c1613ce168338152e1dc63c4d63b9bc64aad9836e24019d32327cb30f3e22a509dcd210d1e906b57a96013c589e8a96edf92baf736f0c69988030d93c5afac4f31d09a2b23d0bde1c818c58ce828d33bc810d8116807ec1a4acf537c077b1a5956edb9a581737fd3039420750ce4ea71564f071b55682487ba33e1478289a37cdcda771feb1d5864fce210036174bd24896844049a13a4f8a540bd7dfe32cf5896e2018f1b1b7dd603a019c3f5485c851b9e98e3110719c9680ba15578cbb5120730ebe8860b199eba93fbd63bb5150963bfac8bd5893a1b3d5ae457a1d74a8684aa7aaed4a28413ab4d59559cbd3a8c592c7bdb34e03e36809d9d8e470d4a88d38a6b1ffa1be60ab73c3eaef6a07f1d1572a438acc52e4a4d370eb87f3445daadc7ae52c15523414aa0b21abbef0bb97eee7b84e5e4d6b4573ce84eb16cc9139a03a100adad0aa2ec509b3fdc50aaa37244346071fdc3b23d10df5a9eaadb9aede01e02d67d0b5924a92f1d24c6d83329c4cec5abfc9678fb7dbd1aedf558eeda4bc917599948b8efafc9fbe0052559e9d2f94b779dc3b59825ae867bf647de5211ce8916c8ac01347804c9c5fe7958d44e63cea3241eeac5981ed5d93cadc2d21610f7d398d4526395d71cc97e5fbb20396a777977d92c47b912f0fcc93c171df535729e783337d0260db9db9959909c4913a3496f23244258419562f410ee8d68e30b05fd6d5cc88dc39659540d74a9d1eff09afc760ba6a32bd6405377881716de82a22970678c792d46b71e268ddcff321e1109cb27051ca54d9093da5e32d17bda5f90ee37cd172585489ff764f16adddcc59e94e7c3159ae4f60cf66c05af269d93f350a58ea0d5b6963a70264886170142f0502e81f0d922004f1776014ad2ed56175340d80f424702966438809542ff082033d1bcfd428fab8d54572a84fd1c1b357e8bce5db197af4f3110ef2b23379103e3f7d188f50c45e057cf468ef3e44123f7227ee60e2bbac3ae0311d9326660f8208e8544dc5aa66cfb3b9598585594d1dbd60f58bc7364baedc58062fad0854370d9788da40cebabf1ef729ed92ebfc74627c55c1b37ddbe7a2c8c254cf4121fc6d6686ae23c620e6615a594b975fcb49a319ea27a668c555dda48c4a1b40bdd45adc170d0cf1e02a5aa3856ad06c1951c77745e72420aca20348aadacb0ba9dc66ed46aa56c939228cbee5c8ad7f7aca94c2302c4908476290bdea9e7d262c23d9ddd9d5855eadb151eedf6d8d95766319bcf330a94110b0895657dcfb7d12dcbab7cc15df4b3cca9ff3b2295f0ad13c21f22573d1fdf5630c79b5fe46f1adfe7bb9cadb850418aea1ff10e2df9b49c5d07a000a619d21e13809414549ee0d89cf39f3c00fc2113b2884edbf18b00a8b1103d4f40bd5fccc6e50d8ee3d0f2588774fbbdde3869ac9940d74feb11983244a4517d57690a6503c63ed56d7d52ddb10bc0e331f4738b804c429d1c208de672296b3f87acbac1c9874e0f0b33edd5e1e2ebb0927730c86d7ad07e36402c3f1515d4cf29ac68789242f44bfaf775e5ba5fcfb6f4d4371ab8ad9d6eb8b2ae27fa8ffc9801fec0a107d19ddd4c25d36eb750ef4ed805e4fbff4122bc2b8afcd329c9170ae410731169f11e2015e9e2228d37b775809a28ec6a3b67e0572f47bf6498c2a147a594ab309b6a18ff5b8f41fa8535bc3b342bd5c23576c2fc78626a84765c71644e8bb2b033a5080f70ea05cbdef77922a668ea9415ca6602aab534187402e2840393854b331e91dbf9ac337a6d0d80deeb4ab423f0690babfe0571e355d2ac548d889abc896cfb867c147b29162d47899c4961354a5531baafa04aff30f1ce0eecb8218e922575037c19ad74f76e489a2d18b6fc5f1fa765a005c9acf03aa723f7321e8eedddcb4ebc839c188da378dc15575a6804e0cd79b9bfbc0c7fbbeaedd292b14644d3e962cad174fd62f9ded4630d27b6ad66575349d96ea055f26ab5645a41d64706c47036674180ea39e8d9031218bba148cc26d77fff99029629b88a644821f5e8149011cc0e2e3803680eda38bc771ff7f5eff707388d1d87f94cbfaa55e1a0de5e945f3aa0086114b5c64f29a0d09e2a7de267d61ba09b11020e34b17180f9929a1dd3d781df95365fd638cf3d858755b481880c6e529cc44b9fbd417a7cbf4f4e7bc5deed2c7f038afd951872baad9799f53b197182c917d3605cbb5de2c95fa9d09b883c3d9f6cf1cb30ff6aaadd6e17010325cabdb247af05faf9df9b0aee027857f88c3da7ad19e08da3cb5f663cc9dce6eec8416a0bfbe2e77a5b20a6da4e4acc9670c7cc63eddf615d13fd89e2f00aefb1439e69a2818b8f24d7ae04bc718a401fba508b0685e1e52dc7bca6c53c049d757d5755ba6394427ba45bafec43c39cbc3a5f68b88afdefa51df6be63a0c63f39c69e2ad10567cf7b408e15fd441ac365be897d6b60fe30bba997045c0ae891326369206cf9c53a609292eebe3f67c58964535710929c37211cade7dae9c965933b1aa2377d056ae400d8ef9f540f11c907f48858007fcb9303b0f2814cc6dd30636389f167d88847c9a55fb6a70adf41e54f7a433a79c9464f72ad2f615386cfa0b14081f1f55eb54b9dc96f4910ad369f37cb33259a4fae1dcf051699017ec8dce20f5401a768275f54cb61c346f06217de6eb195982b49b0a576d894fdeb1796a1b99b72d99783eca623fee56d239c263b0db23caea3462136cdac22128f0acbab8b332a7c1303bbb5997114f987398e0afbce9678ec9ce3a93b7d66fc8359c9ba1b53a65d90a1eb62caa8c56b98b337289809a56874f631edf56c508ef43106147be721c4597291f19dc8cd4150d2b34ea30846fcd8531b34dbbae516e7c42366e980c91d0180421195fb6bfb9574c2741d0a45583e275b1fd0e48f4b164957247b81a5c0292075a38f5016ab017d39c5783eb8b602281867cfdd980ee1fbe181617c526f2b3bc64905474d352b07ae36e89f5829c49b3bd2f27df0d11d1b893cfc16d2e3dcca2adc1f54915fdf6bf55be5995197bfdae10dec6556ff5f61e5e1f64112f153892b79051fa92f852854360eab66a2d9012eca143affe992ed5ad883bcb736a883e12c25d025790a1c477258a413b71fdf6321f2624efbe74f7bf816f6b07ef348bc8a8389c73293f320951d093307baa49f7544bab3b51cdc52a0cb1994358d4ca436aa66f791adae81921a01c807f1212e38b7dacc6ab7cd2a0809069c88787daecb201e7e82d321248c1f747eb9c31f76017436c2aa345c13ed45227214d37eb6701c15ff52b1d5d3d490dc80d67bd3b779009939a7dd65e759317103f21695ba06260f455d98454e3992f419899047e8ae24ef10b3c96621506d65a5c20dc5732a71478c019b240f1194fc959d77df7a1d5d6b1b6f8f43cf7e4d4d72dadf888041c3936f354045b15f2530bbdc38a2fbd8a966732ffe26d994b7ffa0c558259ff7395e4bad1f3225250ba85707e5c653e742bed1a342e6fe56c75a4c7cdf7f342e83b6a83e5dff2ee9aaab8edcc7a3ee33631887b2492995da3190e3ca8ba74ac2732a27d6524218605207c8387baf8372e3cc79879b78590dc5447ddc0aadd6c7aacbd354a445d826d6a07f89245c26ea48871a01dc9cdb40e0c6d20e5aae8141aa3aa15b5e6c85abf6eb8be70b056cabdd6da3f383b8e94fbbb1a0d9480dc55542cedb897a90b48a61776ddc4532c995c10c262c22bbac38ba5b111a09d3587ea98feaa6288bdb3f5bb3bee3ea69e4440f0192a34bf3498b933abdbfbeec830a6e74171cedc90847bc05047402f7f0501e5ca2503022c613dc779fe618ffec011ff69b9e37ad5cc2340f28656093f792742a3069c8a96e213cde8c33d110a2723bd41db10e3842e4f019f10b56c18d2093d9b508a043e1242bbc9de165f21df3530c470cda9e60a3859833bcccb9715ffd7313bac4ac1b9c1d0a3e71bb5ddba842084683a3e2ebb2b1d9fc9dbb6ecfc92af8c7bba41f3eee1c861e73d1e1e6aa7310b9adf5fc32f94913ce8cb2f924c6fb5df0be37b10d50c58b201833b03c1712d4fe50a2054a045084b892fb77457d2f0e399256a599bd91feffe659f3feeab33f8ffa4e4747ccad3814d43980d5cdb46b3a1f033b782162cdc89162a1d901590f5344781ec7d96713103893766684a4a71bf482d4223ab8c0f71b09bdfe176063ba3a967f5b5907f501302d00ad10f030aa640559feca28d9d2362ad4be69d9012ccb8ed8bb031ed27c03134c2e00de5743adf4deb78f3162f3d194d70250b4020ff64d52a30755e699d58460cac659c63c4633b43317a2265d8be16bb1abbe492033ede9d12744741124370e441e6614ab896aa239b30cfe55db1cf09c527fd23725bbd209e89aab62e517bf1449c2fbc203d78ad763892cdd5934fdbc97f023334201501260588ec39bc7b6231fe38b5b9ac8fc121049cd61c33fd23ff0480363ddd82fcb6f5d118724427fde4671cd416b96298727927f476e83bbc17f0856c7988b88e76f0cedb5d397ce4cb76efc02d7fc626e838b08ed594659cba8537f319585365f83b1269c3d4dd253bf238690dcf542b715b419100b03857f57a0dad7d2f0e099597de6bdbd9f0e18ce6a6ca478bfd7644e3ddb913bef96569c74f5733176fd25749436d6f6c8852821ad5653401814657f7ff5ccb1d47161eabdf56573f38f766827cb8bbd1fd9fd26d5eeb2e9dc5c0b0e05d0a8e335da8180f384c6bac1ad872accfe09ac9ca9102f2c35dad7689cf734a5378dc8d834b267560a089da2372d5cfbbce9aa13a55dba0b03def8ee1dec2f6a97ff7ff9a35e65272a0fff7db3aec4e9456b1d310f9b69e910be07fd161de8f67b845805282a51572a7b3668c923d03a600cfa68a881bddcf814ff4a98d9adfa2d06e883d3e65f8b6d4ca5dc4667be08449be9d08cd6fbb78c11873b1ef3f081b10cf6314bbd06ffb380df233d0e644dc8ee498bd95333c2daf9db0e6801fb274577205e791071debdb01d9786b1cc624e1425b1561afb438feaf5069937de348c51e0b4c79c88856791e9bf736d6c748025f9b28182521b67596acdf15a9e41fa02b592de42d72702ba41c1976029e082d4bb2f63da60d73732bb98783db88cc0d09e849ffac5323b2b28290ba34d1a3e0c1228a2fb0c2e92503b51d54fd0825948ca15c5511b032c36cce2c04431a47cbc378e3ec1c57ad3b37aa2b667bbc23f21880dce621a3b203579da06ffb79359619b181a72ed4d192e52c13f2dacfc18ba40f7254071e1103a164f5cf8323bbec9cd9fa6f2c9eae70715a1ef57b18c6908dabb0f7c1efe1a6ae9b6068e510209d54f760f922ed4401f1709ab65a1e4953772054d585b8a8a738463f6d70ee9dc180feeab307e6ee094ad80050a3dd450a75a7e7dff6e7a74256f2b651ce905d1c99eb30786c00e1544872b76892286848b297f31d8222cf23a4a4a664bd784ffb7a2c3abadac43cc7a791926e59e0471bdc45186ff4f564b68a9b8beedd2ef63b79823acc0a81c867b443d8f8a2242e6efe1838a8db801930644cbc73d769c0e1668a413eb2609b6151329edce4a024c5ff11110beb54a408e752729e033baccecbd321dfd8e4f16f79d16d13aa4ef212139d0cb81c8f755b6d189ef9c2869e5c2cee655df4b75c00828333c8b62c93b3ec270fe0c1af3fae784c950b441f6f78639ea5678652fbd216700d4ee85cd8662db78a061e959507787e12c7ba002f08fa01a860b34549e89bd1d3da3d23befc59ce2d50abcecba8671f4e8c312816f3977e65479b6fa8cfc618e1f569e9a12c8faea700e86748ff468c43adbd7ea74ce1702d2659bfc26ce49b24c62731dfc1f161bd31d8b6af4ea1100caf248ec18976f1a6c8143df40416e42ef9d225e40436b5fbf34450fad6f3bb8abfcffa367e0a16305dda8205bfdd33625667f709ec3a947e6ea1329c4f7d7aa8917aeccd6078e54ec7196ec7dfb27ee64e26df48a6a705c2ce330ca7b3f21a9ba1f55e2fc334adccbd7b05b489008a6d8c01f81b2b0d8933770e277ab8ceae9776e30df8573cc0032c487eea774893b300b7680188093074c71b4856436fb6dff8c82de2e227af5ea8dae0387a239c70ed977b9bc3087c55af8ec448eb4d819156fde9104bc6443d49ef5a4f3cf27614b99507c894af487637377d06476b3671c7158a870613e0a7d9ee3c693a7fd132adcc06c22e6d4655a2eef2570ab323f8a5a4b50360b0ec14c528b6cffa26b160a07c798947315ec19dafcb805b06dd45fd9a2f328dff773e680435b53349bb241cd82842f915fd23b27099b5ba5483a81fdea7f28408654f4932edfa33d10fd90281b208a9a5915543bc7e15427b4e5db36d1d1ab238e1c1cd5ffb646bf7cb033dd613bd2ddb6d56983d943618c5bd0e44f5c2d981b54ec7e5e7a988dbeb6d8b7c2707c3e7685ddbfe80fc77c1d9cb31c63c5436cd5b2b105dbc1cb7d024dcda8a47ba30068f24677b38503ba582c286437435d7b8a16dca4a56dad4db7e715a578391acfc62d6350ef92ef8b789877158c904803c3354affc8a235f2cc768856a13edf0a4cd9de6b67f7333e1b882a8ecadeb0fbc2005a708f838daf2dc86fe35d953a15d2ede3cc093e45f2719653da1d8936d10c596a66cfd588b5663e8c2afe73b5bc23c967826cf4d24fbbf9d68d18b8f65347933238d7242f69a458959cf51ae79f3f5c5a7180fe23cab53edbf0d81534b7f9b5c697981a0822c36aa483fd95111417834e5062e4ac25817727ac3380c91c7440bcb212a4354035c3813664c0fbf042623bd791873e90646940ef658f4784cdcb714e55d48cc3a30b0195895850aedc32df9435a53c0a9fab07ecfd8778d64b44be1d270fce94c2ff04e984b9f50d541e4d4d871d193a37a05f83d557be8d9cc66027d7dd3a6315b3c9838c0da8c897ca81bcb44e076bee3a7614d9806d018541c46c196b7fd677e2960306849be082875b535dd411428847dddfc2ee9af77a16c282c1ad32151ad2e2ec2a9a1281c593bddddda03afe69cd5bfd83a6e416fa2d47066533877a4dcf24b24d84dadd27acee6127fd94db9be4e3efe74650f2ad01a9adfcecfdc535cc48e3b770a9a8cde6cea193501fb89097c97d25f1bdf00c8b69ce94bd38e1c133b9f52fb8b05a7c477ce4bcaeffda896f457e21e4e93c779657cf05712a7ca161f9680a8619e1dee220ad153729b47789e737675a04733cf94fb494ecebfc8750dfe44e3959558d21ae42f76b705bf092e45445b2521162409cacc720aad8f00f5821f452953512798548369f5a5700c8d02d49cf797e7a48d05c7d7fcc09b9bbe21a907c81d5f4cbb978f21d25d802a047cd46640025f75f2c01c10a21c92a9dec5618dcbd6025dd67b215b038aaae91e76f7c729dd5b61092858013930675f124fc3c62b130f0d898affd9972a202785def90fe7f9ddd821c7de4b5acc2a30bc74085225c23e091cdb2ec42df6f5c88a6666ced41b601374c9e761c0686f71cc1c8f0daade0ba730dd6c2670df4db97c1d1ad250bf7eeaf7f5309ec18a4331e0c3a9808832898d208d7cd293bdfbb7c51d17e3f3d1397a579b8c81e5aec1e1b0ce4cd796f1cf68a49b19841126c73affc13641756cd954ad3c0e62caca61e71c9491441a294739e172d3306b00e4230febdb13bd7630184c8db1dc363fe62015e5985997d56b059dd0602b98a6bb4c0a8e0a10853cc19b2e9e187c0b2e8d70789cb863c71544445acb31edb4459698a21c1aed76a592786053f904f144d5e7715737c253a34a038cc47d4877f8140eb06fd7da9633772b445b21a7c6fe985997b64732bdf022538d57952f6f7340981ea8a2e1f19d639a3138e5f1e58f9413e74d1017f6f0649be152a3fb01a6f53521a446fd5f1a70d0279730a4ae15bc300490f55880232a3dc10a6519dc7b489160ef480e8fb3029428005c4cbee70ac0360094228e70afa66460d09e8d6ea83e89932d58a6a7ba76059de6ed122d3a02ca42bcb1572d214112e906ee607351663efea2dfd7d1a2bcb6d1d9f5d8351703b990944ca1db5452132de124677da884939c6b4890cb94f000d71f2edb511bb94a4f61afb5ee1edc7f4e14cf81ca27bbc5bcf7dd84dd495e0f174d3c9b43469c1ab1514430d7dd3adce3bdfeaa714162ea45e43f6a3b57d719449c7a191383d23069779fe7e57032c2d37d04054728acc67c2c87351d7615239978373bf22d2f5d70366eb7f3fb4a155293f98c9078b28aef1449e552616dc44963dd2b79061784f57a72105e180a6b2770c7cede4d321efda0dd526e0b5c05af55bfe606abf51569316dc0bdbc2f6f46c47a33b4bf9536acdf783dee9424605bd290f6ece0745b0890d836b24efb5361c457cc5fe6a61fe5251d60c60819365377c878a3a53229e88f3b02616ed33a23b46da3d3ecec20d174981ddb45bbfdafafc6d3296f6952e063f24a5024499b1a6b2045a29c1b8a7090e70c9f32bc187da0df89e3a1445057010206dc172ad0e247a84d8f665687f5c50eba70e019b88ebff42e9091675882af7c04c540e5b779603510d46f8e504a8a0cdcb9709ec0db4f882292c791398eefe3ac8951c0e055872c8cd29acf3b785dbd145a7c5b9e1e57853e6287ea09c2a167fd3f55ee323191dbc54f77c6875cd000a587896c658ccf47c66727d4e866206edd84b198a39adec533369ebaadb85b230b3457ed685548aa09c7c8a6e256b4c668a27a85871456e447fc221228a205ffe2b78276928416626d788feb47054db5409b03d923ab7d5443b135161171f70eee14f596d386707354be9422fcc4f3f318cd81ba2cce3e3d357b67e8fc70490a9a04d639d772077d5d8fb5665e4721e8142de055952f6c0152eb59d042f336e8e3b988de0cbad82fed64932fe71c3276ea1ec3034799b32761c71534f3b3db4037a9c541ccc6984b963c8da9cdc1ea4feaeb95ffece5aac1424a4e9d5e215c74c0f5d760e82d92126fc36eb5809ccc9e84e185494f5c0d01f68fc5623fedf20ba355166f22deabaaff5911b82ffefcb7e625ba4c3fd280d49eff03fe4114ed658c43a9d5321bd20ab75055fc3ae4270326f67e6d4ffc4ec54a727a5385f690aa18ca103edeeaf1725d4e13a7079314165e0ab1ed9e035bd530aaaaaee8f7e2a0134be70988795b535aefa64a8f52efb7ccaa3464dd9800a4281443dadfcc3d31d1acf1e205ff6f351a15efb2f19d587fbce90029ab9bc9d3dd3425c54b836492ae2c3726b91ce7e4b5082d83c8c22e394a529cb301c1288c03da50b3f16bb450522fcac0a2e7508640d130682557a615906be3506c27e6edfe2248182a5eb8f6df2da7be7d8db534b4f39e9ef46f336340e820a8433fd5df91c629e6bb459b770f750b3dd80f402b9297e72df4ef5a06d0e43acde89303cc7f5ed771f2b9fbc97166c48b277f6aa37766903d7d210899eede048a3ab9485edd521f917488913b5da3521c7b97717d27c26c7416276e9de97ea8427060c6c6c1d5049af3d793c99dd767177a6d5b123c688f93050956b024d4d49aa4573e9e99f9aa5402da85eafc14979cba26420a6bf0bb2621948295d45c3279065cd3a7313c280864f78d4b274f5f92adb20e374c6d2f7cda8938a52da1f56ac226612b95ea1e4ef5bfd11c5e3fe9604972447d3aa7fd4d78f56ecd2dd3d9f79ee12485f1b8ba3cd86e62402a76a5cad273a5446da398a66f4c36cd14bf834cdde99f18201ed3d1922b48171cc9b62d632b5fb34424e610f2fdcc8595d28842d78b26b1f2a7dcdad1c02f91a09626079470eea9f90d08a543ecf9e6b50756a160d240bcfdc5f3ee6ed995c98fb64efca7dcdba8223c07902e3117161ce2ec916888a9780cfd34ac52083301e30fdddb111c1bb61fe38d3489f09f89ef5823a6fa0b41ea013056c0a7f27ed2f3deba06b68661f5eeffe5d53829edace17a81d788f8eb8c7ce644312cc23e9b6ff48b0153f7df30f544e33f9b791ddb45e93cfda5f9874ee1e70c0864cd295be114ab8dd42d89cc1b4c34ad91d5779dc68294c7085a166c917e72cd09b637307a1fc5efe6fe163eabe16bbbca30ee1f292a904156ac4782889378d439c3dee4f95bd63c59b5ce44104d929c93c0648279b98cb7fe8ba7638d94e8e77cb74e2ea560932b3a28017783230ff22287e5c00d93f6923f8b6edccc412522f3fcd3c9146cb5c43f261705a08c64e84d923ce6b1a06e922c8dac6d7e5c22b2e5c9b8269b2810b490b8a43c0fe42b298bbc1f03f62dcdb67e24e89b14f7558fee85ca00f0a3d34b1664aeb940917dd3f1a08c5db10858f4cffee54f480e816a6dc9553b5043870d7f0a76134ee95a5a688b50281a1836fb721abe9105f9dfd7173f32bbb2bd00a75af11bc3a7618a0111cb8d5e30c5af5fe512bc23b5c590377817c063b25e2f5eed4a64825d4ca494518c4c0b9cac88cc3ccaa5477ad3e9c0b3577c156e88cd4df354d383efa800536d62790c86feb6a862cae1543e3e9c984c64ecb2b25319d62a3308e20b8ad261ecdb746bf28f58220c5ebe03204d5fe86094d81036a36ed905d4cfcc8054e7947f3ac9e88897a983adce3e3724745df71395b959b067ddc1bd8c30f092546d25a0b24f5df9136af84fb76a96d3eccefcf9ab5", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x40) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000440)={0x7, 0x5, 0x0, [{0x7fffffffffffffff, 0x8000000000000001, 0xffffffffffffffff, 0xa8, 0x3, 0x7, 0x2}, {0x7, 0x10, 0xa384, 0x7, 0x81, 0x5, 0x28, '\x00', 0x40d}, {0xe6, 0x401, 0x9, 0xe, 0x7, 0x4, 0x8, '\x00', 0x5}, {0x2, 0xfffffffffffffffe, 0x1f, 0x81, 0xa, 0x3, 0xe1, '\x00', 0x8}, {0xfc, 0x5, 0x7, 0x5, 0x0, 0x10, 0x4, '\x00', 0x5}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) 657.258126ms ago: executing program 3 (id=1114): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) r1 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc, 0x8000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0xffff, 0xc595, 0x7, 0x2, 0x3171, 0x0, 0x80000004000000, 0x2000000008], 0x80a0000, 0x200000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000680)={0x1, 0x9}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000080)=0xfffffff6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f00000039c0)=[{&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/251, 0xfb}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/204, 0xcc}, {&(0x7f00000028c0)=""/196, 0xc4}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000003b00)=""/4096, 0x1000}], 0x9}, 0xddf}], 0x2, 0x40000020, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a5a440000000010109024400010100000009040000030206d08b0ca982c9bf42e37187ce680000052406000005240000000d240f010000000000000000000905810320000000000905"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"5495f51ac3c8187c159fa264508238cd", r7, r10, {0x3, 0x1}, {0x6, 0x1}, 0x7, [0x8, 0x10000, 0x10000, 0x9, 0xffffffffffff7fff, 0x3, 0x100, 0x3, 0x9, 0x1, 0x1, 0x101, 0x800000000000, 0x5, 0x5, 0x1000002]}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) 171.042263ms ago: executing program 1 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r2, 0x0, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0x7706, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async) keyctl$chown(0x4, r2, 0x0, r3) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0x7706, 0x2) (async) 115.907059ms ago: executing program 1 (id=1116): r0 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x200, 0x5, {0x0, 0x2710}, {r1, r2/1000+10000}, {0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "1381a35f50453b91"}}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0) syz_clone(0x5082200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000027c0), 0x2, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x1) getgroups(0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setresuid(0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x39) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000940)={0x104, 0x0, &(0x7f0000000700)=[@register_looper, @acquire={0x40046305, 0x2}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x39, &(0x7f0000000380)={@fda={0x66646185, 0x5, 0x2, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/143, 0x8f, 0x1, 0x3e}, @fda={0x66646185, 0x7, 0x1, 0x7}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0xa, 0x0, 0x16}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@handle={0x73682a85, 0x1000}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/2, 0x2, 0x2, 0x3f}, @fda={0x66646185, 0x9, 0x0, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/18, 0x12, 0x0, 0x3c}}, &(0x7f00000006c0)={0x0, 0x28, 0x48}}}, @release={0x40046306, 0x1}], 0xa5, 0x0, &(0x7f0000000880)="8cd3c065a6c91a0ef6021f810380b82eb7872294c521a61f7eab822f2c74649cda3fa3a837df59b33f7f58174b8988754f9a56cc36aeffc3faf4dbc47bf96e43c927c814bf07ad3952c35f7dc018d3efdd3a5d469ca618c3365e6a9c2f98d26381ff79f95f6cdf90692efaac4393fd551e25945f6284dd4e372f996ffa0409b15880da06ed9e28cb8251fea5626da981f36bd5501cbabb728ad1c1ed94c648eb7a248dd310"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="0f015800260f01d166b88d008ee026470f0748b803000000000000000f23c00f21f83503000b000f23f836260fc7b607000000b805000000b90b0000000f01c1b9800000c00f3235000800000f30b99b010000b88e617cabba000000000f30360fe44b0b", 0x64}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_setup(0x2db3, 0x0, 0x0, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2, 0x2}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 115.093478ms ago: executing program 3 (id=1117): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(r2, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, r3, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 114.198129ms ago: executing program 0 (id=1118): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd004}, 0x4008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb5}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xb3, 0x6000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7800, 0x1, 0xa, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x4, 0x7, {{0x1b, 0x4, 0x3, 0x1, 0x6c, 0x64, 0xfffc, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @remote, {[@generic={0x8f, 0xa, "b134c03f69880ee9"}, @noop, @timestamp_addr={0x44, 0x4c, 0x13, 0x1, 0xa, [{@empty, 0x645}, {@loopback, 0x8}, {@multicast1, 0x2f3600}, {@empty, 0x7}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x5}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x5}, {@local, 0x86d}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x40, 0x8, 0x7fffffff, 0xf3c1, {{0xf, 0x4, 0x1, 0x24, 0x3c, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp={0x44, 0x8, 0xe2, 0x0, 0xc, [0x4]}, @generic={0x83, 0x4, 'm`'}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "e28e8956200358426d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b032200e0ff250002f4475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x80, 0xf800, 0x1, 0x3a3, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, {[@end, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x1c, 0xe3, 0x1, 0x0, [{@broadcast, 0x7b}, {@broadcast, 0x7}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0x4, [{@multicast1, 0x9}, {@private=0xa010102, 0xd}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x5}]}, @lsrr={0x83, 0xf, 0x3e, [@empty, @multicast1, @loopback]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000580)={@private, @dev, 0x0}, &(0x7f00000005c0)=0xc) r16 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r16, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r18 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r18, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r17}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x11c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4010}, 0x830) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close_range(r0, 0xffffffffffffffff, 0x0) 101.12908ms ago: executing program 1 (id=1119): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e99428bd7000fcdbdf2546000000080001"], 0x50}}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a00"], 0x1c}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x1, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = gettid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) r5 = getpgid(r4) ioprio_set$pid(0x2, r5, 0x0) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000100)={0x47c}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0xfffff, r6) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f00000002c0)={0x1}) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 54.542025ms ago: executing program 1 (id=1120): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = dup(r1) chdir(&(0x7f0000000000)='./file0\x00') write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0xc, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@cache_fscache}], [], 0x6b}}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x3, "5eca8347"}, @main=@item_012={0x2, 0x0, 0xa, "5a95"}, @global=@item_012={0x2, 0x1, 0x9, "0400"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @global=@item_012={0x1, 0x1, 0x4, 'K'}]}}, 0x0}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x442201, 0x20) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000480)={{r6}, "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"}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xcb, 0x2, 0x0}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r6, 0x0, 0xffffffff) 0s ago: executing program 0 (id=1121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000040)="660f38821bf082730000660f381ee1baf80c66b80c05fb8566efbafc0cec0f212cba2100b000eef30f1eff660f73d90f660fc731e3e5", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2={0xff, 0x5}, 0xffffffff}, 0x53) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xf96acfe8de83bc82, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r8 = openat$incfs(r7, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x40106726, &(0x7f00000000c0)) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): led: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 24.147147][ T353] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7'. [ 24.257345][ T364] SELinux: Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped). [ 24.340539][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.423110][ T373] ======================================================= [ 24.423110][ T373] WARNING: The mand mount option has been deprecated and [ 24.423110][ T373] and is ignored by this kernel. Remove the mand [ 24.423110][ T373] option from the mount to silence this warning. [ 24.423110][ T373] ======================================================= [ 24.501071][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 24.510788][ T10] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 24.519131][ T10] usb 4-1: config 0 has no interface number 0 [ 24.526048][ T10] usb 4-1: config 0 interface 148 altsetting 2 has an endpoint descriptor with address 0x12, changing to 0x2 [ 24.539038][ T10] usb 4-1: config 0 interface 148 has no altsetting 0 [ 24.547932][ T10] usb 4-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 24.557139][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.566160][ T10] usb 4-1: Product: syz [ 24.570395][ T10] usb 4-1: Manufacturer: syz [ 24.575007][ T10] usb 4-1: SerialNumber: syz [ 24.581380][ T10] usb 4-1: config 0 descriptor?? [ 24.588731][ T10] pl2303 4-1:0.148: required interrupt-in endpoint missing [ 24.702875][ T389] overlayfs: missing 'lowerdir' [ 24.790578][ T338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.794061][ T10] usb 4-1: USB disconnect, device number 2 [ 25.335738][ T394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=394 comm=syz.3.21 [ 25.416965][ T396] rust_binder: Write failure EFAULT in pid:13 [ 25.456189][ T330] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 25.490099][ T330] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 25.497629][ T330] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 25.522099][ T330] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 25.570236][ T394] rust_binder: Error in use_page_slow: ESRCH [ 25.570261][ T394] rust_binder: use_range failure ESRCH [ 25.576435][ T394] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 25.582319][ T394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.602458][ T394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:5 [ 25.611702][ T403] rust_binder: Error in use_page_slow: ESRCH [ 25.626974][ T403] rust_binder: use_range failure ESRCH [ 25.626998][ T403] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 25.633097][ T403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.641074][ T403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:33 [ 25.644593][ T398] rust_binder: Error while translating object. [ 25.665258][ T398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.672301][ T398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 25.801757][ T421] rust_binder: Write failure EFAULT in pid:14 [ 25.860475][ T423] 9pnet_fd: Insufficient options for proto=fd [ 25.999803][ T330] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.161385][ T330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.169687][ T330] usb 2-1: not running at top speed; connect to a high speed hub [ 26.178801][ T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.189797][ T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.200929][ T330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.210172][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.216373][ T438] rust_binder: Got transaction with invalid offset. [ 26.218202][ T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.218224][ T330] usb 2-1: Product: syz [ 26.224989][ T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 26.234338][ T330] usb 2-1: Manufacturer: syz [ 26.252169][ T330] usb 2-1: SerialNumber: syz [ 26.364299][ T442] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 26.479388][ T416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 26.544087][ T330] usb 2-1: 0:2 : does not exist [ 26.560728][ T330] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 26.572169][ T330] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 26.582029][ T330] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 26.591490][ T330] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 26.600922][ T330] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 26.610391][ T330] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 26.619827][ T330] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 26.630517][ T330] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 26.641284][ T330] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 26.652559][ T330] usb 2-1: USB disconnect, device number 2 [ 26.716640][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 26.716664][ T36] audit: type=1400 audit(1761303211.050:183): avc: denied { ioctl } for pid=448 comm="syz.3.41" path="socket:[5301]" dev="sockfs" ino=5301 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.747296][ T36] audit: type=1400 audit(1761303211.060:184): avc: denied { ioctl } for pid=448 comm="syz.3.41" path="socket:[5305]" dev="sockfs" ino=5305 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.783224][ T36] audit: type=1400 audit(1761303211.120:185): avc: denied { setopt } for pid=450 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.802789][ T36] audit: type=1400 audit(1761303211.120:186): avc: denied { ioctl } for pid=450 comm="syz.3.42" path="socket:[5313]" dev="sockfs" ino=5313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.829078][ T36] audit: type=1400 audit(1761303211.120:187): avc: denied { create } for pid=450 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.848563][ T36] audit: type=1400 audit(1761303211.120:188): avc: denied { ioctl } for pid=450 comm="syz.3.42" path="socket:[5315]" dev="sockfs" ino=5315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.872982][ T36] audit: type=1400 audit(1761303211.190:189): avc: denied { create } for pid=453 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.918539][ T460] rust_binder: Error while translating object. [ 26.918593][ T460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 26.925428][ T460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:57 [ 26.966102][ T36] audit: type=1400 audit(1761303211.300:190): avc: denied { lock } for pid=462 comm="syz.2.46" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.007739][ T466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 27.012965][ T36] audit: type=1400 audit(1761303211.340:191): avc: denied { map } for pid=465 comm="syz.2.47" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.045903][ T36] audit: type=1400 audit(1761303211.340:192): avc: denied { write } for pid=465 comm="syz.2.47" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.095766][ T470] IPv6: NLM_F_CREATE should be specified when creating new route [ 27.103640][ T470] IPv6: NLM_F_REPLACE set, but no existing node found! [ 27.111237][ T470] rust_binder: Error while translating object. [ 27.111262][ T470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.112393][ T473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.117525][ T470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:64 [ 27.268148][ T480] support for the xor transformation has been removed. [ 27.353147][ T484] tipc: Started in network mode [ 27.358093][ T484] tipc: Node identity 4267859bab7d, cluster identity 4711 [ 27.365452][ T484] tipc: Enabled bearer , priority 0 [ 27.372609][ T483] tipc: Resetting bearer [ 27.384735][ T483] tipc: Disabling bearer [ 27.544372][ T330] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.699995][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 27.706359][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.716645][ T330] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 27.719805][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.725670][ T330] usb 2-1: New USB device found, idVendor=0058, idProduct=0000, bcdDevice= 0.08 [ 27.742357][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.760061][ T330] usb 2-1: config 0 descriptor?? [ 27.879794][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.014543][ T510] binder: Bad value for 'stats' [ 28.051665][ T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 28.129814][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.389794][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.519815][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.759829][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.870052][ T9] usb usb4-port1: attempt power cycle [ 29.032718][ T527] rust_binder: Error while translating object. [ 29.032749][ T527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 29.038977][ T527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 29.089789][ T496] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 29.209805][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.230774][ T9] usb 4-1: device descriptor read/8, error -71 [ 29.249775][ T496] usb 3-1: Invalid ep0 maxpacket: 32 [ 29.329788][ T332] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.360864][ T9] usb 4-1: device descriptor read/8, error -71 [ 29.389846][ T496] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 29.480996][ T332] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.492658][ T332] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 29.503634][ T332] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 29.514926][ T332] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 29.524039][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.533054][ T532] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 29.549763][ T496] usb 3-1: Invalid ep0 maxpacket: 32 [ 29.555239][ T496] usb usb3-port1: attempt power cycle [ 29.599797][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.621148][ T9] usb 4-1: device descriptor read/8, error -71 [ 29.750838][ T9] usb 4-1: device descriptor read/8, error -71 [ 29.860241][ T9] usb usb4-port1: unable to enumerate USB device [ 29.899801][ T496] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 29.920098][ T496] usb 3-1: Invalid ep0 maxpacket: 32 [ 30.049812][ T496] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 30.070137][ T496] usb 3-1: Invalid ep0 maxpacket: 32 [ 30.075542][ T496] usb usb3-port1: unable to enumerate USB device [ 30.314008][ T496] usb 2-1: USB disconnect, device number 3 [ 30.378854][ T332] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 30.392527][ T332] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 30.410465][ T332] usb 1-1: USB disconnect, device number 2 [ 30.410500][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 30.423760][ T330] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 30.446376][ T330] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 30.453949][ T330] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 30.462159][ T330] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 30.530233][ T535] rust_binder: got new transaction with bad transaction stack [ 30.530255][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 30.589822][ T541] capability: warning: `syz.1.72' uses 32-bit capabilities (legacy support in use) [ 30.631893][ T545] netlink: 92 bytes leftover after parsing attributes in process `syz.1.73'. [ 30.641199][ T545] __vm_enough_memory: pid: 545, comm: syz.1.73, bytes: 18014402804453376 not enough memory for the allocation [ 30.704531][ T549] support for the xor transformation has been removed. [ 30.839515][ T560] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 30.949102][ T566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 30.949927][ T566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=566 comm=syz.0.81 [ 30.974969][ T566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=566 comm=syz.0.81 [ 31.375107][ T581] syz.3.86 uses obsolete (PF_INET,SOCK_PACKET) [ 31.468271][ T589] rust_binder: Error while translating object. [ 31.468317][ T589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.474647][ T589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 31.487339][ T596] rust_binder: Write failure EFAULT in pid:56 [ 31.571138][ T598] __vm_enough_memory: pid: 598, comm: syz.0.91, bytes: 18014402804453376 not enough memory for the allocation [ 31.632376][ T604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 31.755786][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 31.755805][ T36] audit: type=1400 audit(1761303216.090:290): avc: denied { write } for pid=618 comm="syz.1.97" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.794079][ T36] audit: type=1400 audit(1761303216.090:291): avc: denied { ioctl } for pid=618 comm="syz.1.97" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.828514][ T36] audit: type=1400 audit(1761303216.160:292): avc: denied { mount } for pid=620 comm="syz.3.98" name="/" dev="ramfs" ino=4998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 31.851571][ T36] audit: type=1400 audit(1761303216.160:293): avc: denied { read write } for pid=620 comm="syz.3.98" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.874688][ T36] audit: type=1400 audit(1761303216.160:294): avc: denied { open } for pid=620 comm="syz.3.98" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 31.914117][ T36] audit: type=1400 audit(1761303216.190:295): avc: denied { create } for pid=625 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.936763][ T36] audit: type=1400 audit(1761303216.190:296): avc: denied { getopt } for pid=625 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.960723][ T36] audit: type=1400 audit(1761303216.190:297): avc: denied { create } for pid=625 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.983035][ T36] audit: type=1400 audit(1761303216.270:298): avc: denied { mounton } for pid=632 comm="syz.2.101" path="/30/file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.017289][ T36] audit: type=1400 audit(1761303216.350:299): avc: denied { create } for pid=636 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 32.138856][ T648] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 32.147885][ T648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 32.147916][ T648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:97 [ 32.157355][ T496] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.192052][ T650] rust_binder: Error while translating object. [ 32.192096][ T650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.198292][ T650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:99 [ 32.300406][ T663] syz.0.107 (663): attempted to duplicate a private mapping with mremap. This is not supported. [ 32.309823][ T496] usb 4-1: device descriptor read/64, error -71 [ 32.469044][ T668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 32.469079][ T668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:70 [ 32.499798][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 32.569823][ T496] usb 4-1: device descriptor read/64, error -71 [ 32.579800][ T332] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.661170][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.669288][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 32.677818][ T9] usb 2-1: config 1 has an invalid interface number: 121 but max is 0 [ 32.686141][ T9] usb 2-1: config 1 has no interface number 0 [ 32.692501][ T9] usb 2-1: config 1 interface 121 has no altsetting 0 [ 32.700893][ T9] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 32.710021][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.718048][ T9] usb 2-1: Product: syz [ 32.722237][ T9] usb 2-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏 [ 32.740021][ T9] usb 2-1: SerialNumber: syz [ 32.745807][ T332] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 32.756247][ T332] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 32.770923][ T332] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 32.780044][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.788027][ T332] usb 3-1: Product: syz [ 32.792206][ T332] usb 3-1: Manufacturer: syz [ 32.796852][ T332] usb 3-1: SerialNumber: syz [ 32.803554][ T332] rtl8150 3-1:1.0: couldn't find required endpoints [ 32.810271][ T332] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 32.819964][ T496] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.949804][ T496] usb 4-1: device descriptor read/64, error -71 [ 33.130115][ T9] usb_ehset_test 2-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 33.141225][ T9] usb 2-1: USB disconnect, device number 4 [ 33.199800][ T496] usb 4-1: device descriptor read/64, error -71 [ 33.309868][ T496] usb usb4-port1: attempt power cycle [ 33.364479][ T683] rust_binder: 83: no such ref 1 [ 33.369497][ T683] rust_binder: 83: no such ref 1 [ 33.374520][ T683] rust_binder: 83: no such ref 3 [ 33.432399][ T692] netlink: 'syz.0.119': attribute type 27 has an invalid length. [ 33.442762][ T692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 33.459026][ T692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 33.470884][ T694] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 33.479956][ T694] rust_binder: Error while translating object. [ 33.490497][ T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.496754][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 33.509386][ T694] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.518881][ T694] rust_binder: Error while translating object. [ 33.519049][ T45] usb 3-1: USB disconnect, device number 6 [ 33.525375][ T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.537476][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 33.624187][ T702] /dev/rnullb0: Can't open blockdev [ 33.656772][ T705] tmpfs: Cannot disable swap on remount [ 33.659860][ T496] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.669961][ T705] __vm_enough_memory: pid: 705, comm: syz.1.125, bytes: 18014402804453376 not enough memory for the allocation [ 33.683252][ T705] tmpfs: Cannot disable swap on remount [ 33.690825][ T496] usb 4-1: device descriptor read/8, error -71 [ 33.741927][ T712] tipc: Can't bind to reserved service type 0 [ 33.749967][ T712] process 'syz.1.127' launched '/dev/fd/5' with NULL argv: empty string added [ 33.830875][ T496] usb 4-1: device descriptor read/8, error -71 [ 33.893981][ T722] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.902153][ T722] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 34.009856][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.019420][ T724] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 34.069827][ T496] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 34.090844][ T496] usb 4-1: device descriptor read/8, error -71 [ 34.160936][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.170764][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.184068][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.193366][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.202281][ T9] usb 1-1: config 0 descriptor?? [ 34.208469][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 34.220833][ T496] usb 4-1: device descriptor read/8, error -71 [ 34.329920][ T496] usb usb4-port1: unable to enumerate USB device [ 34.399461][ T726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.409319][ T715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.424385][ T715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.435036][ T715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.435058][ T715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105 [ 34.445189][ T45] usb 1-1: USB disconnect, device number 3 [ 34.980450][ T749] rust_binder: Write failure EFAULT in pid:82 [ 35.009277][ T753] Zero length message leads to an empty skb [ 35.262230][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 35.360767][ T799] veth0_virt_wifi: entered allmulticast mode [ 35.440844][ T822] incfs: ino conflict with backing FS 3 [ 35.446842][ T806] overlay: Unknown parameter '//file0/file0' [ 35.519771][ T9] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 35.670069][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 35.739709][ T838] rust_binder: Write failure EINVAL in pid:125 [ 35.799786][ T9] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 35.810684][ T851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 35.933738][ T774] veth0_virt_wifi: left allmulticast mode [ 35.959787][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 35.967653][ T9] usb usb3-port1: attempt power cycle [ 36.007940][ T855] FAT-fs (rnullb0): bogus number of reserved sectors [ 36.014698][ T855] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 36.129816][ T496] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 36.236852][ T877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.248114][ T877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.261635][ T877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.261800][ T880] SELinux: policydb magic number 0x20766264 does not match expected magic number 0xf97cff8c [ 36.270918][ T877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.280542][ T880] SELinux: failed to load policy [ 36.287978][ T496] usb 4-1: Using ep0 maxpacket: 16 [ 36.303631][ T496] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 36.316965][ T496] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.329046][ T9] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 36.336730][ T496] usb 4-1: config 0 has no interface number 0 [ 36.344582][ T496] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 36.353852][ T496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.361989][ T496] usb 4-1: Product: syz [ 36.366250][ T496] usb 4-1: Manufacturer: syz [ 36.370946][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 36.376469][ T496] usb 4-1: SerialNumber: syz [ 36.385727][ T496] usb 4-1: config 0 descriptor?? [ 36.448923][ T890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.454446][ T889] rust_binder: Write failure EINVAL in pid:143 [ 36.499832][ T9] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 36.530157][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 36.536047][ T9] usb usb3-port1: unable to enumerate USB device [ 36.569815][ T892] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.593463][ T853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 36.593874][ T45] usb 4-1: USB disconnect, device number 11 [ 36.670726][ T907] rust_binder: Error while translating object. [ 36.670771][ T907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.677406][ T907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 36.804310][ T916] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.834735][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 36.834751][ T36] audit: type=1400 audit(1761303221.170:391): avc: denied { mount } for pid=919 comm="syz.1.193" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.840444][ T920] rust_binder: Error while translating object. [ 36.862377][ T920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.868699][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 36.875171][ T921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.887368][ T921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 36.980730][ T36] audit: type=1400 audit(1761303221.320:392): avc: denied { getopt } for pid=927 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.289820][ T45] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 37.324321][ T36] audit: type=1400 audit(1761303221.660:393): avc: denied { sqpoll } for pid=937 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.441257][ T45] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 37.449522][ T45] usb 2-1: config 1 has no interface number 0 [ 37.455787][ T45] usb 2-1: config 1 interface 105 has no altsetting 0 [ 37.464548][ T45] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 37.473789][ T45] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 37.482466][ T45] usb 2-1: Product: syz [ 37.486712][ T45] usb 2-1: Manufacturer: syz [ 37.491488][ T45] usb 2-1: SerialNumber: syz [ 37.683904][ T1001] rust_binder: 166: no such ref 1 [ 37.706506][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 37.795097][ T36] audit: type=1400 audit(1761303222.130:394): avc: denied { remount } for pid=1013 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.802970][ T1014] binder: Bad value for 'max' [ 37.905063][ T45] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 37.918567][ T36] audit: type=1400 audit(1761303222.250:395): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.922703][ T45] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 37.943786][ T45] usb 2-1: USB disconnect, device number 5 [ 37.960414][ T1025] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 37.961221][ T36] audit: type=1400 audit(1761303222.300:396): avc: denied { setopt } for pid=1024 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.996645][ T1035] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 38.004050][ T36] audit: type=1400 audit(1761303222.330:397): avc: denied { audit_write } for pid=1028 comm="syz.3.208" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.027070][ T1035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 38.035029][ T36] audit: type=1400 audit(1761303222.330:398): avc: denied { nlmsg_tty_audit } for pid=1028 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 38.290107][ T1051] capability: warning: `syz.2.214' uses deprecated v2 capabilities in a way that may be insecure [ 38.353297][ T1057] netlink: 'syz.2.214': attribute type 4 has an invalid length. [ 38.362211][ T36] audit: type=1400 audit(1761303222.700:399): avc: denied { getopt } for pid=1055 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.392969][ T36] audit: type=1400 audit(1761303222.700:400): avc: denied { read } for pid=1055 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.416597][ T1062] netlink: 9 bytes leftover after parsing attributes in process `syz.1.217'. [ 38.428774][ T1062] gretap0: entered promiscuous mode [ 38.436170][ T1062] netlink: 5 bytes leftover after parsing attributes in process `syz.1.217'. [ 38.445258][ T1062] 0{X: renamed from gretap0 [ 38.454148][ T1062] 0{X: left promiscuous mode [ 38.459265][ T1062] 0{X: entered allmulticast mode [ 38.465507][ T1062] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 38.629538][ T1069] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 38.629566][ T1069] rust_binder: Error while translating object. [ 38.643057][ T1069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.649513][ T1069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 38.671245][ T1071] netlink: 388 bytes leftover after parsing attributes in process `syz.3.220'. [ 38.898358][ T1079] /dev/md0: Can't lookup blockdev [ 38.945192][ T1084] rust_binder: Write failure EINVAL in pid:215 [ 38.972703][ T956] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.113145][ T1097] netlink: 'syz.1.229': attribute type 4 has an invalid length. [ 39.166425][ T1101] rust_binder: Error while translating object. [ 39.166471][ T1101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 39.170803][ T1102] binder: Bad value for 'max' [ 39.172689][ T1101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:224 [ 40.208665][ T1127] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 40.226983][ T1127] overlayfs: missing 'lowerdir' [ 40.331919][ T1129] rust_binder: Write failure EINVAL in pid:218 [ 40.427516][ T1145] rust_binder: Write failure EFAULT in pid:233 [ 40.445212][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:237 [ 40.463546][ T1150] binder: Bad value for 'stats' [ 40.468990][ T1151] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 40.630519][ T1177] netlink: 9 bytes leftover after parsing attributes in process `syz.0.250'. [ 40.639863][ T1177] gretap0: entered promiscuous mode [ 40.979807][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.979834][ T1090] Bluetooth: hci0: command 0x1003 tx timeout [ 41.623575][ T1209] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 41.631982][ T1209] binder: Unknown parameter 'fscontext?}' [ 41.879781][ T433] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 41.919786][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.030948][ T433] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 42.039180][ T433] usb 4-1: config 0 has no interface number 0 [ 42.046655][ T433] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 42.055771][ T45] usb 1-1: device descriptor read/64, error -71 [ 42.062057][ T433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.070092][ T433] usb 4-1: Product: syz [ 42.074260][ T433] usb 4-1: Manufacturer: syz [ 42.078844][ T433] usb 4-1: SerialNumber: syz [ 42.084086][ T433] usb 4-1: config 0 descriptor?? [ 42.291009][ T1214] binder: Unknown parameter 'fsuuid' [ 42.299574][ T433] usb 4-1: USB disconnect, device number 12 [ 42.319792][ T45] usb 1-1: device descriptor read/64, error -71 [ 42.579769][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.709788][ T45] usb 1-1: device descriptor read/64, error -71 [ 42.949789][ T45] usb 1-1: device descriptor read/64, error -71 [ 43.027884][ T1244] rust_binder: Error while translating object. [ 43.027927][ T1244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 43.034361][ T1244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:193 [ 43.061417][ T45] usb usb1-port1: attempt power cycle [ 43.076348][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 43.076364][ T36] audit: type=1400 audit(1761303227.410:424): avc: denied { create } for pid=1246 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 43.104050][ T36] audit: type=1400 audit(1761303227.440:425): avc: denied { create } for pid=1246 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 43.148283][ T36] audit: type=1400 audit(1761303227.480:426): avc: denied { connect } for pid=1249 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.167904][ T1247] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 43.169837][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.209001][ T1255] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 43.223517][ T1257] rust_binder: Write failure EFAULT in pid:136 [ 43.306978][ T1264] kvm: pic: single mode not supported [ 43.313182][ T1264] kvm: pic: level sensitive irq not supported [ 43.318629][ T1264] kvm: pic: single mode not supported [ 43.324727][ T1264] kvm: pic: level sensitive irq not supported [ 43.340647][ T1266] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 43.351030][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.363394][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 43.372531][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.385446][ T9] usb 2-1: config 0 descriptor?? [ 43.449913][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.470808][ T45] usb 1-1: device descriptor read/8, error -71 [ 43.600786][ T45] usb 1-1: device descriptor read/8, error -71 [ 43.791957][ T36] audit: type=1326 audit(1761303228.130:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1237 comm="syz.1.273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86f7f8efc9 code=0x0 [ 43.839772][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.860847][ T45] usb 1-1: device descriptor read/8, error -71 [ 43.868268][ T1275] raw_sendmsg: syz.1.273 forgot to set AF_INET. Fix it! [ 43.993411][ T45] usb 1-1: device descriptor read/8, error -71 [ 44.004929][ T1280] rust_binder: Read failure Err(EAGAIN) in pid:152 [ 44.039214][ T1287] overlayfs: missing 'lowerdir' [ 44.064059][ T1289] rust_binder: Error while translating object. [ 44.064103][ T1289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.070349][ T1289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 44.099975][ T45] usb usb1-port1: unable to enumerate USB device [ 44.302831][ T1311] lo: entered allmulticast mode [ 44.307876][ T1311] lo: left allmulticast mode [ 44.347658][ T1316] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 44.355045][ T1316] rust_binder: Write failure EINVAL in pid:211 [ 44.396947][ T36] audit: type=1400 audit(1761303228.730:428): avc: denied { read } for pid=1312 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.515983][ T1323] rust_binder: Error while translating object. [ 44.516034][ T1323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.522261][ T1323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 44.546695][ T1325] binder: Unknown parameter '01777777777777777777777' [ 44.587452][ T1327] tc_dump_action: action bad kind [ 44.599789][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 44.627879][ T1332] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 44.637762][ T1332] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 44.645766][ T1332] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 44.654287][ T1332] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 44.662276][ T1332] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 44.684328][ T36] audit: type=1400 audit(1761303229.020:429): avc: denied { setopt } for pid=1333 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.751825][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.766533][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 44.790285][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.799782][ T45] usb 4-1: config 0 descriptor?? [ 44.808302][ T36] audit: type=1326 audit(1761303229.140:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1342 comm="syz.2.310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fe559b85e67 code=0x0 [ 44.860598][ T1350] __vm_enough_memory: pid: 1350, comm: syz.2.310, bytes: 18014402804453376 not enough memory for the allocation [ 45.207695][ T45] isku 0003:1E7D:3264.0003: item 0 1 0 9 parsing failed [ 45.214932][ T45] isku 0003:1E7D:3264.0003: parse failed [ 45.220664][ T45] isku 0003:1E7D:3264.0003: probe with driver isku failed with error -22 [ 45.409965][ T36] audit: type=1400 audit(1761303229.750:431): avc: denied { read } for pid=1317 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.429838][ T1318] rust_binder: got new transaction with bad transaction stack [ 45.429868][ T1318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 45.642641][ T36] audit: type=1400 audit(1761303229.980:432): avc: denied { ioctl } for pid=1358 comm="syz.0.315" path="socket:[10269]" dev="sockfs" ino=10269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.690337][ T1361] 9pnet_fd: Insufficient options for proto=fd [ 45.734233][ T1363] rust_binder: Error while translating object. [ 45.734281][ T1363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 45.740561][ T1363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:288 [ 45.767756][ T1368] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 45.784865][ T1368] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 45.793661][ T1368] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 45.801597][ T1368] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 45.929668][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 45.930975][ T433] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 45.944841][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.947516][ T1372] binder: Unknown parameter 'defcontext01777777777777777777777' [ 45.959803][ T533] usb 4-1: USB disconnect, device number 13 [ 45.968305][ T36] audit: type=1400 audit(1761303230.300:433): avc: denied { connect } for pid=1371 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.994817][ T9] usb 2-1: USB disconnect, device number 6 [ 46.000294][ T1381] binder: Bad value for 'max' [ 46.055710][ T1383] random: crng reseeded on system resumption [ 46.111523][ T433] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.121304][ T1390] rust_binder: Error in use_page_slow: ESRCH [ 46.121327][ T1390] rust_binder: use_range failure ESRCH [ 46.127462][ T1390] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 46.134065][ T1390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.136404][ T433] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 46.142543][ T1390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:219 [ 46.152959][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 4 [ 46.166015][ T1390] rust_binder: Write failure EINVAL in pid:219 [ 46.172760][ T1392] rust_binder: Error while translating object. [ 46.189301][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 0 [ 46.206613][ T1392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.206642][ T1392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:264 [ 46.216623][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.234193][ T1404] rust_binder: Error while translating object. [ 46.235767][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 46.237656][ T1404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 46.242164][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 46.254431][ T1404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:228 [ 46.262760][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 14592, setting to 8 [ 46.327895][ T433] usb 3-1: string descriptor 0 read error: -22 [ 46.334168][ T433] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 46.349901][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.359264][ T1411] netlink: 92 bytes leftover after parsing attributes in process `syz.3.331'. [ 46.369355][ T433] usb 3-1: config 0 descriptor?? [ 46.375012][ T1361] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.409275][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.914866][ T533] usb 3-1: USB disconnect, device number 11 [ 46.931261][ T1409] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 46.940855][ T1412] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 47.091955][ T1436] netlink: 108 bytes leftover after parsing attributes in process `syz.3.339'. [ 47.277320][ T533] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 47.285413][ T533] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.575348][ T1463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 47.623780][ T1469] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.623797][ T1469] rust_binder: Read failure Err(EFAULT) in pid:219 [ 47.683576][ T1473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=1473 comm=syz.2.351 [ 47.725870][ T1476] incfs: Options parsing error. -22 [ 47.731176][ T1476] incfs: mount failed -22 [ 47.788247][ T956] Bluetooth: hci1: Frame reassembly failed (-84) [ 48.309772][ T533] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 48.460833][ T533] usb 2-1: config 16 has an invalid interface number: 19 but max is 0 [ 48.469228][ T533] usb 2-1: config 16 has no interface number 0 [ 48.477090][ T533] usb 2-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 48.486383][ T533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.494506][ T533] usb 2-1: Product: syz [ 48.498772][ T533] usb 2-1: Manufacturer: syz [ 48.503518][ T533] usb 2-1: SerialNumber: syz [ 48.718367][ T533] usb 2-1: USB disconnect, device number 7 [ 48.766402][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.928867][ T36] kauditd_printk_skb: 565 callbacks suppressed [ 48.928885][ T36] audit: type=1400 audit(1761303233.260:999): avc: denied { bpf } for pid=1503 comm="syz.3.360" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.991278][ T36] audit: type=1400 audit(1761303233.330:1000): avc: denied { setopt } for pid=1508 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.034896][ T36] audit: type=1400 audit(1761303233.370:1001): avc: denied { getopt } for pid=1511 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.069782][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.075952][ T36] audit: type=1400 audit(1761303233.410:1002): avc: denied { connect } for pid=1518 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.110707][ T36] audit: type=1400 audit(1761303233.450:1003): avc: denied { write } for pid=1525 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.112921][ T1528] netlink: 'syz.3.367': attribute type 27 has an invalid length. [ 49.130959][ T1526] exFAT-fs (rnullb0): invalid boot record signature [ 49.144715][ T1526] exFAT-fs (rnullb0): failed to read boot sector [ 49.151167][ T1526] exFAT-fs (rnullb0): failed to recognize exfat type [ 49.230459][ T1538] rust_binder: Write failure EFAULT in pid:303 [ 49.316804][ T1547] binder: Bad value for 'stats' [ 49.329561][ T1547] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 49.624918][ T1554] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 49.632347][ T1554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 49.648726][ T36] audit: type=1400 audit(1761303233.980:1004): avc: denied { connect } for pid=1555 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.763324][ T36] audit: type=1400 audit(1761303234.100:1005): avc: denied { shutdown } for pid=1557 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.805710][ T1563] exFAT-fs (rnullb0): invalid boot record signature [ 49.812692][ T1563] exFAT-fs (rnullb0): failed to read boot sector [ 49.819092][ T1563] exFAT-fs (rnullb0): failed to recognize exfat type [ 49.823928][ T1566] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 49.825889][ T36] audit: type=1400 audit(1761303234.160:1006): avc: denied { bind } for pid=1564 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.859807][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 49.860065][ T1569] rust_binder: Error while translating object. [ 49.865890][ T1090] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 49.870611][ T1569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.878422][ T1569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 49.987466][ T1584] rust_binder: Fixups oob 178 180 369 186 [ 49.989558][ T36] audit: type=1400 audit(1761303234.320:1007): avc: denied { mount } for pid=1570 comm="syz.2.382" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.001412][ T1584] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 50.025306][ T1584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.033770][ T1584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 50.067842][ T1588] input: syz1 as /devices/virtual/input/input12 [ 50.129383][ T36] audit: type=1400 audit(1761303234.460:1008): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.241501][ T1601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28953 sclass=netlink_route_socket pid=1601 comm=syz.3.394 [ 50.261259][ T1604] rust_binder: Error while translating object. [ 50.261294][ T1604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 50.280630][ T1604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:336 [ 50.319570][ T1617] bridge0: port 3(syz_tun) entered blocking state [ 50.335159][ T1617] bridge0: port 3(syz_tun) entered disabled state [ 50.343617][ T1617] syz_tun: entered allmulticast mode [ 50.350344][ T1617] syz_tun: entered promiscuous mode [ 50.355877][ T1617] bridge0: port 3(syz_tun) entered blocking state [ 50.362347][ T1617] bridge0: port 3(syz_tun) entered forwarding state [ 50.441816][ C1] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 50.579814][ T331] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 50.733616][ T331] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 50.749235][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.770239][ T1660] overlay: Bad value for 'uuid' [ 50.781968][ T331] usb 2-1: Product: syz [ 50.792986][ T331] usb 2-1: Manufacturer: syz [ 50.797626][ T331] usb 2-1: SerialNumber: syz [ 50.806679][ T1665] netlink: 80 bytes leftover after parsing attributes in process `syz.0.412'. [ 50.977493][ T1685] overlayfs: failed to clone lowerpath [ 50.983552][ T1686] overlayfs: failed to clone lowerpath [ 50.990053][ T1684] overlayfs: failed to clone lowerpath [ 51.221025][ T1615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.230408][ T1615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.258301][ T331] rtl8150 2-1:1.0: couldn't reset the device [ 51.264416][ T331] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 51.275192][ T331] usb 2-1: USB disconnect, device number 8 [ 51.691919][ T1718] rust_binder: Error while translating object. [ 51.691964][ T1718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 51.700031][ T1718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:318 [ 51.785150][ T1732] rust_binder: Write failure EFAULT in pid:320 [ 51.810248][ T1734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 51.984070][ T1753] erofs: dax options not supported [ 52.050875][ T1763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.113623][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 52.253259][ T1784] rust_binder: Write failure EFAULT in pid:270 [ 52.279785][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 52.294829][ T1788] rust_binder: 351: no such ref 0 [ 52.301782][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.312774][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.322558][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.339307][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 52.354994][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.382014][ T10] usb 2-1: config 0 descriptor?? [ 52.392026][ T1799] rust_binder: Write failure EFAULT in pid:277 [ 52.594700][ T1815] overlayfs: failed to clone upperpath [ 52.755206][ T1844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 52.796532][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.803884][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.811388][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.818698][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.826142][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.826859][ T1849] 9pnet_fd: Insufficient options for proto=fd [ 52.833595][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.855996][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.863645][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.871059][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.878430][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 52.887310][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 52.894263][ T1853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 52.905659][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input14 [ 52.920230][ T10] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 52.978563][ T1870] rust_binder: Failed copying remainder into alloc: EFAULT [ 52.978589][ T1870] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 52.986084][ T1870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.997712][ T1870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:359 [ 53.008101][ T10] usb 2-1: USB disconnect, device number 9 [ 53.040962][ T1884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.041127][ T1883] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 53.047767][ T1883] rust_binder: 362: no such ref 6 [ 53.060835][ T1883] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 53.068120][ T1884] rust_binder: 362: no such ref 6 [ 53.073575][ T1884] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 53.190801][ T1898] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=1898 comm=syz.3.489 [ 53.280861][ T1910] batadv_slave_0: mtu less than device minimum [ 53.328052][ T1921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 53.722890][ T1949] netlink: 68 bytes leftover after parsing attributes in process `syz.2.505'. [ 53.876491][ T1980] netlink: 'syz.3.514': attribute type 28 has an invalid length. [ 53.944875][ T1985] input: syz1 as /devices/virtual/input/input15 [ 54.220423][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 54.220441][ T36] audit: type=1400 audit(1761303238.555:1071): avc: denied { execute } for pid=2006 comm="syz.3.526" path="/memory.events.local" dev="ramfs" ino=13374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 54.289375][ T2017] tmpfs: Unsupported parameter 'mpol' [ 54.295913][ T2017] tmpfs: Unsupported parameter 'mpol' [ 54.349823][ T330] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 54.500022][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 54.506297][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.517226][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.526992][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.539847][ T330] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.548904][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.557657][ T330] usb 3-1: config 0 descriptor?? [ 54.579788][ T496] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 54.730904][ T496] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.741142][ T496] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 54.751592][ T496] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.760700][ T496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.768726][ T496] usb 1-1: Product: syz [ 54.772943][ T496] usb 1-1: Manufacturer: syz [ 54.777556][ T496] usb 1-1: SerialNumber: syz [ 54.925213][ T36] audit: type=1326 audit(1761303239.255:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1993 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f7f8efc9 code=0x7fc00000 [ 54.968577][ T1999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333 [ 54.976783][ T2047] 9pnet_fd: Insufficient options for proto=fd [ 54.994294][ T496] usb 1-1: 0:2 : does not exist [ 55.008848][ T496] usb 1-1: cannot find UAC_HEADER [ 55.017589][ T496] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 55.027526][ T496] usb 1-1: USB disconnect, device number 8 [ 55.039097][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.126338][ T36] audit: type=1400 audit(1761303239.455:1073): avc: denied { bind } for pid=2056 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.470712][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 55.482457][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 55.492532][ T330] usb 3-1: USB disconnect, device number 12 [ 55.534226][ T2075] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 55.537017][ T2078] incfs: Options parsing error. -22 [ 55.547813][ T2078] incfs: mount failed -22 [ 55.763382][ T36] audit: type=1400 audit(1761303240.095:1074): avc: denied { create } for pid=2077 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.763597][ T2083] rust_binder: Write failure EFAULT in pid:388 [ 55.923854][ T36] audit: type=1400 audit(1761303240.255:1075): avc: denied { getopt } for pid=2094 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.104020][ T2105] netlink: 'syz.1.556': attribute type 20 has an invalid length. [ 56.112986][ T2105] rust_binder: 373: no such ref 2 [ 56.550618][ T36] audit: type=1326 audit(1761303240.885:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.0.558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0419b8efc9 code=0x0 [ 56.822286][ T36] audit: type=1326 audit(1761303241.155:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2117 comm="syz.3.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bdf78efc9 code=0x0 [ 56.840800][ T496] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 56.939948][ T2123] __vm_enough_memory: pid: 2123, comm: syz.1.562, bytes: 18014402804453376 not enough memory for the allocation [ 56.983777][ T496] usb 1-1: device descriptor read/64, error -71 [ 56.998174][ T2137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.999759][ T36] audit: type=1400 audit(1761303241.325:1078): avc: denied { setopt } for pid=2133 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.007419][ T2137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.035354][ T36] audit: type=1400 audit(1761303241.375:1079): avc: denied { getattr } for pid=2133 comm="syz.1.566" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.061199][ T36] audit: type=1400 audit(1761303241.375:1080): avc: denied { getattr } for pid=2133 comm="syz.1.566" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.230006][ T496] usb 1-1: device descriptor read/64, error -71 [ 57.236340][ T533] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 57.389772][ T533] usb 2-1: Using ep0 maxpacket: 32 [ 57.396071][ T533] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 57.404824][ T533] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 57.415034][ T533] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.424043][ T533] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 57.438271][ T533] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.447349][ T533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.455385][ T533] usb 2-1: Product: Г [ 57.459460][ T533] usb 2-1: Manufacturer: 邷쯮嶓넂렺ࠒⳑ닒턔ᖓ囟Я垱飶퐨㙿粝쬗➜飡襫╙ଐ헣鰬굌쒋芫杈늯荒☲⇛ꠔ䏃徣蟌㿇朢㷉勲푗Ό㗫 [ 57.476269][ T533] usb 2-1: SerialNumber: ᅡﶢﮪ嵜㊈Ͳ閡Ჟ䞥祁菓漈떕㧛륕雽ቃ式᯼녌媿ꙮ勮儨䕸蟟﯂䂏곪ᭈꆿ븂긭䋥㒉挦ᝪ↚ⰷ뀌2뒭툘ꎆ놂Љᜋᷟ츞斃䇡ᶁ琤ќ쮱ᣁ땔鯷年㮹፷䭖鰜抷㢻鎞滌J⤄鐦漜❿듽畾᫃棛฀饄䁾 [ 57.502966][ T496] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 57.511800][ T2136] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.639773][ T496] usb 1-1: device descriptor read/64, error -71 [ 57.721940][ T533] usb 2-1: 0:2 : does not exist [ 57.728383][ T533] usb 2-1: USB disconnect, device number 10 [ 57.737162][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.889849][ T496] usb 1-1: device descriptor read/64, error -71 [ 57.999951][ T496] usb usb1-port1: attempt power cycle [ 58.018858][ T2175] 9pnet_fd: Insufficient options for proto=fd [ 58.232311][ T2181] netlink: 'syz.1.578': attribute type 11 has an invalid length. [ 58.240095][ T2181] netlink: 'syz.1.578': attribute type 2 has an invalid length. [ 58.342440][ T2182] netlink: 488 bytes leftover after parsing attributes in process `syz.1.578'. [ 58.349831][ T496] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 58.370813][ T496] usb 1-1: device descriptor read/8, error -71 [ 58.387196][ T2186] random: crng reseeded on system resumption [ 58.421478][ T2190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 58.421512][ T2190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:399 [ 58.444417][ T2194] netlink: 'syz.1.581': attribute type 19 has an invalid length. [ 58.461345][ T2194] netlink: 5 bytes leftover after parsing attributes in process `syz.1.581'. [ 58.470303][ T2194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.482971][ T2199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.490177][ T2199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 58.506398][ T2199] rust_binder: Error in use_page_slow: ESRCH [ 58.506420][ T2199] rust_binder: use_range failure ESRCH [ 58.506876][ T496] usb 1-1: device descriptor read/8, error -71 [ 58.513350][ T2199] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 58.524183][ T2199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 58.532267][ T2199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:408 [ 58.701936][ T2228] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 58.719192][ T2228] rust_binder: Write failure EINVAL in pid:346 [ 58.749806][ T496] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 58.767977][ T2230] /dev/rnullb0: Can't open blockdev [ 58.780829][ T496] usb 1-1: device descriptor read/8, error -71 [ 58.920795][ T496] usb 1-1: device descriptor read/8, error -71 [ 59.029891][ T496] usb usb1-port1: unable to enumerate USB device [ 59.183896][ T2247] fuse: Bad value for 'rootmode' [ 59.455738][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 59.455756][ T36] audit: type=1400 audit(1761303243.785:1090): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.541153][ T36] audit: type=1400 audit(1761303243.875:1091): avc: denied { map } for pid=2261 comm="syz.1.602" path="socket:[13856]" dev="sockfs" ino=13856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.569800][ T36] audit: type=1400 audit(1761303243.875:1092): avc: denied { read } for pid=2261 comm="syz.1.602" path="socket:[13856]" dev="sockfs" ino=13856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.594199][ T2264] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.594221][ T2264] rust_binder: Read failure Err(EFAULT) in pid:428 [ 59.602623][ T36] audit: type=1400 audit(1761303243.875:1093): avc: denied { write } for pid=2261 comm="syz.1.602" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.657069][ T36] audit: type=1400 audit(1761303243.875:1094): avc: denied { open } for pid=2261 comm="syz.1.602" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.685385][ T36] audit: type=1400 audit(1761303243.985:1095): avc: denied { bind } for pid=2272 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.732016][ T36] audit: type=1400 audit(1761303244.065:1096): avc: denied { lock } for pid=2279 comm="syz.0.608" path="socket:[13149]" dev="sockfs" ino=13149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 59.760458][ T2284] binder: Unknown parameter 'context[7' [ 59.799935][ T36] audit: type=1400 audit(1761303244.135:1097): avc: denied { mounton } for pid=2287 comm="syz.3.604" path="/file0" dev="ramfs" ino=13890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 59.821991][ T36] audit: type=1326 audit(1761303244.135:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.3.604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bdf78efc9 code=0x0 [ 59.955126][ T2295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 60.003430][ T2297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.004699][ T2297] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 60.011323][ T2297] rust_binder: Error while translating object. [ 60.021949][ T2297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.028178][ T2297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 60.039785][ T331] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 60.071413][ T2299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=49414 (98828 ns) > initial count (260 ns). Using initial count to start timer. [ 60.159342][ T2310] Invalid logical block size (10) [ 60.184428][ T2312] rust_binder: Write failure EFAULT in pid:382 [ 60.200132][ T331] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 60.226513][ T331] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 60.239234][ T2316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.239526][ T2316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 60.246305][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.265104][ T331] usb 1-1: config 0 descriptor?? [ 60.280278][ T331] usb 1-1: bad CDC descriptors [ 60.299221][ T2318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 60.342384][ T2322] rust_binder: Error in use_page_slow: ESRCH [ 60.342415][ T2322] rust_binder: use_range failure ESRCH [ 60.348504][ T2322] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 60.354232][ T2322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.363458][ T2322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:445 [ 60.387544][ T2325] syz.1.624: attempt to access beyond end of device [ 60.387544][ T2325] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 60.409621][ T2325] exFAT-fs (loop1): unable to read boot sector [ 60.416480][ T2325] exFAT-fs (loop1): failed to read boot sector [ 60.423237][ T2325] exFAT-fs (loop1): failed to recognize exfat type [ 60.433521][ T2325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.433714][ T2325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.440748][ T2325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 60.485718][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 60.537697][ T2331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.537747][ T2331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.545312][ T2331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.552855][ T2331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 60.578331][ T2334] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.588934][ T533] usb 1-1: USB disconnect, device number 13 [ 60.590343][ T2334] rust_binder: Error in use_page_slow: ESRCH [ 60.601829][ T2334] rust_binder: use_range failure ESRCH [ 60.607826][ T2334] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 60.613446][ T2334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.621661][ T2334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:457 [ 60.797483][ T2343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.811454][ T2343] fuse: Bad value for 'fd' [ 60.881542][ T2345] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 60.881566][ T2345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 60.889659][ T2345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:390 [ 60.899788][ T496] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 60.974046][ T2347] /dev/nullb0: Can't lookup blockdev [ 61.070172][ T496] usb 2-1: Using ep0 maxpacket: 16 [ 61.076524][ T496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.103263][ T496] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 61.112639][ T496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.121525][ T496] usb 2-1: config 0 descriptor?? [ 61.140528][ T2355] input: syz1 as /devices/virtual/input/input16 [ 61.157183][ T2360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.157687][ T2360] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 61.164453][ T2360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.172602][ T2360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:405 [ 61.220701][ T2369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.266637][ T2368] binder: Unknown parameter 'fscontext?}' [ 61.495423][ T2391] rust_binder: Write failure EFAULT in pid:429 [ 61.508096][ T36] audit: type=1400 audit(1761303245.835:1099): avc: denied { setattr } for pid=2392 comm="syz.0.649" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.601799][ T2402] usb usb7: usbfs: process 2402 (syz.0.652) did not claim interface 0 before use [ 61.611330][ T2402] netlink: 48 bytes leftover after parsing attributes in process `syz.0.652'. [ 61.620331][ T2402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 61.631164][ T2402] usb usb7: usbfs: process 2402 (syz.0.652) did not claim interface 0 before use [ 61.706345][ T496] usbhid 2-1:0.0: can't add hid device: -71 [ 61.712489][ T496] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 61.736514][ T496] usb 2-1: USB disconnect, device number 11 [ 61.792231][ T2434] rust_binder: Error while translating object. [ 61.792286][ T2434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.798620][ T2434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:463 [ 61.819982][ T2437] IPv6: Can't replace route, no match found [ 62.044460][ T2453] binder: Unknown parameter '01777777777777777777777' [ 62.100713][ T2455] @: renamed from vlan0 (while UP) [ 62.684275][ T2468] overlay: ./file0 is not a directory [ 62.690607][ T2468] bpf: Bad value for 'uid' [ 62.773036][ T2475] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.812433][ T2479] tmpfs: Bad value for 'nr_blocks' [ 62.919942][ T2493] /dev/rnullb0: Can't open blockdev [ 62.931813][ T2494] 9pnet_virtio: no channels available for device ./cgroup [ 62.966373][ T2503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.966699][ T2503] mmap: syz.0.686 (2503) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.986503][ T2503] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 63.000507][ T2504] binder: Bad value for 'stats' [ 63.003819][ T2506] __vm_enough_memory: pid: 2506, comm: syz.0.687, bytes: 18014402804453376 not enough memory for the allocation [ 63.550039][ T2510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.550074][ T2510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 63.560621][ T2511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.569863][ T2511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 63.716317][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.735076][ T2532] rust_binder: Error in use_page_slow: ESRCH [ 63.735095][ T2532] rust_binder: use_range failure ESRCH [ 63.746846][ T2532] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 63.752440][ T2532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.760532][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.776157][ T2532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:519 [ 63.788146][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.797544][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.804204][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.810841][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.817640][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.824313][ T2534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'. [ 63.840252][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.840275][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.847022][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.856111][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.862787][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.869244][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.875720][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.885713][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.899791][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.906330][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.912813][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.919258][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.925734][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.932182][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.938613][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.945069][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.951583][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.958020][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.964581][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.971190][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.977713][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.984316][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.990839][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.997302][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.003822][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.010305][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.016740][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.023252][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.029783][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.036256][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.042726][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.049172][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.055656][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.062109][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.068546][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.075029][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.081479][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.087919][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.094392][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.099780][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 64.100886][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.114893][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.121404][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.127833][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.134317][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.140771][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.147206][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.153676][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.160146][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.166581][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.173041][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.179479][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.185943][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.192394][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.198832][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.205302][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.211746][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.218176][ T2530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.260619][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 64.286938][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 64.296313][ T10] usb 2-1: config 1 has no interface number 1 [ 64.303782][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 64.318327][ T2544] random: crng reseeded on system resumption [ 64.324916][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.334322][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.342488][ T10] usb 2-1: Product: syz [ 64.346755][ T10] usb 2-1: Manufacturer: syz [ 64.351537][ T10] usb 2-1: SerialNumber: syz [ 64.411154][ T2547] /dev/rnullb0: Can't open blockdev [ 64.465416][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 64.465433][ T36] audit: type=1400 audit(1761303248.795:1112): avc: denied { setattr } for pid=2550 comm="syz.0.703" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.503474][ T2558] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 64.556869][ T2563] input: syz1 as /devices/virtual/input/input17 [ 64.559963][ T2534] 9pnet_fd: Insufficient options for proto=fd [ 64.571145][ T2534] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 64.593863][ T10] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 64.596595][ T2567] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.603202][ T2567] rust_binder: 424: no such ref 0 [ 64.610228][ T10] usb 2-1: failed to enable PITCH for EP 0x82 [ 64.615003][ T2567] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 64.628542][ T2567] rust_binder: 424: no such ref 2 [ 64.633987][ T2567] rust_binder: Error while translating object. [ 64.634091][ T2567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.641985][ T2567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 64.669809][ T2569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.679228][ T10] usb 2-1: USB disconnect, device number 12 [ 64.709374][ T2570] rust_binder: 424: no such ref 0 [ 64.721934][ T2570] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 64.729105][ T2570] rust_binder: 424: no such ref 2 [ 64.734242][ T2570] rust_binder: Error while translating object. [ 64.734270][ T2570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.740551][ T2570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 64.776010][ T2568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 64.794175][ T2568] netlink: 31 bytes leftover after parsing attributes in process `syz.0.707'. [ 64.803179][ T2568] netlink: 'syz.0.707': attribute type 3 has an invalid length. [ 64.810863][ T2568] netlink: 'syz.0.707': attribute type 2 has an invalid length. [ 64.818504][ T2568] netlink: 31 bytes leftover after parsing attributes in process `syz.0.707'. [ 64.861853][ T36] audit: type=1400 audit(1761303249.195:1113): avc: denied { ioctl } for pid=2581 comm="syz.0.712" path="socket:[14820]" dev="sockfs" ino=14820 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.112766][ T2585] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.123909][ T2585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.713'. [ 65.139705][ T2585] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.704450][ T2597] batadv_slave_0: mtu less than device minimum [ 65.717149][ T2598] batadv_slave_0: mtu less than device minimum [ 65.778703][ T36] audit: type=1400 audit(1761303250.105:1114): avc: denied { create } for pid=2599 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.869819][ T496] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 65.914709][ T2602] binder: Unknown parameter 'defcontextG;' [ 66.019757][ T496] usb 3-1: Using ep0 maxpacket: 32 [ 66.025944][ T496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.036831][ T496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.046601][ T496] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 66.059405][ T496] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 66.068448][ T496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.077107][ T496] usb 3-1: config 0 descriptor?? [ 66.083093][ T496] usbhid 3-1:0.0: can't add hid device: -22 [ 66.089060][ T496] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 66.229777][ T433] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 66.285350][ T2595] rust_binder: Write failure EFAULT in pid:435 [ 66.382385][ T433] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 66.397629][ T433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.405643][ T433] usb 1-1: Product: syz [ 66.409836][ T433] usb 1-1: Manufacturer: syz [ 66.414436][ T433] usb 1-1: SerialNumber: syz [ 66.787320][ T331] usb 3-1: USB disconnect, device number 13 [ 66.802486][ T36] audit: type=1400 audit(1761303251.135:1115): avc: denied { checkpoint_restore } for pid=2611 comm="syz.2.722" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.846802][ T433] rtl8150 1-1:1.0: couldn't reset the device [ 66.857839][ T433] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 66.866177][ T2616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.866377][ T2616] rust_binder: Error while translating object. [ 66.867663][ T433] usb 1-1: USB disconnect, device number 14 [ 66.879545][ T2616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.884971][ T2616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:441 [ 66.909048][ T2618] SELinux: failed to load policy [ 66.923818][ T2618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.924363][ T36] audit: type=1400 audit(1761303251.255:1116): avc: denied { read } for pid=2617 comm="syz.2.725" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.945390][ T2618] rust_binder: Error while translating object. [ 66.953974][ T2618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 66.955036][ T36] audit: type=1400 audit(1761303251.255:1117): avc: denied { open } for pid=2617 comm="syz.2.725" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.968194][ T2618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:443 [ 67.022975][ T2634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.032664][ T2634] rust_binder: Write failure EINVAL in pid:448 [ 67.056205][ T2636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.476761][ T2668] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 67.483290][ T2668] rust_binder: Error while translating object. [ 67.492121][ T2668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.498471][ T2668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569 [ 67.539402][ T2677] netlink: 140 bytes leftover after parsing attributes in process `syz.0.746'. [ 67.568930][ T2682] netlink: 'syz.0.747': attribute type 11 has an invalid length. [ 67.589363][ T2687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.589484][ T2688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.606262][ T36] audit: type=1400 audit(1761303251.935:1118): avc: denied { write } for pid=2689 comm="syz.0.749" path="socket:[16186]" dev="sockfs" ino=16186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.648237][ T2690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.648270][ T2690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 67.694528][ T2693] rust_binder: Write failure EINVAL in pid:592 [ 67.705233][ T2693] netlink: 'syz.0.750': attribute type 19 has an invalid length. [ 67.719374][ T2693] netlink: 5 bytes leftover after parsing attributes in process `syz.0.750'. [ 67.759769][ T433] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 67.768480][ T965] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.929764][ T433] usb 3-1: Using ep0 maxpacket: 32 [ 67.936137][ T433] usb 3-1: config 0 has an invalid interface number: 72 but max is 0 [ 67.944416][ T433] usb 3-1: config 0 has no interface number 0 [ 67.950860][ T433] usb 3-1: config 0 interface 72 has no altsetting 0 [ 67.959045][ T433] usb 3-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 67.968227][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.976263][ T433] usb 3-1: Product: syz [ 67.980511][ T433] usb 3-1: Manufacturer: syz [ 67.985130][ T433] usb 3-1: SerialNumber: syz [ 67.991044][ T433] usb 3-1: config 0 descriptor?? [ 68.119477][ T2703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 68.202277][ T433] usb 3-1: MIDIStreaming interface descriptor not found [ 68.226563][ T433] usb 3-1: USB disconnect, device number 14 [ 68.227728][ T2706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.336469][ T2715] fuse: Unknown parameter '1d' [ 68.579779][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 68.722569][ T2743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.722907][ T2743] rust_binder: Write failure EFAULT in pid:466 [ 68.731216][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.745893][ T10] usb 2-1: config 128 has an invalid interface number: 172 but max is 0 [ 68.754396][ T10] usb 2-1: config 128 has no interface number 0 [ 68.760761][ T10] usb 2-1: config 128 interface 172 has no altsetting 0 [ 68.769620][ T2745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.770474][ T2745] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 68.771303][ T10] usb 2-1: string descriptor 0 read error: -22 [ 68.776980][ T2745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 68.785508][ T10] usb 2-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=d2.0a [ 68.791645][ T2745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:468 [ 68.800690][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.828834][ T10] cdc_acm 2-1:128.172: invalid descriptor buffer length [ 68.873283][ T2747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.978723][ T2749] rust_binder: 470: no such ref 3 [ 68.990355][ T2749] rust_binder: inc_ref_done called when no active inc_refs [ 68.990378][ T2749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:470 [ 69.034346][ T2715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.052007][ T2715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.061899][ T10] usb 2-1: USB disconnect, device number 13 [ 69.585147][ T36] audit: type=1400 audit(1761303253.915:1119): avc: denied { read } for pid=2750 comm="syz.1.762" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.617090][ T2753] input: syz1 as /devices/virtual/input/input18 [ 69.717196][ T2761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.717647][ T2761] rust_binder: Failed copying remainder into alloc: EFAULT [ 69.724157][ T2761] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 69.731435][ T2761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 69.739670][ T2761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:474 [ 69.758972][ T2761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.769470][ T2766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.776312][ T2768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 69.779777][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 69.782798][ T1090] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.802395][ T2768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:479 [ 69.846136][ T2779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.880533][ T2781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.129776][ T331] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 70.273928][ T36] audit: type=1400 audit(1761303254.605:1120): avc: denied { ioctl } for pid=2785 comm="syz.1.774" path="socket:[16424]" dev="sockfs" ino=16424 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.299587][ T36] audit: type=1400 audit(1761303254.605:1121): avc: denied { accept } for pid=2785 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.321426][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 70.327575][ T2790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.327980][ T2790] rust_binder: Error in use_page_slow: ESRCH [ 70.334645][ T2790] rust_binder: use_range failure ESRCH [ 70.340852][ T2790] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 70.340988][ T331] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.346368][ T2790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 70.357649][ T331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.371382][ T2790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:532 [ 70.389804][ T331] usb 3-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 70.406808][ T2796] __vm_enough_memory: pid: 2796, comm: syz.1.779, bytes: 18014402804453376 not enough memory for the allocation [ 70.419762][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.437287][ T331] usb 3-1: config 0 descriptor?? [ 70.452733][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.453294][ T2799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:536 [ 70.623761][ T2819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:549 [ 70.668864][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 70.684649][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 70.702558][ T2828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.702713][ T2828] rust_binder: Failed copying into alloc: EFAULT [ 70.702991][ T331] usb 3-1: USB disconnect, device number 15 [ 70.709282][ T2828] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 70.722439][ T2830] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 70.724858][ T2828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.739126][ T2828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:501 [ 70.764746][ T2836] /dev/rnullb0: Can't open blockdev [ 70.764754][ T2837] netlink: 72 bytes leftover after parsing attributes in process `syz.1.791'. [ 70.791139][ T2839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.804501][ T2841] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 70.818115][ T2841] rust_binder: Write failure EINVAL in pid:508 [ 70.828917][ T2846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.840563][ T2846] rust_binder: Error while translating object. [ 70.852472][ T2846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.857229][ T2839] kvm: pic: non byte write [ 70.858676][ T2846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:513 [ 70.887124][ T2850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.896613][ T2850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 70.903117][ T2850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:516 [ 70.925420][ T2855] rust_binder: Error in use_page_slow: ESRCH [ 70.933814][ T2854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.934801][ T2855] rust_binder: use_range failure ESRCH [ 70.941228][ T2854] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 70.947534][ T2855] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 70.956606][ T2854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 70.960944][ T2855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 70.968691][ T2854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:520 [ 70.978274][ T2855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:560 [ 71.127676][ T2860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.137113][ T2860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.143755][ T2860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.317225][ T36] audit: type=1326 audit(1761303255.645:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.3.806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bdf78efc9 code=0x0 [ 71.326641][ T2885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.350051][ T2885] rust_binder: Error in use_page_slow: ESRCH [ 71.356477][ T2885] rust_binder: use_range failure ESRCH [ 71.362489][ T2885] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 71.368113][ T2885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 71.376079][ T2885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:535 [ 71.750838][ T2902] tmpfs: Unknown parameter '' [ 72.048760][ T2913] rust_binder: 577: no such ref 3 [ 72.053883][ T2913] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 72.061058][ T2913] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 72.068122][ T2913] rust_binder: Write failure EFAULT in pid:577 [ 72.096545][ T2918] binder: Unknown parameter 'obj_type' [ 72.108534][ T2918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.819'. [ 72.131878][ T2920] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 72.146100][ T2920] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 72.172483][ T2924] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.211566][ T2932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2932 comm=syz.1.824 [ 72.224512][ T2932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.224755][ T2932] rust_binder: Error in use_page_slow: ESRCH [ 72.231235][ T2932] rust_binder: use_range failure ESRCH [ 72.237221][ T2932] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 72.242720][ T2932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 72.250733][ T2932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:591 [ 72.286113][ T2937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595 [ 72.321879][ T2943] /dev/sg0: Can't lookup blockdev [ 72.423920][ T36] audit: type=1400 audit(1761303256.755:1123): avc: denied { setopt } for pid=2949 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.445477][ T36] audit: type=1400 audit(1761303256.755:1124): avc: denied { bind } for pid=2949 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.477912][ T2954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.480489][ T2954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:604 [ 72.532338][ T2958] rust_binder: 606: no such ref 1 [ 72.546583][ T2958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606 [ 72.729777][ T496] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 72.889760][ T496] usb 3-1: Using ep0 maxpacket: 8 [ 72.896238][ T496] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 72.914239][ T496] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 72.922545][ T496] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 72.931538][ T496] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 72.942495][ T496] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.954169][ T496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.965217][ T496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.976577][ T496] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 72.991374][ T496] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 73.000661][ T496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.008705][ T496] usb 3-1: Product: syz [ 73.013152][ T496] usb 3-1: Manufacturer: syz [ 73.017801][ T496] usb 3-1: SerialNumber: syz [ 73.029943][ T496] usb 3-1: config 0 descriptor?? [ 73.042027][ T2955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.049770][ T496] hub 3-1:0.0: bad descriptor, ignoring hub [ 73.057833][ T496] hub 3-1:0.0: probe with driver hub failed with error -5 [ 73.064470][ T36] audit: type=1326 audit(1761303257.395:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.1.842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86f7f8efc9 code=0x0 [ 73.071378][ T496] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 73.116171][ T36] audit: type=1400 audit(1761303257.445:1126): avc: denied { read } for pid=2982 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.259316][ T2952] random: crng reseeded on system resumption [ 73.284701][ T331] usb 3-1: USB disconnect, device number 16 [ 73.725015][ T3003] netlink: 'syz.1.850': attribute type 19 has an invalid length. [ 73.732893][ T3003] netlink: 5 bytes leftover after parsing attributes in process `syz.1.850'. [ 73.805248][ T3015] /dev/rnullb0: Can't open blockdev [ 73.852027][ T3018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.852187][ T3018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 73.867936][ T3020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.877178][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.884442][ T3020] netlink: 'syz.2.856': attribute type 4 has an invalid length. [ 73.898701][ T3020] netlink: 'syz.2.856': attribute type 4 has an invalid length. [ 73.918644][ T3023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.919263][ T36] audit: type=1400 audit(1761303258.245:1127): avc: denied { lock } for pid=3022 comm="syz.2.857" path="socket:[17158]" dev="sockfs" ino=17158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.925883][ T3023] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 73.949255][ T3023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 73.957432][ T3023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:563 [ 73.989559][ T3027] rust_binder: Write failure EFAULT in pid:567 [ 74.117461][ T3039] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 74.130907][ T3039] rust_binder: Write failure EINVAL in pid:579 [ 74.162824][ T36] audit: type=1400 audit(1761303258.495:1128): avc: denied { mount } for pid=3047 comm="syz.2.866" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 74.529780][ T433] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 74.628637][ T3064] mmap: syz.1.873 (3064): VmData 20824064 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 74.652473][ T3066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 74.690763][ T433] usb 3-1: config 1 interface 0 has no altsetting 0 [ 74.698874][ T433] usb 3-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.40 [ 74.708205][ T433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.716542][ T433] usb 3-1: Product: ည [ 74.721012][ T433] usb 3-1: Manufacturer: 爷暒㕀⧢밭ᢧⴠ柸ꠃ [ 74.728467][ T433] usb 3-1: SerialNumber: ⌄➽旻̏瀝速ݔ氡짙텕Мᮀ锰旅䮧 [ 74.779770][ T496] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 74.940781][ T496] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.950588][ T496] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.963400][ T496] usb 1-1: config 0 interface 0 has no altsetting 0 [ 74.970038][ T496] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 74.979092][ T496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.987928][ T496] usb 1-1: config 0 descriptor?? [ 75.144315][ T433] usbhid 3-1:1.0: can't add hid device: -71 [ 75.150340][ T433] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 75.162397][ T433] usb 3-1: USB disconnect, device number 17 [ 75.396853][ T496] wacom 0003:056A:00C5.0006: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 75.596340][ T3059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.605047][ T3059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.613283][ T331] usb 1-1: USB disconnect, device number 15 [ 75.663219][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 75.663238][ T36] audit: type=1400 audit(1761303259.995:1132): avc: denied { getopt } for pid=3084 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.663377][ T3085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.727763][ T3101] overlayfs: failed to clone upperpath [ 75.763242][ T3105] binder: Unknown parameter 'context[7' [ 75.812881][ T36] audit: type=1400 audit(1761303260.145:1133): avc: denied { execute } for pid=3111 comm="syz.2.893" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.840576][ T3114] tipc: Started in network mode [ 75.843553][ T3117] binder: Bad value for 'max' [ 75.845548][ T3114] tipc: Node identity ac14140f, cluster identity 4711 [ 75.857072][ T3114] tipc: New replicast peer: 139.255.255.255 [ 75.863109][ T3114] tipc: Enabled bearer , priority 10 [ 75.870732][ T3114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.894'. [ 75.944118][ T3125] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 75.986749][ T3130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.024913][ T3143] rust_binder: Write failure EINVAL in pid:618 [ 76.067002][ T36] audit: type=1400 audit(1761303260.395:1134): avc: denied { accept } for pid=3144 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.092799][ T36] audit: type=1400 audit(1761303260.395:1135): avc: denied { read } for pid=3144 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.129864][ T3155] __vm_enough_memory: pid: 3155, comm: syz.0.909, bytes: 18014402804453376 not enough memory for the allocation [ 76.156906][ T3161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.158137][ T3161] rust_binder: Error while translating object. [ 76.164698][ T3161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.170938][ T3161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:620 [ 76.190935][ T36] audit: type=1400 audit(1761303260.525:1136): avc: denied { write } for pid=3163 comm="syz.2.913" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 76.227888][ T3168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:624 [ 76.450857][ T433] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 76.533836][ T3170] netlink: 48 bytes leftover after parsing attributes in process `syz.1.915'. [ 76.562761][ T3177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 76.609787][ T433] usb 3-1: Using ep0 maxpacket: 16 [ 76.616625][ T433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.627794][ T433] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 76.636882][ T433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.650109][ T433] usb 3-1: config 0 descriptor?? [ 76.692292][ T3190] @: renamed from vlan0 (while UP) [ 76.699270][ T36] audit: type=1400 audit(1761303261.025:1137): avc: denied { create } for pid=3189 comm="syz.1.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 76.765183][ T3202] netlink: 'syz.1.926': attribute type 11 has an invalid length. [ 76.773051][ T3202] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 76.780914][ T3202] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.926'. [ 76.938722][ T3240] netlink: 124 bytes leftover after parsing attributes in process `syz.3.939'. [ 76.989782][ T9] tipc: Node number set to 2886997007 [ 77.265684][ T433] usbhid 3-1:0.0: can't add hid device: -71 [ 77.271798][ T433] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 77.279904][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 77.280753][ T433] usb 3-1: USB disconnect, device number 18 [ 77.431546][ T9] usb 1-1: config 0 has an invalid interface number: 44 but max is 1 [ 77.439770][ T9] usb 1-1: config 0 has an invalid interface number: 82 but max is 1 [ 77.447844][ T9] usb 1-1: config 0 has no interface number 0 [ 77.453989][ T9] usb 1-1: config 0 has no interface number 1 [ 77.460117][ T9] usb 1-1: config 0 interface 44 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 77.471017][ T9] usb 1-1: config 0 interface 44 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 77.481865][ T9] usb 1-1: config 0 interface 44 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 77.492823][ T9] usb 1-1: config 0 interface 44 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.502592][ T9] usb 1-1: config 0 interface 82 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 77.513445][ T9] usb 1-1: config 0 interface 82 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 77.524342][ T9] usb 1-1: config 0 interface 44 has no altsetting 0 [ 77.531488][ T9] usb 1-1: config 0 interface 82 has no altsetting 0 [ 77.539665][ T9] usb 1-1: New USB device found, idVendor=1410, idProduct=2100, bcdDevice=a8.90 [ 77.548749][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.556856][ T9] usb 1-1: Product: ေ [ 77.561050][ T9] usb 1-1: Manufacturer: ﵫ಻笛뀣㐎㲫鵦ꫤ狟꧵櫑돘풌Ꟈ輥揊☍몂缶훼윰搊揈홝掝畳⊀込⿚ዊ笀颽菥퍃嵲畱瓟‡噦ᅭ솴뛄盩川᷑躄쉮⪁駡귚ቨ䝍趡딆㝑㶄瑑띩萾뭄㣲㦮⁢꣟᜺쁳웻⯝紎⑲挖唎ﱊ둧ᄕ䈆呛藡旃豝ꭷ쮕䆄먅軔埂䞘ᰥᒄ﵆曥䀤䣳䔞㔇吴⿕涮쟢鑈营ᖌᎍ붯ꗦ므漢 [ 77.596894][ T9] usb 1-1: SerialNumber: చ [ 77.602233][ T9] usb 1-1: config 0 descriptor?? [ 77.809222][ T36] audit: type=1400 audit(1761303262.135:1138): avc: denied { write } for pid=3242 comm="syz.0.940" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.834657][ T3255] binder: Bad value for 'max' [ 77.841164][ T9] usbhid 1-1:0.82: couldn't find an input interrupt endpoint [ 77.851135][ T3259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=529 sclass=netlink_route_socket pid=3259 comm=syz.3.944 [ 77.851142][ T9] usb 1-1: USB disconnect, device number 16 [ 78.049800][ T331] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 78.199236][ T36] audit: type=1400 audit(1761303262.525:1139): avc: denied { nlmsg_read } for pid=3295 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 78.219770][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 78.227289][ T331] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.249756][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.257784][ T331] usb 3-1: Product: syz [ 78.265585][ T331] usb 3-1: Manufacturer: syz [ 78.270379][ T331] usb 3-1: SerialNumber: syz [ 78.280935][ T331] r8152-cfgselector 3-1: Unknown version 0x0000 [ 78.288525][ T331] r8152-cfgselector 3-1: config 0 descriptor?? [ 79.151618][ T36] audit: type=1400 audit(1761303263.485:1140): avc: denied { mounton } for pid=3341 comm="syz.1.971" path="/271/file0" dev="tmpfs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.181496][ T36] audit: type=1400 audit(1761303263.515:1141): avc: denied { open } for pid=3341 comm="syz.1.971" path="/271/file0" dev="tmpfs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.228581][ T3346] 9pnet_fd: Insufficient options for proto=fd [ 79.915889][ T965] tipc: Subscription rejected, illegal request [ 79.949471][ T3379] rust_binder: Error while translating object. [ 79.949510][ T3379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 79.955898][ T3379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:653 [ 80.054027][ T3389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.070437][ T3389] IPv6: NLM_F_CREATE should be set when creating new route [ 80.077652][ T3389] IPv6: NLM_F_CREATE should be set when creating new route [ 80.133334][ T3389] overlayfs: missing 'lowerdir' [ 80.207641][ T3419] rust_binder: Write failure EINVAL in pid:661 [ 80.232791][ T3429] tmpfs: Bad value for 'nr_inodes' [ 80.344309][ T3446] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 80.404397][ T3462] fuse: Bad value for 'fd' [ 80.428454][ T3462] incfs: Error accessing: ./file0. [ 80.443894][ T3462] incfs: mount failed -20 [ 80.567350][ T3483] overlayfs: failed to clone upperpath [ 80.721292][ T3509] 9pnet_fd: Insufficient options for proto=fd [ 80.860941][ T330] r8152-cfgselector 3-1: USB disconnect, device number 19 [ 80.909780][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 81.070841][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 81.079993][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.088623][ T9] usb 1-1: config 0 descriptor?? [ 81.296686][ T36] kauditd_printk_skb: 121 callbacks suppressed [ 81.296704][ T36] audit: type=1400 audit(1761303265.625:1263): avc: denied { execute } for pid=3504 comm="syz.0.1028" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.328941][ T9] usb 1-1: string descriptor 0 read error: -71 [ 81.338152][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 81.344207][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.352973][ T9] usb 1-1: USB disconnect, device number 17 [ 81.391352][ T36] audit: type=1400 audit(1761303265.725:1264): avc: denied { watch } for pid=3533 comm="syz.3.1037" path="/290/file0" dev="tmpfs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.720529][ T3562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.959775][ T330] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 82.119781][ T433] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 82.130986][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.141920][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.151699][ T330] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 82.160750][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.169311][ T330] usb 3-1: config 0 descriptor?? [ 82.280743][ T433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 82.291739][ T433] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 82.300820][ T433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.309519][ T433] usb 1-1: config 0 descriptor?? [ 82.314829][ T3573] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.376438][ T330] cp2112 0003:10C4:EA90.0007: item fetching failed at offset 5/7 [ 82.384393][ T330] cp2112 0003:10C4:EA90.0007: parse failed [ 82.390280][ T330] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -22 [ 82.725615][ T433] hid-generic 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 82.743915][ T36] audit: type=1400 audit(1761303267.065:1265): avc: denied { search } for pid=3561 comm="syz.2.1049" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 82.751156][ T9] usb 3-1: USB disconnect, device number 20 [ 82.798127][ T3598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.800163][ T3598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.816046][ T3598] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 82.829794][ T3598] rust_binder: Error while translating object. [ 82.838715][ T3598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.846094][ T3598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 82.886160][ T36] audit: type=1400 audit(1761303267.215:1266): avc: denied { create } for pid=3604 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.905911][ T36] audit: type=1400 audit(1761303267.215:1267): avc: denied { create } for pid=3604 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.926538][ T36] audit: type=1400 audit(1761303267.215:1268): avc: denied { map } for pid=3604 comm="syz.3.1064" path="socket:[19709]" dev="sockfs" ino=19709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.930128][ T533] usb 1-1: USB disconnect, device number 18 [ 82.950768][ T36] audit: type=1400 audit(1761303267.215:1269): avc: denied { accept } for pid=3604 comm="syz.3.1064" path="socket:[19709]" dev="sockfs" ino=19709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.958821][ T3612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.112998][ T3614] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 83.113021][ T3614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 83.121081][ T3614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:643 [ 83.392064][ T3616] overlayfs: failed to clone upperpath [ 83.432383][ T36] audit: type=1400 audit(1761303267.765:1270): avc: denied { setattr } for pid=3620 comm="syz.1.1068" name="" dev="pipefs" ino=19185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 83.517789][ T36] audit: type=1400 audit(1761303267.845:1271): avc: denied { mounton } for pid=3631 comm="syz.3.1073" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 83.517843][ T3632] 9pnet_fd: Insufficient options for proto=fd [ 83.638280][ T3657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 83.638307][ T3657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:705 [ 84.019791][ T331] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 84.142571][ T36] audit: type=1400 audit(1761303268.475:1272): avc: denied { create } for pid=3685 comm="syz.3.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.190930][ T331] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.202002][ T331] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 84.213669][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.223049][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.231155][ T331] usb 3-1: Product: syz [ 84.235328][ T331] usb 3-1: Manufacturer: syz [ 84.240088][ T331] usb 3-1: SerialNumber: syz [ 84.250738][ T331] cdc_mbim 3-1:1.0: skipping garbage [ 84.344292][ T3696] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 84.419297][ T3710] rust_binder: Write failure EFAULT in pid:720 [ 84.456975][ T3668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.548184][ T3725] 9pnet_fd: Insufficient options for proto=fd [ 84.621326][ T3742] 9pnet_fd: Insufficient options for proto=fd [ 84.637786][ T3744] overlayfs: failed to clone upperpath [ 85.075563][ T3668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.083024][ T331] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 85.089399][ T331] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 85.096423][ T331] wwan wwan0: port wwan0mbim0 attached [ 85.103974][ T331] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 0e:58:de:f8:58:d8 [ 85.288957][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 85.425928][ T3779] ------------[ cut here ]------------ [ 85.431499][ T3779] WARNING: CPU: 0 PID: 3779 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 85.440941][ T3779] Modules linked in: [ 85.444884][ T3779] CPU: 0 UID: 0 PID: 3779 Comm: syz.0.1121 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 85.456476][ T3779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.466632][ T3779] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 85.472612][ T3779] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 85.492297][ T3779] RSP: 0018:ffffc9000e567980 EFLAGS: 00010246 [ 85.498389][ T3779] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 85.506418][ T3779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e567a38 [ 85.514439][ T3779] RBP: ffffc9000e567aa8 R08: ffffc9000e567a37 R09: 0000000000000000 [ 85.522463][ T3779] R10: ffffc9000e567a20 R11: fffff52001cacf47 R12: ffffc9000e5679c0 [ 85.530014][ T3783] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 85.530476][ T3779] R13: dffffc0000000000 R14: 1ffff92001cacf34 R15: 0000000000000000 [ 85.543145][ T3783] rust_binder: Write failure EINVAL in pid:725 [ 85.545945][ T3779] FS: 00007f041a9606c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 85.561969][ T3779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.568599][ T3779] CR2: 000000110c33ca14 CR3: 0000000115316000 CR4: 00000000003526b0 [ 85.576663][ T3779] Call Trace: [ 85.579978][ T3779] [ 85.582933][ T3779] ? preempt_schedule_common+0x2d/0x60 [ 85.588430][ T3779] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 85.594219][ T3779] ? activate_task+0x38b/0x3d0 [ 85.599012][ T3779] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 85.605287][ T3779] ___kmalloc_large_node+0x81/0x220 [ 85.610555][ T3779] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 85.616751][ T3779] __kmalloc_large_node_noprof+0x1e/0xe0 [ 85.622521][ T3779] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 85.628734][ T3779] __kmalloc_noprof+0x336/0x530 [ 85.633656][ T3779] ? __kasan_check_write+0x18/0x20 [ 85.638867][ T3779] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 85.644940][ T3779] ? __cfi_futex_wake+0x10/0x10 [ 85.649838][ T3779] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 85.656292][ T3779] ? selinux_file_ioctl+0x6e0/0x1360 [ 85.661695][ T3779] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 85.667268][ T3779] ? do_futex+0x356/0x500 [ 85.671669][ T3779] ? __cfi_do_futex+0x10/0x10 [ 85.676391][ T3779] ? __fget_files+0x2c5/0x340 [ 85.681514][ T3779] ? bpf_lsm_file_ioctl+0xd/0x20 [ 85.686500][ T3779] ? security_file_ioctl+0x34/0xd0 [ 85.692215][ T3779] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 85.698675][ T3779] __se_sys_ioctl+0x135/0x1b0 [ 85.703790][ T3779] __x64_sys_ioctl+0x7f/0xa0 [ 85.708425][ T3779] x64_sys_call+0x1878/0x2ee0 [ 85.713171][ T3779] do_syscall_64+0x58/0xf0 [ 85.717618][ T3779] ? clear_bhb_loop+0x50/0xa0 [ 85.722350][ T3779] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.728272][ T3779] RIP: 0033:0x7f0419b8efc9 [ 85.732764][ T3779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.752419][ T3779] RSP: 002b:00007f041a960038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.761089][ T3779] RAX: ffffffffffffffda RBX: 00007f0419de5fa0 RCX: 00007f0419b8efc9 [ 85.769080][ T3779] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000b [ 85.777126][ T3779] RBP: 00007f0419c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.785136][ T3779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.793199][ T3779] R13: 00007f0419de6038 R14: 00007f0419de5fa0 R15: 00007ffe7fcb9cf8 [ 85.801236][ T3779] [ 85.804749][ T3779] ---[ end trace 0000000000000000 ]--- [ 86.987609][ T331] usb 3-1: USB disconnect, device number 21 [ 86.993820][ T331] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 87.042131][ T331] wwan wwan0: port wwan0mbim0 disconnected