last executing test programs: 7m4.160415829s ago: executing program 32 (id=256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 6m5.76489426s ago: executing program 33 (id=804): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@register_looper, @dead_binder_done], 0x1, 0x0, &(0x7f0000000040)="f3"}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0xfffffffffffffffe) 4m4.299250221s ago: executing program 34 (id=1739): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000180)={[{@memory_hugetlb_accounting}, {}, {}, {@memory_localevents}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'binder\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsroot}]}) 3m45.538386456s ago: executing program 35 (id=1924): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write(0x1, &(0x7f0000000900)={0x404, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) close_range(r5, r0, 0x2) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) 3m42.300726849s ago: executing program 7 (id=1951): syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) (async) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x5}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0/../file0'}, 0x14) sendfile(r2, r3, &(0x7f0000000100)=0x10, 0x10001) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x3, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000020d005c80029040000000000000000000000000000b0"], 0xc8}, 0x8010) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x3, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000020d005c80029040000000000000000000000000000b0"], 0xc8}, 0x8010) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0xfffffffffffffff3) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 3m42.299898789s ago: executing program 7 (id=1953): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x914, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000780)={0x0, 0x16, 0x8, {0x8, 0x5, "030cb2502a88"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) 3m40.758168729s ago: executing program 7 (id=1959): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d9607ca0080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd49900", "f4bd000000801900", [0x5, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) (async) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x8a101a, 0x0) (async) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x8a101a, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) rmdir(&(0x7f0000000080)='./file0/file0\x00') (async) rmdir(&(0x7f0000000080)='./file0/file0\x00') 3m40.68125745s ago: executing program 7 (id=1960): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b0000001a64c036ea8d72fca1889d0fe971de01139587be9448690cc00e8c6fce30d0636907e6c5d849989c827cdd3a0ad9c91ab7b846a6858db47eb73d2835e7a49bfd01b6312cf490850bd61cd598649d1aa0c4d29a0f1db888f3d06ed3fb6c9200000000000000bdf5ce279af1dd797c48ea59606de620", 0x82, 0x4804, 0x0, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '.\x00'}, 0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/217, 0xd9}, {&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f0000004500)=""/4097, 0x1001}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f00000001c0)=""/132, 0x84}, {&(0x7f0000000000)=""/245, 0xf5}], 0x9}, 0x1000000d}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x40000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40010100, 0x0) 3m40.647726051s ago: executing program 7 (id=1961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x88c80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f00000005c0)=[@cpuid={0x14, 0x18, {0x7}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r5, 0x5, &(0x7f0000000080)={0xd490}, &(0x7f00000000c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0xc1ce) keyctl$session_to_parent(0x12) 3m40.610513022s ago: executing program 36 (id=1961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x88c80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f00000005c0)=[@cpuid={0x14, 0x18, {0x7}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r5, 0x5, &(0x7f0000000080)={0xd490}, &(0x7f00000000c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0xc1ce) keyctl$session_to_parent(0x12) 3m18.958196393s ago: executing program 4 (id=2159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@private1, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, 0x80000001, 0xa, 0x0, 0x100, 0x6, 0x110022}) 3m18.829155365s ago: executing program 4 (id=2160): r0 = userfaultfd(0x80801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r2 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x2, 0x4ce, 0x5, 0x9dff, 0xf, "000300eb00cbe600"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa) r7 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r7, 0x200}], 0x1, 0x6) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) write(r2, &(0x7f0000000040)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 3m16.568312529s ago: executing program 4 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000021000040000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m16.4812477s ago: executing program 4 (id=2184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000008c0)={{r1}, r2, 0x18, @unused=[0x7421, 0x8000000000000001, 0x457e4713, 0x7fff], @subvolid=0x5802}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000640)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8ab8148a0e021b5cf4690a761ba22fd7fca4f6c2d"}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002600)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@filename='./file0/file0\x00', r4, 0x0) 3m16.384794142s ago: executing program 4 (id=2186): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r1, r3, 0xfffffffffffffc01, 0x0) (async) tee(r1, r3, 0x60000000000, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffa0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x0, 0x121, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x0, 0x114, 0x800}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a00"], 0x1c}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(r0, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x240000d0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x403, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e99428bd7000fcdbdf2546000000080001"], 0x50}}, 0xc000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)={0x8040, 0x80, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f0000002100)="8f556edd5ffa77bc2fcf6e0b328dc3a926b3d275d2995671", 0x0, 0x18) 3m16.244328375s ago: executing program 0 (id=2187): r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x90, &(0x7f0000000300)=ANY=[@ANYBLOB="73697a653d6d2c00235026ab47de53ba8b690e0bdf63fca022b67630e7cf9e98537e68cd49589f54496a610cdc6fb96df7503a54fd5ba59fc880f42740f58e07676aade0d70537a9bd2314f15017180ee6d2b513"]) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) (async) r4 = socket(0x10, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r2, &(0x7f0000000640)="3f031c000302140006001e0089e9aaa911d7c2290f008906131804b8ec3572bd80dc897dc11f27c9167c643c4a0700", 0x2f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$xdp(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x2c, 0x2, r3, 0x8}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000680)="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", 0x128}, {&(0x7f0000000980)="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", 0x15e}], 0x2, 0x0, 0x0, 0x20040880}, 0x25012) (async) r5 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x2, 0x2) write(r5, &(0x7f0000000140)="2400ffeffc005f02941d00ffe306f6593e16066e37009e7a00080300000008000d000000b52f7d17f508de183c79a85e2d6616bba37a3145d123", 0x3a) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async, rerun: 64) unshare(0x44040200) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) setresuid(0xee01, 0xee01, 0x0) (async) r6 = memfd_secret(0x80000) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af24, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (rerun: 64) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xb}, 0x2, 0x83, 0x0, 0x0, 0xfff, 0x9, 0x0, 0x1000, 0x2, 0x0}) 3m16.206671496s ago: executing program 0 (id=2188): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2023) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x6, 0xe, 0x3}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) read(r0, 0x0, 0x0) fadvise64(r3, 0x3, 0x0, 0x4) 3m16.157246317s ago: executing program 4 (id=2189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000018b3a20110710028a7c010203010902"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='smaps\x00') openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) close_range(r0, 0xffffffffffffffff, 0x100000) 3m16.059954019s ago: executing program 37 (id=2189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000018b3a20110710028a7c010203010902"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='smaps\x00') openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) close_range(r0, 0xffffffffffffffff, 0x100000) 3m16.059771319s ago: executing program 0 (id=2191): r0 = userfaultfd(0x80801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r2 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x2, 0x4ce, 0x5, 0x9dff, 0xf, "000300eb00cbe600"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa) r7 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r7, 0x200}], 0x1, 0x6) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) write(r2, &(0x7f0000000040)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 3m13.319229412s ago: executing program 0 (id=2220): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) dup(r0) unshare(0x400) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 3m13.244919423s ago: executing program 0 (id=2221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x100, 0x400) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x64, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x101, 0x2}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r3}, @register_looper], 0x0, 0x0, 0x0}) 3m12.750013173s ago: executing program 0 (id=2222): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x4000000, 0x7, 0x0, 0x0, 0xbc, 0x8, 0x5, 0xffff, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x7, 0x7, 0x1, 0x7, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xfffffffd, 0x5, 0x7, 0x3, 0x10, 0x7, 0x9, 0x5, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x400, 0x10, 0x8, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x10000008, 0xe3a, 0xd93, 0x8, 0x2, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x10000, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0x80ff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x10000, 0xf8000002, 0x3ff, 0x3a8, 0x5, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0xfffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x2, 0x40, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd5, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x6, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x5, 0x0, 0xd, 0x401, 0xfffffc00, 0xe2, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc9230, 0x10000, 0x3ff, 0x6, 0x1ff, 0x800, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x0, 0xfffffff9, 0x2490, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0x2a6, 0xa, 0x6, 0x6, 0x9, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x7ffffffe, 0x6, 0x7, 0x0, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0x5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0xc, 0x5c81, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x10, 0x7, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x80, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x100029b, 0x3, 0xcf2, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x6, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b1000, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0x9, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x5, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x7e, 0xf, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x3, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0x8, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x25c, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0x2, 0x6, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0x4, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1ff, 0x4, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x8, 0x6, 0x9, 0x9, 0x5, 0xc2, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0x0, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0xc, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x9, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000000, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x6, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0xc321, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x1000, 0x2, 0x4901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x5, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0xf, 0x7, 0x1163, 0x2, 0x1, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x897, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x8000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x400, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb28, 0x2, 0x6, 0x7, 0x6, 0x5, 0x3d8d, 0xffffffff, 0x400002dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0x7, 0x9, 0x2, 0xfff, 0x5, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x1, 0x7f, 0x6, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x7, 0x6, 0x5732, 0x93e]}) chdir(0x0) socket$unix(0x1, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2a0800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) 3m12.707712374s ago: executing program 38 (id=2222): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x4000000, 0x7, 0x0, 0x0, 0xbc, 0x8, 0x5, 0xffff, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x7, 0x7, 0x1, 0x7, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xfffffffd, 0x5, 0x7, 0x3, 0x10, 0x7, 0x9, 0x5, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x400, 0x10, 0x8, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x10000008, 0xe3a, 0xd93, 0x8, 0x2, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x10000, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0x80ff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x10000, 0xf8000002, 0x3ff, 0x3a8, 0x5, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0xfffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x2, 0x40, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd5, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x6, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x5, 0x0, 0xd, 0x401, 0xfffffc00, 0xe2, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc9230, 0x10000, 0x3ff, 0x6, 0x1ff, 0x800, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x0, 0xfffffff9, 0x2490, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0x2a6, 0xa, 0x6, 0x6, 0x9, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x7ffffffe, 0x6, 0x7, 0x0, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0x5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0xc, 0x5c81, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x10, 0x7, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x80, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x100029b, 0x3, 0xcf2, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x6, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b1000, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0x9, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x5, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x7e, 0xf, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x3, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0x8, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x25c, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0x2, 0x6, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0x4, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1ff, 0x4, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x8, 0x6, 0x9, 0x9, 0x5, 0xc2, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0x0, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0xc, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x9, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000000, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x6, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0xc321, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x1000, 0x2, 0x4901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x5, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0xf, 0x7, 0x1163, 0x2, 0x1, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x897, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x8000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x400, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb28, 0x2, 0x6, 0x7, 0x6, 0x5, 0x3d8d, 0xffffffff, 0x400002dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0x7, 0x9, 0x2, 0xfff, 0x5, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x1, 0x7f, 0x6, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x7, 0x6, 0x5732, 0x93e]}) chdir(0x0) socket$unix(0x1, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2a0800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) 2m48.368398917s ago: executing program 8 (id=2430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r4, r3, 0x4, 0x0, 0x0, 0x3, 0xf2, 0x3, 0x6, 0xcf4, 0x1, 0x9, 'syz0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x13, 0x1, 0x4}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 2m48.22112541s ago: executing program 8 (id=2436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffffa}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f00000003c0)={{0xeeef0000, 0x1911b000, 0xf, 0x74, 0x57, 0x8, 0xcd, 0x4, 0x9, 0x2, 0x8, 0xf}, {0xeeef0000, 0x10000, 0xf, 0xd, 0x7, 0x80, 0x1, 0x5, 0x27, 0x5, 0x8, 0x8}, {0xeeee0000, 0xdddd0000, 0x3, 0x5, 0x9, 0x9, 0x81, 0x0, 0x1, 0x51, 0x5, 0x2}, {0x4, 0xf000, 0x3, 0xf7, 0x80, 0x16, 0xa, 0x1, 0x2, 0x5, 0x3, 0x9}, {0xeeee0000, 0xeeee8000, 0x7, 0x8, 0xff, 0x9, 0x0, 0xdf, 0x4, 0x80, 0xf, 0x8}, {0xdddd0000, 0x100000, 0xb, 0x0, 0x0, 0x1, 0x2, 0x4, 0x4, 0x48, 0x2}, {0x2000, 0x10000, 0x4, 0x2, 0x3, 0x0, 0x5, 0x0, 0x5, 0x2, 0xfb, 0xd2}, {0x8080000, 0x8000000, 0xf, 0x9, 0xfe, 0xa6, 0x9, 0x71, 0x9, 0x6, 0x7, 0x3}, {0x8080000, 0xa}, {0x4, 0x9}, 0xc000001e, 0x0, 0x2000, 0x2000, 0xa, 0x4400, 0xdddd0000, 0x0, [0x100000000, 0x4, 0x7, 0x80000000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="66baa000ecb84900c0fe0f23c80f21f8350c0020000f23f8440f20c03504000000440f22c0a5660f3831948100906732b805000000b9a20000000f01c1c4c2f930489db8010000000f01c166baf80cb8f8f57b8fef66bafc0cb80e000000ef66baf80cb86d0c688cef66bafc0cb00dee", 0x70}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 2m48.037660544s ago: executing program 8 (id=2437): mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=unix,', {[{@noxattr}, {@aname={'aname', 0x3d, '#\'%{-'}}, {@fscache}, {@aname={'aname', 0x3d, './binderfs/binder1\x00'}}], [{@measure}, {@subj_role}]}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$ppp(r1, &(0x7f0000000180)="89cea72be5923c01b227443562cdf4e932115ffb16ff3c33e441a2cebb1023629cc9f5c237d85f5ca78f0784fc7029d0d106ef6468eec3bf6640e7b5e929b2ac8f2448c843347c470a", 0x49) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42}, 0x10) 2m47.970710165s ago: executing program 8 (id=2438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff6}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0xc0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x120000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x2002c2, 0x2) r6 = open_tree(r5, &(0x7f0000000300)='\x00', 0x89901) r7 = syz_clone(0x40200000, &(0x7f0000000600)="931a366f1076dc201251871df67aaede2da5bf7598400e24ff1ca58077d423411a9eb35109ca90e91d17aea5342155076ace09e8b341552ec68154c424d5d74ab57f1fafb04ddfccae04a3f5ea764740319c5b26cf45bd5291c7e065c4a7c0e1a488d020d3697a02b36e056c644ee3700ac3d1657f6854b9e4f66a3503f1b092ef9d0198758bcc146f8ddc639f1be4869cd5bf46830c824d4eacd0c5e66e1301ae56a74c41b64fde4808cb2d2077e5d9802b7d1c0c4de72c56ef64f7d1dda01ac2f84762a72e0e800072f93bd02aa244cc7d62b1caffa8199c2113de5feb782b077b1396b9f5fae6fa3ba1", 0xeb, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000480)="de8929d84889530cf3d892d98fcb346b3735aafac7f08a86e549dd8e73fa44ad0e627891c26611d528d3df79161a39c3ce6d404040d961bf4807835a5c7d4a5bba8d59f0298a4b8722") ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x9, &(0x7f0000000540)=""/17) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}, @increfs_done], 0x5f, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca29e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b70efd41186dc9d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x2, 0x2f}, @fda={0x66646185, 0x3, 0x0, 0x28}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) 2m47.798362178s ago: executing program 8 (id=2442): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64], 0x7a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', {0xffe}, 0x8}) tgkill(r2, r2, 0x22) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000001c0)=0x2) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m47.661291921s ago: executing program 8 (id=2443): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$TIOCEXCL(r0, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20b40, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x404c004) (async) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r2, 0x4004550f, &(0x7f0000000080)=0x1ff) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0) 2m47.660597581s ago: executing program 39 (id=2443): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$TIOCEXCL(r0, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20b40, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x404c004) (async) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r2, 0x4004550f, &(0x7f0000000080)=0x1ff) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0) 2m18.357624311s ago: executing program 1 (id=2691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000000)={&(0x7f0000000100)=""/146, 0x92, 0x9, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.261206573s ago: executing program 1 (id=2692): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, &(0x7f0000000240)={0x77359400}, 0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/74) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x9}}, 0x30) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000200)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) shutdown(r4, 0x1) preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 2m18.260255062s ago: executing program 1 (id=2693): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x4, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r2 = syz_open_pts(r1, 0x141601) ioctl$TIOCCONS(r2, 0x541d) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x4, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) (async) syz_open_pts(r1, 0x141601) (async) ioctl$TIOCCONS(r2, 0x541d) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2m18.255444433s ago: executing program 1 (id=2695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x800001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff7ffe, 0x91, 0xffffffff, 0xfffffffe, 0x400, 0x2, 0x3, 0x8, 0x2, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0xb8f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x7, 0xfffffffd, 0x3ff, 0x5, 0x9dc, 0x0, 0x8, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x6, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0xb, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fdf, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x7ffe, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0xff, 0x4, 0x40, 0x7f, 0xff, 0xb, 0x7f, 0x2e, 0x8, 0xa, 0x3, 0x0, 0x7f, 0xa, 0xe2}}) 2m18.164722194s ago: executing program 1 (id=2700): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0xfffffffffffffffe, 0x100000200000088, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f000000c3c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xd, 0x8, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7f1c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0), 0x2000) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000007000004000000019cb5d240006"]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x410683, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r9, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_GET_STATS_FD_vm(r11, 0xaece) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 2m18.007172858s ago: executing program 1 (id=2701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r3, r7, 0x0, 0x1) sendfile(r5, r7, &(0x7f00000001c0)=0x4d, 0x5) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000805}, 0x4048840) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2m2.798026703s ago: executing program 40 (id=2701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r3, r7, 0x0, 0x1) sendfile(r5, r7, &(0x7f00000001c0)=0x4d, 0x5) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000805}, 0x4048840) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 13.435812599s ago: executing program 3 (id=3856): ftruncate(0xffffffffffffffff, 0x398a0bdb) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x22, 0x2, 0x7f) capset(0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="8adc00bd"], 0xfdef) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 12.36935707s ago: executing program 3 (id=3863): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/102, 0x66}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) (fail_nth: 2) 12.3385088s ago: executing program 3 (id=3864): r0 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380), 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r3 = syz_io_uring_setup(0x4ccb, &(0x7f0000000140)={0x0, 0x413f, 0x40, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(r0, 0x1, 0x80) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$tun(r2, 0x0, 0x76) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0xb4, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x2, 0x29}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x4}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @increfs_done={0x40106308, 0x2}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 11.445047428s ago: executing program 3 (id=3870): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)=ANY=[@ANYBLOB="40010000100033"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)="1a", 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair(0x21, 0x4, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x6c, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8801}, 0x854) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x32) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000140)) read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) 11.245440002s ago: executing program 3 (id=3871): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 11.121304214s ago: executing program 3 (id=3873): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x3f30e000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) read(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x801) fadvise64(r2, 0x3, 0xfffffffeffffffff, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000040)={0x2, 0x5}) 11.023843726s ago: executing program 41 (id=3873): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x3f30e000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) read(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x801) fadvise64(r2, 0x3, 0xfffffffeffffffff, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000040)={0x2, 0x5}) 7.71728671s ago: executing program 5 (id=3897): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) pwritev2(r1, &(0x7f0000001280)=[{0x0}, {&(0x7f0000001200)}, {&(0x7f0000001240)="45b1d857082c649949135f8de272", 0xe}], 0x3, 0x86, 0x6, 0x18) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) (async) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x2004, 0x0, 0x7, 0x0}) (async) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000001100)=0x1) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) (async) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x894a, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r7 = gettid() rt_sigqueueinfo(r7, 0x21, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f000021d000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 7.604087633s ago: executing program 5 (id=3899): r0 = userfaultfd(0x80801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r2 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x2, 0x4ce, 0x5, 0x9dff, 0xf, "000300eb00cbe600"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa) r7 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r7, 0x200}], 0x1, 0x6) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'macvlan0\x00', 0x0}) write(r2, &(0x7f0000000040)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 6.72060217s ago: executing program 9 (id=3906): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 5.658601011s ago: executing program 9 (id=3913): r0 = socket$nl_audit(0x10, 0x3, 0x9) recvfrom(r0, &(0x7f0000000000)=""/52, 0x34, 0x0, &(0x7f00000001c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x22020600) getsockopt$inet_buf(r2, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000029c0)={'wg1\x00', &(0x7f0000001980)=@ethtool_dump={0x3e, 0xfc7d, 0x3}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req3={0x4, 0x8a, 0xc, 0x8, 0x5, 0x81}, 0x1c) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.950342504s ago: executing program 5 (id=3918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x81, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x8, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x0, 0x3}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x9, 0xc, 0x67, 0x20, 0xb7}, 0x48, &(0x7f00000000c0)={0x5, 0xf, 0x48, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x4, 0xf00, 0xe8c8, [0xc0, 0xffc0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x0, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x4, 0xf000, 0x6, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x5, 0xfff9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x8a, 0x0, 0x7, 0x16}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x401}}, {0x5, &(0x7f0000000180)=@string={0x5, 0x3, "af49a7"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x427}}, {0xb, &(0x7f0000000240)=@string={0xb, 0x3, "8d7d80bebd3f7c4d1e"}}, {0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "d2c3b30abcd9e33c5e9b6ca61167f893447d001a100e45a22ff202800f15"}}, {0x5e, &(0x7f0000000500)=@string={0x5e, 0x3, "1541c66ceeda495ad9489cccba187c58e9323c1f0ec49547f8d91896be79f628ad277540b5b312a5dc71758de4c847205da25aac30aba6eef4a9c312a37afd637f840bea617b0967bd31ac77428219dd5f46730fb66bb3a105e2e4bf"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/90, 0x5a, 0x3, 0x8, 0xf, 0x0, 0x3}}, 0x120) write$UHID_INPUT2(r2, &(0x7f0000000280), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 4.752704758s ago: executing program 9 (id=3922): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$802154_dgram(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f0000000140)={0x0}}, 0x20008000) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/102, 0x66}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) 4.607992161s ago: executing program 9 (id=3925): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000d0c100000000000224e0000", 0x58}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) r4 = memfd_secret(0x80000) sendmsg$can_bcm(r4, 0x0, 0x4042091) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040050be0170000000000010902240001000040b1090400000103000308322101010001220500ac3753ee1ebd976200"], 0x0) close_range(r1, r3, 0x2) r5 = getpgrp(0x0) syz_open_procfs(r5, &(0x7f00000000c0)='net/sockstat6\x00') 4.521278192s ago: executing program 6 (id=3927): r0 = userfaultfd(0x80801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r2 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x2, 0x4ce, 0x5, 0x9dff, 0xf, "000300eb00cbe600"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa) r7 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r7, 0x200}], 0x1, 0x6) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'macvlan0\x00', 0x0}) write(r2, &(0x7f0000000040)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.107683981s ago: executing program 2 (id=3932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @loopback}, &(0x7f0000000600)=0x10, 0x80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000740)={0x0, 0x40, 0x8}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000b40)={r3, 0x4, 0x1}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x2, 0x28}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x54, 0x0, &(0x7f0000000580)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5"}) r4 = socket$inet6(0xa, 0x6, 0x401) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2, 0xff, 0xa, 0x3, 0x7}, 0x20) 3.285228667s ago: executing program 9 (id=3933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r1, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) r2 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000040)=@caif=@rfm, 0x80, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/202, 0xca}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/192, 0xc0}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000780)=""/116, 0x74}], 0xa, &(0x7f00000008c0)=""/196, 0xc4}, 0x4}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/33, 0x21}], 0x2, &(0x7f0000000b40)=""/208, 0xd0}, 0x58}, {{&(0x7f0000000c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000cc0)=""/222, 0xde}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/103, 0x67}, {&(0x7f0000001f40)=""/122, 0x7a}, {&(0x7f0000001fc0)=""/147, 0x93}, {&(0x7f0000002080)=""/57, 0x39}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/230, 0xe6}], 0x9}, 0x13}, {{&(0x7f0000003280)=@hci, 0x80, &(0x7f0000004540)=[{&(0x7f0000003300)=""/36, 0x24}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/139, 0x8b}, {&(0x7f0000004400)=""/177, 0xb1}, {&(0x7f00000044c0)=""/127, 0x7f}], 0x5, &(0x7f00000045c0)=""/216, 0xd8}}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/252, 0xfc}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/71, 0x47}, {&(0x7f0000005940)=""/64, 0x40}], 0x6, &(0x7f0000005a00)=""/122, 0x7a}, 0x5c1}], 0x5, 0x3, 0x0) 3.232274218s ago: executing program 2 (id=3934): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0xa}) r1 = syz_io_uring_complete(0x0) process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="33d20d8a1f9612ffdf846e5b899e0f091c888c8b634dc3eca4872cec0b5d96aaa3c68ef2b02265793cdc5537bec70aaa9eff8abbe503e69a535c9a729dd2e15f581df8507e07af53f78a96580a51bbb461284c7ebaf78f4d52ae99819fde7df6c786119c274960fd5cac67fcddead076970fdf74eac5d3451d50338897b26491d199aa1845e033295b9cf678157fc3896ddcb475ea7e9c21a5a3c1ca62b8e524598f293574f6891b230ea292c88900e9b2364440238c6a98924d49d75671ddd9994512985ee09969e595d2fa3d402eddc9", 0xd1}], 0x1, 0xe, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000001c0)=""/90) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x101a80, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000280)={0x1, 0x34}) r3 = pidfd_getfd(r2, r2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/38, 0x26}, {&(0x7f0000001300)=""/123, 0x7b}], 0x3, &(0x7f00000013c0)=""/147, 0x93}, 0x200}, {{&(0x7f0000001480)=@nl=@unspec, 0x80, &(0x7f0000002640)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/95, 0x5f}, {&(0x7f0000002580)=""/18, 0x12}, {&(0x7f00000025c0)=""/17, 0x11}, {&(0x7f0000002600)=""/56, 0x38}], 0x5, &(0x7f00000026c0)=""/175, 0xaf}}, {{&(0x7f0000002780)=@nfc_llcp, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002800)=""/245, 0xf5}, {&(0x7f0000002900)=""/152, 0x98}], 0x2, &(0x7f0000002a00)=""/65, 0x41}, 0x2}, {{&(0x7f0000002a80)=@tipc, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b00)=""/157, 0x9d}, {&(0x7f0000002bc0)=""/154, 0x9a}, {&(0x7f0000002c80)=""/22, 0x16}, {&(0x7f0000002cc0)=""/24, 0x18}, {&(0x7f0000002d00)=""/133, 0x85}, {&(0x7f0000002dc0)=""/9, 0x9}], 0x6, &(0x7f0000002e80)=""/74, 0x4a}, 0x5}], 0x4, 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003000)={'veth0_virt_wifi\x00', 0x0}) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000003040)=""/18) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000003080)) connect$inet6(r1, &(0x7f0000003480)={0xa, 0x4e21, 0x60000000, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000034c0)=@gcm_256={{0x303}, "52b99963b2ad9593", "6aa8ee59c3a31d83b6ba78eb1cd8bd53ef044557893ca6d1f3e5e982ac36a5e6", "c9d27b7e", "9911bc03ddb89edf"}, 0x38) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000003500)=0x7fff, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003540), 0x802) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003580)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000003780)={r7, 0x3ff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000047c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000004980)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004940)={&(0x7f0000004800)={0x120, r8, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x46}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000010}, 0xb4) bind$packet(r2, &(0x7f00000049c0)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r9 = openat$incfs(r1, &(0x7f0000004a00)='.pending_reads\x00', 0x141080, 0x2a) fsetxattr$security_ima(r9, &(0x7f0000004a40), &(0x7f0000004a80)=@ng={0x4, 0x10}, 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x600000) socket$inet(0x2, 0x3, 0x4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004090}, 0x1) 2.527811371s ago: executing program 5 (id=3935): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x22, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x22, 0x0, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f00000001c0)=0x7fdfffff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) close_range(r4, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x3, 0x0, 0x2d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x34}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.413663524s ago: executing program 6 (id=3936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4004010) (async) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000780)) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000740)) dup2(r0, r5) close_range(r0, 0xffffffffffffffff, 0x0) 2.293286736s ago: executing program 2 (id=3937): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r3, &(0x7f0000000040)=""/141, 0x8d) (async) sendfile(r3, r3, 0x0, 0x7ffff000) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce0102829709021200010000000009040000000202"], 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.046991891s ago: executing program 5 (id=3938): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) (async) close_range(r1, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) (async) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28f6cb7e0000006d09b7f4a0983fc574f676e67c1a71dd297c9f7ee8bded2588c64a040536bef1ffa91ef5f6c4a848b37262ddd583a006d5a8254301", @ANYRES64=r4, @ANYBLOB="010a26bd70000000000011000000140009800800020002000000070002"], 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) (async) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000100)={0x5, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) fadvise64(r5, 0x3, 0x0, 0x4) 2.006978512s ago: executing program 6 (id=3939): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x80927000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.907647743s ago: executing program 5 (id=3940): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/102, 0x66}], 0x3}, 0x12}, {{0x0, 0x0, 0x0, 0xe5c}, 0x2be9}], 0x2, 0x2, 0x0) 1.801157475s ago: executing program 42 (id=3940): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/102, 0x66}], 0x3}, 0x12}, {{0x0, 0x0, 0x0, 0xe5c}, 0x2be9}], 0x2, 0x2, 0x0) 1.600915699s ago: executing program 6 (id=3942): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r6}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x1}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1.450798952s ago: executing program 9 (id=3943): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x3ffd, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) 1.369102444s ago: executing program 6 (id=3944): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) fgetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', &(0x7f00000002c0)=""/254, 0xfe) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x4000820) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, '%\\\xd2/\x03{/{\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000680)=[{{0x2, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0xfffffffe}}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1.200733667s ago: executing program 6 (id=3945): r0 = userfaultfd(0x80801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r2 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x2, 0x4ce, 0x5, 0x9dff, 0xf, "000300eb00cbe600"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa) r7 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r7, 0x200}], 0x1, 0x6) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'macvlan0\x00', 0x0}) write(r2, &(0x7f0000000040)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.07958789s ago: executing program 2 (id=3946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0xffff0001) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000103f7000000010000000a"], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 493.647271ms ago: executing program 7 (id=3941): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x3}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000100)={0x7, 0x1}) close_range(r0, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = getgid() fchown(r0, r1, r2) setresuid(r1, r1, r1) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002240)={'wg2\x00', &(0x7f0000002200)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}}) write$tcp_congestion(r0, &(0x7f0000002280)='reno\x00', 0x5) r4 = socket(0x25, 0x3, 0x1000) r5 = fsmount(r0, 0x0, 0x4e) connect$inet(r5, &(0x7f00000022c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000002300), &(0x7f0000002340)=0x4) getsockname$packet(r5, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000023c0)=0x14) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000002400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x81, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfb, 0x9}}]}}}]}}]}}, &(0x7f0000002600)={0xa, &(0x7f0000002440)={0xa, 0x6, 0x200, 0x6, 0xff, 0x80, 0x20, 0xf7}, 0x13c, &(0x7f0000002480)={0x5, 0xf, 0x13c, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7d, 0x1e000, 0x100}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x40, 0x33, 0x4}, @ptm_cap={0x3}, @generic={0x69, 0x10, 0xb, "b620fbbb4e77c9f7e1eb94085d442a1ecebe67617aa0693bd8bfdef81692786c2a71bc5519b0baf19524c2cdebc88258e97ca90cf9ebb74cb03cb92104ac3e23fdc3f1f59dd216fa615e81e4ccd099de7ad3ea0bfd469cee9f17b0d66a415164bdb204408e2d"}, @ssp_cap={0x24, 0x10, 0xa, 0xe, 0x6, 0x4, 0xff0f, 0x100, [0x0, 0x0, 0xff00f0, 0xffff30, 0xc030, 0xff3fc0]}, @generic={0x90, 0x10, 0x2, "77e911f6b03879f9a2650c650314f4c469aa535bc5cff21bfa48afdacd77253676feb3e02815330939dc3b9b90d4999457becb554ff0f0cb205ebec887f2c7b1e13d60bc90b34754e4d053ce5b399b068814cf5644779056e46f1c46154f71a74f5e6144576107212e80e2c04930921f79c9378bcb88045f3abac52b7418fecdc7c2ec6040b3a11cca08a646be"}]}, 0x1, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x3801}}]}) fcntl$setsig(r6, 0xa, 0x20) r8 = syz_usb_connect$uac1(0x5, 0x99, &(0x7f0000002640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0xe, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x5}, [@extension_unit={0x8, 0x24, 0x8, 0x6, 0xffff, 0x4, "e4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x22, 0x6, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xff, 0x72, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x79}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8000, 0x7f, 0x0, "717baec367ceb06d1d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe2, 0xe7, 0x7f, {0x7, 0x25, 0x1, 0x82, 0x8, 0x8a}}}}}}}]}}, &(0x7f00000029c0)={0xa, &(0x7f0000002700)={0xa, 0x6, 0x300, 0x8b, 0x2, 0xf1, 0x20, 0x55}, 0x6e, &(0x7f0000002740)={0x5, 0xf, 0x6e, 0x5, [@ptm_cap={0x3}, @generic={0x19, 0x10, 0x0, "c6476b16402668d177427525d8fd8793ebd556c0a437"}, @generic={0x33, 0x10, 0x2, "0ce13d4202b50bf5edc7ba68d03efe1d3893fa447a42c1db0985da8f93c101ebf544009c6e9dd95ce2a3f20a4fa9b679"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x10, 0xf00, 0x9, [0xffc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xe, 0x5, 0x4800}]}, 0x4, [{0x4, &(0x7f00000027c0)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x140c}}, {0x72, &(0x7f0000002840)=@string={0x72, 0x3, "e8ba6c60328742f2746fc92844a5afdc42282890941f2e598e937751d8406903296f507e18b0f9ee8af3b91e242e2fb68a5ff8d85acf20990159df9e5815b5f905a58801886ca3c647d67fbcfc05f43661b0a7a8522b8286e3d201e8b76fb37cbaab6099adf1abf723dadb3fb0dc9aa4"}}, {0xff, &(0x7f00000028c0)=@string={0xff, 0x3, "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"}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000002b40)={0x14, &(0x7f0000002a40)={0x20, 0x8, 0x97, {0x97, 0xd, "0f46ecbb85e6be49bd5d5d4e0c9092b84a943f419b913f6a47a0cdaba12d7989787e73787d905a0523c73c4fa6064fb3581b9620871b92f21fab443b461d61ab0930ac453564b49c4f18e160c5982a5fc393fbf8bda41330c442b961972643135d2ac6cdf2b29b47fb140e51ea36b2fda5204b7e413e432f63f412bdb34050ebd6408c87ae90930853f6ca629dfa944825bd8421ab"}}, &(0x7f0000002b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}}, &(0x7f0000002e00)={0x44, &(0x7f0000002b80)={0x0, 0xa, 0x92, "3ecdd0e852a170e717ea2a3491d691fb55fb466eb5547ecbf0231b097408421194a7a39f1b37a439676d365fb72e0a8ccc69412161b52e3c442f6cadac9a96ac3d185d430cffdee03d17d02a151476bb3bb2fe14386a82712efd0b663fb2a645ac333f10195f798aa846a89c632e38eacc4440304ff448026cc64feaa1353f30153fc3a886e0dd56241dc3f5dfa8a274e067"}, &(0x7f0000002c40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002c80)={0x0, 0x8, 0x1, 0x28}, &(0x7f0000002cc0)={0x20, 0x81, 0x1, "98"}, &(0x7f0000002d00)={0x20, 0x82, 0x1, "87"}, &(0x7f0000002d40)={0x20, 0x83, 0x3, "168fcf"}, &(0x7f0000002d80)={0x20, 0x84, 0x4, "a85eddc6"}, &(0x7f0000002dc0)={0x20, 0x85, 0x3, "8e2571"}}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000002e80)=@req3={0x10, 0x5, 0x7, 0x10001, 0x6, 0xff, 0x1000}, 0x1c) r9 = syz_create_resource$binfmt(&(0x7f0000002ec0)='./file0\x00') execveat$binfmt(r0, r9, &(0x7f0000002f80)={[&(0x7f0000002f00)='-{,\x00', &(0x7f0000002f40)='/dev/null\x00']}, &(0x7f0000003040)={[&(0x7f0000002fc0)='reno\x00', &(0x7f0000003000)='wg2\x00']}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), 0x6000) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000003140)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x6b, r7}) syz_usb_connect$cdc_ecm(0x5, 0x70, &(0x7f0000003180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x9, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "c3ba719bc1f7"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xcbe, 0x6, 0x844, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x3, 0xfff7}, @mbim={0xc, 0x24, 0x1b, 0xcb, 0x3ff, 0x7f, 0x2, 0xfac, 0x9d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfb, 0x9, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x4, 0x29}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x7f, 0x7}}}}}]}}]}}, &(0x7f0000003300)={0xa, &(0x7f0000003200)={0xa, 0x6, 0x201, 0x20, 0x2f, 0x3, 0xff, 0xc}, 0x5, &(0x7f0000003240)={0x5, 0xf, 0x5}, 0x1, [{0x80, &(0x7f0000003280)=@string={0x80, 0x3, "b633865f3ae6c395cf4345af1754b1aa6cc08679bbb9d99702187da18513e88079b43f8c751d5c98b2df7b8f5bb38913a3b157d006fe4ab78361a89fa341182b556d1950138787ff6c6fb0f96145309b16c23136f21920bb614667af801c0b17ef513b4465a740261d64a42ed0c3c25a888c88bf978d3064fef29aa3de5d"}}]}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000003340)) 69.014319ms ago: executing program 2 (id=3947): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) getgroups(0x4, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) (async) r5 = syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x400000) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000022c0)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000021c0)=0xe8) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) (async) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r12, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r16, &(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r16, &(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write$FUSE_INIT(r12, &(0x7f0000004300)={0x50, 0x0, r13, {0x7, 0x29, 0x0, 0x11812410, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) syz_fuse_handle_req(r12, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r14, r15, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r18, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r17, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000002000), r18) (async) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000009c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="28001c00e0000002"], 0x230}], 0x1, &(0x7f0000000880)=[@rights={{0x20, 0x1, 0x1, [r2, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r1, r1, r5, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r0, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, r19}}}, @rights={{0x28, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r2, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x110, 0x24000811}, 0x4008000) 0s ago: executing program 2 (id=3948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x2, 0x3, 0xa00, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x31}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x4044011) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 10.785301][T10898] /dev/rnullb0: Can't open blockdev [ 410.793938][ T2227] bridge_slave_1: left promiscuous mode [ 410.807391][ T2227] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.826372][ T2227] bridge_slave_0: left allmulticast mode [ 410.833752][ T2227] bridge_slave_0: left promiscuous mode [ 410.844507][ T2227] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.049049][ T2227] tipc: Left network mode [ 411.054799][ T2227] veth1_macvtap: left promiscuous mode [ 411.078043][ T4255] usb 4-1: USB disconnect, device number 88 [ 411.387317][ T365] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 411.557101][ T365] usb 6-1: Using ep0 maxpacket: 32 [ 411.567900][ T365] usb 6-1: config 0 has an invalid interface number: 13 but max is 0 [ 411.576061][ T365] usb 6-1: config 0 has no interface number 0 [ 411.607347][ T365] usb 6-1: config 0 interface 13 has no altsetting 0 [ 411.618742][ T365] usb 6-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82 [ 411.630813][ T365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.639153][ T365] usb 6-1: Product: syz [ 411.643674][ T365] usb 6-1: Manufacturer: syz [ 411.648468][ T365] usb 6-1: SerialNumber: syz [ 411.653743][ T329] usbhid 10-1:0.0: can't add hid device: -71 [ 411.660310][ T329] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 411.668413][ T365] usb 6-1: config 0 descriptor?? [ 411.674295][ T365] usb-storage 6-1:0.13: USB Mass Storage device detected [ 411.686073][ T329] usb 10-1: USB disconnect, device number 53 [ 411.924361][T10918] rust_binder: 10918 RLIMIT_NICE not set [ 412.460042][T10929] rust_binder: 10928 RLIMIT_NICE not set [ 412.466109][T10928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394 [ 412.792626][T10934] fuse: Bad value for 'user_id' [ 412.806692][T10934] fuse: Bad value for 'user_id' [ 413.192909][T10941] rust_binder: Write failure EFAULT in pid:800 [ 413.207200][ T560] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 413.378147][ T560] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.388395][ T560] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.389452][T10948] rust_binder: 10947 RLIMIT_NICE not set [ 413.398623][T10947] rust_binder: Error while translating object. [ 413.404419][T10947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 413.410884][T10947] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 413.412425][ T560] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.420580][T10947] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:806 [ 413.432160][ T560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.457413][ T560] usb 3-1: Product: syz [ 413.470878][ T560] usb 3-1: Manufacturer: syz [ 413.484099][ T560] usb 3-1: SerialNumber: syz [ 413.504476][T10955] fuse: Bad value for 'user_id' [ 413.509509][T10955] fuse: Bad value for 'user_id' [ 413.907129][ T329] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 413.992823][ T560] usb 3-1: 0:2 : does not exist [ 414.058615][ T329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 414.066781][ T329] usb 4-1: not running at top speed; connect to a high speed hub [ 414.075318][ T329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 414.086119][ T329] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 414.099025][ T329] usb 4-1: string descriptor 0 read error: -22 [ 414.105382][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.114867][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.124507][T10960] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 414.139079][ T4255] usb 6-1: USB disconnect, device number 108 [ 414.190555][ T36] audit: type=1400 audit(1758340985.332:5245): avc: denied { relabelfrom } for pid=10964 comm="syz.5.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 414.210692][ T36] audit: type=1400 audit(1758340985.332:5246): avc: denied { relabelto } for pid=10964 comm="syz.5.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 414.338315][ T329] cdc_ncm 4-1:1.0: bind() failure [ 414.348498][ T329] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 414.355323][ T329] cdc_ncm 4-1:1.1: bind() failure [ 414.361593][ T329] usb 4-1: USB disconnect, device number 89 [ 414.627444][ T9] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 414.686490][T10971] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 414.696680][ T36] audit: type=1400 audit(1758340985.832:5247): avc: denied { relabelto } for pid=10970 comm="syz.9.3446" name="282" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 414.723441][ T36] audit: type=1400 audit(1758340985.832:5248): avc: denied { associate } for pid=10970 comm="syz.9.3446" name="282" dev="tmpfs" ino=1531 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 414.779584][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 414.788741][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.796772][ T9] usb 6-1: Product: syz [ 414.801097][ T9] usb 6-1: Manufacturer: syz [ 414.805725][ T9] usb 6-1: SerialNumber: syz [ 414.810402][ T346] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 414.818998][ T9] usb 6-1: config 0 descriptor?? [ 414.967127][ T346] usb 4-1: Using ep0 maxpacket: 16 [ 414.973361][ T346] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 414.981690][ T346] usb 4-1: config 0 has no interface number 0 [ 414.988210][ T346] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 414.998269][ T346] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 415.009795][ T346] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 415.018916][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.027042][ T346] usb 4-1: Product: syz [ 415.031387][ T346] usb 4-1: Manufacturer: syz [ 415.035997][ T346] usb 4-1: SerialNumber: syz [ 415.041534][ T346] usb 4-1: config 0 descriptor?? [ 415.046847][T10976] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 415.054174][T10976] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 415.227372][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 415.237479][ T9] asix 6-1:0.0: probe with driver asix failed with error -32 [ 415.237527][T10968] rust_binder: Write failure EFAULT in pid:15 [ 415.251829][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.267399][T10976] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 415.268305][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.275288][T10976] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 415.291315][ T329] usb 6-1: USB disconnect, device number 109 [ 415.311413][T10983] rust_binder: Write failure EFAULT in pid:20 [ 415.496945][ T36] audit: type=1400 audit(1758340986.632:5249): avc: denied { map } for pid=10992 comm="syz.5.3452" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 415.526299][ T36] audit: type=1400 audit(1758340986.632:5250): avc: denied { execute } for pid=10992 comm="syz.5.3452" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 415.817173][ T365] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 415.899213][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.908346][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.925166][ T36] audit: type=1400 audit(1758340987.062:5251): avc: denied { write } for pid=7185 comm="syz-executor" name="282" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 415.960778][ T560] usb 3-1: USB disconnect, device number 64 [ 415.963249][ T36] audit: type=1400 audit(1758340987.062:5252): avc: denied { remove_name } for pid=7185 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 415.967337][T10997] fuse: Bad value for 'fd' [ 415.996855][ T36] audit: type=1400 audit(1758340987.062:5253): avc: denied { rmdir } for pid=7185 comm="syz-executor" name="282" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 416.040553][ T365] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.057127][ T365] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.087146][ T365] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 416.098070][ T365] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.114619][T11000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11000 comm=syz.2.3454 [ 416.116668][ T346] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 416.128642][ T365] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.137712][ T346] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 416.146706][ T365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.157130][ T346] asix 4-1:0.251: probe with driver asix failed with error -71 [ 416.165296][ T365] usb 6-1: Product: syz [ 416.177157][ T346] usb 4-1: USB disconnect, device number 90 [ 416.180205][ T365] usb 6-1: Manufacturer: syz [ 416.197103][ T365] usb 6-1: SerialNumber: syz [ 416.289266][T11002] rust_binder: 821: no such ref 3 [ 416.294404][T11002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:821 [ 416.294528][T11002] rust_binder: Write failure EINVAL in pid:821 [ 416.304270][T11003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.344848][T11009] rust_binder: Write failure EFAULT in pid:828 [ 416.523038][T11017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:836 [ 417.011842][T11024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:413 [ 417.207110][ T365] cdc_ncm 6-1:1.0: bind() failure [ 417.207145][ T346] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 417.217786][ T365] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 417.236712][ T365] cdc_ncm 6-1:1.1: bind() failure [ 417.303422][T11026] fuse: Bad value for 'fd' [ 417.378505][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.386916][ T346] usb 3-1: not running at top speed; connect to a high speed hub [ 417.395696][ T346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 417.406644][ T346] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 417.419671][ T346] usb 3-1: string descriptor 0 read error: -22 [ 417.425971][ T346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.435022][ T365] usb 6-1: USB disconnect, device number 110 [ 417.443848][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.458878][T11023] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 417.676142][ T346] cdc_ncm 3-1:1.0: bind() failure [ 417.682136][ T346] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 417.689061][ T346] cdc_ncm 3-1:1.1: bind() failure [ 417.695308][ T346] usb 3-1: USB disconnect, device number 65 [ 417.727127][ T3224] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 417.877104][ T3224] usb 10-1: Using ep0 maxpacket: 32 [ 417.883468][ T3224] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.894498][ T3224] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.904354][ T3224] usb 10-1: config 0 interface 0 has no altsetting 0 [ 417.911090][ T3224] usb 10-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 417.920265][ T3224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.929046][ T3224] usb 10-1: config 0 descriptor?? [ 418.077131][ T560] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 418.135012][T11035] binder: Bad value for 'stats' [ 418.142138][ T3224] usbhid 10-1:0.0: can't add hid device: -71 [ 418.148326][ T3224] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 418.157167][ T3224] usb 10-1: USB disconnect, device number 54 [ 418.230685][T11043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11043 comm=syz.2.3470 [ 418.248533][ T560] usb 4-1: not running at top speed; connect to a high speed hub [ 418.257125][ T560] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.270046][ T560] usb 4-1: config 1 interface 0 has no altsetting 0 [ 418.508784][T11045] rust_binder: 11045 RLIMIT_NICE not set [ 418.508950][T11045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 418.514737][T11045] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 418.524352][T11045] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:34 [ 418.542372][ T365] rust_binder: 11044: removing orphan mapping 0:1048 [ 418.551825][T11047] rust_binder: 36: no such ref 1 [ 418.609531][T11048] __nla_validate_parse: 56 callbacks suppressed [ 418.609553][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3472'. [ 418.627160][T11048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 418.674285][T11051] fuse: Bad value for 'fd' [ 418.935145][T11063] fuseblk: Unknown parameter 'fd50x0000000000000004' [ 418.988508][ T36] audit: type=1400 audit(1758340991.130:5254): avc: denied { ioctl } for pid=11064 comm="syz.9.3478" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 419.307152][ T346] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 419.437112][ T346] usb 3-1: device descriptor read/64, error -71 [ 419.677116][ T346] usb 3-1: device descriptor read/64, error -71 [ 419.917121][ T346] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 420.047118][ T346] usb 3-1: device descriptor read/64, error -71 [ 420.244079][T11078] fuse: Bad value for 'fd' [ 420.287120][ T346] usb 3-1: device descriptor read/64, error -71 [ 420.397237][ T346] usb usb3-port1: attempt power cycle [ 420.737105][ T346] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 420.758094][ T346] usb 3-1: device descriptor read/8, error -71 [ 420.839104][ T560] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 420.848933][ T560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.861228][ T560] usb 4-1: can't set config #1, error -71 [ 420.871650][ T560] usb 4-1: USB disconnect, device number 91 [ 420.893481][ T346] usb 3-1: device descriptor read/8, error -71 [ 420.908883][T11088] syzkaller1: entered promiscuous mode [ 420.920599][T11088] syzkaller1: entered allmulticast mode [ 420.928806][T11087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.928885][T11087] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 420.943611][T11099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11099 comm=syz.3.3488 [ 421.137131][ T346] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 421.153793][T11102] rust_binder: 11101 RLIMIT_NICE not set [ 421.154004][T11102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 421.158303][ T346] usb 3-1: device descriptor read/8, error -71 [ 421.298153][ T346] usb 3-1: device descriptor read/8, error -71 [ 421.323200][ T36] audit: type=1400 audit(1758340993.460:5255): avc: denied { listen } for pid=11104 comm="syz.5.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 421.410169][ T346] usb usb3-port1: unable to enumerate USB device [ 421.495405][T11109] fuse: Bad value for 'fd' [ 421.605168][T11111] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 421.629734][T11116] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 421.639538][ T36] audit: type=1400 audit(1758340993.780:5256): avc: denied { relabelto } for pid=11114 comm="syz.5.3493" name="20" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 421.665910][ T36] audit: type=1400 audit(1758340993.780:5257): avc: denied { associate } for pid=11114 comm="syz.5.3493" name="20" dev="tmpfs" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 421.789401][T11120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 421.789428][T11120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:435 [ 421.799956][T11122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 421.841323][ T36] audit: type=1400 audit(1758340993.980:5258): avc: denied { write } for pid=10884 comm="syz-executor" name="20" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 421.873993][ T36] audit: type=1400 audit(1758340993.980:5259): avc: denied { remove_name } for pid=10884 comm="syz-executor" name="binderfs" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 421.901244][ T36] audit: type=1400 audit(1758340993.980:5260): avc: denied { rmdir } for pid=10884 comm="syz-executor" name="20" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 422.043877][T11131] bpf: Bad value for 'uid' [ 422.079590][T11128] netlink: 'syz.3.3495': attribute type 27 has an invalid length. [ 422.100732][ T365] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 422.103802][T11134] rust_binder: Write failure EFAULT in pid:814 [ 422.132062][T11138] fuse: Bad value for 'fd' [ 422.257095][ T365] usb 6-1: device descriptor read/64, error -71 [ 422.411977][ T36] audit: type=1400 audit(1758340994.550:5261): avc: denied { accept } for pid=11150 comm="syz.9.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 422.457815][ T36] audit: type=1326 audit(1758340994.600:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.9.3504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe57458ec29 code=0x0 [ 422.497133][ T365] usb 6-1: device descriptor read/64, error -71 [ 422.559385][T11152] rust_binder: Write failure EFAULT in pid:883 [ 422.737111][ T365] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 422.877158][ T365] usb 6-1: device descriptor read/64, error -71 [ 423.108031][T11164] can0 (unregistered): slcan off ttyS3. [ 423.117107][ T365] usb 6-1: device descriptor read/64, error -71 [ 423.205461][T11188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.205931][T11188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.212669][T11188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:825 [ 423.227223][ T365] usb usb6-port1: attempt power cycle [ 423.518009][T11225] fuse: Invalid rootmode [ 423.557216][ T346] usb 10-1: new low-speed USB device number 55 using dummy_hcd [ 423.577115][ T365] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 423.608201][ T365] usb 6-1: device descriptor read/8, error -71 [ 423.708202][ T346] usb 10-1: config 16 has an invalid interface number: 236 but max is 1 [ 423.716651][ T346] usb 10-1: config 16 has an invalid interface number: 175 but max is 1 [ 423.725109][ T346] usb 10-1: config 16 has no interface number 0 [ 423.731421][ T346] usb 10-1: config 16 has no interface number 1 [ 423.737727][ T346] usb 10-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 423.748226][ T365] usb 6-1: device descriptor read/8, error -71 [ 423.749354][ T346] usb 10-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 423.766201][ T346] usb 10-1: config 16 interface 175 has no altsetting 0 [ 423.773674][ T346] usb 10-1: language id specifier not provided by device, defaulting to English [ 423.787007][ T346] usb 10-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 423.796335][ T346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.887126][ T3224] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 423.997167][ T365] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 424.003903][T11230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3513'. [ 424.028039][ T365] usb 6-1: device descriptor read/8, error -71 [ 424.037311][T11232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11232 comm=syz.2.3514 [ 424.051751][ T3224] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.062126][ T3224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.072308][ T3224] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.085463][ T3224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.093633][ T3224] usb 4-1: SerialNumber: syz [ 424.114347][T11240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.114540][T11240] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 424.121124][T11240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 424.129231][T11240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:838 [ 424.135882][T11203] tipc: Enabled bearer , priority 0 [ 424.157740][T11203] syzkaller0: entered promiscuous mode [ 424.163347][T11203] syzkaller0: entered allmulticast mode [ 424.178859][T11244] fuse: Unknown parameter '&' [ 424.183661][ T365] usb 6-1: device descriptor read/8, error -71 [ 424.191303][ T36] audit: type=1326 audit(1758340996.330:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.2.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3bf8ec29 code=0x7ffc0000 [ 424.218652][ T36] audit: type=1326 audit(1758340996.330:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.2.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3bf8ec29 code=0x7ffc0000 [ 424.244471][T11201] tipc: Resetting bearer [ 424.251670][T11201] tipc: Disabling bearer [ 424.300461][ T365] usb usb6-port1: unable to enumerate USB device [ 424.322551][ T346] usb 10-1: bad CDC descriptors [ 424.340844][ T346] usb 10-1: USB disconnect, device number 55 [ 424.409999][ T3224] usb 4-1: 0:2 : does not exist [ 424.422607][ T3224] usb 4-1: USB disconnect, device number 92 [ 425.127154][ T3224] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 425.257121][ T365] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 425.277119][ T3224] usb 10-1: Using ep0 maxpacket: 16 [ 425.283665][ T3224] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.287138][ T4255] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 425.293845][ T3224] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.312356][ T3224] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 425.323681][ T3224] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.332857][ T3224] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.341047][ T3224] usb 10-1: Product: syz [ 425.345320][ T3224] usb 10-1: Manufacturer: syz [ 425.350028][ T3224] usb 10-1: SerialNumber: syz [ 425.407089][ T365] usb 6-1: Using ep0 maxpacket: 8 [ 425.413644][ T365] usb 6-1: unable to get BOS descriptor or descriptor too short [ 425.422089][ T365] usb 6-1: config 6 has an invalid interface number: 248 but max is 0 [ 425.430442][ T365] usb 6-1: config 6 has no interface number 0 [ 425.436591][ T365] usb 6-1: config 6 interface 248 has no altsetting 0 [ 425.444844][ T365] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 425.454004][ T365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.462070][ T365] usb 6-1: Product: syz [ 425.466346][ T365] usb 6-1: Manufacturer: syz [ 425.471087][ T365] usb 6-1: SerialNumber: syz [ 425.476482][ T4255] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 425.487260][ T4255] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.502039][ T4255] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 425.511250][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.519393][ T4255] usb 3-1: Product: syz [ 425.523612][ T4255] usb 3-1: Manufacturer: syz [ 425.528340][ T4255] usb 3-1: SerialNumber: syz [ 425.559262][T11250] usb usb8: usbfs: process 11250 (syz.9.3519) did not claim interface 0 before use [ 425.579744][ T3224] usb 10-1: USB disconnect, device number 56 [ 425.587773][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 425.703235][ T365] ums-karma 6-1:6.248: USB Mass Storage device detected [ 425.730353][ T365] usb 6-1: USB disconnect, device number 115 [ 425.739350][T11266] /dev/rnullb0: Can't open blockdev [ 425.745324][ T346] usb 3-1: USB disconnect, device number 70 [ 426.137117][ T3224] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 426.170933][T11280] fuse: Unknown parameter '00000000000000000000' [ 426.325600][ T3224] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.344436][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 426.344456][ T36] audit: type=1400 audit(1758340998.480:5369): avc: denied { read write } for pid=11287 comm="syz.5.3535" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 426.345928][ T3224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.359014][ T36] audit: type=1400 audit(1758340998.490:5370): avc: denied { read write open } for pid=11287 comm="syz.5.3535" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 426.411068][ T3224] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.421378][ T3224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.431440][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3532'. [ 426.444779][ T3224] usb 4-1: Product: syz [ 426.450790][T11289] erspan0: default FDB implementation only supports local addresses [ 426.456296][ T36] audit: type=1400 audit(1758340998.490:5371): avc: denied { read } for pid=11287 comm="syz.5.3535" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.466165][ T3224] usb 4-1: Manufacturer: syz [ 426.510315][T11289] /dev/rnullb0: Can't open blockdev [ 426.517105][ T36] audit: type=1400 audit(1758340998.490:5372): avc: denied { read open } for pid=11287 comm="syz.5.3535" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.526497][ T3224] usb 4-1: SerialNumber: syz [ 426.556122][ T36] audit: type=1400 audit(1758340998.490:5373): avc: denied { map } for pid=11287 comm="syz.5.3535" path="socket:[81554]" dev="sockfs" ino=81554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 426.582648][ T36] audit: type=1400 audit(1758340998.530:5374): avc: denied { read write } for pid=7185 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.610120][ T36] audit: type=1400 audit(1758340998.530:5375): avc: denied { read write open } for pid=7185 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.636427][ T36] audit: type=1400 audit(1758340998.530:5376): avc: denied { ioctl } for pid=7185 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.638734][T11297] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 426.662784][ T36] audit: type=1400 audit(1758340998.530:5377): avc: denied { ioctl } for pid=11274 comm="syz.3.3528" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.669610][T11297] SELinux: failed to load policy [ 426.696821][ T36] audit: type=1400 audit(1758340998.550:5378): avc: denied { ioctl } for pid=11274 comm="syz.3.3528" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.760308][ T562] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 426.920439][ T562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.931611][ T562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.941526][ T562] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 426.950757][ T562] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.960990][ T562] usb 10-1: config 0 descriptor?? [ 427.021772][T11305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:859 [ 427.028647][ T3224] usb 4-1: 0:2 : does not exist [ 427.056766][ T3224] usb 4-1: USB disconnect, device number 93 [ 427.108855][T11307] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.112390][T11307] rust_binder: Read failure Err(EAGAIN) in pid:861 [ 427.114025][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 427.227987][T11311] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.282172][T11312] rust_binder: 865: no such ref 2 [ 427.295195][T11312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:865 [ 427.436489][T11314] 8021q: VLANs not supported on lo [ 427.640539][T11319] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 427.644803][T11321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.784469][T11330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.793033][ T562] hid-led 0003:27B8:01ED.0022: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 427.856967][ T562] hid-led 0003:27B8:01ED.0022: ThingM blink(1) initialized [ 427.992535][ T562] usb 10-1: USB disconnect, device number 57 [ 428.204141][T11349] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3552'. [ 428.213270][T11349] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3552'. [ 428.223548][T11349] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3552'. [ 428.237765][T11350] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 428.257110][T11350] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 428.523377][ T4255] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 428.675381][T11363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.689861][ T4255] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.706613][ T4255] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.725537][ T4255] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.736010][ T4255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.745728][ T4255] usb 6-1: Product: syz [ 428.750782][ T4255] usb 6-1: Manufacturer: syz [ 428.756316][ T4255] usb 6-1: SerialNumber: syz [ 428.761824][T11363] netlink: 'syz.9.3556': attribute type 1 has an invalid length. [ 428.771187][T11365] netlink: 'syz.9.3556': attribute type 1 has an invalid length. [ 428.784734][T11362] rust_binder: Error while translating object. [ 428.784783][T11362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 428.791160][T11362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:904 [ 428.812900][ T329] rust_binder: 11361: removing orphan mapping 0:4224 [ 428.917999][T11372] fuse: Unknown parameter '00000000000000000000' [ 429.183321][ T4255] usb 6-1: 0:2 : does not exist [ 429.202626][ T4255] usb 6-1: USB disconnect, device number 116 [ 429.256407][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 429.507120][ T562] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 429.659901][ T562] usb 10-1: config 255 has an invalid interface number: 81 but max is 1 [ 429.668351][ T562] usb 10-1: config 255 has an invalid interface number: 151 but max is 1 [ 429.677130][ T562] usb 10-1: config 255 has an invalid interface number: 161 but max is 1 [ 429.685572][ T562] usb 10-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 429.694556][ T562] usb 10-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 429.703561][ T562] usb 10-1: config 255 has 3 interfaces, different from the descriptor's value: 2 [ 429.713276][ T562] usb 10-1: config 255 has no interface number 0 [ 429.719969][ T562] usb 10-1: config 255 has no interface number 1 [ 429.726402][ T562] usb 10-1: config 255 has no interface number 2 [ 429.727088][ T4255] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 429.732874][ T562] usb 10-1: config 255 interface 81 altsetting 1 endpoint 0xD has invalid maxpacket 592, setting to 64 [ 429.751420][ T562] usb 10-1: config 255 interface 81 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 429.762535][ T562] usb 10-1: config 255 interface 81 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 429.768584][T11393] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 429.774643][ T562] usb 10-1: config 255 interface 81 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 13 [ 429.781017][T11393] rust_binder: Write failure EINVAL in pid:98 [ 429.795514][ T562] usb 10-1: too many endpoints for config 255 interface 151 altsetting 85: 219, using maximum allowed: 30 [ 429.814216][ T562] usb 10-1: config 255 interface 151 altsetting 85 has an invalid descriptor for endpoint zero, skipping [ 429.826346][ T562] usb 10-1: config 255 interface 151 altsetting 85 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 429.838528][ T562] usb 10-1: config 255 interface 151 altsetting 85 has a duplicate endpoint with address 0x3, skipping [ 429.850504][ T562] usb 10-1: config 255 interface 151 altsetting 85 has a duplicate endpoint with address 0x3, skipping [ 429.862472][ T562] usb 10-1: config 255 interface 151 altsetting 85 has 5 endpoint descriptors, different from the interface descriptor's value: 219 [ 429.877171][ T562] usb 10-1: config 255 interface 161 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 429.889024][ T562] usb 10-1: config 255 interface 161 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 429.905272][ T562] usb 10-1: config 255 interface 161 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 429.907190][ T4255] usb 3-1: Using ep0 maxpacket: 32 [ 429.918009][ T562] usb 10-1: config 255 interface 161 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 429.933340][ T562] usb 10-1: config 255 interface 161 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 429.945670][ T562] usb 10-1: config 255 interface 161 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 429.946819][ T4255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.958058][ T562] usb 10-1: config 255 interface 161 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 429.969401][ T4255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.982271][ T562] usb 10-1: config 255 interface 161 altsetting 7 has 8 endpoint descriptors, different from the interface descriptor's value: 13 [ 430.002131][ T4255] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.003558][ T562] usb 10-1: config 255 interface 81 has no altsetting 0 [ 430.019151][ T562] usb 10-1: config 255 interface 151 has no altsetting 0 [ 430.021400][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.026263][ T562] usb 10-1: config 255 interface 161 has no altsetting 0 [ 430.042045][ T4255] usb 3-1: config 0 descriptor?? [ 430.048050][ T562] usb 10-1: Dual-Role OTG device on HNP port [ 430.059636][ T4255] hub 3-1:0.0: USB hub found [ 430.061670][ T562] usb 10-1: New USB device found, idVendor=413d, idProduct=b673, bcdDevice=81.92 [ 430.074835][ T562] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.083837][ T562] usb 10-1: Product: 通푒⚊㡯蕰὘銲䥋䔯◧쌱秚䄖鶀䦓᠓ḓ◝当鼲札༅嗨伹寖ྲ戼䖅믫ᇱ똄᱃갺ꕲ㠈ꜷ踘䃣輬歩茷❢丶⻲魉똂⽪谥랽㉬早땎髼昬᎕䧢풃쌓띙굁錱踝㘕陘柲䱃痈㐲࠯炬퀈ី같郗庽ꤔ論魯㑊뷆䬌鸻뤢萸쁏羇颀㩜팦ṿ쌙氋沘屦鍙문컼ᣯ荐愒乀Ťꦣ駓ￏ෷Ñﯾ簱밤 [ 430.127609][ T562] usb 10-1: Manufacturer: 岬欒艼훘⯩䓅껝松쳗এ琷﯑秙㑭箏造꿱逝啱炐㦏鼲쪝竔았웬㵃䨢䯅嫭㋿끑ꕔぴ佟㊀ [ 430.144551][ T562] usb 10-1: SerialNumber: Д [ 430.238539][T11404] fuse: Unknown parameter 'user00000000000000000000' [ 430.262320][ T4255] hub 3-1:0.0: 1 port detected [ 430.359201][T11387] rust_binder: 11387 RLIMIT_NICE not set [ 430.377184][ T562] usb 10-1: USB disconnect, device number 58 [ 430.453243][T11406] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 430.472619][T11406] rust_binder: Write failure EINVAL in pid:111 [ 430.866221][ T3224] rust_binder: 11386: removing orphan mapping 0:1024 [ 430.907904][ T562] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 431.073670][ T562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.087897][ T562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.088005][ T4255] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 431.107102][ T4255] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 431.121494][ T562] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 431.132743][ T4255] usbhid 3-1:0.0: can't add hid device: -71 [ 431.148383][ T562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.150295][ T4255] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 431.169884][ T562] usb 6-1: config 0 descriptor?? [ 431.189509][T11431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.207309][ T4255] usb 3-1: USB disconnect, device number 71 [ 431.244432][T11433] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 431.244460][T11433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 431.253609][T11433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:888 [ 431.266147][T11434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.297369][ T2227] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.333825][T11441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.346258][T11441] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 431.347085][ T36] kauditd_printk_skb: 788 callbacks suppressed [ 431.347106][ T36] audit: type=1400 audit(1758341003.480:6167): avc: denied { ioctl } for pid=11440 comm="syz.2.3584" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.352893][T11441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 431.383573][ T36] audit: type=1400 audit(1758341003.480:6168): avc: denied { call } for pid=11440 comm="syz.2.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 431.393062][T11441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:893 [ 431.407233][ T36] audit: type=1400 audit(1758341003.510:6169): avc: denied { read } for pid=11436 comm="syz.9.3583" name="binder1" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.471904][ T36] audit: type=1400 audit(1758341003.510:6170): avc: denied { read open } for pid=11436 comm="syz.9.3583" path="/dev/binderfs/binder1" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.497096][ T36] audit: type=1400 audit(1758341003.570:6171): avc: denied { execmem } for pid=11414 comm="syz.5.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 431.527083][ T36] audit: type=1400 audit(1758341003.570:6172): avc: denied { connect } for pid=11414 comm="syz.5.3575" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 431.553741][ T36] audit: type=1400 audit(1758341003.570:6173): avc: denied { sys_module } for pid=11414 comm="syz.5.3575" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.575905][ T36] audit: type=1400 audit(1758341003.640:6174): avc: denied { ioctl } for pid=11414 comm="syz.5.3575" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=82082 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 431.677116][ T36] audit: type=1400 audit(1758341003.670:6175): avc: denied { read write } for pid=7279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.715830][ T36] audit: type=1400 audit(1758341003.670:6176): avc: denied { read write open } for pid=7279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.606639][T11457] fuse: Bad value for 'group_id' [ 432.627722][T11457] fuse: Bad value for 'group_id' [ 432.745330][ T562] usbhid 6-1:0.0: can't add hid device: -71 [ 432.755923][T11459] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3589'. [ 432.771062][ T562] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 432.809188][ T562] usb 6-1: USB disconnect, device number 117 [ 432.811800][T11461] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3590'. [ 433.142934][T11475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 433.145995][T11474] kvm: user requested TSC rate below hardware speed [ 433.218438][T11476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 433.307095][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 433.319776][ T2277] Bluetooth: hci0: command 0x1003 tx timeout [ 433.324047][T11478] fuse: Bad value for 'group_id' [ 433.330856][T11478] fuse: Bad value for 'group_id' [ 433.402295][T11482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 433.402331][T11482] rust_binder: Read failure Err(EFAULT) in pid:940 [ 433.453720][T11485] tipc: Enabled bearer , priority 0 [ 433.471267][T11485] tipc: Disabling bearer [ 433.744844][T11495] fuse: Bad value for 'user_id' [ 433.749887][T11495] fuse: Bad value for 'user_id' [ 433.759665][T11495] incfs: Error accessing: ./file0. [ 433.765049][T11495] incfs: mount failed -20 [ 434.017111][ T562] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 434.025367][T11499] fuse: Bad value for 'group_id' [ 434.030573][T11499] fuse: Bad value for 'group_id' [ 434.070076][T11501] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 434.077708][T11501] SELinux: failed to load policy [ 434.167083][ T562] usb 10-1: Using ep0 maxpacket: 16 [ 434.175584][ T562] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 434.186386][ T562] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.207113][ T3224] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 434.217157][ T562] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.240790][ T562] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 434.253778][ T562] usb 10-1: config 7 interface 0 has no altsetting 0 [ 434.267196][ T562] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 434.276369][ T562] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.379164][T11506] fuse: Unknown parameter 'user_i00000000000000000000' [ 434.399638][ T3224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.417086][ T3224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.426998][ T3224] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 434.446186][ T3224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.479140][ T3224] usb 4-1: config 0 descriptor?? [ 434.902017][T11518] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 434.916673][ T562] usbhid 10-1:7.0: can't add hid device: -71 [ 434.930382][ T562] usbhid 10-1:7.0: probe with driver usbhid failed with error -71 [ 434.953453][ T562] usb 10-1: USB disconnect, device number 59 [ 435.754450][T11525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:959 [ 435.781618][T11529] fuse: Unknown parameter 'user_id00000000000000000000' [ 435.929003][ T3224] usbhid 4-1:0.0: can't add hid device: -71 [ 435.935155][ T3224] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 435.944970][ T3224] usb 4-1: USB disconnect, device number 94 [ 436.539098][ T36] kauditd_printk_skb: 629 callbacks suppressed [ 436.539118][ T36] audit: type=1400 audit(1758341008.680:6806): avc: denied { read write } for pid=9058 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.586924][ T36] audit: type=1400 audit(1758341008.710:6807): avc: denied { read write open } for pid=9058 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.612979][ T36] audit: type=1400 audit(1758341008.710:6808): avc: denied { ioctl } for pid=9058 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.639455][ T36] audit: type=1400 audit(1758341008.730:6809): avc: denied { read write } for pid=7185 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.676626][T11547] tipc: Enabled bearer , priority 0 [ 436.686354][T11547] tipc: Disabling bearer [ 436.712838][T11545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 436.718292][ T36] audit: type=1400 audit(1758341008.730:6810): avc: denied { read write open } for pid=7185 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.720529][T11545] rust_binder: Failed to allocate buffer. len:7336, is_oneway:false [ 436.724866][ T36] audit: type=1400 audit(1758341008.730:6811): avc: denied { ioctl } for pid=7185 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.809137][ T36] audit: type=1400 audit(1758341008.750:6812): avc: denied { read } for pid=11544 comm="syz.3.3624" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 436.845857][ T36] audit: type=1400 audit(1758341008.750:6813): avc: denied { read open } for pid=11544 comm="syz.3.3624" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 436.871256][ T36] audit: type=1400 audit(1758341008.760:6814): avc: denied { read write } for pid=11544 comm="syz.3.3624" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 436.896374][ T36] audit: type=1400 audit(1758341008.760:6815): avc: denied { read write open } for pid=11544 comm="syz.3.3624" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 436.964725][T11549] can0: slcan on ttyS3. [ 437.086545][T11555] fuse: Unknown parameter 'user_id00000000000000000000' [ 437.227224][ T3224] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 437.367099][ T3224] usb 4-1: device descriptor read/64, error -71 [ 437.547098][ T4255] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 437.627098][ T3224] usb 4-1: device descriptor read/64, error -71 [ 437.699534][ T4255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.710732][ T4255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.720598][ T4255] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 437.729774][ T4255] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.739744][ T4255] usb 10-1: config 0 descriptor?? [ 437.877139][ T3224] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 438.017121][ T3224] usb 4-1: device descriptor read/64, error -71 [ 438.270699][ T3224] usb 4-1: device descriptor read/64, error -71 [ 438.387094][ T562] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 438.397162][ T3224] usb usb4-port1: attempt power cycle [ 438.537082][ T562] usb 3-1: Using ep0 maxpacket: 32 [ 438.545422][ T562] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 438.555150][ T562] usb 3-1: config 0 has no interface number 0 [ 438.567118][ T562] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 438.577768][ T562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.585798][ T562] usb 3-1: Product: syz [ 438.591171][ T562] usb 3-1: Manufacturer: syz [ 438.595799][ T562] usb 3-1: SerialNumber: syz [ 438.603885][ T562] usb 3-1: config 0 descriptor?? [ 438.614966][ T562] smsc95xx v2.0.0 [ 438.737124][ T3224] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 438.760411][ T3224] usb 4-1: device descriptor read/8, error -71 [ 438.900356][ T3224] usb 4-1: device descriptor read/8, error -71 [ 438.901952][ T4255] usbhid 10-1:0.0: can't add hid device: -71 [ 438.919449][ T4255] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 438.933527][ T4255] usb 10-1: USB disconnect, device number 60 [ 439.022673][ T562] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 439.033480][ T562] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 439.103742][T11602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:168 [ 439.137076][ T3224] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 439.169503][ T3224] usb 4-1: device descriptor read/8, error -71 [ 439.299504][ T3224] usb 4-1: device descriptor read/8, error -71 [ 439.407175][ T3224] usb usb4-port1: unable to enumerate USB device [ 439.606364][T11608] /dev/rnullb0: Can't open blockdev [ 439.647803][T11613] fuse: Unknown parameter 'user_id00000000000000000000' [ 440.055253][T11593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.057368][T11593] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 440.063937][T11593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 440.072047][T11593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:934 [ 440.082704][ T562] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 440.103834][ T562] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 440.121544][ T562] usb 3-1: USB disconnect, device number 72 [ 440.327128][ T4255] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 440.489967][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.501472][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.511587][ T4255] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 440.522540][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.533498][ T4255] usb 4-1: config 0 descriptor?? [ 440.637080][ T562] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 440.772657][ T4255] usbhid 4-1:0.0: can't add hid device: -71 [ 440.789199][ T4255] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 440.810704][ T562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.817162][ T4255] usb 4-1: USB disconnect, device number 99 [ 440.837900][ T562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.862505][ T562] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 440.894989][ T562] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.942298][ T562] usb 10-1: config 0 descriptor?? [ 441.054190][T11642] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3652'. [ 441.152237][T11646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 441.307065][ T4255] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 441.397068][ T3224] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 441.467295][ T4255] usb 6-1: Using ep0 maxpacket: 16 [ 441.475630][ T4255] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.487261][ T4255] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 441.506425][ T4255] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.519448][ T4255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.537061][ T4255] usb 6-1: Product: syz [ 441.541286][ T4255] usb 6-1: Manufacturer: syz [ 441.545918][ T4255] usb 6-1: SerialNumber: syz [ 441.558939][ T36] kauditd_printk_skb: 749 callbacks suppressed [ 441.558958][ T36] audit: type=1400 audit(1758341013.700:7565): avc: denied { ioctl } for pid=11645 comm="syz.3.3654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.561536][ T3224] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 441.565347][ T36] audit: type=1400 audit(1758341013.700:7566): avc: denied { ioctl } for pid=11645 comm="syz.3.3654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.592916][ T3224] usb 4-1: config 1 has no interface number 1 [ 441.618956][ T4255] usb 6-1: config 0 descriptor?? [ 441.635632][ T36] audit: type=1400 audit(1758341013.700:7567): avc: denied { ioctl } for pid=11645 comm="syz.3.3654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.660658][ T36] audit: type=1400 audit(1758341013.700:7568): avc: denied { ioctl } for pid=11645 comm="syz.3.3654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.686397][ T36] audit: type=1400 audit(1758341013.700:7569): avc: denied { ioctl } for pid=11645 comm="syz.3.3654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.703285][ T3224] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 441.711572][ T36] audit: type=1400 audit(1758341013.730:7570): avc: denied { ioctl } for pid=11645 comm="syz.3.3654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.749234][ T36] audit: type=1400 audit(1758341013.800:7571): avc: denied { ioctl } for pid=11641 comm="syz.5.3652" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.774276][ T36] audit: type=1400 audit(1758341013.800:7572): avc: denied { ioctl } for pid=11641 comm="syz.5.3652" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.785891][ T3224] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 53258, setting to 64 [ 441.809148][ T36] audit: type=1400 audit(1758341013.800:7573): avc: denied { ioctl } for pid=11641 comm="syz.5.3652" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.836254][ T3224] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.845451][ T36] audit: type=1400 audit(1758341013.950:7574): avc: denied { ioctl } for pid=11645 comm="syz.3.3654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.846961][ T3224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.879081][ T3224] usb 4-1: Product: syz [ 441.883301][ T3224] usb 4-1: Manufacturer: syz [ 441.889260][ T3224] usb 4-1: SerialNumber: syz [ 441.930319][ T346] usb 6-1: USB disconnect, device number 118 [ 442.115952][T11646] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 442.130008][ T3224] usb 4-1: USB disconnect, device number 100 [ 442.217901][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 442.287673][T11651] /dev/rnullb0: Can't open blockdev [ 442.405251][ T562] usbhid 10-1:0.0: can't add hid device: -71 [ 442.412833][ T562] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 442.427161][ T562] usb 10-1: USB disconnect, device number 61 [ 442.510388][T11662] fuse: Bad value for 'fd' [ 442.520237][T11664] rust_binder: 176: no such ref 1 [ 442.525441][T11664] rust_binder: 176: no such ref 3 [ 442.750994][T11672] 9pnet_fd: Insufficient options for proto=fd [ 443.217080][ T562] usb 10-1: new full-speed USB device number 62 using dummy_hcd [ 443.357133][ T562] usb 10-1: device descriptor read/64, error -71 [ 443.617071][ T562] usb 10-1: device descriptor read/64, error -71 [ 443.658409][T11686] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3669'. [ 443.742265][T11684] rust_binder: 11684 RLIMIT_NICE not set [ 443.742379][T11684] rust_binder: Read failure Err(EFAULT) in pid:184 [ 443.744356][T11691] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 443.766705][T11693] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 443.834976][T11697] fuse: Unknown parameter '0x0000000000000003' [ 443.867098][ T562] usb 10-1: new full-speed USB device number 63 using dummy_hcd [ 443.927085][ T329] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 444.007082][ T562] usb 10-1: device descriptor read/64, error -71 [ 444.047110][ T560] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 444.077102][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 444.091076][ T329] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.102656][ T329] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 444.122000][ T329] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.131545][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.140145][ T329] usb 4-1: Product: syz [ 444.146811][ T329] usb 4-1: Manufacturer: syz [ 444.153466][ T329] usb 4-1: SerialNumber: syz [ 444.166077][ T329] usb 4-1: config 0 descriptor?? [ 444.197061][ T560] usb 3-1: Using ep0 maxpacket: 16 [ 444.214108][ T560] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.225604][ T560] usb 3-1: config 0 interface 0 has no altsetting 0 [ 444.232282][ T560] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 444.241397][ T560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.249456][ T562] usb 10-1: device descriptor read/64, error -71 [ 444.257416][ T560] usb 3-1: config 0 descriptor?? [ 444.357605][ T562] usb usb10-port1: attempt power cycle [ 444.396008][ T329] usb 4-1: USB disconnect, device number 101 [ 444.707107][ T562] usb 10-1: new full-speed USB device number 64 using dummy_hcd [ 444.729812][ T562] usb 10-1: device descriptor read/8, error -71 [ 444.859408][ T562] usb 10-1: device descriptor read/8, error -71 [ 444.874245][ T560] usb 3-1: USB disconnect, device number 73 [ 445.107145][ T562] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 445.129878][ T562] usb 10-1: device descriptor read/8, error -71 [ 445.247116][ T329] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 445.259617][ T562] usb 10-1: device descriptor read/8, error -71 [ 445.369316][ T562] usb usb10-port1: unable to enumerate USB device [ 445.407073][ T329] usb 6-1: Using ep0 maxpacket: 8 [ 445.426748][ T329] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.446598][ T329] usb 6-1: config 6 has an invalid interface number: 82 but max is 0 [ 445.459078][ T329] usb 6-1: config 6 has no interface number 0 [ 445.465313][ T329] usb 6-1: config 6 interface 82 has no altsetting 0 [ 445.478395][ T329] usb 6-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=5f.16 [ 445.507099][ T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.516634][ T329] usb 6-1: Product: syz [ 445.522220][ T329] usb 6-1: Manufacturer: syz [ 445.527897][ T329] usb 6-1: SerialNumber: syz [ 445.655510][T11728] fuse: Unknown parameter '0x0000000000000003' [ 445.740826][ T329] hub 6-1:6.82: bad descriptor, ignoring hub [ 445.759121][ T329] hub 6-1:6.82: probe with driver hub failed with error -5 [ 445.807436][ T329] usb 6-1: USB disconnect, device number 119 [ 446.117004][T11737] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3688'. [ 446.290665][T11741] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3690'. [ 446.301757][T11744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 446.301792][T11744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:198 [ 446.377180][ T365] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 446.436824][T11751] fuse: Unknown parameter '0x0000000000000003' [ 446.557086][ T365] usb 3-1: Using ep0 maxpacket: 16 [ 446.565966][ T365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.576331][ T36] kauditd_printk_skb: 580 callbacks suppressed [ 446.576350][ T36] audit: type=1400 audit(1758341018.700:8155): avc: denied { read open } for pid=11752 comm="syz.9.3694" path="net:[4026532438]" dev="nsfs" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 446.607492][ T365] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 446.616565][ T36] audit: type=1400 audit(1758341018.700:8156): avc: denied { create } for pid=11752 comm="syz.9.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.637564][ T36] audit: type=1400 audit(1758341018.710:8157): avc: denied { write } for pid=11752 comm="syz.9.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.663240][ T365] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.673020][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.690538][ T36] audit: type=1400 audit(1758341018.720:8158): avc: denied { ioctl } for pid=11736 comm="syz.2.3688" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.716810][ T365] usb 3-1: Product: syz [ 446.721040][ T365] usb 3-1: Manufacturer: syz [ 446.725702][ T365] usb 3-1: SerialNumber: syz [ 446.734075][ T365] usb 3-1: config 0 descriptor?? [ 446.739190][ T36] audit: type=1400 audit(1758341018.720:8159): avc: denied { read write } for pid=9058 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.765158][ T36] audit: type=1400 audit(1758341018.720:8160): avc: denied { read write open } for pid=9058 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.791444][ T36] audit: type=1400 audit(1758341018.720:8161): avc: denied { ioctl } for pid=9058 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.845450][ T36] audit: type=1400 audit(1758341018.750:8162): avc: denied { read write } for pid=11752 comm="syz.9.3694" name="binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 446.871432][ T36] audit: type=1400 audit(1758341018.750:8163): avc: denied { read write open } for pid=11752 comm="syz.9.3694" path="/dev/binderfs/binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 446.897060][ T562] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 446.905275][ T36] audit: type=1400 audit(1758341018.750:8164): avc: denied { ioctl } for pid=11736 comm="syz.2.3688" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.936966][T11759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 446.937410][T11759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 446.998670][T11760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 447.006018][T11760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 447.006669][ T4255] usb 3-1: USB disconnect, device number 74 [ 447.053831][T11762] 9pnet_fd: Insufficient options for proto=fd [ 447.072138][ T562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 447.103848][ T562] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 447.133981][T11764] tipc: Started in network mode [ 447.134685][ T562] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.139616][T11764] tipc: Node identity 4a5cbf7efe52, cluster identity 4711 [ 447.155767][T11764] tipc: Enabled bearer , priority 0 [ 447.163928][ T562] usb 10-1: config 0 descriptor?? [ 447.179275][T11753] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 447.188643][T11764] tipc: Disabling bearer [ 447.297815][T11766] binder: Unknown parameter '0x0000000000000005' [ 447.430431][T11781] fuse: Unknown parameter '0x0000000000000003' [ 447.595274][ T562] hid-generic 0003:04F3:0755.0024: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 447.700541][T11788] KVM: debugfs: duplicate directory 11788-5 [ 447.793001][ T4255] usb 10-1: USB disconnect, device number 66 [ 447.876152][T11796] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 447.879837][ T365] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 447.918222][T11800] rust_binder: Error while translating object. [ 447.918286][T11800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 447.924546][T11800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1016 [ 448.033008][T11806] fuse: Bad value for 'user_id' [ 448.037136][ T365] usb 6-1: device descriptor read/64, error -71 [ 448.042395][T11806] fuse: Bad value for 'user_id' [ 448.247082][ T562] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 448.287076][ T365] usb 6-1: device descriptor read/64, error -71 [ 448.383960][T11828] tipc: Enabled bearer , priority 10 [ 448.421219][ T562] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 448.441076][ T562] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 448.452811][ T562] usb 10-1: config 1 interface 0 has no altsetting 0 [ 448.462707][ T562] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 448.471914][ T562] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.480074][ T562] usb 10-1: Product: 㐁 [ 448.484339][ T562] usb 10-1: Manufacturer: я [ 448.489001][ T562] usb 10-1: SerialNumber: syz [ 448.497147][T11804] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 448.504760][T11804] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 448.537077][ T365] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 448.537656][T11833] fuse: Bad value for 'user_id' [ 448.549689][T11833] fuse: Bad value for 'user_id' [ 448.647072][ T4255] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 448.677098][ T365] usb 6-1: device descriptor read/64, error -71 [ 448.799611][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.810750][ T4255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.820568][ T4255] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 448.829744][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.839865][ T4255] usb 4-1: config 0 descriptor?? [ 448.924402][ T562] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 1 proto 1 vid 0x04B8 pid 0x0202 [ 448.927594][ T365] usb 6-1: device descriptor read/64, error -71 [ 448.943259][ T562] usb 10-1: USB disconnect, device number 67 [ 448.957322][ T562] usblp0: removed [ 449.057158][ T365] usb usb6-port1: attempt power cycle [ 449.386248][ T2227] Bluetooth: hci0: Frame reassembly failed (-84) [ 449.399967][ T2277] Bluetooth: hci0: unexpected event 0x08 length: 0 < 4 [ 449.406963][ T365] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 449.460775][ T365] usb 6-1: device descriptor read/8, error -71 [ 449.507080][ T560] tipc: Node number set to 3515533052 [ 449.609700][ T365] usb 6-1: device descriptor read/8, error -71 [ 449.757078][ T560] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 449.856327][ T4255] usbhid 4-1:0.0: can't add hid device: -71 [ 449.863548][ T4255] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 449.871451][ T365] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 449.882963][ T4255] usb 4-1: USB disconnect, device number 102 [ 449.905229][ T365] usb 6-1: device descriptor read/8, error -71 [ 449.933998][ T560] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 449.956916][ T560] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.966952][ T560] usb 10-1: config 0 interface 0 has no altsetting 0 [ 449.973753][ T560] usb 10-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 449.983025][ T560] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.997208][ T560] usb 10-1: config 0 descriptor?? [ 450.042740][ T365] usb 6-1: device descriptor read/8, error -71 [ 450.167193][ T365] usb usb6-port1: unable to enumerate USB device [ 450.414329][ T560] lenovo 0003:17EF:6067.0025: unknown main item tag 0x0 [ 450.421495][ T560] lenovo 0003:17EF:6067.0025: unknown main item tag 0x0 [ 450.432551][ T560] lenovo 0003:17EF:6067.0025: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.9-1/input0 [ 450.529461][ T365] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 450.598674][ T365] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 450.739531][T11861] fido_id[11861]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 450.775219][ T560] usb 10-1: USB disconnect, device number 68 [ 450.807815][T11871] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 450.807864][T11871] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 450.831906][T11871] rust_binder: Read failure Err(EFAULT) in pid:598 [ 450.842245][T11873] fuse: Bad value for 'user_id' [ 450.868094][T11873] fuse: Bad value for 'user_id' [ 451.118707][T11889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 451.138426][T11889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 451.193123][T11890] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 451.267138][ T4255] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 451.387078][ T2277] Bluetooth: hci0: command 0x1003 tx timeout [ 451.387090][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 451.407085][ T4255] usb 6-1: device descriptor read/64, error -71 [ 451.547139][ T560] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 451.587569][ T36] kauditd_printk_skb: 963 callbacks suppressed [ 451.587583][ T36] audit: type=1400 audit(1758341023.730:9128): avc: denied { ioctl } for pid=11885 comm="syz.5.3735" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.618872][ T36] audit: type=1400 audit(1758341023.760:9129): avc: denied { ioctl } for pid=11891 comm="syz.9.3737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.647119][ T4255] usb 6-1: device descriptor read/64, error -71 [ 451.697699][ T36] audit: type=1400 audit(1758341023.840:9130): avc: denied { ioctl } for pid=11891 comm="syz.9.3737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.700022][ T560] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.722886][ T36] audit: type=1400 audit(1758341023.840:9131): avc: denied { ioctl } for pid=11891 comm="syz.9.3737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.734447][ T560] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.759123][ T36] audit: type=1400 audit(1758341023.840:9132): avc: denied { ioctl } for pid=11891 comm="syz.9.3737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.771858][ T560] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 451.794008][ T36] audit: type=1400 audit(1758341023.840:9133): avc: denied { ioctl } for pid=11891 comm="syz.9.3737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.803984][ T560] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.828291][ T36] audit: type=1400 audit(1758341023.840:9134): avc: denied { ioctl } for pid=11891 comm="syz.9.3737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.839671][ T560] usb 10-1: config 0 descriptor?? [ 451.861128][ T36] audit: type=1400 audit(1758341023.880:9135): avc: denied { ioctl } for pid=11891 comm="syz.9.3737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.890968][ T4255] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 451.899034][ T36] audit: type=1400 audit(1758341023.910:9136): avc: denied { ioctl } for pid=11885 comm="syz.5.3735" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.927977][ T36] audit: type=1400 audit(1758341023.910:9137): avc: denied { ioctl } for pid=11885 comm="syz.5.3735" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.043627][T11900] fuse: Bad value for 'fd' [ 452.057108][ T4255] usb 6-1: device descriptor read/64, error -71 [ 452.095031][ T560] usbhid 10-1:0.0: can't add hid device: -71 [ 452.127101][ T560] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 452.149167][T11904] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3741'. [ 452.175971][ T560] usb 10-1: USB disconnect, device number 69 [ 452.297078][ T4255] usb 6-1: device descriptor read/64, error -71 [ 452.407558][ T4255] usb usb6-port1: attempt power cycle [ 452.567077][ T346] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 452.717078][ T346] usb 4-1: Using ep0 maxpacket: 32 [ 452.724504][ T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 452.736406][ T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 452.747652][ T346] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.756822][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.757154][ T4255] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 452.768243][ T346] usb 4-1: config 0 descriptor?? [ 452.781164][ T346] hub 4-1:0.0: USB hub found [ 452.810214][ T4255] usb 6-1: device descriptor read/8, error -71 [ 452.939611][ T4255] usb 6-1: device descriptor read/8, error -71 [ 452.988244][ T346] hub 4-1:0.0: 1 port detected [ 453.177119][ T4255] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 453.199758][ T4255] usb 6-1: device descriptor read/8, error -71 [ 453.329839][ T4255] usb 6-1: device descriptor read/8, error -71 [ 453.437171][ T4255] usb usb6-port1: unable to enumerate USB device [ 453.920661][T11924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 453.920698][T11924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1043 [ 453.920718][T11925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 453.939415][T11925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1043 [ 453.986629][T11927] fuse: Bad value for 'fd' [ 454.002496][ T346] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 454.010195][ T562] usb 4-1: USB disconnect, device number 103 [ 454.100781][T11930] binder: Bad value for 'stats' [ 454.164881][T11933] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27419 sclass=netlink_xfrm_socket pid=11933 comm=syz.5.3752 [ 454.341741][T11948] rust_binder: 11948 RLIMIT_NICE not set [ 454.567455][T11954] fuse: Bad value for 'fd' [ 454.862723][T11973] Invalid logical block size (-23228) [ 454.951493][T11977] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3767'. [ 455.124330][T11987] fuse: Bad value for 'fd' [ 455.163011][ T562] rust_binder: 11941: removing orphan mapping 0:24 [ 455.267298][T11995] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3774'. [ 455.289896][T11992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=11992 comm=syz.9.3773 [ 455.290396][T11995] /dev/rnullb0: Can't open blockdev [ 455.392952][T12001] 9pnet_fd: Insufficient options for proto=fd [ 455.456243][T12007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.456242][T12010] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 455.505141][T12013] fuse: Bad value for 'fd' [ 455.699781][T12025] batadv_slave_0: mtu less than device minimum [ 455.805657][T12040] rust_binder: 1077: no such ref 1 [ 455.876947][T12039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:641 [ 455.976733][T12049] SELinux: ebitmap: truncated map [ 456.008767][T12049] SELinux: failed to load policy [ 456.032390][T12051] tmpfs: Unknown parameter 'subj_type' [ 456.067054][ T31] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 456.152859][ T4255] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 456.176992][T12058] overlay: filesystem on ./bus not supported as upperdir [ 456.188329][T12059] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 456.196819][T12058] overlay: filesystem on ./bus not supported as upperdir [ 456.206792][T12058] overlay: filesystem on ./bus not supported as upperdir [ 456.237133][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 456.248146][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.271809][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 456.274904][T12064] netlink: 'syz.5.3797': attribute type 4 has an invalid length. [ 456.294846][T12064] netlink: 37 bytes leftover after parsing attributes in process `syz.5.3797'. [ 456.305355][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.315468][T12065] rust_binder: 284: no such ref 1 [ 456.321121][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.326759][T12064] rust_binder: 284: no such ref 1 [ 456.336573][T12065] rust_binder: Write failure EINVAL in pid:284 [ 456.348043][ T31] usb 3-1: Product: syz [ 456.358525][ T4255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.370261][T12064] rust_binder: Write failure EINVAL in pid:284 [ 456.370316][ T4255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.392532][ T31] usb 3-1: Manufacturer: syz [ 456.397442][ T31] usb 3-1: SerialNumber: syz [ 456.405265][ T31] usb 3-1: config 0 descriptor?? [ 456.418238][ T4255] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 456.436820][ T4255] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.456992][ T4255] usb 10-1: config 0 descriptor?? [ 456.598532][ T36] kauditd_printk_skb: 979 callbacks suppressed [ 456.598569][ T36] audit: type=1400 audit(1758341028.740:10117): avc: denied { mounton } for pid=12077 comm="syz.3.3800" path="/220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 456.661650][ T2228] Bluetooth: hci0: Frame reassembly failed (-84) [ 456.664975][ T31] usb 3-1: USB disconnect, device number 75 [ 456.709448][ T36] audit: type=1400 audit(1758341028.740:10118): avc: denied { read write } for pid=12079 comm="syz.5.3801" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 456.735688][ T36] audit: type=1400 audit(1758341028.740:10119): avc: denied { read write open } for pid=12079 comm="syz.5.3801" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 456.767923][ T36] audit: type=1400 audit(1758341028.740:10120): avc: denied { read } for pid=12079 comm="syz.5.3801" dev="nsfs" ino=4026533106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 456.790454][ T36] audit: type=1400 audit(1758341028.740:10121): avc: denied { read open } for pid=12079 comm="syz.5.3801" path="net:[4026533106]" dev="nsfs" ino=4026533106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 456.815094][ T36] audit: type=1400 audit(1758341028.740:10122): avc: denied { create } for pid=12079 comm="syz.5.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.836204][ T36] audit: type=1400 audit(1758341028.740:10123): avc: denied { bind } for pid=12079 comm="syz.5.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.857599][ T36] audit: type=1400 audit(1758341028.800:10124): avc: denied { read write } for pid=12077 comm="syz.3.3800" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.882070][ T36] audit: type=1400 audit(1758341028.800:10125): avc: denied { read write open } for pid=12077 comm="syz.3.3800" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.907387][ T560] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 456.915206][ T36] audit: type=1400 audit(1758341028.800:10126): avc: denied { ioctl } for pid=12077 comm="syz.3.3800" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.057057][ T560] usb 4-1: Using ep0 maxpacket: 32 [ 457.065717][ T560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 457.080028][ T560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 457.092164][ T560] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 457.102055][ T560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.131608][ T560] usb 4-1: config 0 descriptor?? [ 457.150784][ T560] hub 4-1:0.0: USB hub found [ 457.361057][ T560] hub 4-1:0.0: 1 port detected [ 457.725077][ T4255] usbhid 10-1:0.0: can't add hid device: -71 [ 457.732988][ T4255] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 457.741981][ T4255] usb 10-1: USB disconnect, device number 70 [ 458.077105][ T365] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 458.229727][ T365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.239921][ T365] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.252467][ T365] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.261607][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.269681][ T365] usb 3-1: Product: syz [ 458.273871][ T365] usb 3-1: Manufacturer: syz [ 458.283939][ T365] usb 3-1: SerialNumber: syz [ 458.379525][ T562] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 458.379675][ T4255] usb 4-1: USB disconnect, device number 104 [ 458.567050][T12115] rust_binder: 1096: no such ref 0 [ 458.572221][T12114] rust_binder: 1096: no such ref 0 [ 458.572222][T12115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1096 [ 458.572243][T12115] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 458.578288][T12114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1096 [ 458.588699][T12115] rust_binder: Read failure Err(EFAULT) in pid:1096 [ 458.594838][T12114] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 458.610979][T12114] rust_binder: Read failure Err(EFAULT) in pid:1096 [ 458.667080][ T2277] Bluetooth: hci0: command 0x1003 tx timeout [ 458.667086][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 458.699776][ T365] usb 3-1: 0:2 : does not exist [ 458.895685][T12129] tipc: Enabled bearer , priority 0 [ 458.949650][T12129] fuse: Bad value for 'fd' [ 458.983116][T12131] tipc: Disabling bearer [ 459.277067][ T562] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 459.440916][ T562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.452703][ T562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.463934][ T562] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 459.469364][T12149] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 459.473272][ T562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.497095][T12149] rust_binder: Write failure EINVAL in pid:1044 [ 459.499598][ T562] usb 4-1: config 0 descriptor?? [ 460.282507][T12158] /dev/rnullb0: Can't open blockdev [ 460.340738][T12160] rust_binder: 12160 RLIMIT_NICE not set [ 460.744307][ T562] usbhid 4-1:0.0: can't add hid device: -71 [ 460.757371][ T562] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 460.767655][ T562] usb 4-1: USB disconnect, device number 105 [ 460.829022][T12172] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 460.829043][T12172] rust_binder: Error while translating object. [ 460.837730][T12172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 460.844058][T12172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1121 [ 460.854339][ T365] usb 3-1: USB disconnect, device number 76 [ 460.872293][ T4255] rust_binder: 12159: removing orphan mapping 0:1024 [ 460.954150][T12177] fuse: Unknown parameter 'use00000000000000000000' [ 461.012476][T12179] input: syz1 as /devices/virtual/input/input46 [ 461.402990][T12202] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 461.425968][T12202] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 461.438777][T12202] overlayfs: conflicting options: metacopy=off,verity=require [ 461.439545][T12204] /dev/rnullb0: Can't open blockdev [ 461.549950][T12208] rust_binder: Read failure Err(EAGAIN) in pid:1059 [ 461.648817][ T36] kauditd_printk_skb: 662 callbacks suppressed [ 461.648887][ T36] audit: type=1400 audit(1758341033.790:10789): avc: denied { read write } for pid=7279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.687484][ T36] audit: type=1400 audit(1758341033.790:10790): avc: denied { read write open } for pid=7279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.713701][ T36] audit: type=1400 audit(1758341033.790:10791): avc: denied { ioctl } for pid=7279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.734440][T12213] fuse: Unknown parameter 'use00000000000000000000' [ 461.739518][ T36] audit: type=1400 audit(1758341033.830:10792): avc: denied { read write } for pid=7279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.771625][ T36] audit: type=1400 audit(1758341033.830:10793): avc: denied { read write open } for pid=7279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.797369][ T36] audit: type=1400 audit(1758341033.830:10794): avc: denied { ioctl } for pid=7279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.824096][ T36] audit: type=1400 audit(1758341033.870:10795): avc: denied { read write } for pid=12212 comm="syz.2.3840" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 461.855113][ T36] audit: type=1400 audit(1758341033.870:10796): avc: denied { read write open } for pid=12212 comm="syz.2.3840" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 461.879852][ T36] audit: type=1400 audit(1758341033.870:10797): avc: denied { mounton } for pid=12212 comm="syz.2.3840" path="/373/file0" dev="tmpfs" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 461.903716][ T36] audit: type=1400 audit(1758341033.910:10798): avc: denied { read write } for pid=7279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.977534][T12227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 462.057213][T12226] fuse: root generation should be zero [ 462.177757][T12240] fuse: Unknown parameter 'user_i00000000000000000000' [ 462.247045][ T562] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 462.337239][ T365] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 462.409638][ T562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.420860][ T562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.436243][ T562] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 462.445498][ T562] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.455579][ T562] usb 10-1: config 0 descriptor?? [ 462.487041][ T365] usb 3-1: Using ep0 maxpacket: 16 [ 462.526914][ T365] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 462.546124][ T365] usb 3-1: config 1 interface 0 has no altsetting 0 [ 463.372886][T12255] incfs_lookup_dentry err:-4 [ 463.382305][T12255] incfs: Can't find or create .index dir in ./file0 [ 463.394117][T12255] incfs: mount failed -4 [ 463.410187][T12261] fuse: Unknown parameter ' ' [ 463.762813][ T562] usbhid 10-1:0.0: can't add hid device: -71 [ 463.769220][ T562] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 463.786871][ T562] usb 10-1: USB disconnect, device number 71 [ 464.340033][T12273] fuse: Unknown parameter 'user_i00000000000000000000' [ 464.526120][ T562] rust_binder: 12274: removing orphan mapping 0:4208 [ 464.678675][T12290] EXT4-fs: Conflicting test_dummy_encryption options [ 464.690338][T12290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.901024][T12300] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 465.048048][ T365] usb 3-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.40 [ 465.077194][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.090056][ T365] usb 3-1: can't set config #1, error -71 [ 465.102839][ T365] usb 3-1: USB disconnect, device number 77 [ 465.113650][T12302] fuse: Unknown parameter 'user_i00000000000000000000' [ 465.127059][ T560] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 465.299576][ T560] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.310682][ T560] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.320569][ T560] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 465.329768][ T560] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.340101][ T560] usb 10-1: config 0 descriptor?? [ 465.489453][ T365] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 465.633276][T12308] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3870'. [ 465.647032][ T365] usb 3-1: Invalid ep0 maxpacket: 32 [ 465.797061][ T365] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 465.869602][ T2228] bridge_slave_1: left allmulticast mode [ 465.883698][ T2228] bridge_slave_1: left promiscuous mode [ 465.899650][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.921818][ T2228] bridge_slave_0: left allmulticast mode [ 465.937036][ T2228] bridge_slave_0: left promiscuous mode [ 465.946732][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.967060][ T365] usb 3-1: Invalid ep0 maxpacket: 32 [ 465.976269][ T365] usb usb3-port1: attempt power cycle [ 466.042872][T12314] FAULT_INJECTION: forcing a failure. [ 466.042872][T12314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.077080][T12314] CPU: 0 UID: 0 PID: 12314 Comm: syz.5.3872 Not tainted syzkaller #0 26040f0ed9382bf65720d717d6d6db2d10869199 [ 466.077122][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.077146][T12314] Call Trace: [ 466.077154][T12314] [ 466.077169][T12314] __dump_stack+0x21/0x30 [ 466.077206][T12314] dump_stack_lvl+0x10c/0x190 [ 466.077238][T12314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 466.077269][T12314] ? avc_xperms_populate+0x292/0x620 [ 466.077303][T12314] dump_stack+0x19/0x20 [ 466.077333][T12314] should_fail_ex+0x3d9/0x530 [ 466.077357][T12314] should_fail+0xf/0x20 [ 466.077379][T12314] should_fail_usercopy+0x1e/0x30 [ 466.077404][T12314] _copy_to_iter+0x3bb/0x14b0 [ 466.077434][T12314] ? __cfi__copy_to_iter+0x10/0x10 [ 466.077461][T12314] ? __check_object_size+0x50a/0x810 [ 466.077484][T12314] ? __cfi___check_object_size+0x10/0x10 [ 466.077507][T12314] ? __skb_try_recv_datagram+0x3df/0x4e0 [ 466.077537][T12314] __skb_datagram_iter+0x103/0x930 [ 466.077565][T12314] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 466.077596][T12314] skb_copy_datagram_iter+0x44/0x160 [ 466.077625][T12314] netlink_recvmsg+0x2c5/0xdf0 [ 466.077657][T12314] ? __cfi_netlink_recvmsg+0x10/0x10 [ 466.077690][T12314] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 466.077718][T12314] ? security_socket_recvmsg+0x3a/0xf0 [ 466.077742][T12314] ? __cfi_netlink_recvmsg+0x10/0x10 [ 466.077772][T12314] sock_recvmsg+0x219/0x270 [ 466.077797][T12314] ____sys_recvmsg+0x1ca/0x460 [ 466.077829][T12314] ? __sys_recvmsg_sock+0x60/0x60 [ 466.077862][T12314] ? import_iovec+0x81/0xb0 [ 466.077892][T12314] ___sys_recvmsg+0x1b6/0x510 [ 466.077924][T12314] ? __sys_recvmsg+0x280/0x280 [ 466.077956][T12314] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 466.077979][T12314] ? selinux_file_permission+0x309/0xb30 [ 466.078009][T12314] ? __fget_files+0x2c5/0x340 [ 466.078037][T12314] do_recvmmsg+0x326/0x770 [ 466.078076][T12314] ? __sys_recvmmsg+0x290/0x290 [ 466.078107][T12314] ? __cfi_vfs_write+0x10/0x10 [ 466.078132][T12314] ? fput+0x1a5/0x240 [ 466.078161][T12314] __x64_sys_recvmmsg+0x191/0x240 [ 466.078192][T12314] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 466.078225][T12314] ? __kasan_check_read+0x15/0x20 [ 466.078260][T12314] x64_sys_call+0x292c/0x2ee0 [ 466.078292][T12314] do_syscall_64+0x58/0xf0 [ 466.078319][T12314] ? clear_bhb_loop+0x50/0xa0 [ 466.078342][T12314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 466.078376][T12314] RIP: 0033:0x7f19c018ec29 [ 466.078396][T12314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.078416][T12314] RSP: 002b:00007f19c1064038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 466.078442][T12314] RAX: ffffffffffffffda RBX: 00007f19c03d6090 RCX: 00007f19c018ec29 [ 466.078460][T12314] RDX: 0000000000000002 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 466.078476][T12314] RBP: 00007f19c1064090 R08: 0000000000000000 R09: 0000000000000000 [ 466.078490][T12314] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 466.078505][T12314] R13: 00007f19c03d6128 R14: 00007f19c03d6090 R15: 00007ffd0bc815a8 [ 466.078525][T12314] [ 466.337069][ T365] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 466.410561][ T2228] veth1_macvtap: left promiscuous mode [ 466.416345][ T2228] veth0_vlan: left promiscuous mode [ 466.448298][ T365] usb 3-1: Invalid ep0 maxpacket: 32 [ 466.520014][T12323] fuse: Unknown parameter 'user_id00000000000000000000' [ 466.591855][ T365] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 466.631520][ T365] usb 3-1: Invalid ep0 maxpacket: 32 [ 466.637739][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.646365][ T365] usb usb3-port1: unable to enumerate USB device [ 466.654547][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.663215][T12317] bridge_slave_0: entered allmulticast mode [ 466.670604][T12317] bridge_slave_0: entered promiscuous mode [ 466.686038][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.693198][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.701523][T12317] bridge_slave_1: entered allmulticast mode [ 466.708690][T12317] bridge_slave_1: entered promiscuous mode [ 466.733412][ T36] kauditd_printk_skb: 487 callbacks suppressed [ 466.733433][ T36] audit: type=1400 audit(1758341038.870:11286): avc: denied { sys_module } for pid=12317 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 466.788840][ T36] audit: type=1400 audit(1758341038.900:11287): avc: denied { sys_module } for pid=12317 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 466.858951][ T36] audit: type=1400 audit(1758341038.930:11288): avc: denied { sys_module } for pid=12317 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 466.888070][ T36] audit: type=1400 audit(1758341038.950:11289): avc: denied { sys_module } for pid=12317 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 466.929806][ T36] audit: type=1400 audit(1758341038.960:11290): avc: denied { read write } for pid=10884 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.962139][ T36] audit: type=1400 audit(1758341038.960:11291): avc: denied { read write open } for pid=10884 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.997986][ T36] audit: type=1400 audit(1758341038.960:11292): avc: denied { ioctl } for pid=10884 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.024519][ T36] audit: type=1400 audit(1758341038.980:11293): avc: denied { sys_module } for pid=12317 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 467.052024][ T36] audit: type=1400 audit(1758341038.980:11294): avc: denied { sys_module } for pid=12317 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 467.125262][ T560] usbhid 10-1:0.0: can't add hid device: -71 [ 467.132366][ T560] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 467.145439][ T560] usb 10-1: USB disconnect, device number 72 [ 467.147290][ T36] audit: type=1400 audit(1758341039.070:11295): avc: denied { read } for pid=12331 comm="syz.5.3878" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.254902][ T2223] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.262106][ T2223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.273461][ T2228] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.280565][ T2228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.359578][T12317] veth0_vlan: entered promiscuous mode [ 467.395258][T12317] veth1_macvtap: entered promiscuous mode [ 467.682879][T12346] tipc: Enabled bearer , priority 0 [ 467.728980][T12346] tipc: Disabling bearer [ 468.219556][T12359] fuse: Unknown parameter 'user_id00000000000000000000' [ 468.267428][ T3224] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 468.417044][ T3224] usb 6-1: Using ep0 maxpacket: 8 [ 468.426633][ T3224] usb 6-1: unable to get BOS descriptor or descriptor too short [ 468.436929][ T3224] usb 6-1: config 6 has an invalid interface number: 248 but max is 0 [ 468.445201][ T3224] usb 6-1: config 6 has no interface number 0 [ 468.452318][ T3224] usb 6-1: config 6 interface 248 has no altsetting 0 [ 468.464162][ T3224] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 468.475464][ T3224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.483915][ T3224] usb 6-1: Product: syz [ 468.488253][ T3224] usb 6-1: Manufacturer: syz [ 468.492887][ T3224] usb 6-1: SerialNumber: syz [ 468.709589][ T3224] ums-karma 6-1:6.248: USB Mass Storage device detected [ 468.761335][ T3224] usb 6-1: USB disconnect, device number 2 [ 468.764086][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3888'. [ 469.019556][T12378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 469.019598][T12378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1160 [ 469.127007][T12387] fuse: Unknown parameter 'user_id00000000000000000000' [ 469.146331][T12385] __vm_enough_memory: pid: 12385, comm: syz.9.3892, bytes: 18014402804453376 not enough memory for the allocation [ 469.447037][ T3224] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 469.617213][ T3224] usb 3-1: Using ep0 maxpacket: 32 [ 469.641520][ T3224] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 469.669275][ T3224] usb 3-1: config 0 has no interface number 0 [ 469.687058][ T560] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 469.709506][ T3224] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 469.737047][ T3224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.751724][ T3224] usb 3-1: Product: syz [ 469.761475][ T3224] usb 3-1: Manufacturer: syz [ 469.771690][ T3224] usb 3-1: SerialNumber: syz [ 469.789572][ T3224] usb 3-1: config 0 descriptor?? [ 469.814365][ T3224] smsc95xx v2.0.0 [ 469.861430][ T560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.880303][ T560] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.902472][ T560] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 469.922387][ T560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.950589][ T560] usb 6-1: config 0 descriptor?? [ 470.122751][T12411] 9pnet_fd: Insufficient options for proto=fd [ 470.183075][T12416] fuse: Bad value for 'fd' [ 470.652554][ T3224] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 470.678725][ T3224] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.443429][ T560] usbhid 6-1:0.0: can't add hid device: -71 [ 471.453290][ T560] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 471.463304][ T560] usb 6-1: USB disconnect, device number 3 [ 471.624863][ T3224] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 471.658896][ T3224] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 471.679286][ T3224] usb 3-1: USB disconnect, device number 82 [ 471.737919][ T36] kauditd_printk_skb: 625 callbacks suppressed [ 471.737938][ T36] audit: type=1400 audit(1758341043.880:11921): avc: denied { read write } for pid=12454 comm="syz.6.3916" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 471.789232][ T36] audit: type=1400 audit(1758341043.900:11922): avc: denied { mounton } for pid=12452 comm="syz.2.3915" path="/383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 471.841058][T12455] SELinux: failed to load policy [ 471.857631][ T36] audit: type=1400 audit(1758341043.910:11923): avc: denied { read write open } for pid=12454 comm="syz.6.3916" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 471.883498][T12455] rust_binder: 12455 RLIMIT_NICE not set [ 471.884050][T12455] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 471.890684][T12455] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 471.899388][T12455] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 471.915865][ T560] rust_binder: 12454: removing orphan mapping 0:1048 [ 471.933050][ T36] audit: type=1400 audit(1758341043.910:11924): avc: denied { map } for pid=12454 comm="syz.6.3916" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 471.957401][ T36] audit: type=1400 audit(1758341043.910:11925): avc: denied { read } for pid=12454 comm="syz.6.3916" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 471.982733][ T36] audit: type=1400 audit(1758341043.910:11926): avc: denied { ioctl } for pid=12454 comm="syz.6.3916" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.008528][ T36] audit: type=1400 audit(1758341043.910:11927): avc: denied { set_context_mgr } for pid=12454 comm="syz.6.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 472.042916][ T36] audit: type=1400 audit(1758341043.910:11928): avc: denied { read } for pid=12454 comm="syz.6.3916" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.069897][ T36] audit: type=1400 audit(1758341043.910:11929): avc: denied { read open } for pid=12454 comm="syz.6.3916" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.094706][ T36] audit: type=1400 audit(1758341043.910:11930): avc: denied { mounton } for pid=12454 comm="syz.6.3916" path="/18/bus" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 472.205092][T12465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.229816][T12467] /dev/rnullb0: Can't open blockdev [ 472.242517][T12465] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 472.242543][T12465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 472.271321][T12465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1097 [ 472.331976][T12471] rust_binder: Error while translating object. [ 472.363550][T12471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 472.377078][T12471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 472.407038][ T560] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 472.468643][T12481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.474907][T12481] incfs: Can't find or create .index dir in ./cgroup [ 472.489882][T12481] incfs: mount failed -22 [ 472.600695][ T560] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.615767][ T560] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.626786][ T560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.635467][ T560] usb 6-1: Product: syz [ 472.641498][ T560] usb 6-1: Manufacturer: syz [ 472.646281][ T560] usb 6-1: SerialNumber: syz [ 472.697038][ T374] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 472.767024][ T346] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 472.869942][ T374] usb 10-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 472.881769][ T374] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.896118][ T374] usb 10-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 472.906104][ T374] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.917121][ T374] usb 10-1: config 0 descriptor?? [ 472.918038][T12494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.924459][ T346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.944973][ T346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.954936][ T346] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 472.964068][ T346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.974477][ T346] usb 7-1: config 0 descriptor?? [ 472.998604][T12495] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 472.998635][T12495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 473.007021][T12495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1115 [ 473.149559][ T374] usb 10-1: string descriptor 0 read error: -71 [ 473.172688][ T374] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 473.181432][ T374] usb 10-1: USB disconnect, device number 73 [ 473.876909][ T562] hid (null): global environment stack underflow [ 473.888460][ T562] hid-generic 0003:0008:000F.0027: unknown main item tag 0x0 [ 473.911330][ T562] hid-generic 0003:0008:000F.0027: global environment stack underflow [ 473.926149][ T562] hid-generic 0003:0008:000F.0027: item 0 4 1 11 parsing failed [ 473.934983][ T562] hid-generic 0003:0008:000F.0027: probe with driver hid-generic failed with error -22 [ 473.954859][ T560] cdc_ncm 6-1:1.0: failed to get mac address [ 473.961035][ T3224] usb 10-1: new full-speed USB device number 74 using dummy_hcd [ 473.977299][ T560] cdc_ncm 6-1:1.0: bind() failure [ 473.987062][ T560] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 473.997104][ T560] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 474.015731][ T560] usb 6-1: USB disconnect, device number 4 [ 474.029632][ T346] usbhid 7-1:0.0: can't add hid device: -71 [ 474.043832][ T346] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 474.064782][ T346] usb 7-1: USB disconnect, device number 6 [ 474.129279][ T3224] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.139592][ T3224] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.152763][ T3224] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.162563][ T3224] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.170760][ T3224] usb 10-1: Product: syz [ 474.175111][ T3224] usb 10-1: Manufacturer: syz [ 474.179829][ T3224] usb 10-1: SerialNumber: syz [ 474.592340][ T3224] usb 10-1: 0:2 : does not exist [ 474.704589][T12506] syzkaller0: entered promiscuous mode [ 474.743446][T12506] syzkaller0: entered allmulticast mode [ 474.777823][T12505] tipc: Started in network mode [ 474.787070][T12505] tipc: Node identity 8a6d52b6173e, cluster identity 4711 [ 474.814893][T12505] tipc: Enabled bearer , priority 0 [ 474.823709][T12511] netlink: 'syz.2.3937': attribute type 4 has an invalid length. [ 474.861225][T12505] tipc: Resetting bearer [ 474.905112][T12505] tipc: Disabling bearer [ 475.007717][ T4255] usb 10-1: USB disconnect, device number 74 [ 475.033947][ T2228] bridge_slave_1: left allmulticast mode [ 475.034098][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 475.055966][ T2228] bridge_slave_1: left promiscuous mode [ 475.073716][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.095847][ T2228] bridge_slave_0: left allmulticast mode [ 475.115295][ T2228] bridge_slave_0: left promiscuous mode [ 475.137099][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.187077][ T3224] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 475.301675][ T2228] tipc: Left network mode [ 475.337914][ T2228] veth1_macvtap: left promiscuous mode [ 475.343584][ T2228] veth0_vlan: left promiscuous mode [ 475.357637][ T3224] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 475.456127][ T3224] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 475.467957][ T3224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 475.476426][ T3224] usb 3-1: Product: syz [ 475.483072][ T3224] usb 3-1: Manufacturer: syz [ 475.489586][ T3224] usb 3-1: SerialNumber: syz [ 475.509748][ T3224] usb 3-1: config 0 descriptor?? [ 475.528842][ T3224] cdc_acm 3-1:0.0: Zero length descriptor references [ 475.544131][ T3224] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 475.733906][T12527] netlink: 'syz.6.3944': attribute type 1 has an invalid length. [ 475.747285][T12511] netlink: 'syz.2.3937': attribute type 4 has an invalid length. [ 475.797409][ T560] usb 3-1: USB disconnect, device number 83 [ 475.856746][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.863906][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.871679][T12519] bridge_slave_0: entered allmulticast mode [ 475.878418][T12519] bridge_slave_0: entered promiscuous mode [ 475.886324][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.887148][ T3224] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 475.893479][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.909689][T12519] bridge_slave_1: entered allmulticast mode [ 475.916163][T12519] bridge_slave_1: entered promiscuous mode [ 476.054119][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.061442][T12519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.068836][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.075901][T12519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.087088][ T346] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 476.110303][ T3224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.122697][ T3224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.134302][ T3224] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 476.145279][ T3224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.154225][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.161905][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.170400][ T3224] usb 10-1: config 0 descriptor?? [ 476.183668][ T2223] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.190861][ T2223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.204861][ T2223] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.212001][ T2223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.240673][ T346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.251855][ T346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.262268][ T346] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 476.271742][ T346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.282182][ T346] usb 7-1: config 0 descriptor?? [ 476.355969][T12519] veth0_vlan: entered promiscuous mode [ 476.403217][T12519] veth1_macvtap: entered promiscuous mode [ 476.789344][ T3224] hid-led 0003:27B8:01ED.0028: probe with driver hid-led failed with error -71 [ 476.805628][ T36] kauditd_printk_skb: 707 callbacks suppressed [ 476.805651][ T36] audit: type=1400 audit(1758341048.940:12638): avc: denied { ioctl } for pid=12543 comm="syz.7.3941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.857114][ T3224] usb 10-1: USB disconnect, device number 75 [ 476.867258][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 476.899589][ T36] audit: type=1400 audit(1758341049.010:12639): avc: denied { read write } for pid=7279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.925736][ T36] audit: type=1400 audit(1758341049.010:12640): avc: denied { read write open } for pid=7279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.951301][ T36] audit: type=1400 audit(1758341049.020:12641): avc: denied { ioctl } for pid=7279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.014765][ T36] audit: type=1400 audit(1758341049.030:12642): avc: denied { ioctl } for pid=12543 comm="syz.7.3941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.046696][ T36] audit: type=1400 audit(1758341049.030:12643): avc: denied { ioctl } for pid=12543 comm="syz.7.3941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.067562][ T37] INFO: task kworker/0:3:438 blocked for more than 122 seconds. [ 477.071924][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 477.090047][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.099212][ T37] Not tainted syzkaller #0 [ 477.100804][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 477.106208][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.121458][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.127812][ T36] audit: type=1400 audit(1758341049.040:12644): avc: denied { ioctl } for pid=12543 comm="syz.7.3941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.197265][ T37] task:kworker/0:3 state:D stack:0 pid:438 tgid:438 ppid:2 flags:0x00004000 [ 477.227280][ T37] Workqueue: events p9_write_work [ 477.232593][ T37] Call Trace: [ 477.235922][ T37] [ 477.238919][ T37] __schedule+0x1322/0x1df0 [ 477.243489][ T37] ? __sched_text_start+0x10/0x10 [ 477.248613][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 477.253765][ T37] ? kick_pool+0xb9/0x550 [ 477.258130][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 477.263366][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 477.268593][ T37] schedule+0xc6/0x240 [ 477.272777][ T37] schedule_preempt_disabled+0x14/0x30 [ 477.278266][ T37] __mutex_lock+0x81e/0x1b50 [ 477.282886][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 477.289694][ T37] ? _copy_to_iter+0x1312/0x14b0 [ 477.294692][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 477.300800][ T37] ? update_curr+0x4e4/0xaa0 [ 477.305413][ T37] __mutex_lock_slowpath+0xe/0x20 [ 477.310497][ T37] mutex_lock+0x102/0x1c0 [ 477.314856][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 477.319741][ T37] ? detach_entity_load_avg+0x7b0/0x7b0 [ 477.325312][ T37] pipe_write+0x134/0x18a0 [ 477.329752][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 477.335156][ T37] ? __asan_memcpy+0x5a/0x80 [ 477.339781][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 477.345186][ T37] ? avc_has_perm+0x144/0x220 [ 477.349893][ T37] ? __cfi_avc_has_perm+0x10/0x10 [ 477.354947][ T37] ? __cfi_pipe_write+0x10/0x10 [ 477.359824][ T37] ? check_preempt_wakeup_fair+0x886/0xae0 [ 477.365662][ T37] ? ttwu_do_activate+0x630/0x630 [ 477.370722][ T37] ? __cfi_pipe_write+0x10/0x10 [ 477.375613][ T37] __kernel_write_iter+0x395/0x830 [ 477.380749][ T37] ? __cfi_pipe_write+0x10/0x10 [ 477.385625][ T37] ? __cfi___kernel_write_iter+0x10/0x10 [ 477.391303][ T37] ? __asan_memset+0x39/0x50 [ 477.395923][ T37] ? iov_iter_kvec+0xc0/0x180 [ 477.400634][ T37] kernel_write+0x2e6/0x6b0 [ 477.405158][ T37] ? __cfi_kernel_write+0x10/0x10 [ 477.410210][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 477.415455][ T37] ? __switch_to_asm+0x3d/0x70 [ 477.420333][ T37] p9_write_work+0x551/0xd30 [ 477.424988][ T37] process_scheduled_works+0x7d5/0x1020 [ 477.430605][ T37] worker_thread+0xc58/0x1250 [ 477.435333][ T37] kthread+0x2c7/0x370 [ 477.439428][ T37] ? __cfi_worker_thread+0x10/0x10 [ 477.444561][ T37] ? __cfi_kthread+0x10/0x10 [ 477.449176][ T37] ret_from_fork+0x67/0xa0 [ 477.453623][ T37] ? __cfi_kthread+0x10/0x10 [ 477.458252][ T37] ret_from_fork_asm+0x1a/0x30 [ 477.463054][ T37] [ 477.477177][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.501852][ T36] audit: type=1400 audit(1758341049.080:12645): avc: denied { unmount } for pid=12546 comm="syz.2.3947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 477.521992][ T37] NMI backtrace for cpu 0 [ 477.522015][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 26040f0ed9382bf65720d717d6d6db2d10869199 [ 477.522051][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.522065][ T37] Call Trace: [ 477.522073][ T37] [ 477.522082][ T37] __dump_stack+0x21/0x30 [ 477.522119][ T37] dump_stack_lvl+0x10c/0x190 [ 477.522149][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 477.522183][ T37] dump_stack+0x19/0x20 [ 477.522212][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 477.522246][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 477.522274][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 477.522312][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 477.522339][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 477.522369][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 477.522398][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 477.522425][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 477.522454][ T37] watchdog+0xd8f/0xed0 [ 477.522486][ T37] ? __cfi_watchdog+0x10/0x10 [ 477.522515][ T37] ? __kasan_check_read+0x15/0x20 [ 477.522547][ T37] ? __kthread_parkme+0x138/0x180 [ 477.522569][ T37] ? schedule+0xc6/0x240 [ 477.522596][ T37] kthread+0x2c7/0x370 [ 477.522619][ T37] ? __cfi_watchdog+0x10/0x10 [ 477.522649][ T37] ? __cfi_kthread+0x10/0x10 [ 477.522672][ T37] ret_from_fork+0x67/0xa0 [ 477.522702][ T37] ? __cfi_kthread+0x10/0x10 [ 477.522726][ T37] ret_from_fork_asm+0x1a/0x30 [ 477.522762][ T37] [ 477.522802][ T37] Sending NMI from CPU 0 to CPUs 1: [ 477.603512][ T36] audit: type=1400 audit(1758341049.130:12646): avc: denied { ioctl } for pid=12543 comm="syz.7.3941" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.606554][ C1] NMI backtrace for cpu 1 [ 477.606568][ C1] CPU: 1 UID: 0 PID: 36 Comm: kauditd Not tainted syzkaller #0 26040f0ed9382bf65720d717d6d6db2d10869199 [ 477.606591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.606603][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 477.606633][ C1] Code: 70 05 48 89 de e8 50 3a 52 00 5b 5d e9 c9 11 09 04 cc cc cc cc cc cc cc cc cc b8 fd e2 93 f6 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0c 25 80 eb 04 00 65 [ 477.606648][ C1] RSP: 0018:ffffc9000025f200 EFLAGS: 00000217 [ 477.606664][ C1] RAX: 0000000000000032 RBX: ffffc9000025f280 RCX: ffff888103678000 [ 477.606678][ C1] RDX: dffffc0000000000 RSI: 00000000000000fb RDI: ffffc9000025f280 [ 477.606690][ C1] RBP: ffffc9000025f238 R08: ffff888103678000 R09: 0000000000000005 [ 477.606703][ C1] R10: 0000000000000030 R11: 0000000000000000 R12: 0000000000000035 [ 477.606714][ C1] R13: ffffffff85c91f63 R14: ffffffff85c91f63 R15: 0000000000000005 [ 477.606727][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 477.606743][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.606755][ C1] CR2: 00005628be145b98 CR3: 000000010b3a0000 CR4: 00000000003526b0 [ 477.606772][ C1] DR0: 0000000000000065 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.606784][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 477.606795][ C1] Call Trace: [ 477.606801][ C1] [ 477.606808][ C1] ? skip_atoi+0xf8/0x110 [ 477.606829][ C1] format_decode+0x93c/0x1600 [ 477.606847][ C1] vsnprintf+0xe6/0x1aa0 [ 477.606866][ C1] sprintf+0xda/0x120 [ 477.606883][ C1] ? desc_read+0x1ab/0x3e0 [ 477.606898][ C1] ? __cfi_sprintf+0x10/0x10 [ 477.606917][ C1] ? desc_read+0x202/0x3e0 [ 477.606932][ C1] info_print_prefix+0x183/0x480 [ 477.606955][ C1] ? trace_raw_output_console+0xf0/0xf0 [ 477.606985][ C1] ? _prb_read_valid+0xa7d/0xa90 [ 477.607004][ C1] record_print_text+0x155/0x430 [ 477.607033][ C1] ? prb_read_valid+0x80/0x80 [ 477.607048][ C1] ? printk_get_next_message+0x930/0x930 [ 477.607070][ C1] ? prb_read_valid+0x41/0x80 [ 477.607085][ C1] printk_get_next_message+0x273/0x930 [ 477.607107][ C1] ? __cfi_printk_get_next_message+0x10/0x10 [ 477.607129][ C1] ? prb_read_valid+0x80/0x80 [ 477.607145][ C1] ? __kasan_check_write+0x18/0x20 [ 477.607171][ C1] ? __kasan_check_read+0x15/0x20 [ 477.607196][ C1] ? __asan_memcpy+0x5a/0x80 [ 477.607221][ C1] console_flush_all+0x3a4/0xaa0 [ 477.607242][ C1] ? vprintk_store+0x9e9/0x10b0 [ 477.607260][ C1] ? __console_rewind_all+0x170/0x170 [ 477.607281][ C1] ? __kasan_check_read+0x15/0x20 [ 477.607306][ C1] ? is_printk_cpu_sync_owner+0x39/0x50 [ 477.607328][ C1] ? is_printk_legacy_deferred+0x5c/0x70 [ 477.607352][ C1] console_unlock+0xe9/0x270 [ 477.607370][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 477.607390][ C1] ? __cfi_console_unlock+0x10/0x10 [ 477.607408][ C1] ? __kasan_check_write+0x18/0x20 [ 477.607433][ C1] ? _raw_spin_lock+0x8c/0x120 [ 477.607451][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 477.607470][ C1] ? __kasan_check_read+0x15/0x20 [ 477.607494][ C1] ? is_printk_cpu_sync_owner+0x39/0x50 [ 477.607517][ C1] vprintk_emit+0x27c/0x640 [ 477.607536][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 477.607554][ C1] ? __kasan_check_write+0x18/0x20 [ 477.607579][ C1] ? _raw_spin_trylock+0xaf/0x130 [ 477.607598][ C1] vprintk_default+0x2a/0x40 [ 477.607616][ C1] vprintk+0x93/0xa0 [ 477.607638][ C1] _printk+0xd0/0x120 [ 477.607655][ C1] ? __cfi__printk+0x10/0x10 [ 477.607673][ C1] kauditd_hold_skb+0x1cc/0x230 [ 477.607697][ C1] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 477.607721][ C1] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 477.607744][ C1] kauditd_send_queue+0x2c5/0x310 [ 477.607768][ C1] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 477.607793][ C1] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 477.607818][ C1] kauditd_thread+0x4f0/0x740 [ 477.607840][ C1] ? __kasan_check_write+0x18/0x20 [ 477.607866][ C1] ? __cfi_kauditd_thread+0x10/0x10 [ 477.607888][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 477.607906][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 477.607925][ C1] ? __kasan_check_read+0x15/0x20 [ 477.607949][ C1] ? schedule+0xc6/0x240 [ 477.607970][ C1] kthread+0x2c7/0x370 [ 477.607988][ C1] ? __cfi_kauditd_thread+0x10/0x10 [ 477.608010][ C1] ? __cfi_kthread+0x10/0x10 [ 477.608032][ C1] ret_from_fork+0x67/0xa0 [ 477.608056][ C1] ? __cfi_kthread+0x10/0x10 [ 477.608073][ C1] ret_from_fork_asm+0x1a/0x30 [ 477.608102][ C1] [ 477.609389][ T10] usb 8-1: Product: 뫨恬蜲潴⣉ꕄ⡂逨ᾔ央鎎具䃘ͩ漩繐뀘ẹ⸤똯徊콚餠夁黟ᕘ例ꔅƈ沈욣홇뱿׼㛴끡ꢧ⭒蚂틣澷粳ꮺ饠㿛꒚ [ 477.621767][ T36] audit: type=1400 audit(1758341049.190:12647): avc: denied { create } for pid=12551 comm="syz.2.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 477.625673][ T10] usb 8-1: Manufacturer: ᐌ [ 478.207207][ T4255] rust_binder: 0: removing orphan mapping 0:1024 [ 478.280730][ T346] usbhid 7-1:0.0: can't add hid device: -71 [ 478.286760][ T346] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 478.370491][ T346] usb 7-1: USB disconnect, device number 7 [ 478.454745][ T2228] bridge_slave_1: left allmulticast mode [ 478.460509][ T2228] bridge_slave_1: left promiscuous mode [ 478.466161][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.473492][ T10] usb 8-1: SerialNumber: 摃ቜ์啠瓧ꑾ⩽틜샡筴؁舜勛룛礐띀찈ﹽ㌚죀툧᦭躙↳쾽⡁柕怘骺ᄤ噰警餫흓争䕭พ暉蹧⭩묌콵⥓嗂⇵℀琥ʙ俨隄ꢤ㜘廧嫑瀜≷䃹࿛윝峚浬蜴揶壆㏞化蘮訰ᣄ醗傑뇝ﮏ쨓ସ的숱ꊴ╠ꆵ䄼Ⴜ⣭똕⪒ⲱ䁞䢛쇅侭㋆ݎྦྷ冉⾴到弎뢔踷皞鹬댐啤䈫尾 [ 478.511065][ T2228] bridge_slave_0: left allmulticast mode [ 478.516963][ T2228] bridge_slave_0: left promiscuous mode [ 478.527074][ T10] usb 8-1: can't set config #1, error -71 [ 478.538476][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.576576][ T10] usb 8-1: USB disconnect, device number 4 [ 478.740249][ T2228] veth1_macvtap: left promiscuous mode [ 478.745946][ T2228] veth0_vlan: left promiscuous mode [ 478.785930][ T9628] can0 (unregistered): slcan off ttyS3. [ 479.052610][ T2228] bridge_slave_1: left allmulticast mode [ 479.058517][ T2228] bridge_slave_1: left promiscuous mode [ 479.064260][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.073531][ T2228] bridge_slave_0: left allmulticast mode [ 479.079352][ T2228] bridge_slave_0: left promiscuous mode [ 479.085076][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.093423][ T2228] bridge_slave_1: left allmulticast mode [ 479.099173][ T2228] bridge_slave_1: left promiscuous mode [ 479.104862][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.112592][ T2228] bridge_slave_0: left allmulticast mode [ 479.119820][ T2228] bridge_slave_0: left promiscuous mode [ 479.125475][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.134866][ T2228] bridge_slave_1: left allmulticast mode [ 479.140633][ T2228] bridge_slave_1: left promiscuous mode [ 479.146285][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.154560][ T2228] bridge_slave_0: left allmulticast mode [ 479.160332][ T2228] bridge_slave_0: left promiscuous mode [ 479.167106][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.175869][ T2228] tipc: Resetting bearer [ 479.245463][ T2228] tipc: Disabling bearer [ 479.523185][ T2228] tipc: Left network mode [ 479.527931][ T2228] tipc: Left network mode [ 479.532812][ T2228] tipc: Left network mode [ 479.541303][ T2228] veth1_macvtap: left promiscuous mode [ 479.546864][ T2228] veth0_vlan: left promiscuous mode [ 479.553105][ T2228] veth1_macvtap: left promiscuous mode [ 479.559971][ T2228] veth0_vlan: left promiscuous mode [ 479.565539][ T2228] veth1_macvtap: left promiscuous mode [ 479.572427][ T2228] veth0_vlan: left promiscuous mode