last executing test programs: 6m24.097162911s ago: executing program 32 (id=158): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f00000000c0)={'tunl0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) 6m20.191794672s ago: executing program 33 (id=196): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) (async) listen(r2, 0x0) rt_sigaction(0x83e, &(0x7f00000000c0)={0x0, 0x40000001, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0xb, 0xc, 0x12, 0x2575, 0xcaf]}, &(0x7f0000000080)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0xb, 0xc, 0x12, 0x2575, 0xcaf]}, &(0x7f0000000080)=0x54) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) lseek(r4, 0x49bf, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$unix(r2, &(0x7f0000000200)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000200)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x20000000, 0xff78) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x20000000, 0xff78) read$FUSE(r4, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r4, &(0x7f0000000140)={0x18, 0x0, r7, {0x48}}, 0x18) (async) write$FUSE_POLL(r4, &(0x7f0000000140)={0x18, 0x0, r7, {0x48}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100"], 0x18, 0x81}, 0x4c800) recvmmsg(r9, &(0x7f000000bd40)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/25, 0x19}], 0x5}, 0x5}, {{&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/126, 0x7e}], 0x2, &(0x7f00000006c0)=""/15}, 0x9}, {{&(0x7f0000000700)=@caif=@dgm, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)=""/25, 0x19}, {&(0x7f00000007c0)=""/63, 0x3f}, {&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f0000000900)=""/35, 0x23}], 0x4, &(0x7f00000009c0)=""/169, 0xa9}, 0x4}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/95, 0x5f}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000000c40)=""/49, 0x31}, {&(0x7f0000000c80)=""/1, 0x1}, {&(0x7f0000000cc0)=""/14, 0xe}, {&(0x7f0000000dc0)=""/245, 0xf5}], 0x7, &(0x7f00000071c0)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000000ec0)=@pppol2tpin6, 0x80, &(0x7f0000008340)=[{&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/202, 0xca}, {&(0x7f00000010c0)=""/124, 0x7c}, {&(0x7f00000081c0)=""/14, 0xe}, {&(0x7f0000008200)=""/5, 0x5}, {&(0x7f0000008240)=""/205, 0xcd}], 0x6, &(0x7f000000bf00)=""/4100, 0x1004}, 0x7}, {{&(0x7f00000093c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f000000a640)=[{&(0x7f0000009440)=""/4096, 0x1000}, {&(0x7f000000a440)=""/112, 0x70}, {&(0x7f000000a4c0)=""/122, 0x7a}, {&(0x7f000000a540)=""/148, 0x94}, {&(0x7f000000a600)=""/2, 0xffffffffffffff4a}], 0x5, &(0x7f000000a6c0)=""/84, 0x54}, 0x3}, {{&(0x7f000000a740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f000000bcc0), 0x8}, 0x6}], 0x7, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x4008010) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x4008010) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m16.367548256s ago: executing program 34 (id=1528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@acquire={0x40046305, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 5m10.63955287s ago: executing program 35 (id=1668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) getresuid(&(0x7f0000000080)=0x0, 0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '9p\x00'}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq}, {@fowner_eq={'fowner', 0x3d, r6}}, {@subj_type={'subj_type', 0x3d, '${&@*-[^'}}, {@dont_measure}], 0x6b}}) mount$binderfs(&(0x7f0000000280), &(0x7f00000002c0)='./binderfs\x00', &(0x7f0000000300), 0x84000, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x60}}], [{@uid_eq={'uid', 0x3d, r3}}, {@dont_hash}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'p}^[/'}}, {@fowner_lt={'fowner<', r6}}, {@appraise}]}) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2065, &(0x7f0000000040)={0x0, 0x87d7, 0x4000, 0x1003, 0x3cb}, &(0x7f00000000c0), 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x80800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 4m48.419680936s ago: executing program 36 (id=2225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', '', [{0x20, '\xc0z\xa6\xd3\xdb\b\xeb\xa7\x80\xd8\xaf\xb4\xfc\xbeMh\x00\x9aa\x8f=\xd9\xae\xe9 |\xb9\xcb\xbb^\xf6\x16r\x9bN\x8d\x8a\x9aX\xef\xff\xa36\xaau\xd9u\x1c\xc3\x8b\xce<\xdfK\xb1\xc34\x02\x92\xf3e#\t\xe7\xd8I=\xd3\xce\x9d\xa4\x10\x8f\x00\x00\x00\x00\x00'}]}, 0x53) r4 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000000), 0x4) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper], 0x6c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699d"}) 4m26.832903348s ago: executing program 37 (id=2620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x40, 0x0, &(0x7f0000000100)=[@acquire, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0)=""/2, 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) syz_usb_connect$uac1(0x5, 0xfd, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x4, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8d2, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x6, 0x6, 0xbc}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x1, 0x4, [0x6, 0x3, 0x1, 0x6], 0xfd}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x4, 0x3, 0xe7}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, 0x4, [0x1, 0x1, 0x2, 0x6], 0xac}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x1, 0x7f, "13c63e"}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x35, "f26e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4f, 0x4, 0x9f, 0x7f, "bb466c", '}'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7f, 0xff, "9916"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x51, 0x8, 0x2, {0x7, 0x25, 0x1, 0x3, 0x40, 0xfd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0x5, 0x5, "7bbd", "9d306b"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0xc, 0x4, "db953440d5e6bd"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xf8, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x1, 0x3, 0x7f, "f48f19"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x87, 0x2, 0x2, {0x7, 0x25, 0x1, 0x2, 0x7, 0x100}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x1, 0xf8, 0x4, 0x20, 0x4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x58, &(0x7f0000000380)=@string={0x58, 0x3, "dc4eb4c7a1ae204f5011682c8088a839c41ded78470d2e45fad0eb1c8a42c682d7a7f7481407bd9719c0ccdb577fcd3371c9cfe868515e38b7dc7b25a84a51f3e965a88bc35c6cf0acb6b6630a597dc1c44a7414c5fa"}}, {0xa3, &(0x7f0000000400)=@string={0xa3, 0x3, "aac602aa7d591211631ed72a9a13562ae7b66b28e96f555b291f3d17f0bde71485a157872ce647d9e5daa4ca0c84c98ef95ca11a798513f8600582699c110a99f2f1e42fbd56806f5db0c0414496dbc4b5b043d940231278333b2258d538be4955aafa657c7a40c55ae59aae483a36583801b3a69208e20559edddb23fa87c88e91a97f19e11987691f68c74cfe701115385c13d991a211aca0318b4cc179bd4d8"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2009}}, {0xce, &(0x7f0000000500)=@string={0xce, 0x3, "019334dc48c30d16d24e1d649fcb1c4fb7764ca61542f4c834fdd759a8bfb40bf1237701c7d28d4aa8334b5049779202b414b9a87259caca31e597bc77cf1fea75d73da883ceae24c37739820e314259e562d226f89f8b8d5efeb70fdbc5f18c64d96b7828b5015fb7ab308da7dafdfcdb74d78417411f4371f3f5585ecd7959c7aa2818054b0afd075a4948c1c46fe79f6e4548b4fc3c2b875eb2c5741eaa7ce939417620312c1a598a72c01ff70308e66cb20a7b7bb412d4d6143953c870622ebcf6feb7d452285c7a7d73"}}]}) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3m9.069830248s ago: executing program 38 (id=4757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c45f07f56b945d60e3d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0x200, 0x958, 0xee01, 0x0, 0x6000, '\x00', 0x6, 0x401, 0x373a, 0x3, {0x800000000008, 0x6}, {0x4000000000006, 0x9}, {0x1, 0xe}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xffeffffe, 0x6}}}}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x40, 0x3}}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x1, 'xfrm0\x00', {}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 3m4.730168893s ago: executing program 0 (id=4865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x6, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x1, 0x40}, @flat=@weak_binder={0x77622a85, 0x100, 0x10000000002, 0x500}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3m4.66581681s ago: executing program 0 (id=4868): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 3m3.837466323s ago: executing program 0 (id=4883): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @local}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8990, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r4, 0x22e7c000) 3m3.826671284s ago: executing program 0 (id=4884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r1}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 3m3.744295142s ago: executing program 0 (id=4885): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) add_key$fscrypt_provisioning(&(0x7f0000001340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000001"], 0x18, 0xfffffffffffffffe) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000380)={0xd5, 0x0, 0xa3d846ff51ab7fae}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001a00010000000000000000000a000000050000000000380788f67c248d247254cdb0ff85000014000280bf74a7dffdd8f8331b9dd3f2f9834b7f"], 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x3c}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00') 3m3.580949608s ago: executing program 0 (id=4893): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0xb4, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x5, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0xb4, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x5, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r4, r3, 0x0, 0xffffffff) (async) 2m48.424167137s ago: executing program 39 (id=4893): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0xb4, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x5, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0xb4, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x5, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r4, r3, 0x0, 0xffffffff) (async) 2m16.817808273s ago: executing program 8 (id=5918): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000180)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000180)) epoll_create(0x80000000) (async) epoll_create(0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmsg$unix(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x300) (async) recvmsg$unix(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x300) r4 = accept(r3, &(0x7f0000000100)=@nfc, &(0x7f0000000040)=0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000200)=[@register_looper, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @fda={0x66646185, 0x9, 0x2, 0xb}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000200)=[@register_looper, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @fda={0x66646185, 0x9, 0x2, 0xb}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x26840, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r6, 0xfffffffffffffffd, 0x1) (async) lseek(r6, 0xfffffffffffffffd, 0x1) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x3}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, r7) 2m16.768360268s ago: executing program 8 (id=5919): pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket(0x10, 0x803, 0x0) splice(r2, 0x0, r1, &(0x7f0000000040)=0x4, 0x100000001, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) fcntl$setown(r0, 0x8, r5) setuid(r6) ioctl$KVM_CREATE_VCPU(r3, 0x770a, 0x2) 2m16.768112328s ago: executing program 8 (id=5920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 2m16.766983338s ago: executing program 8 (id=5921): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x79) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) (async) write$selinux_validatetrans(r0, 0x0, 0x79) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) (async) 2m16.766711078s ago: executing program 8 (id=5922): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405", @ANYBLOB="c243711c9fd84d6d12d93385d52c8cf387cb23a0ba109e671df1be87119376be7f24466d426b3d8087503863a2ecd77b28dfcc288780aeb852a44b4976d5902babced2c9f48a342f915d9b7ffbe46a328b2772854a2705295c279954844f9be5425864449454d7f0763003ea85d2c69f104960a4e7db83dd7a1e5a4bf117259cb57a7973897b8410360fc1e60dcea4eebf58ed21f0a6adb43cc96fd10e0f478fc122f6c794d3"], 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) 2m16.266537798s ago: executing program 8 (id=5924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x44, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @loopback, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m1.125470395s ago: executing program 40 (id=5924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x44, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @loopback, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m58.715793416s ago: executing program 2 (id=6204): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002e00)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x5, @empty, 0x80000}, 0x1c, 0x0}}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 1m58.67893321s ago: executing program 2 (id=6205): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) syz_io_uring_setup(0x44d0, &(0x7f0000000500)={0x0, 0x1ff5f, 0x2, 0x0, 0x295}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x21, 0x0, 0x4eacc08be5d0e6c0, 0x7d, 0xac56, 0x0, 0x3}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000380)={0x5, 0xfffffffe, [{0x102, 0x0, 0x3}, {0x9, 0x0, 0x8001}, {0x1, 0x0, 0x68}, {0x936, 0x0, 0x7}, {0x0, 0x0, 0x5}, {0x7, 0x0, 0xc}, {0x2, 0x0, 0xffffffff}, {0x146, 0x0, 0xffff}, {0x81}, {0x3, 0x0, 0x7}, {0x2, 0x0, 0x2}, {0xc, 0x0, 0x3}, {0x3, 0x0, 0x8}, {0x9, 0x0, 0x1}, {0x11, 0x0, 0x3}, {0x2, 0x0, 0x2}]}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000540)={{0x80a0000, 0x6000, 0xc, 0x4, 0xf7, 0x8, 0x2, 0x0, 0x0, 0x7, 0x5, 0x73}, {0x0, 0x5000, 0x3, 0x2, 0x5c, 0xc, 0x6, 0x5, 0x2c, 0x9c, 0xbe}, {0x0, 0x0, 0x4, 0x4, 0x27, 0x9, 0x1, 0x4, 0xc, 0xd, 0x3, 0xc}, {0x1, 0xd000, 0xc, 0x0, 0x6, 0x1, 0x6, 0x8, 0x0, 0x0, 0x5, 0x9}, {0xeeee8000, 0x2, 0xc, 0x3, 0x6, 0x7, 0x6, 0x5, 0x8, 0xfb, 0x63, 0x9}, {0x3000, 0x4000, 0x8, 0x3b, 0x48, 0x80, 0x0, 0x0, 0x6, 0x5, 0x8, 0x1}, {0x4000, 0x4, 0x10, 0x9, 0x5, 0x8, 0x2, 0xf9, 0x5, 0x7, 0x6, 0xf}, {0x80a0000, 0x0, 0xd, 0xe, 0x2, 0x4, 0x2, 0x0, 0x0, 0xb5, 0xb6, 0x8}, {0x8000000, 0x48}, {0x8000000}, 0x4, 0x0, 0x4000, 0x100, 0xc, 0x2000, 0x2000, [0x5, 0x2, 0x4, 0x8]}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r8, r7, 0x0, 0xffffffff) 1m58.388928489s ago: executing program 2 (id=6206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x7, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000000000000000000000000000000000000000000000000000000400000000000000a9cc210da016f99b698046aa586ba1a03eaf0c7ff2566078a9a9b2c3f4787dd3c2caa180493c9012400f76e7ddf6c0c6805502f4d5cb26d889779c4e40df44b66a46862c4ea5e5da27fa4d6e7be12d0e9af17298f02a09a1bf2757b373c14b02ce037b1efbf4054fcc3e9e9c08864b0fc14d19210d204610a1de6aa5e4a088d86efde340445c02e42a0a8d4c9a570c2631eea3439068c8026ab97bc6b16e22b1a721754e27e63c8321bc5e84931d52d42e1b12e0340e2b1a1d8ea9a6b86f2a103da36dc0e792e724e27e2a4e5111c29543516d3ab1815898"], 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x8f, 0xd, 0x5f, @empty, @remote, 0x1, 0x7800, 0x10, 0x81}}) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.371773031s ago: executing program 2 (id=6298): unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x10, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0xa, 0x53, {"0f20c035000004000f22c0660fc7340b408b11c4217853c0f90f20e035000010000f22e0c44275b812c401e1f9e9b84a531addba000000000f300f00d4660f3834e6"}}], 0x53}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x1c1040, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f00000000c0)={0x40}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) unshare(0x20000400) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x10, 0x0, &(0x7f0000000040)) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0xa, 0x53, {"0f20c035000004000f22c0660fc7340b408b11c4217853c0f90f20e035000010000f22e0c44275b812c401e1f9e9b84a531addba000000000f300f00d4660f3834e6"}}], 0x53}) (async) openat$kvm(0x0, &(0x7f0000000040), 0x1c1040, 0x0) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f00000000c0)={0x40}) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1) (async) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) (async) 1m55.174827771s ago: executing program 2 (id=6306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 1m55.174136532s ago: executing program 2 (id=6308): getresgid(&(0x7f0000002e00), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010325bd7000000000000000000000007ffd00"/56, @ANYRES32=0x0, @ANYBLOB="0000000080000000fffffff000000000080003001100001e"], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) remap_file_pages(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x1, 0x3, 0x800) sendfile(r7, r6, 0x0, 0xffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sync() 1m40.171017344s ago: executing program 41 (id=6308): getresgid(&(0x7f0000002e00), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010325bd7000000000000000000000007ffd00"/56, @ANYRES32=0x0, @ANYBLOB="0000000080000000fffffff000000000080003001100001e"], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) remap_file_pages(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x1, 0x3, 0x800) sendfile(r7, r6, 0x0, 0xffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sync() 1m34.618480911s ago: executing program 4 (id=6601): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5f8e0af0733be126, 0x14}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080), 0x4) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r1, r1, 0x0, 0x1000000201005) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4c) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x10000000) 1m34.617849871s ago: executing program 4 (id=6602): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x218, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000004fcff", 0x58}], 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) fstat(r1, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000004240)) getpgrp(0xffffffffffffffff) lstat(&(0x7f00000042c0)='./cgroup\x00', &(0x7f0000004300)) fcntl$getownex(r0, 0x10, &(0x7f0000004380)) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840009000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0416466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c17399270714c778cfb11e9e0b390", 0x90, 0x20000040, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643deeae2a0aee29939533653abda402be37877101bb800da26fd7a41eb7f89b2cb3d7758760182931b015c1948c5baec757a9e7fbd6d0972d9428b6d842e02b3d8a2143c81703948828b91ebb37046cd8955bd1fbd4bb1249c901b4d868aa5f7e3f09f1262d5d995ff97cd8609d26bf53e50542cbb268ebc67424c21b83231c28695a0ea136d7f51fc4cb0271f880c26b0d3388f6374bd2562702b30da20d101e17018ef821d012371ca344b5ddcdd29d2c8b9625", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r6, &(0x7f0000000000)={0x90, 0x0, r7, {0x2, 0x2, 0x1, 0x7fffffff, 0x6, 0xfffffff6, {0x2, 0x80000000, 0x7, 0x9, 0x9, 0x9, 0x3, 0x9, 0x4, 0x2000, 0x8, r8, r9, 0x7, 0xbb7}}}, 0x90) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000043c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f00000008c0)=ANY=[@ANYBLOB="6769643de1711a2623b34d804c018e91549da74ec262ab7cad759a9b8c0401fb2e1a478175cf079639a8c8929b78f64dc2e7d11c2c3d134639d25e123b9844d376e8d13109f0a3d974b57066bfaa14d1fc28e41c33419dbe7022fb9bd351840d19565657", @ANYRESHEX=r11, @ANYBLOB=',\x00']) lstat(&(0x7f0000004400)='./cgroup/file0\x00', &(0x7f0000004440)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) 1m34.610618381s ago: executing program 4 (id=6603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000640)="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", 0x29b}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a2b530aeea469c70772df880777d6e1744da498487c553359a7dce5cad9e69bd2bd62e1a81d61f05700503d4aa5debf98ffa041d397d5dc8cbf9dc290e08158912b52a9101557ee5d819059fd760d75380c0d07990283b882e5e5d8ecfd2f4bf9f032c99e130e9948a857812243d3a7302", 0x92}, {&(0x7f0000000a40)="0be623851ed424a740141583d87c98f8988e5bb236a3c8638f646c9f896c1f179a922adb3649b1196e6bed31dbbe935ece5f91f2804171d2cfd5ead4bd8b4b72f198820f96e9f39153bfb4d61169efa69b9571b9629d4aaf63988e543448470f596bf2", 0x63}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="ffbcf4974a4a645c6d8cd8ef2dde80a53f40daf5ec8c7b36eb6b4d4d5286a436a562f1656469c511aaadc7389df3d15187940450e3b35c63d66f24df397537c747612c3e38daf2f2336c6de65eb8048c4860fc269b96a50098a9485f692d75ecdfa39b03f216a5d5043db8b86a74ca734a3481", 0x73}, {&(0x7f0000000d00)="7e93ddb16d6dded2586d9a83d6d79a26d8e5f8c7fc7279fe5fe209663600f76ffd8db76b41b6d87176d3d81c389026c02d2d9636e7267b8a8c6174215780c2df56dad99f5b9154655f610732b786f822c05cb9c98a414f61dd3435793e43df0eea078cc2", 0x64}, {&(0x7f0000000b80)="de12a02b8d1f1f1dce2f9257c8ddf7bf4ccfaa79e06de7f1c316c60d11cb578a2f13dd726f37fd7cc1e7588c8f857a1eb868e237ff915cd16242a08227018fe4376e75dff7d22210566c12", 0x4b}], 0x3}}], 0x2, 0x40408e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r1, 0xffffa000) 1m34.601253642s ago: executing program 4 (id=6604): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) (async) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) (async) 1m33.420164861s ago: executing program 4 (id=6608): unshare(0x62040200) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xa50f}, {0x6}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0xc8e8, 0x1, 0x9, 0x0, 0x101, 0xafc, 0x4, 0x3, 0x3, 0x3, 0x4, 0x3, 0xaf7, 0x7, 0xa2, 0xffffffffffffffff], 0xd000, 0x144000}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001200)={0x7, 0x7}) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e7, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x2, 0x9, 0x80000000}]}, 0x10) 1m33.400812432s ago: executing program 4 (id=6610): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x42a902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000140)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4011903010902230001046b40090904e44401ffe7bf0408240218918eed100905072ac09d"], 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0xa, 0x53, {"0f20c035000004000f22c0660fc7340b408b11c4217853c0f90f20e035000010000f22e0c44275b812c401e1f9e9b84a531addba000000000f300f00d4660f3834e6"}}], 0x53}) r4 = openat$kvm(0x0, &(0x7f0000000300), 0x200800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0xa}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="c001028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r5, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001800000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESHEX=r6, @ANYBLOB="08000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x228}, 0x1, 0x0, 0x0, 0x24040001}, 0x40055) syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff09) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket(0x1f, 0x4, 0x0) r9 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0xcea) mmap$binder(&(0x7f0000df1000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r11, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0xfffffffffffffeee) 1m33.358351957s ago: executing program 42 (id=6610): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x42a902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000140)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4011903010902230001046b40090904e44401ffe7bf0408240218918eed100905072ac09d"], 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0xa, 0x53, {"0f20c035000004000f22c0660fc7340b408b11c4217853c0f90f20e035000010000f22e0c44275b812c401e1f9e9b84a531addba000000000f300f00d4660f3834e6"}}], 0x53}) r4 = openat$kvm(0x0, &(0x7f0000000300), 0x200800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0xa}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="c001028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r5, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001800000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESHEX=r6, @ANYBLOB="08000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x228}, 0x1, 0x0, 0x0, 0x24040001}, 0x40055) syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff09) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket(0x1f, 0x4, 0x0) r9 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0xcea) mmap$binder(&(0x7f0000df1000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r11, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0xfffffffffffffeee) 1m17.117635464s ago: executing program 9 (id=6884): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) 1m17.103216215s ago: executing program 9 (id=6885): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_clone(0x80200000, &(0x7f0000001a40)="b3f5d76b87deb53834ffbf48aa8ecdf0c59de0fb9cacb8a73c371bc660eaadc9aad725ed2105212f04294fa851726a2934c01a7f59c959728206461a56393907d4d3e29fff4d67252b5b7aa4de2f1057ff5f4c26359fd1e14e69ff8d7392d3e1eb18c58be094d05881967b5763fdbf655390143cf0fdd6e88dcbcea36aab1425ec031528547d6b826b7f7dd5eaa994ba796f8f7ae6090572c57f40f4139bb5ad8c2be9f30d15c05db958", 0xaa, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000001b00)="a3c94ba1298418cce0525c94e941e49019ab9868bbfb5655300a1962082132a95ffadfacc8a597ccd52587e414f2e47ded740705a2d0ef3b237755ac851091726ea45358d2bf0094fa7a7ca996d59607b64c7ecbfb6117e812b8e198f7f14c73970f99f5c724275453ccbe8d2e6ade848b8f35ae8397bb13c76b40fad246ed0393d26d59") timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @tid=r1}, &(0x7f0000000000)) fchmod(r0, 0x2a) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000439000/0x2000)=nil, 0x2000}, 0x1}) r3 = socket(0x2, 0xa, 0xffffff4a) bind$unix(r3, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x10000004}) vmsplice(r6, &(0x7f00000019c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="5733f3d736c93fca40632e9df4bc0b8240d78c1eb89783e89ebddabd3df4578b27641f6ec65521474db914b6fc273d9217359d6128355a19bec052442d31594a700a10cc4b8284f4ad97c6d2dd8ce87d92ba05a59c38d1fdc0c2888dba2752444a3c2f15e300fcdde97d169fc8ab775b0beaeb20a4113926bb4ac01a99126df2e93a0f7f873dd5d88f9563744f49c7b3fa19be9a9dce629481c0ea6951257bad9ea512e9f25b5e", 0xa7}, {&(0x7f0000000380)="66ec83ca156d277d72c456e4e5f0f7f28b369ceaa1479d00a94538d5858195a1e83975482de98f6c6330d2a13783cea761b6e3dcb27a70135040421b6ca1f93f51d6ed656b88e2ef", 0x48}, {&(0x7f00000017c0)="86ff4e180a9ed113aeddad35d994ce1d1c46a3ddd992fb2db0544683757156e655ebba2a27579c5fbd71c1a1bc31a509ad00a674533f9826deff021cf6e2bd858f23c29215d3544619d8adde6c2ec7b6ae1f0e7724447d9b0d392e8924134a5372bc70907ef2b063ec5af62e24c09e7574ef51f61b717f382bc3a43bd13667b0f7f5f32d7d4163114ee2ef2bfc659a94450588fbee67fe234091cda8f46b1587e655e108470b02c9e803fecb7369bee6129591767a0e28a43591199523191725b6f6fadf7e6c1663c499d9fe63e2c98f3beb3681a6b6756ffd8915d64fe89d53", 0xe0}, {&(0x7f0000000440)="bbf3711134603e4528161c71317ce845e0d7f536dfc443e4a6e092d11e33cbcf93422a09b5e7cd7282ac022a5e0a0becd5ef6c429560df131b7e77b1cba50fe4f7de9d0f9d874e3d50c504c94f5be791d249dc6cf8145cdd755d9ee02f0abf68ea602d60f561cb", 0x67}, {&(0x7f00000018c0)="446722b7092565573cfa73c53550a0f1fc6212267c99ef0a196902f3b591627cfb4a13923dfdd4be1be76d6e6e9acdba437935f85d8d0ed1d8af738fb6ea095a3ffcbcd13e42ad42343e8a4fe1f925c85d8dd0ef5fc3494e3295307c8b01d8b8c1b6970cdb0379cf1ae98fb26695b8d11906f7b80f5653ff07c94ff679dc56c439fc182193df77f51d35c1da20a5c4e98387dbc961a68142c14f87ddef7350e5ce6fda29111afd1e68c05bfc14395fe6b0ba3f94106906ca40475c5b71e189b8ca842c7c75", 0xc5}], 0x6, 0x4) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f00000000c0)={0x20002000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8c, 0x0, &(0x7f0000000540)=[@enter_looper, @clear_death={0x400c630f, 0x2}, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x4, 0x1, 0x30}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x1, 0x2, 0x11}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}, @dead_binder_done, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 1m15.363020289s ago: executing program 9 (id=6929): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x7) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read(r3, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc9d13126d", 0x6) mmap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0xb635773f04ebbee5, 0x8010, r0, 0x3d87a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x24}, {0x6}]}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x1) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 1m14.546861571s ago: executing program 9 (id=6944): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002bbd70002f93471467521aaa"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/103, 0x67}], 0x3}, 0xc}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r1, r1, 0x0, 0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x841b715896403848, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x90) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x6) io_setup(0x1, &(0x7f00000016c0)=0x0) write$rfkill(r4, &(0x7f0000000100)={0x7ff, 0x1, 0x1}, 0x8) io_submit(r6, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x1f, 0x1, 0x4, r5, &(0x7f0000000280)='a', 0x1, 0x5}]) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x94, 0x30, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{0x80, 0x1, [@m_ipt={0x7c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x53, 0x6, "34bc9131c4bda776664a27412cd0c46b916c20945452953079b053059588b8543861590d2d46352f4ee4a2ffb55d58b5bdd7a07bdb26c770ea764da6786091885cdfba6aefb3758f25f9efc1a7474e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) read$FUSE(r4, &(0x7f0000001700)={0x2020}, 0x2020) 1m13.694182687s ago: executing program 9 (id=6959): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100000001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4c08, 0x0) 1m13.520982314s ago: executing program 9 (id=6963): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x3e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m13.486375697s ago: executing program 43 (id=6963): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x3e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m6.784430509s ago: executing program 3 (id=7066): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x80, 0x140}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/49, 0x31}, 0x40000000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000210029ad7000000000004200fc000000000000080000000000000000b7e40e128d4b"], 0x2c}}, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="44395dc513695fb0334d9afb96bfced9eeaffefd73f455dcc8ec4c11f3663cbe50bcaa8c95bbc78c47f4ccf9ac5a0789b32149b38cd35973a5aa4baaebf1e70694e4197de06ec55529e87b8a5ebc942843e6c48bc73535b5bca25cf3cb8fc6890fb591ada74df4bcd337b73c843551d1b81c3adbc8363bbe9912744f49ba4778bc18c24bfd2430fcc75d1cd2e5f2959291d2686de33f04cf2b25ae4521aa402ecc2b5e8873c4e3c3f94938978bc13e8ebf895eda746d6d345b83bca66be51a7b1eb0570903a516f30e1adaab1d96da5e", 0xd0}, {&(0x7f0000000240)="645d50f2613c91db6ca8d6d2362f8dcacc2d0927a44d09f64c81000870f2e13bc24b6833572937203add737d1f8bbe8befefbe56e8e9e58b92b3cce50c085e74b9c0baedf20c6ad61a9c955b4a63b3b2276c8036ea0c", 0x56}, {&(0x7f00000002c0)="e533f8ff08f85341a50a954fdcbe26a7d43e87fc3af29eb9eea8132bd277ed981853c3e048951340241e9f0d5168115b8ceb32e9465e75a3b9e9b7899d47f11772d222ee30fe901bca8092ee162c02823ca5d1830d40763ecb076eb5c2dbfdb74f765dee6b36579cf928026d6420600cada21ef5d10918b9e53d70392a8e93c7ef135b6f40ae23eed9f38cbebcd4db8fa4f3b2673d031234650ae0a986b3dbab9e46d759db354b03fd31cba89b112920f8b95a7bd5d4247f", 0xb8}, {&(0x7f0000000380)="3a99dd9966b4f6600d955affada50a58485a339abeab70cc2af0dabc60caa28cc2ab1974acfe835b1e5810bd40be5db6ba6d26c98eb00359b7da76ead0395327aa03aea0d9de77b4eb4bbaf0ca3d362e73f51076f6aae7558ac7daa51f002b628f4b4787f3594478b3276b7af6785b2b8047b3adfd490f240819a55b27aa84ced35beb63a81a5ac42199445ce8970fc58076e958e47eae9172abda8b25d7920dd9e3e225aedd442f84a457f30211", 0xae}], 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x11}}, 0x10) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) unshare(0x4000080) 1m6.783962729s ago: executing program 3 (id=7067): r0 = socket(0x26, 0x4, 0x5) r1 = accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0xd1, 0xff, 0x22, @ipv4={'\x00', '\xff\xff', @empty}, @private1, 0x20, 0x8000, 0x8, 0x9}}) recvfrom$packet(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0, &(0x7f00000002c0)={0x11, 0x11, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7ee1d685f66f678c}}, 0x14) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000300)=0xfe, 0x4) recvmsg$inet_nvme(r2, &(0x7f0000000500)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/6, 0x6}], 0x3}, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200140}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}}, 0x80) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000640)) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0xe00, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000880) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x4, 0xaf, [0x5, 0x9, 0xc7, 0xecac, 0x0, 0x8], 0x3, &(0x7f0000000780)=[{}, {}, {}], &(0x7f00000007c0)=""/175}, &(0x7f0000000900)=0x78) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r5, &(0x7f0000000940)="b8ea920b9b08cdd2bf4c291b1dd2e85ef23b241a574a789e39b826ebf04d2928b9d70d7a5af02ad846c53262fb0d0e57329e98419e2321929245a5be96587dde84e0ca7994996f7197254b5f3a2bd8212d5fee84a4f31dd254e1f06de50cbc534d292c4bfe6894bc6841f0cf6b5c75373df661ce0e63bf473878d1024b0388ca9c0bd6b22cc522049322b45d4cac3ae409c689c8513eb384a4bfcf7be96cf3ab063f1e4e5c48f8237db4629fbff99f337af8", 0xb2, 0x4040004, &(0x7f0000000a00)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80) ioctl$TUNSETLINK(r2, 0x400454cd, 0x303) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000b00)=""/131, 0x83}, {&(0x7f0000000bc0)=""/221, 0xdd}, {&(0x7f0000000cc0)=""/84, 0x54}, {&(0x7f0000000d40)=""/15, 0xf}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/253, 0xfd}, {&(0x7f0000001e80)=""/75, 0x4b}], 0x7}, 0xffff0000}], 0x1, 0x60, &(0x7f0000001fc0)={0x0, 0x989680}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x6c, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x840) getsockopt$sock_int(r0, 0x1, 0xd616a37b7864cedd, &(0x7f0000002180), &(0x7f00000021c0)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000002200)={0x1, 0xd9, 0xc0c7}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000002240), &(0x7f0000002280)=0xc) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000022c0), &(0x7f0000002300), 0x2, 0x1) r8 = syz_open_dev$evdev(&(0x7f0000002340), 0x4bb4, 0x82800) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f00000023c0)={0x56, 0x3, 0x4, {0xd8, 0x1}, {0x8, 0x1}, @period={0x5b, 0x4445, 0x7, 0x913, 0x5, {0x2, 0x2e9, 0xe8fe, 0x1}, 0x7, &(0x7f0000002380)=[0x0, 0x1, 0x1, 0x9, 0x7, 0x0, 0xd0]}}) r9 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$TIOCGISO7816(r9, 0x80285442, &(0x7f0000002400)) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000002600)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002480)={0x124, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002640)) 1m6.743683273s ago: executing program 3 (id=7068): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xf4, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_IE={0xc2, 0x2a, [@fast_bss_trans={0x37, 0xac, {0x8, 0x4, "a6e925dae7bc772f44f0c5c1781af85b", "057d9b515fca8e47aea7a1ab91ae69aaffcdfc36fbc6551c9632f4129c660b9e", "05cb7d3bd7e8d9bb3edf76d4d46340fdf6168a19ceda1aa7cd6b316f67e8f9a9", [{0x1, 0x17, "70669af30892582abfc8703b46d38a5d9dbd7dbb81a8ac"}, {0x2, 0x3, "e88809"}, {0x2, 0x16, "510ee9cd897a268e976a47b498fd038f7cfa70bc1736"}, {0x1, 0x22, "6d7df805e45920eb728a40b4154732d5700c1e819dfffb8855a7a118e32b208219d8"}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0x7, 0x8, 0x1, 0x8000}}]}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8044}, 0x20000840) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80080) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f00000001c0)=0x7fff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c1d"]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0}) 1m6.743132833s ago: executing program 3 (id=7069): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x9, 0x8804}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0xffffffffffffffff, 0x4}}, "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", "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"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000540)=@v3={0x3000000, [{0x6, 0x4}, {0x31da7250, 0xc}], 0xee01}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x1000007fd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x440000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 1m6.742937673s ago: executing program 3 (id=7070): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) syz_io_uring_setup(0x171c, &(0x7f0000000080)={0x0, 0x3f21, 0x800, 0x2, 0x213, 0x0, r1}, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m6.692325248s ago: executing program 3 (id=7071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}], 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newsa={0x180, 0x10, 0x1, 0x70bd27, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, {@in=@local, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x40}, {0x1000000000000, 0x0, 0x0, 0xd3a}, {0x20000, 0x7, 0x0, 0x8000000000000001}, {0x0, 0xbc}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3a}, [@algo_auth={0x48, 0x1, {{'sha256-arm64-neon\x00'}}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) unshare(0x62040200) r7 = gettid() unshare(0x22010180) (async) r8 = syz_open_procfs(r7, &(0x7f0000000000)='net/route\x00') pread64(r8, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) (async) lseek(r1, 0x4, 0x1) 50.747249026s ago: executing program 44 (id=7071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}], 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newsa={0x180, 0x10, 0x1, 0x70bd27, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, {@in=@local, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x40}, {0x1000000000000, 0x0, 0x0, 0xd3a}, {0x20000, 0x7, 0x0, 0x8000000000000001}, {0x0, 0xbc}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3a}, [@algo_auth={0x48, 0x1, {{'sha256-arm64-neon\x00'}}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) unshare(0x62040200) r7 = gettid() unshare(0x22010180) (async) r8 = syz_open_procfs(r7, &(0x7f0000000000)='net/route\x00') pread64(r8, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) (async) lseek(r1, 0x4, 0x1) 6.072140011s ago: executing program 6 (id=7772): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) r1 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&U\xd7u\n', 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) 6.063618922s ago: executing program 6 (id=7773): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x1c1040, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_sfeatures}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) 5.908344257s ago: executing program 6 (id=7777): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c6b18d7f19a49b803a7d730000000", @ANYRES16=0x0, @ANYBLOB="010226bd7000fcdbdf250c00000004000380180001801400020076657468315f766c616e000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) init_module(&(0x7f0000000c80)=ANY=[@ANYBLOB="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"/2170], 0x86c, &(0x7f0000000180)='./binderfs/binder0\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002010101000000000000000000000009080003400000100608001a400000000304a6b1d659530bd6e5b0b4dcb871011980"], 0x28}, 0x1, 0x0, 0x0, 0x8814}, 0xc0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5.78411419s ago: executing program 6 (id=7783): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) execveat$binfmt(r0, 0x0, &(0x7f0000000440)={[&(0x7f0000000380)='./binderfs/binder1\x00', &(0x7f00000003c0)='./binderfs/binder1\x00']}, &(0x7f0000000540)={[&(0x7f0000000480)='./binderfs/binder1\x00', &(0x7f00000004c0)='}]\x00', &(0x7f0000000500)='->@:}\x00']}, 0x400) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x68801, 0x164) lseek(r3, 0x40000000f4, 0x4) (async) syz_usb_connect$cdc_ncm(0x2, 0x99, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x1, 0x20, 0xda, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xbe98c32, 0x2, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0xfffe}, [@mdlm={0xf}, @mdlm={0x15, 0x24, 0x12, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x93, 0xa6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x65, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x7, 0x4}}}}}}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000010c0)={0x0, &(0x7f0000000400)={0x18, 0x0, 0x2725, {0x7fffffffffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000080)={0x7, 'veth1_vlan\x00', {0x7}, 0xff}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 4.001230058s ago: executing program 5 (id=7830): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) eventfd(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 3.948265083s ago: executing program 5 (id=7831): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 3.475545771s ago: executing program 5 (id=7843): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x2f}, 0x48, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045439, 0x40bea7b87a0000) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) (async) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r4, r1, r3, 0x0) (async) keyctl$link(0x8, r0, r4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r7, 0x4, &(0x7f00000000c0)={0xa80, 0x1}, &(0x7f0000000100)) 3.467368662s ago: executing program 5 (id=7844): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 3.416204077s ago: executing program 5 (id=7845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff", 0x16}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000500)=""/191, 0x1}) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f00007df000/0x3000)=nil) write(r3, &(0x7f0000000400)="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", 0x1f000) 3.394386849s ago: executing program 5 (id=7846): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x1000000, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000), 0x10) read(r2, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000001d80)) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000140)) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000280)=@canfd={{0x4, 0x1, 0x1}, 0x1a, 0x1, 0x0, 0x0, "245c1bb2674be7ee1cfcb3f46e0e2964f909d8a6bb15846760e01f6e098cab11e02d011c6652e2dd2d22a31dcfe44ce012aab580af8aeb4dade2681bbf92201c"}, 0x48}}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@inode32}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f0000000380)=[@acquire={0x40046305, 0x3}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0xa, 0x4, 0x29}, @fda={0x66646185, 0xa, 0x0, 0x36}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000040)={0x0, 0x20, 0x40}}}, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 2.779081771s ago: executing program 6 (id=7853): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0xa, 0x53, {"0f20c035000004000f22c0660fc7340b408b11c4217853c0f90f20e035000010000f22e0c44275b812c401e1f9e9b84a531addba000000000f300f00d4660f3834e6"}}], 0x53}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x1c1040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_io_uring_setup(0x4021, &(0x7f0000000240)={0x0, 0x38d, 0x8, 0x2, 0xda}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) 2.59316991s ago: executing program 6 (id=7858): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async, rerun: 32) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000014c0)) (rerun: 32) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) (async) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x109301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000a80)=@urb_type_control={0x2, {0xb}, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x9, 0x2, 0x0}) (async) pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 543.502155ms ago: executing program 7 (id=7910): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x124, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x124}}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000200)={@any, 0x9, 0x9, 0x4, 0x55aa, 0x1, "40b52f23187a3e86a16e03d7cc2b08c63465594b00aea049cd822bd47cd6656a6fecd8197d04090703ef745eabec40f87b684f3692a910ecc1bff73a85e2c7e9108e371cd43f5c07ab0b9cf774d4dff8b18c578ece4096c95ce2a6840b96f86706474c17e931557b0fd95249303180858f84e50539a9407e3abc901a20f7ce8e"}) mmap(&(0x7f0000154000/0x3000)=nil, 0x3000, 0x1000008, 0x24010, r1, 0xb3873000) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000100)={0x1f}) getitimer(0x1, &(0x7f0000000080)) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r1, &(0x7f00000002c0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 539.801495ms ago: executing program 1 (id=7912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x28}], 0x1, 0x0, 0xfffffffffffffdeb, 0x20008040}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 465.490933ms ago: executing program 1 (id=7913): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 464.837553ms ago: executing program 1 (id=7914): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0xe8, 0xe8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@broadcast, @local, 0x0, 0xff000001, 0xa, 0xe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8002, 0x3, 0x401, 0x79f, 0x0, 0x1000, 'syz_tun\x00', 'nr0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @private}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @empty, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, &(0x7f0000001200)='\x00\x00\x01\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x9f\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00o\b\xbdd\xcb\xa0\xc4P-E_Q\xa2\x98\xf5\xdb\x17\xe2-\x890\xf7\xaf\x1eL\x0f\xe3\xb2\xb8X\xdb\x849\xc6\xaaG#\x1bg\x05F\x85\x9e\x18 \x11\xbeG\x85\xb2\xf5\xa1S\xfd\x82\xfe\x94\x02\xd6\xd4\x1a4zbn\x17\\\xfc\xb4\x02\xfbN\xe8\x10>\xa2\x87\xa0\xb3\x90E\x94\xb7B\xffl\xca\xc62\x1ar\x92#kz\xa6fP\xc5\xe8\xcd\xf1\x18l\xa0\xbf\xdb\x18b\vRo\x1f^\x18\bR\xf7O\b\xb4\xd3;0\xc1h/\xaf\x0e\x88\xcc\xea\x94Ur\'!q\x03\xb0\xcf\t\xbe\xc4\x197Q]H?\v\xe0\xd3/\xa6\xf7j&\xd5\xdf\x90\x1e\xd3_H\'\xd1\xa2Z\xf4B1\x1f\xfc\xb7\x9bJ\xf5\x81\tT6zS-\x8c2%\xc1|\x9e\xfaj>\xfa\x01x\xc3\xd1;\xd5\xeb\xfcM\xb7\x938\xcb\x90We\xc8\xd6\x83\xad\xeb`c\x93\x15\x82F\n*\xbe\xe1\xe2\x82\xd6\xa6\x96\xee\x83\x164K\xe2\xc0\x174\xeeT)?\x00:S\xac\x13\x86\xcc6\x16\x06\x00q\xdc\x14\xb5c\xeb\xca4j\x8f\xb2|\x05\x92%{z\xfc\x00\x00\x00\x00\x00') mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) close(0x3) 463.637553ms ago: executing program 1 (id=7915): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() unshare(0x400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r5, 0x7fffffffffffffff, 0x0) r6 = timerfd_create(0x0, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8000, &(0x7f0000000700)={[{@readahead={'readahead', 0x3d, 0x80000000}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x5}}, {@no_bf_cache}], [{@uid_gt={'uid>', r2}}, {@smackfshat}, {@dont_appraise}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_lt={'uid<', r2}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) sendfile(r5, r6, 0x0, 0x240000000000) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa0002, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865722c66736e61e5936d653d2e2f62696e6465726673002c7365636c6162656c2c657569643e", @ANYRESDEC=r4, @ANYBLOB=',pcr=00000000000000000056,\x00']) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x14) ioctl$KVM_CAP_EXIT_HYPERCALL(r10, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r11, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r12 = syz_open_dev$loop(&(0x7f0000003940), 0xfffffffffffffff9, 0x1c3503) ioctl$BLKPG(r12, 0x1269, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2110860, &(0x7f0000000840)=ANY=[]) 451.924574ms ago: executing program 7 (id=7916): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 396.25606ms ago: executing program 7 (id=7917): quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x288, 0x35, 0x2, 0x70bd29, 0x25dfdbfe, {0x1f}, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@multicast2}, @generic="49e203cc124fd601ab4c54147b47dd6d571ab5", @nested={0x181, 0xd2, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @generic="02e87aa4d99ddc733a0c343921a16f0e525fe23bfa80de5abee3a78edb732143d8497ce8be92331443a3976dfe4c1842a5e38385b52260d69de8a36d1ea82c2dda32d20d5fa28474a6693f805006cb5122fc621102c7d7530b923a115591d9876f3447cdfd14297a33ee535bf814fcbf628d2daee9f1aeb5bc47ceb6", @nested={0x4, 0x78}, @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@mcast1}, @generic="91624bf446a8a68b9535bb7df91d427932aa231bb2129d2f0b32b2f857d020bb059dab7e12e43bbcf6290b8dd8e62d8c15016fd014d7b956cd14c68c6a29037d0e173499e3de826dc93f5e9c33585444b84506963ca2a5e81a75b3a9557e4bd0ee1939e31250a396c5b0388417539dcc3d882d80198bce831100bdd168ce6c4ad4596e8571f570b58f09d4c86e0d0fb4b68febe613c749468396f45d71ac35c9f233ad6a3f03f6c26c5647c154cb77e499bdf1ab1cc7a789685e2ec4c2c909268def3b383b41349ca399cfe62d0e68952cfda8addae0b34f6cfaec5a0292b7dad0"]}, @generic="5be3203a3649143b0b8c550ea024314f9e9463c441ee117d3c471dccfb84693cf766ac99e5f0f9659dc8c03120522eae455dc64446a709e75dd6d197780716d776f482d4fffd4f3a8636d78afe2ea359c3bdc29c8e310a46fc944a5a51c21202dd1fe2e093889a28e24e7d79138f3a", @typed={0x63, 0x60, 0x0, 0x0, @binary="307b623cae4741ee6e372e0bbc68fb6482ef906451718b3d9cf96613e5d89ed20c1c706fb9dffd61bf9665ffe6031c7f94b65c3b98c1cb7161dc5de843b5eb7c0bd145e6ab8a6dd2987cd25ab954b602418b766119953c9dec3d6c92c1f050"}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000000)) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x5f454000) 367.157933ms ago: executing program 7 (id=7918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100033060000000000000000fe80000000000000c4000000efa73bb2758c6a1ebc480380000000bbac1e0001000000000000000000000000000007ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d232000000ac1e0101000000000000000000000000fcffffffffffffff00000000000000000b000000000000000500000000000000fcffffffffffffff000000000000000001000000000000000c000000000000000000000000000000ff7f0000000000000000000000000000b8ad000000000000050000000000000001000000000000000000000002000400b00000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x7) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:boot_t:s0\x00', 0x1c, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 292.33973ms ago: executing program 7 (id=7919): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$netlink(r0, 0x0, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000100), 0x8) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0x2020) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa0c00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x8fe69000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000005840)={0x2020}, 0x2020) munlockall() mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x10000000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 291.45275ms ago: executing program 7 (id=7920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000001c0)) r3 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000100)={0x1f}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000000)={0xb6, 0x8}, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000040)={{0x0, 0xd, 0x0, 0xff, 0x7, 0x2000009, 0x5, 0x7, 0xa4, 0x9, 0x6, 0x3, 0x75, 0x60, 0x25}, 0x18, [0x0, 0x0, 0x0]}) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r10, 0x550c, &(0x7f0000000440)) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 41.393275ms ago: executing program 1 (id=7921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80661, 0x22) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom0\x00', 0x800, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="021601070a00000076bfea69fbdbdf250800120001000000bc6b6e000400000006003c000d260000080000000000000020010000000000000000000000000002fe8000000000000000000000000000aa"], 0x50}}, 0x24008980) r4 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r4, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x7, 0x3, 0x5, 0x9}, {0x1, 0x1, 0x2, 0x452}, {0xd, 0x5, 0xeb, 0x4}]}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @local}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x90, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x9, 0x0, 0x28}, @flat=@handle={0x73682a85, 0x1001, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x3f}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/88, 0x58, 0x2, 0x40}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0xb0, 0x0, &(0x7f00000003c0)="5739751a76b71f7aa7ecbb404b33b0478a90f1d12742b5aa80c5287939b61cba0aefedebdaa0593aa65c3dcbb30f224e8c553683f204d3ba6cea6785c727cd6dc58fb0955ba36e6f55d587c331d079159e7b4333cd7cdb823a321da1b451bda7c73f54504d8caa03cab47acacc5e6f523fc02716c535f01ce9641e4e6e23cfdf52cc06d795fd0b4dc485a13abaf4088a5affc06e206f01bc3736c05e1c1336d2c6108f79d167ab0d5e51ae8f203a0c56"}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=7922): socket(0x21, 0x800, 0x7) (async) r0 = socket(0x21, 0x800, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x5c04c, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRES32=r1], 0x15) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, 0xfffffffffffffffd) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet6(0xa, 0x80002, 0x0) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r7, 0x0, 0x0, 0x20000000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x31, &(0x7f0000001500)={0x0, 0x0}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c616669643dbbce302030193030303030303030303030382c6b", @ANYRES8=r2]) syz_open_procfs(0x0, &(0x7f00000003c0)='net/sco\x00') (async) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sco\x00') r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10003a800c00020003959100000000000400378015e56125b8cd1bef119f3dddf7214e5442854800de3446b7229941da72765ae014a76a24cfaaf723935e474b166b7dcb8346324ea8604eaaca5505cc29b15646b11f661e4b01738bc2c412f840d53c097046d0b439d1bede9df988c0454f4a256fa10ba1c18c0aac6a5dbf6bdaca7b84eb4b237ca15bef9d953c65b26147256356003f72466a943e40b20100000000000000afe13344949a2e39ead6e726f4c297"], 0x34}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000140)={0x67, @dev={0xac, 0x14, 0x14, 0x40}, 0xac, 0x1, 'none\x00', 0x0, 0x6, 0x62}, 0x2c) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) kernel console output (not intermixed with test programs): sb 10-1: USB disconnect, device number 9 [ 336.245638][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 336.263146][T19484] rust_binder: Write failure EFAULT in pid:818 [ 336.263543][T19485] rust_binder: Write failure EFAULT in pid:818 [ 336.270097][T19484] rust_binder: Write failure EFAULT in pid:818 [ 336.276880][T19484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.292243][T19484] rust_binder: Error while translating object. [ 336.292243][T19485] rust_binder: Error while translating object. [ 336.292266][T19484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 336.298798][T19485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 336.305534][T19484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:818 [ 336.314651][T19485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:818 [ 336.395615][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 336.411472][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 336.419722][ T10] usb 5-1: config 0 has no interface number 0 [ 336.426075][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 336.436703][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 336.445130][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 336.454330][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.462508][ T10] usb 5-1: Product: syz [ 336.466756][ T10] usb 5-1: Manufacturer: syz [ 336.471472][ T10] usb 5-1: SerialNumber: syz [ 336.476750][ T10] usb 5-1: config 0 descriptor?? [ 336.482114][T19480] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 336.775680][T19346] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 336.890143][ T10] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 336.899336][ T10] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 336.926825][T19346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.938098][T19346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.947902][T19346] usb 7-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 336.957100][T19346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.966389][T19346] usb 7-1: config 0 descriptor?? [ 337.130857][ T331] usb 5-1: USB disconnect, device number 17 [ 337.192132][ T4359] bridge_slave_1: left allmulticast mode [ 337.209020][ T4359] bridge_slave_1: left promiscuous mode [ 337.217941][T19346] usb 7-1: string descriptor 0 read error: -71 [ 337.224170][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.234756][T19346] usbhid 7-1:0.0: can't add hid device: -71 [ 337.240972][ T4359] bridge_slave_0: left allmulticast mode [ 337.247713][ T4359] bridge_slave_0: left promiscuous mode [ 337.253470][T19346] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 337.261802][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.270982][T19499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.271141][T19499] rust_binder: Error while translating object. [ 337.277668][T19346] usb 7-1: USB disconnect, device number 9 [ 337.297894][T19499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 337.297932][T19499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:826 [ 337.426774][T19500] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.443058][T19500] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.450532][T19500] bridge_slave_0: entered allmulticast mode [ 337.456758][T19500] bridge_slave_0: entered promiscuous mode [ 337.463653][ T4359] veth1_macvtap: left promiscuous mode [ 337.469795][ T4359] veth0_vlan: left promiscuous mode [ 337.504796][T19500] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.511977][T19500] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.519314][T19500] bridge_slave_1: entered allmulticast mode [ 337.525643][T19500] bridge_slave_1: entered promiscuous mode [ 337.574324][T19500] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.581916][T19500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.589241][T19500] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.596319][T19500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.615169][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.623827][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.633336][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.640650][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.649799][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.657086][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.681718][T19500] veth0_vlan: entered promiscuous mode [ 337.693378][T19500] veth1_macvtap: entered promiscuous mode [ 337.707756][T19346] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 337.737424][T19519] rust_binder: Write failure EFAULT in pid:31 [ 337.751412][ T36] audit: type=1400 audit(2000033241.439:48116): avc: denied { shutdown } for pid=19520 comm="syz.6.6615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.876865][T19346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 337.888386][T19346] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 337.905869][T19346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.920985][T19346] usb 4-1: config 0 descriptor?? [ 337.941135][T19504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.253995][T19572] 9pnet_fd: Insufficient options for proto=fd [ 338.357126][T19346] kone 0003:1E7D:2CED.001E: unknown main item tag 0x1 [ 338.377921][T19346] kone 0003:1E7D:2CED.001E: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 338.568056][ T31] usb 4-1: USB disconnect, device number 38 [ 338.635672][ T331] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 338.786919][ T331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.796879][ T331] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 338.810078][ T331] usb 8-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 338.819420][ T331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.828242][ T331] usb 8-1: config 0 descriptor?? [ 338.878373][T19579] netlink: 'syz.9.6631': attribute type 1 has an invalid length. [ 338.962151][T19590] __vm_enough_memory: pid: 19590, comm: syz.6.6636, bytes: 18014402804453376 not enough memory for the allocation [ 338.979723][T19592] 9pnet_fd: Insufficient options for proto=fd [ 339.053968][T19606] rust_binder: Error while translating object. [ 339.053990][T19606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 339.060288][T19606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:83 [ 339.131663][T19620] /dev/nullb0: Can't lookup blockdev [ 339.156484][T19628] rust_binder: Error while translating object. [ 339.156526][T19628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 339.165741][T19628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 339.188575][T19633] rust_binder: Write failure EFAULT in pid:93 [ 339.216102][T19638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=361 sclass=netlink_route_socket pid=19638 comm=syz.9.6654 [ 339.241605][ T331] logitech 0003:046D:C294.001F: item fetching failed at offset 2/5 [ 339.257419][ T331] logitech 0003:046D:C294.001F: parse failed [ 339.268439][ T331] logitech 0003:046D:C294.001F: probe with driver logitech failed with error -22 [ 339.328047][T19643] rust_binder: Read failure Err(EAGAIN) in pid:160 [ 339.449423][T19648] 9pnet_fd: Insufficient options for proto=fd [ 339.462718][ T36] audit: type=1326 audit(2000033243.139:48117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19649 comm="syz.3.6658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff19b58f6c9 code=0x0 [ 339.500982][T19651] SELinux: security_context_str_to_sid () failed with errno=-22 [ 339.520844][ T331] usb 8-1: USB disconnect, device number 12 [ 339.620877][T19659] SELinux: security_context_str_to_sid () failed with errno=-22 [ 339.646716][ T36] audit: type=1400 audit(2000033243.329:48118): avc: denied { getopt } for pid=19658 comm="syz.6.6661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 339.672300][T19662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 339.945633][ T1154] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 339.945737][T19676] Unsupported ieee802154 address type: 0 [ 340.010952][T19686] 9pnet_fd: p9_fd_create_unix (19686): problem connecting socket: ./file0: -30 [ 340.036424][T19688] rust_binder: 23: no such ref 1 [ 340.036480][T19689] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 340.047783][T19688] rust_binder: Write failure EINVAL in pid:23 [ 340.058144][T19691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.109359][T19695] binder: Bad value for 'max' [ 340.126878][ T1154] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 340.135390][ T1154] usb 10-1: config 179 has no interface number 0 [ 340.141852][ T1154] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 340.153725][T19696] netlink: 'syz.6.6672': attribute type 4 has an invalid length. [ 340.161560][ T1154] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 340.174271][ T1154] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 340.188014][T19696] netlink: 'syz.6.6672': attribute type 4 has an invalid length. [ 340.195923][ T1154] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 340.209221][ T1154] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 340.223241][ T1154] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 340.232499][ T1154] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.243352][T19665] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 340.251816][ T1154] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 340.263947][ T1154] xpad 10-1:179.65: probe with driver xpad failed with error -5 [ 340.468076][ T31] usb 10-1: USB disconnect, device number 10 [ 340.529603][T19711] 9pnet_fd: Insufficient options for proto=fd [ 340.545729][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 340.575691][ T1154] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 340.675427][T19713] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.683508][T19713] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 340.692393][T19713] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.700471][T19713] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 340.705620][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 340.717055][ T10] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 340.731193][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.734472][ T1154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.741970][ T10] usb 8-1: config 0 has no interface number 0 [ 340.759893][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 340.765635][ T1154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 340.769779][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.791551][ T10] usb 8-1: Product: syz [ 340.796004][ T10] usb 8-1: Manufacturer: syz [ 340.800728][ T10] usb 8-1: SerialNumber: syz [ 340.802966][ T1154] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 340.809910][ T10] usb 8-1: config 0 descriptor?? [ 340.824687][ T1154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.837724][ T1154] usb 4-1: config 0 descriptor?? [ 340.877945][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6683'. [ 340.904382][T19722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.904421][T19722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.912796][T19722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.919453][T19722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.027977][ T10] usb 8-1: USB disconnect, device number 13 [ 341.195652][ T331] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 341.245797][ T1154] logitech 0003:046D:C294.0020: item fetching failed at offset 2/5 [ 341.254243][ T1154] logitech 0003:046D:C294.0020: parse failed [ 341.260361][ T1154] logitech 0003:046D:C294.0020: probe with driver logitech failed with error -22 [ 341.347020][ T331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.357330][ T331] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 341.370647][ T331] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 341.379925][ T331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.389227][ T331] usb 7-1: config 0 descriptor?? [ 341.502576][ T31] usb 4-1: USB disconnect, device number 39 [ 341.806387][ T331] logitech 0003:046D:C294.0021: item fetching failed at offset 2/5 [ 341.814979][ T331] logitech 0003:046D:C294.0021: parse failed [ 341.821117][ T331] logitech 0003:046D:C294.0021: probe with driver logitech failed with error -22 [ 341.913995][T19750] rust_binder: 196: no such ref 3 [ 341.919272][T19750] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 341.926407][T19750] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 341.933445][T19750] rust_binder: Write failure EFAULT in pid:196 [ 341.998361][T19730] fuse: Bad value for 'fd' [ 342.010508][ T331] usb 7-1: USB disconnect, device number 10 [ 342.054074][T19762] __vm_enough_memory: pid: 19762, comm: syz.3.6697, bytes: 18014402804453376 not enough memory for the allocation [ 342.075084][T19764] netlink: 'syz.3.6698': attribute type 27 has an invalid length. [ 342.097504][T19770] ./cgroup: Can't lookup blockdev [ 342.097580][T19769] rust_binder: Write failure EFAULT in pid:204 [ 342.103919][ T36] audit: type=1400 audit(2000033245.789:48119): avc: denied { getattr } for pid=19767 comm="syz.3.6699" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 342.105845][T19771] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 342.182423][ T36] audit: type=1400 audit(2000033245.869:48120): avc: denied { lock } for pid=19785 comm="syz.9.6705" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 342.212422][T19786] overlay: Unknown parameter '/' [ 342.218372][ T36] audit: type=1400 audit(2000033245.899:48121): avc: denied { compute_member } for pid=19785 comm="syz.9.6705" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 342.395629][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 342.403855][ T36] audit: type=1326 audit(2000033246.089:48122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.7.6689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7fc00000 [ 342.557260][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.585599][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 342.612923][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 342.625286][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.648880][ T31] usb 4-1: config 0 descriptor?? [ 342.890855][T19814] __vm_enough_memory: pid: 19814, comm: syz.6.6714, bytes: 1970324836974592 not enough memory for the allocation [ 343.069080][ T31] logitech 0003:046D:C294.0022: item fetching failed at offset 2/5 [ 343.085822][ T31] logitech 0003:046D:C294.0022: parse failed [ 343.107967][ T31] logitech 0003:046D:C294.0022: probe with driver logitech failed with error -22 [ 343.255660][ T1154] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 343.328553][ T331] usb 4-1: USB disconnect, device number 40 [ 343.426669][ T1154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.446735][ T1154] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 343.474438][ T1154] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 343.492902][ T1154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.509760][ T1154] usb 7-1: config 0 descriptor?? [ 343.712834][T19838] SELinux: security_context_str_to_sid (=sha256-arm64) failed with errno=-22 [ 343.855844][T19849] bpf: Bad value for 'mode' [ 343.885192][ T36] audit: type=1400 audit(2000033247.569:48123): avc: denied { setattr } for pid=19850 comm="syz.3.6726" name="NETLINK" dev="sockfs" ino=75651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.909452][ T36] audit: type=1400 audit(2000033247.579:48124): avc: denied { setattr } for pid=19850 comm="syz.3.6726" name="CAN_BCM" dev="sockfs" ino=75648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.923919][ T1154] logitech 0003:046D:C294.0023: item fetching failed at offset 2/5 [ 343.947813][ T1154] logitech 0003:046D:C294.0023: parse failed [ 343.953927][ T1154] logitech 0003:046D:C294.0023: probe with driver logitech failed with error -22 [ 344.075677][T19346] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 344.145250][ T1154] usb 7-1: USB disconnect, device number 11 [ 344.163731][T19862] overlay: Unknown parameter '/' [ 344.229518][T19346] usb 8-1: not running at top speed; connect to a high speed hub [ 344.238592][T19346] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1032, setting to 64 [ 344.248410][T19866] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.250086][T19346] usb 8-1: config 1 interface 0 has no altsetting 0 [ 344.250819][T19866] 9pnet_fd: Insufficient options for proto=fd [ 344.258992][T19346] usb 8-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.40 [ 344.272728][T19866] rust_binder: Error in use_page_slow: ESRCH [ 344.278524][T19866] rust_binder: use_range failure ESRCH [ 344.279831][T19346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.284719][T19866] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 344.290341][T19346] usb 8-1: Product: syz [ 344.298149][T19866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 344.306534][T19346] usb 8-1: Manufacturer: syz [ 344.310843][T19866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:897 [ 344.320175][T19346] usb 8-1: SerialNumber: syz [ 344.339891][T19847] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 344.390956][T19868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.548143][ T36] audit: type=1400 audit(2000033248.244:48125): avc: denied { create } for pid=19846 comm="syz.7.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 344.550910][T19346] usbhid 8-1:1.0: can't add hid device: -71 [ 344.581171][T19346] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 344.595153][T19346] usb 8-1: USB disconnect, device number 14 [ 344.599448][T19872] 9pnet_fd: Insufficient options for proto=fd [ 344.635703][ T7631] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 344.796962][ T7631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.807042][ T7631] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 344.820127][ T7631] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 344.829219][ T7631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.837878][ T7631] usb 4-1: config 0 descriptor?? [ 344.897452][T19885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.897999][T19885] rust_binder: Error while translating object. [ 344.904548][T19885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 344.910811][T19885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 345.061463][T19891] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 345.078070][T19891] rust_binder: Write failure EINVAL in pid:175 [ 345.130481][T19900] rust_binder: Write failure EFAULT in pid:62 [ 345.164203][T19904] rust_binder: Read failure Err(EAGAIN) in pid:66 [ 345.239670][T19912] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 345.247402][ T7631] logitech 0003:046D:C294.0024: item fetching failed at offset 2/5 [ 345.266774][T19912] rust_binder: Read failure Err(EFAULT) in pid:183 [ 345.272467][ T7631] logitech 0003:046D:C294.0024: parse failed [ 345.287614][ T7631] logitech 0003:046D:C294.0024: probe with driver logitech failed with error -22 [ 345.331012][T19923] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.344834][T19923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.351515][T19923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 345.376745][T19925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.386477][T19925] rust_binder: inc_ref_done called when no active inc_refs [ 345.449628][ T1154] usb 4-1: USB disconnect, device number 41 [ 345.979395][T19941] Invalid ELF header magic: != ELF [ 345.984813][ T36] audit: type=1400 audit(2000033249.674:48126): avc: denied { module_load } for pid=19940 comm="syz.3.6759" path="/bus" dev="ramfs" ino=77049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 346.007929][T19941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.008726][T19941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 346.015174][T19941] rust_binder: Read failure Err(EFAULT) in pid:903 [ 346.030093][ T36] audit: type=1400 audit(2000033249.704:48127): avc: denied { lock } for pid=19940 comm="syz.3.6759" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 346.095316][ T4377] Bluetooth: hci1: Frame reassembly failed (-84) [ 346.265863][T19950] 9pnet_fd: Insufficient options for proto=fd [ 346.450578][T19964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.459808][T19964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.625660][ T331] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 346.685620][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 346.776879][ T331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.786786][ T331] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 346.799732][ T331] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 346.809322][ T331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.818019][ T331] usb 7-1: config 0 descriptor?? [ 346.825735][ T10] usb 8-1: device descriptor read/64, error -71 [ 347.065735][ T10] usb 8-1: device descriptor read/64, error -71 [ 347.225399][ T331] logitech 0003:046D:C294.0025: item fetching failed at offset 2/5 [ 347.233572][ T331] logitech 0003:046D:C294.0025: parse failed [ 347.239616][ T331] logitech 0003:046D:C294.0025: probe with driver logitech failed with error -22 [ 347.315633][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 347.431780][ T7631] usb 7-1: USB disconnect, device number 12 [ 347.445675][ T10] usb 8-1: device descriptor read/64, error -71 [ 347.685669][ T10] usb 8-1: device descriptor read/64, error -71 [ 347.796182][ T10] usb usb8-port1: attempt power cycle [ 347.875768][T19944] Bluetooth: hci0: command 0x1003 tx timeout [ 347.875785][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 348.125697][T19939] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 348.125831][T19944] Bluetooth: hci1: command 0x1003 tx timeout [ 348.135771][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 348.166942][ T10] usb 8-1: device descriptor read/8, error -71 [ 348.297220][ T10] usb 8-1: device descriptor read/8, error -71 [ 348.401615][T19973] tipc: Started in network mode [ 348.406742][T19973] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 348.416019][T19973] tipc: Enabling of bearer rejected, failed to enable media [ 348.429875][ T36] audit: type=1400 audit(2000033252.124:48128): avc: denied { unmount } for pid=18999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 348.470818][T19977] exFAT-fs (rnullb0): invalid boot record signature [ 348.477507][T19977] exFAT-fs (rnullb0): failed to read boot sector [ 348.483954][T19977] exFAT-fs (rnullb0): failed to recognize exfat type [ 348.516638][T19984] 9pnet_fd: Insufficient options for proto=fd [ 348.525637][ T331] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 348.545723][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 348.566781][ T10] usb 8-1: device descriptor read/8, error -71 [ 348.649470][T19986] netlink: 'syz.3.6777': attribute type 4 has an invalid length. [ 348.657438][T19986] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6777'. [ 348.686798][ T331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.696744][ T331] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 348.714732][ T331] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 348.724082][ T331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.732348][ T10] usb 8-1: device descriptor read/8, error -71 [ 348.739605][ T331] usb 7-1: config 0 descriptor?? [ 348.742348][T19999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 348.848008][ T10] usb usb8-port1: unable to enumerate USB device [ 348.968933][T20015] 9pnet_fd: Insufficient options for proto=fd [ 349.046576][T20017] netlink: 'syz.9.6788': attribute type 4 has an invalid length. [ 349.054553][T20017] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6788'. [ 349.070493][T20017] fuseblk: Bad value for 'fd' [ 349.147672][ T331] logitech 0003:046D:C294.0026: item fetching failed at offset 2/5 [ 349.157611][ T331] logitech 0003:046D:C294.0026: parse failed [ 349.163740][ T331] logitech 0003:046D:C294.0026: probe with driver logitech failed with error -22 [ 349.358562][ T331] usb 7-1: USB disconnect, device number 13 [ 349.456660][T20044] 9pnet_fd: Insufficient options for proto=fd [ 349.767459][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6804'. [ 349.790210][T20065] 9pnet_fd: Insufficient options for proto=fd [ 349.875723][ T1154] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 349.958761][T20074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.036880][ T1154] usb 8-1: Using ep0 maxpacket: 8 [ 350.046927][ T1154] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 350.056225][ T1154] usb 8-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 350.071669][ T1154] usb 8-1: config 0 has no interface number 0 [ 350.081952][ T1154] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 350.091150][ T1154] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.099535][ T1154] usb 8-1: Product: syz [ 350.103952][ T1154] usb 8-1: Manufacturer: syz [ 350.108709][ T1154] usb 8-1: SerialNumber: syz [ 350.114221][ T1154] usb 8-1: config 0 descriptor?? [ 350.124997][ T1154] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 350.133833][ T1154] usb 8-1: No valid video chain found. [ 350.146188][T20088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20088 comm=syz.6.6815 [ 350.192655][T20090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.222338][T20096] netlink: 'syz.9.6814': attribute type 4 has an invalid length. [ 350.243601][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.258367][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.270274][T20096] netlink: 'syz.9.6814': attribute type 4 has an invalid length. [ 350.285313][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.295620][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.299344][T20096] netlink: 'syz.9.6814': attribute type 4 has an invalid length. [ 350.305926][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.329584][ T1154] usb 8-1: USB disconnect, device number 19 [ 350.331441][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.347831][T20096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 350.347864][T20096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 350.354435][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.375930][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.385090][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.395323][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.404079][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.412262][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.422402][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.430764][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.439984][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.450079][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.459754][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.467973][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.476575][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.484571][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.493883][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.503785][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.512665][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.517585][T20109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 350.520819][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.528171][T20109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:330 [ 350.530894][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.556069][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.564453][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.572681][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.581525][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.590092][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.598939][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.607601][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.616671][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.624736][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.633615][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.642085][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.651332][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.659588][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.668160][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.683610][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.692530][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.700857][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.711624][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.712230][T20112] netlink: 'syz.9.6822': attribute type 5 has an invalid length. [ 350.719922][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.736266][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.744349][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.752981][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.760830][T20112] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.6822'. [ 350.761109][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.771230][T20111] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 350.778846][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.795665][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.808448][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.816938][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.826108][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.836609][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.846612][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.854939][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.865539][T20117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 350.865658][T20118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 350.891651][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.912819][T20123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=20123 comm=syz.7.6826 [ 350.915655][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.937753][T20123] netlink: 'syz.7.6826': attribute type 4 has an invalid length. [ 350.945602][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.953847][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.955619][T20123] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.6826'. [ 350.964198][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.989718][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 351.005678][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 351.018780][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 351.035928][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 351.051917][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 351.065507][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 351.084082][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 351.097430][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 351.112709][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 351.125621][T20099] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 351.136436][T20099] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 351.195606][ T36] audit: type=1400 audit(2000033254.884:48129): avc: denied { setcurrent } for pid=20143 comm="syz.9.6833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 351.298258][T20157] netlink: 6048 bytes leftover after parsing attributes in process `syz.9.6838'. [ 351.479892][T20180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.480327][T20180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 351.491263][T20180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 351.738183][ T36] audit: type=1326 audit(2000033255.434:48130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.9.6849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59b078f6c9 code=0x0 [ 351.846304][T20200] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 351.907757][T20209] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6853'. [ 352.004097][T20215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6855'. [ 352.013867][T20215] tc_dump_action: action bad kind [ 352.315657][ T10] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 352.467747][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 352.489058][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 352.496783][ T10] usb 8-1: can't read configurations, error -71 [ 352.526990][T20242] /dev/rnullb0: Can't open blockdev [ 352.553778][T20244] rust_binder: 122: no such ref 0 [ 352.559290][T20244] rust_binder: 122: no such ref 1 [ 352.564395][T20244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 352.617242][T20256] rust_binder: Error while translating object. [ 352.626831][T20256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 352.635275][T20256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 352.658020][ T36] audit: type=1326 audit(2000033256.354:48131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.9.6871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59b078f6c9 code=0x0 [ 352.925916][T20268] binder: Unknown parameter 'vO&\yVKpgp뉐Wn\f ' [ 353.679744][T20317] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.680280][T20317] rust_binder: Failed to allocate buffer. len:18446744073709551592, is_oneway:true [ 353.695695][T20317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 353.705376][T20317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:277 [ 353.746048][T20322] x_tables: duplicate entry at hook 1 [ 353.760945][T20321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.770425][T20321] rust_binder: Error while translating object. [ 353.777169][T20321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 353.783441][T20321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:281 [ 354.028012][T20355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.093297][T20363] 9pnet_fd: Insufficient options for proto=fd [ 354.155459][T20370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.161738][ T36] audit: type=1400 audit(2000033257.854:48132): avc: denied { remount } for pid=20369 comm="syz.6.6908" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 354.195784][T20370] option changes via remount are deprecated (pid=20369 comm=syz.6.6908) [ 354.212163][T20370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 354.212201][T20370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:291 [ 354.246110][ T36] audit: type=1400 audit(2000033257.944:48133): avc: denied { unmount } for pid=19305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 354.407330][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6909'. [ 354.510731][T20382] rust_binder: Error while translating object. [ 354.510777][T20382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 354.524886][T20382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:140 [ 354.547291][T20384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.805688][T20395] vcan0: entered allmulticast mode [ 354.869013][T20400] /dev/rnullb0: Can't open blockdev [ 354.981793][T20407] rust_binder: Write failure EFAULT in pid:161 [ 354.981866][T20407] rust_binder: inc_ref_done called when no active inc_refs [ 355.049946][T20411] rust_binder: Write failure EFAULT in pid:301 [ 355.070320][T20411] rust_binder: Write failure EFAULT in pid:301 [ 355.098114][ T36] audit: type=1400 audit(2000033258.794:48134): avc: denied { mount } for pid=20410 comm="syz.6.6920" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 355.211896][ T36] audit: type=1326 audit(2000033258.904:48135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.9.6929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59b078f6c9 code=0x0 [ 355.367766][T20455] vlan1: entered promiscuous mode [ 355.372927][T20455] vlan1: entered allmulticast mode [ 355.378165][T20455] veth0_vlan: entered allmulticast mode [ 355.392332][T20455] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 355.399491][T20455] overlayfs: failed to set xattr on upper [ 355.405214][T20455] overlayfs: ...falling back to redirect_dir=nofollow. [ 355.412326][T20455] overlayfs: ...falling back to index=off. [ 355.418278][T20455] overlayfs: ...falling back to uuid=null. [ 355.424089][T20455] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 355.433049][T20455] overlayfs: maximum fs stacking depth exceeded [ 355.495675][ T31] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 355.625641][ T31] usb 7-1: device descriptor read/64, error -71 [ 355.865780][ T31] usb 7-1: device descriptor read/64, error -71 [ 356.105627][ T31] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 356.116692][T20485] rust_binder: 184: no such ref 0 [ 356.121994][T20485] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 356.127032][ T36] audit: type=1326 audit(2000033259.814:48136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20486 comm="syz.3.6951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff19b58f6c9 code=0x0 [ 356.129502][T20485] rust_binder: 184: no such ref 2 [ 356.152971][ T36] audit: type=1326 audit(2000033259.824:48137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20486 comm="syz.3.6951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff19b58f6c9 code=0x0 [ 356.158296][T20485] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 356.204547][T20493] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.235640][ T31] usb 7-1: device descriptor read/64, error -71 [ 356.252488][T20500] exFAT-fs (rnullb0): invalid boot record signature [ 356.259339][T20500] exFAT-fs (rnullb0): failed to read boot sector [ 356.265846][T20500] exFAT-fs (rnullb0): failed to recognize exfat type [ 356.393325][ T36] audit: type=1400 audit(2000033260.084:48138): avc: denied { listen } for pid=20506 comm="syz.7.6957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.478214][T20510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.486902][T20510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.496384][ T31] usb 7-1: device descriptor read/64, error -71 [ 356.605744][ T31] usb usb7-port1: attempt power cycle [ 356.725657][ T10] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 356.876439][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 356.885317][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.895593][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.906229][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.920935][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.929025][ T10] usb 8-1: Product: 鴸ꈆ■结ꟛꤤ鈅阄樀㫁牬뒩晏኎撎爽팷亅镚꽋蠉䒉캇呱摢…歓ቮ泚塎ꄑ롺伍篁 [ 356.941882][ T10] usb 8-1: Manufacturer: ﳿ [ 356.946520][ T10] usb 8-1: SerialNumber: 㰁 [ 356.960005][ T31] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 356.996639][ T31] usb 7-1: device descriptor read/8, error -71 [ 357.126821][ T31] usb 7-1: device descriptor read/8, error -71 [ 357.154120][T20510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.164321][T20510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.181309][ T10] usb 8-1: 0:2 : does not exist [ 357.190560][ T10] usb 8-1: USB disconnect, device number 22 [ 357.201929][T13222] udevd[13222]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 357.230183][T20520] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.237425][T20520] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.244636][T20520] bridge_slave_0: entered allmulticast mode [ 357.251268][T20520] bridge_slave_0: entered promiscuous mode [ 357.257749][T20520] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.264862][T20520] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.272185][T20520] bridge_slave_1: entered allmulticast mode [ 357.278561][T20520] bridge_slave_1: entered promiscuous mode [ 357.288373][ T4373] bridge_slave_1: left allmulticast mode [ 357.294064][ T4373] bridge_slave_1: left promiscuous mode [ 357.300011][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.307602][ T4373] bridge_slave_0: left allmulticast mode [ 357.313304][ T4373] bridge_slave_0: left promiscuous mode [ 357.319316][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.376543][ T31] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 357.407209][ T31] usb 7-1: device descriptor read/8, error -71 [ 357.421670][T20520] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.428977][T20520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.436335][T20520] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.443365][T20520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.452551][ T4373] tipc: Left network mode [ 357.458112][ T4373] veth1_macvtap: left promiscuous mode [ 357.463615][ T4373] veth0_vlan: left promiscuous mode [ 357.508149][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.518861][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.529316][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.536419][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.545090][ T31] usb 7-1: device descriptor read/8, error -71 [ 357.555298][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.562915][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.576276][T20536] sit0: entered promiscuous mode [ 357.586232][T20536] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6966'. [ 357.615781][T20520] veth0_vlan: entered promiscuous mode [ 357.629252][T20520] veth1_macvtap: entered promiscuous mode [ 357.652375][ T36] audit: type=1400 audit(2000033261.344:48139): avc: denied { mounton } for pid=20520 comm="syz-executor" path="/root/syzkaller.v1oA20/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=80008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 357.681965][ T31] usb usb7-port1: unable to enumerate USB device [ 357.712354][T20549] rust_binder: Write failure EFAULT in pid:2 [ 357.736568][T20558] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 357.751630][T20558] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 357.760475][T20558] SELinux: security_context_str_to_sid () failed with errno=-22 [ 357.847488][T20572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 357.847512][T20572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:8 [ 357.872911][T20575] rust_binder: Write failure EFAULT in pid:10 [ 357.882164][T20574] rust_binder: Write failure EFAULT in pid:10 [ 357.975722][ T31] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 358.135682][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 358.142169][ T31] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 358.150870][ T31] usb 8-1: config 0 has no interface number 0 [ 358.159026][ T31] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 358.168427][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.176824][ T31] usb 8-1: Product: syz [ 358.181285][ T31] usb 8-1: Manufacturer: syz [ 358.186342][ T31] usb 8-1: SerialNumber: syz [ 358.191906][ T31] usb 8-1: config 0 descriptor?? [ 358.271047][ T36] audit: type=1400 audit(2000033261.964:48140): avc: denied { mounton } for pid=20586 comm="syz.6.6983" path="/syzcgroup/unified/syz6" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 358.271241][T20588] syz.6.6983: attempt to access beyond end of device [ 358.271241][T20588] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 358.323328][T20588] EXT4-fs (loop6): unable to read superblock [ 358.401872][ T31] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 358.410262][ T31] usb 8-1: No valid video chain found. [ 358.418706][ T31] usb 8-1: USB disconnect, device number 23 [ 359.237541][T20613] netlink: 'syz.3.6993': attribute type 13 has an invalid length. [ 359.249822][T20617] rust_binder: Write failure EFAULT in pid:323 [ 359.355808][T19346] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 359.421046][T20634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.421549][T20634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:335 [ 359.515618][T19346] usb 8-1: Using ep0 maxpacket: 16 [ 359.516893][T20643] fuse: Bad value for 'fd' [ 359.537010][T19346] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 359.552365][T19346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.571608][T19346] usb 8-1: Product: syz [ 359.579807][ T36] audit: type=1400 audit(2000033263.274:48141): avc: denied { create } for pid=20644 comm="syz.3.7005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 359.600554][T19346] usb 8-1: Manufacturer: syz [ 359.605238][T19346] usb 8-1: SerialNumber: syz [ 359.614205][T19346] r8152-cfgselector 8-1: Unknown version 0x0000 [ 359.620967][T19346] r8152-cfgselector 8-1: config 0 descriptor?? [ 359.767066][ T4373] bridge_slave_1: left allmulticast mode [ 359.773195][ T4373] bridge_slave_1: left promiscuous mode [ 359.779774][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.787934][ T4373] bridge_slave_0: left allmulticast mode [ 359.793680][ T4373] bridge_slave_0: left promiscuous mode [ 359.799695][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.912717][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.919888][T20655] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.927064][T20655] bridge_slave_0: entered allmulticast mode [ 359.933673][T20655] bridge_slave_0: entered promiscuous mode [ 359.941191][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.948317][T20655] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.955504][T20655] bridge_slave_1: entered allmulticast mode [ 359.962335][T20655] bridge_slave_1: entered promiscuous mode [ 359.969437][ T4373] veth1_macvtap: left promiscuous mode [ 359.975175][ T4373] veth0_vlan: left promiscuous mode [ 360.068776][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.076537][T20655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.083835][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.091029][T20655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.119162][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.126907][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.135795][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.142852][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.153653][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.160738][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.198286][T20655] veth0_vlan: entered promiscuous mode [ 360.211628][T20655] veth1_macvtap: entered promiscuous mode [ 360.225496][ T36] audit: type=1326 audit(2000033263.914:48142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20670 comm="syz.3.7012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff19b58f6c9 code=0x0 [ 360.305713][T20673] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 360.313277][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 360.392521][T19346] r8152-cfgselector 8-1: USB disconnect, device number 24 [ 361.265617][ T36] audit: type=1400 audit(2000033264.954:48143): avc: denied { create } for pid=20703 comm="syz.3.7024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 361.347086][T20719] block device autoloading is deprecated and will be removed. [ 361.365632][T20719] netlink: 'syz.5.7030': attribute type 2 has an invalid length. [ 361.376342][T20723] netlink: 'syz.3.7032': attribute type 4 has an invalid length. [ 361.391335][T20724] netlink: 'syz.3.7032': attribute type 4 has an invalid length. [ 361.406813][T20723] netlink: 'syz.3.7032': attribute type 4 has an invalid length. [ 361.416916][T20727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 361.416944][T20727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:40 [ 361.428658][T20724] netlink: 'syz.3.7032': attribute type 4 has an invalid length. [ 362.268824][T20746] FAT-fs (rnullb0): bogus number of reserved sectors [ 362.285860][T20746] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 362.355949][T19939] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.446679][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 362.451496][T20750] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7042'. [ 362.463594][ T31] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.587141][T20757] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7044'. [ 362.596574][T20757] netlink: 35 bytes leftover after parsing attributes in process `syz.6.7044'. [ 362.606695][T20757] netlink: 'syz.6.7044': attribute type 6 has an invalid length. [ 362.614819][T20757] netlink: 'syz.6.7044': attribute type 5 has an invalid length. [ 362.622988][T20757] netlink: 35 bytes leftover after parsing attributes in process `syz.6.7044'. [ 362.635122][T20757] rust_binder: Write failure EFAULT in pid:8 [ 362.913148][ T36] audit: type=1400 audit(2000033266.604:48144): avc: denied { execute } for pid=20763 comm="syz.3.7045" path="pipe:[81208]" dev="pipefs" ino=81208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 363.107946][T20782] __vm_enough_memory: pid: 20782, comm: syz.7.7053, bytes: 18014402804453376 not enough memory for the allocation [ 363.207110][T20788] rust_binder: Error while translating object. [ 363.207161][T20788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 363.213354][T20788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 363.555172][ T36] audit: type=1326 audit(2000033267.244:48145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20763 comm="syz.3.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19b58f6c9 code=0x7fc00000 [ 363.588627][ T36] audit: type=1326 audit(2000033267.244:48146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20763 comm="syz.3.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff19b58f6c9 code=0x7fc00000 [ 363.830411][T20822] 9pnet_fd: Insufficient options for proto=fd [ 363.895730][ T1154] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 364.046045][ T1154] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 364.054710][ T1154] usb 7-1: config 0 has no interfaces? [ 364.060983][ T1154] usb 7-1: config 0 has no interfaces? [ 364.069329][ T1154] usb 7-1: config 0 has no interfaces? [ 364.075542][ T1154] usb 7-1: config 0 has no interfaces? [ 364.082103][ T1154] usb 7-1: config 0 has no interfaces? [ 364.088405][ T1154] usb 7-1: config 0 has no interfaces? [ 364.094623][ T1154] usb 7-1: config 0 has no interfaces? [ 364.100823][ T1154] usb 7-1: config 0 has no interfaces? [ 364.108159][ T1154] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 364.120216][ T1154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.128331][ T1154] usb 7-1: Product: syz [ 364.132618][ T1154] usb 7-1: Manufacturer: syz [ 364.137411][ T1154] usb 7-1: SerialNumber: syz [ 364.146132][ T1154] usb 7-1: config 0 descriptor?? [ 364.166645][T20846] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 364.168403][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7076'. [ 364.185686][T20845] rust_binder: Write failure EINVAL in pid:276 [ 364.197627][T20848] /dev/rnullb0: Can't open blockdev [ 364.221545][T20850] rust_binder: Write failure EINVAL in pid:281 [ 364.221862][T20851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.353563][T20858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20858 comm=syz.7.7080 [ 364.363689][ T10] usb 7-1: USB disconnect, device number 18 [ 364.412141][T20864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 364.412177][T20864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 364.485676][T20870] futex_wake_op: syz.5.7086 tries to shift op by -1; fix this program [ 364.521539][T20870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20870 comm=syz.5.7086 [ 364.657896][T20886] binder: Bad value for 'stats' [ 364.955640][ T331] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 365.105645][ T331] usb 8-1: Using ep0 maxpacket: 32 [ 365.113658][ T331] usb 8-1: config 1 interface 0 has no altsetting 0 [ 365.125140][ T331] usb 8-1: New USB device found, idVendor=03fc, idProduct=05d8, bcdDevice= 0.40 [ 365.134748][ T331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.142907][ T331] usb 8-1: Product: syz [ 365.147308][ T331] usb 8-1: Manufacturer: ஐ萄꽎譀닭砏賭๝ꥯꮹ玕Ჟ뿁䊵접팲읐쯫Ꙡ싅䫵ꪛ坿꛵಄尃팑엾㣰ฝ謬似귙鈖棽竨㰗탹ল跎潎땊ধ폳腺笐㊤ꅿᠾ측Ὁࡸ횠䝉ᘀոꑆ뿝䠴鰈퉛쭂㡧෌牠胷ŠΞ⃕皑忇⇍뱈곓腣堖㿍幉⻶ퟂ墧ꗧ᪑该윈陿㌼᳧뾌愲뒉᠕䍝﫟ږ砫礫쐖ݦ瘀૟눵쑫䗩籺ﶧ廛摽锤奦祿ⅿư玩쳌≽྘ [ 365.183759][ T331] usb 8-1: SerialNumber: syz [ 365.205654][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 365.355647][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 365.361821][ T31] usb 7-1: config 8 has an invalid interface number: 138 but max is 0 [ 365.370038][ T31] usb 7-1: config 8 has no interface number 0 [ 365.376244][ T31] usb 7-1: config 8 interface 138 has no altsetting 0 [ 365.384810][ T31] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 365.394397][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.402715][ T31] usb 7-1: Product: syz [ 365.407013][ T31] usb 7-1: Manufacturer: syz [ 365.411654][ T31] usb 7-1: SerialNumber: syz [ 365.513803][T20911] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7097'. [ 365.523528][T20911] rust_binder: Error while translating object. [ 365.523548][T20911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 365.529996][T20911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:62 [ 365.619094][T20902] rust_binder: Write failure EINVAL in pid:37 [ 365.621285][T20913] rust_binder: Write failure EFAULT in pid:64 [ 365.636977][ T31] snd-usb-audio 7-1:8.138: probe with driver snd-usb-audio failed with error -71 [ 365.653574][ T31] usb 7-1: USB disconnect, device number 19 [ 366.395654][ T399] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 366.525636][ T399] usb 7-1: device descriptor read/64, error -71 [ 366.765680][ T399] usb 7-1: device descriptor read/64, error -71 [ 367.006112][ T399] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 367.135618][ T399] usb 7-1: device descriptor read/64, error -71 [ 367.375680][ T399] usb 7-1: device descriptor read/64, error -71 [ 367.485719][ T399] usb usb7-port1: attempt power cycle [ 367.675626][ T331] usbhid 8-1:1.0: can't add hid device: -71 [ 367.676438][T20924] binder: Bad value for 'defcontext' [ 367.681854][ T331] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 367.698581][ T331] usb 8-1: USB disconnect, device number 25 [ 367.825690][ T399] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 367.857132][ T399] usb 7-1: device descriptor read/8, error -71 [ 367.892236][T20931] cgroup2: Unknown parameter 'net_cls' [ 367.986633][ T399] usb 7-1: device descriptor read/8, error -71 [ 368.235621][ T399] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 368.270393][ T399] usb 7-1: device descriptor read/8, error -71 [ 368.406611][ T399] usb 7-1: device descriptor read/8, error -71 [ 368.515741][ T399] usb usb7-port1: unable to enumerate USB device [ 368.987223][T20947] can: request_module (can-proto-6) failed. [ 369.265803][T19346] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 369.415666][T19346] usb 8-1: Using ep0 maxpacket: 8 [ 369.423536][T19346] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 369.432397][T19346] usb 8-1: config 0 has no interface number 0 [ 369.440138][T19346] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 369.449562][T19346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.458169][T19346] usb 8-1: Product: syz [ 369.462486][T19346] usb 8-1: Manufacturer: syz [ 369.467135][T19346] usb 8-1: SerialNumber: syz [ 369.472373][T19346] usb 8-1: config 0 descriptor?? [ 369.681778][T19346] usb 8-1: USB disconnect, device number 26 [ 369.912855][T20981] FAT-fs (rnullb0): bogus number of reserved sectors [ 369.919616][T20981] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 370.926417][T21007] /dev/rnullb0: Can't open blockdev [ 370.932179][T21007] /dev/rnullb0: Can't open blockdev [ 370.938141][T21007] /dev/rnullb0: Can't open blockdev [ 370.943962][T21007] /dev/rnullb0: Can't open blockdev [ 370.949945][T21007] /dev/rnullb0: Can't open blockdev [ 370.955505][T21007] /dev/rnullb0: Can't open blockdev [ 370.961270][T21007] /dev/rnullb0: Can't open blockdev [ 370.966931][T21007] /dev/rnullb0: Can't open blockdev [ 370.972575][T21007] /dev/rnullb0: Can't open blockdev [ 370.978335][T21007] /dev/rnullb0: Can't open blockdev [ 370.984309][T21007] /dev/rnullb0: Can't open blockdev [ 370.990134][T21007] /dev/rnullb0: Can't open blockdev [ 370.995741][T21007] /dev/rnullb0: Can't open blockdev [ 371.001488][T21007] /dev/rnullb0: Can't open blockdev [ 371.007477][T21007] /dev/rnullb0: Can't open blockdev [ 371.013043][T21007] /dev/rnullb0: Can't open blockdev [ 371.018847][T21007] /dev/rnullb0: Can't open blockdev [ 371.024404][T21007] /dev/rnullb0: Can't open blockdev [ 371.030168][T21007] /dev/rnullb0: Can't open blockdev [ 371.036021][T21007] /dev/rnullb0: Can't open blockdev [ 371.041615][T21007] /dev/rnullb0: Can't open blockdev [ 371.047382][T21007] /dev/rnullb0: Can't open blockdev [ 371.053453][T21007] /dev/rnullb0: Can't open blockdev [ 371.059330][T21007] /dev/rnullb0: Can't open blockdev [ 371.065354][T21007] /dev/rnullb0: Can't open blockdev [ 371.071415][T21007] /dev/rnullb0: Can't open blockdev [ 371.077352][T21007] /dev/rnullb0: Can't open blockdev [ 371.082922][T21007] /dev/rnullb0: Can't open blockdev [ 371.088722][T21007] /dev/rnullb0: Can't open blockdev [ 371.094262][T21007] /dev/rnullb0: Can't open blockdev [ 371.100089][T21007] /dev/rnullb0: Can't open blockdev [ 371.110167][T21007] /dev/rnullb0: Can't open blockdev [ 371.136301][T21012] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 4084) [ 371.136329][T21012] rust_binder: Error while translating object. [ 371.147306][T21012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 371.153479][T21012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 371.177142][T21022] exFAT-fs (rnullb0): invalid boot record signature [ 371.178401][T21010] binder: Binderfs stats mode cannot be changed during a remount [ 371.188098][T21022] exFAT-fs (rnullb0): failed to read boot sector [ 371.207453][T21022] exFAT-fs (rnullb0): failed to recognize exfat type [ 371.547087][T21053] support for the xor transformation has been removed. [ 371.554470][T21053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 371.554501][T21053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:372 [ 371.578820][T21055] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.588421][T21055] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 371.720876][ T36] audit: type=1326 audit(2000033275.414:48147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.7.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 371.763141][ T36] audit: type=1326 audit(2000033275.424:48148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.7.7150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 371.798581][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7151'. [ 371.808203][T21064] rust_binder: Write failure EFAULT in pid:113 [ 372.155728][ T31] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 372.315664][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 372.322172][ T31] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 372.330587][ T31] usb 7-1: config 179 has no interface number 0 [ 372.336990][ T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 372.348153][ T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 372.359789][ T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 372.371137][ T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 372.382874][ T31] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 372.396557][ T31] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 372.405689][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.415114][T21075] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 372.625954][ T7631] usb 7-1: USB disconnect, device number 24 [ 372.626003][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 372.640634][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 372.794880][T21087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 372.846349][T21088] rust_binder: 21087 RLIMIT_NICE not set [ 372.853162][T21087] rust_binder: 123: no such ref 3 [ 372.864139][T21087] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 372.871428][T21087] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 372.871721][ T4359] tipc: Disabling bearer [ 372.879176][T21087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:123 [ 372.884811][ T4359] tipc: Left network mode [ 372.900304][ T4359] veth1_macvtap: left promiscuous mode [ 372.905970][ T4359] veth0_vlan: left promiscuous mode [ 373.203668][T21095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 373.242296][T21102] binder: Unknown parameter '00000000000000000003' [ 373.753564][T21106] rust_binder: 129: no such ref 3 [ 373.758970][T21106] rust_binder: 129: no such ref 1 [ 373.764469][T21106] rust_binder: Write failure EFAULT in pid:129 [ 373.870193][T21116] rust_binder: Write failure EINVAL in pid:136 [ 374.028854][T21124] rust_binder: Error while translating object. [ 374.035238][T21124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 374.042305][T21124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:144 [ 374.995466][T21172] netlink: 316 bytes leftover after parsing attributes in process `syz.7.7187'. [ 375.014174][T21172] netlink: 316 bytes leftover after parsing attributes in process `syz.7.7187'. [ 375.049308][ T36] audit: type=1400 audit(2000033278.744:48149): avc: denied { append } for pid=21175 comm="syz.7.7189" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 375.946724][T21190] SELinux: policydb version 2108802679 does not match my version range 15-33 [ 375.955865][T21190] SELinux: failed to load policy [ 377.106309][ T10] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 377.122854][T21219] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 377.159479][T21221] rust_binder: Error while translating object. [ 377.159511][T21221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 377.166063][T21221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 377.245627][ T10] usb 8-1: device descriptor read/64, error -71 [ 377.515625][ T10] usb 8-1: device descriptor read/64, error -71 [ 377.533224][ T36] audit: type=1326 audit(2000033281.224:48150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21236 comm="syz.6.7208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f865618f6c9 code=0x0 [ 377.755668][ T10] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 377.835668][T19346] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 377.885720][ T10] usb 8-1: device descriptor read/64, error -71 [ 377.987645][T19346] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 377.998476][T19346] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 378.008749][T19346] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 378.020651][T19346] usb 7-1: string descriptor 0 read error: -22 [ 378.027175][T19346] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.036402][T19346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.045240][T21238] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 378.145685][ T10] usb 8-1: device descriptor read/64, error -71 [ 378.256787][ T10] usb usb8-port1: attempt power cycle [ 378.625655][ T10] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 378.646741][ T10] usb 8-1: device descriptor read/8, error -71 [ 378.776764][ T10] usb 8-1: device descriptor read/8, error -71 [ 379.015731][ T10] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 379.036784][ T10] usb 8-1: device descriptor read/8, error -71 [ 379.167954][ T10] usb 8-1: device descriptor read/8, error -71 [ 379.275991][ T10] usb usb8-port1: unable to enumerate USB device [ 379.315674][T19939] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.910094][T21246] netlink: 'syz.7.7211': attribute type 46 has an invalid length. [ 380.033397][T21253] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.043943][T21253] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.051163][T21253] bridge_slave_0: entered allmulticast mode [ 380.057725][T21253] bridge_slave_0: entered promiscuous mode [ 380.064367][T21253] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.072011][T21253] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.080576][T21253] bridge_slave_1: entered allmulticast mode [ 380.087030][T21253] bridge_slave_1: entered promiscuous mode [ 380.190633][T21253] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.198286][T21253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.205770][T21253] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.212878][T21253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.238814][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.247114][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.257667][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.264829][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.287291][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.294379][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.313201][T21253] veth0_vlan: entered promiscuous mode [ 380.329169][T21253] veth1_macvtap: entered promiscuous mode [ 380.608894][T19346] cdc_ncm 7-1:1.0: bind() failure [ 380.616148][T19346] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 380.623585][T19346] cdc_ncm 7-1:1.1: bind() failure [ 380.630212][T19346] usb 7-1: USB disconnect, device number 25 [ 380.724295][T21271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=21271 comm=syz.6.7214 [ 380.869902][T21290] rust_binder: Error while translating object. [ 380.869925][T21290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 380.876382][T21290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:469 [ 381.095678][T19346] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 381.256872][T19346] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.267068][T19346] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.277042][T19346] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.287242][T19346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.295328][T19346] usb 7-1: SerialNumber: syz [ 381.329672][T21292] rust_binder: 174: no such ref 0 [ 381.334842][T21292] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 381.342838][T21292] rust_binder: 174: no such ref 2 [ 381.348055][T21292] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 381.427933][T21294] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 381.502328][T21286] fuse: Bad value for 'user_id' [ 381.515326][T21286] fuse: Bad value for 'user_id' [ 381.527127][T19346] usb 7-1: 0:2 : does not exist [ 381.532512][T19346] usb 7-1: unit 5 not found! [ 381.542291][T19346] usb 7-1: USB disconnect, device number 26 [ 381.557020][T13222] udevd[13222]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 381.560007][T21304] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7224'. [ 381.596688][T21306] usb usb9: usbfs: process 21306 (syz.6.7225) did not claim interface 8 before use [ 381.666761][T21310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.666851][T21310] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 381.748191][T21319] rust_binder: Write failure EFAULT in pid:144 [ 381.766940][T21321] /dev/rnullb0: Can't open blockdev [ 381.894264][ T36] audit: type=1326 audit(2000033285.584:48151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 381.897014][T21332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 381.918084][T21332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 381.918134][ T36] audit: type=1326 audit(2000033285.584:48152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 381.960785][ T36] audit: type=1326 audit(2000033285.584:48153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 381.984700][ T36] audit: type=1326 audit(2000033285.584:48154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 382.009293][ T36] audit: type=1326 audit(2000033285.584:48155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 382.033722][ T36] audit: type=1326 audit(2000033285.584:48156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 382.057794][ T36] audit: type=1326 audit(2000033285.584:48157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 382.081675][ T36] audit: type=1326 audit(2000033285.584:48158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 382.105381][ T36] audit: type=1326 audit(2000033285.584:48159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21331 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x7ffc0000 [ 382.265684][ T45] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 382.282677][T21342] netlink: 'syz.1.7239': attribute type 4 has an invalid length. [ 382.290664][T21342] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7239'. [ 382.414748][T21348] overlayfs: conflicting lowerdir path [ 382.416756][ T45] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 382.428685][ T45] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 382.429301][T21348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7242'. [ 382.439094][ T45] usb 7-1: config 220 has no interface number 2 [ 382.455370][ T45] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 382.468724][T21350] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 382.468900][ T45] usb 7-1: config 220 interface 0 has no altsetting 0 [ 382.476653][T21350] rust_binder: Write failure EINVAL in pid:21 [ 382.483060][ T45] usb 7-1: config 220 interface 76 has no altsetting 0 [ 382.496189][ T45] usb 7-1: config 220 interface 1 has no altsetting 0 [ 382.507337][ T45] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 382.516563][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.524707][ T45] usb 7-1: Product: syz [ 382.529073][ T45] usb 7-1: Manufacturer: syz [ 382.533835][ T45] usb 7-1: SerialNumber: syz [ 382.534113][T21357] rust_binder: 28: no such ref 0 [ 382.563524][T21360] rust_binder: Error while translating object. [ 382.563552][T21360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 382.569858][T21360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 382.581302][T21360] can0: slcan on ptm0. [ 382.637375][T21359] can0 (unregistered): slcan off ptm0. [ 382.756569][ T45] usb 7-1: selecting invalid altsetting 0 [ 382.762762][ T45] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 382.771215][ T45] usb 7-1: No valid video chain found. [ 382.785204][ T45] usb 7-1: USB disconnect, device number 27 [ 382.895627][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 382.934202][T21397] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7250'. [ 382.945514][T21397] rust_binder: Error while translating object. [ 382.945672][T21397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 382.952572][T21397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:486 [ 382.963064][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 382.963081][ T36] audit: type=1400 audit(2000033286.654:48172): avc: denied { execute } for pid=21396 comm="syz.7.7250" path="/dev/binderfs/binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 382.973682][T21397] rust_binder: Write failure EFAULT in pid:486 [ 383.015492][T21399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 383.021842][T21399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:488 [ 383.043776][T21401] __vm_enough_memory: pid: 21401, comm: syz.7.7252, bytes: 18014402804453376 not enough memory for the allocation [ 383.066754][ T9] usb 2-1: config 1 has an invalid interface number: 146 but max is 0 [ 383.078305][ T9] usb 2-1: config 1 has no interface number 0 [ 383.084557][ T9] usb 2-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 383.097299][ T9] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 383.106523][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.114839][ T9] usb 2-1: Product: syz [ 383.119099][ T9] usb 2-1: Manufacturer: syz [ 383.124108][ T9] usb 2-1: SerialNumber: syz [ 383.131953][ T9] usbserial_generic 2-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 383.144022][ T9] usbserial_generic 2-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 383.155119][ T9] usbserial_generic 2-1:1.146: generic converter detected [ 383.163278][ T9] usb 2-1: generic converter now attached to ttyUSB0 [ 383.334496][ T36] audit: type=1400 audit(2000033287.024:48173): avc: denied { accept } for pid=21371 comm="syz.1.7248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.355896][ T45] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 383.361141][ T9] usb 2-1: USB disconnect, device number 21 [ 383.370134][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 383.379704][ T9] usbserial_generic 2-1:1.146: device disconnected [ 383.506886][ T45] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.518618][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.530031][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 383.540211][ T45] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.553340][ T45] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.562533][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.571215][ T45] usb 8-1: config 0 descriptor?? [ 383.625675][T21428] netlink: 124 bytes leftover after parsing attributes in process `syz.6.7261'. [ 383.625713][T21429] rust_binder: Error while translating object. [ 383.637723][T21429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 383.644149][T21429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:179 [ 383.905359][T21437] /dev/sr0: Can't lookup blockdev [ 383.920388][ T36] audit: type=1400 audit(2000033287.614:48174): avc: denied { map } for pid=21436 comm="syz.1.7264" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 383.978401][ T45] plantronics 0003:047F:FFFF.0028: ignoring exceeding usage max [ 383.987449][ T45] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 383.996829][ T45] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 384.205751][ T1154] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 384.332442][T21445] netlink: 'syz.6.7267': attribute type 1 has an invalid length. [ 384.345873][T21445] netlink: 'syz.6.7267': attribute type 3 has an invalid length. [ 384.346241][ T9] usb 8-1: USB disconnect, device number 32 [ 384.355390][T21445] netlink: 296 bytes leftover after parsing attributes in process `syz.6.7267'. [ 384.377493][ T1154] usb 2-1: config 16 has an invalid interface number: 236 but max is 1 [ 384.392222][ T1154] usb 2-1: config 16 has an invalid interface number: 175 but max is 1 [ 384.400757][ T1154] usb 2-1: config 16 has no interface number 0 [ 384.407038][ T1154] usb 2-1: config 16 has no interface number 1 [ 384.413365][ T1154] usb 2-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 384.436023][ T1154] usb 2-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 384.446986][ T1154] usb 2-1: config 16 interface 175 has no altsetting 0 [ 384.447459][T21455] rust_binder: Write failure EFAULT in pid:188 [ 384.454355][ T1154] usb 2-1: language id specifier not provided by device, defaulting to English [ 384.472323][ T36] audit: type=1400 audit(2000033288.164:48175): avc: denied { mounton } for pid=21456 comm="syz.6.7273" path="/59/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 384.475972][ T1154] usb 2-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 384.497646][T21458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7270'. [ 384.505875][ T1154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.517085][T21458] rust_binder: 21451 RLIMIT_NICE not set [ 384.523373][T21451] rust_binder: inc_ref_done called when no active inc_refs [ 384.530755][T21451] rust_binder: inc_ref_done called when no active inc_refs [ 384.538249][T21451] rust_binder: 180: no such ref 2 [ 384.550799][T21451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:180 [ 384.558125][T21460] fuse: Unknown parameter '' [ 384.580973][T21460] random: crng reseeded on system resumption [ 384.580011][ T36] audit: type=1401 audit(2000033288.274:48176): op=setxattr invalid_context=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 [ 384.616609][T21466] 9pnet_fd: Insufficient options for proto=fd [ 384.732865][T21441] /dev/rnullb0: Can't open blockdev [ 384.747711][ T1154] usb 2-1: bad CDC descriptors [ 384.755616][ T1154] usb 2-1: USB disconnect, device number 22 [ 384.860024][T21474] 9pnet: Could not find request transport: frfdno= [ 384.978245][T21477] 9pnet_fd: Insufficient options for proto=fd [ 384.987709][T21477] hub 1-0:1.0: USB hub found [ 384.992458][T21477] hub 1-0:1.0: 1 port detected [ 385.105645][ T31] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 385.256832][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.268304][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.278200][ T31] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 385.287602][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.297862][ T31] usb 7-1: config 0 descriptor?? [ 385.468777][ T36] audit: type=1400 audit(2000033289.164:48177): avc: granted { setsecparam } for pid=21487 comm="syz.1.7284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 385.489309][ T36] audit: type=1400 audit(2000033289.164:48178): avc: granted { setsecparam } for pid=21487 comm="syz.1.7284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 385.511495][ T36] audit: type=1400 audit(2000033289.164:48179): avc: granted { setsecparam } for pid=21487 comm="syz.1.7284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 385.592557][T21498] x_tables: duplicate entry at hook 2 [ 385.599509][T21497] rust_binder: 65: no such ref 3 [ 385.607554][T21497] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 385.615226][T21497] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 385.625105][T21497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 385.626285][T21504] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 385.735431][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 385.742485][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 385.759320][ T31] usb 7-1: USB disconnect, device number 28 [ 385.827729][T21520] netlink: 'syz.7.7297': attribute type 4 has an invalid length. [ 385.836673][T21520] netlink: 17 bytes leftover after parsing attributes in process `syz.7.7297'. [ 385.849122][T21520] netlink: 'syz.7.7297': attribute type 4 has an invalid length. [ 385.856981][T21520] netlink: 17 bytes leftover after parsing attributes in process `syz.7.7297'. [ 385.866424][T21520] /dev/rnullb0: Can't open blockdev [ 385.910233][T21531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21531 comm=syz.7.7300 [ 385.926487][T21530] SELinux: security_context_str_to_sid () failed with errno=-22 [ 385.944148][T21536] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 386.320476][T21560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 386.321824][T21560] netlink: 'syz.6.7309': attribute type 2 has an invalid length. [ 386.369137][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7309'. [ 386.681344][T21575] rust_binder: Error while translating object. [ 386.681376][T21575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 386.687939][T21575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 386.845610][ T1154] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 387.025986][ T1154] usb 7-1: too many configurations: 244, using maximum allowed: 8 [ 387.050723][ T1154] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 387.065654][ T1154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.083968][ T1154] usb 7-1: Product: syz [ 387.095126][ T1154] usb 7-1: Manufacturer: syz [ 387.102909][ T1154] usb 7-1: SerialNumber: syz [ 387.114161][T21589] rust_binder: Error while translating object. [ 387.114208][T21589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 387.149309][T21589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 387.394120][T21590] rust_binder: 211: no such ref 3 [ 387.616451][T21594] rust_binder: Error while translating object. [ 387.616493][T21594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 387.622694][T21594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 387.697616][T21596] /dev/rnullb0: Can't open blockdev [ 387.716161][T21596] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7320'. [ 387.869403][T21612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.880455][T21612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.095653][ T7631] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 388.214168][ T1154] rtl8150 7-1:1.0: couldn't reset the device [ 388.220406][ T1154] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 388.255676][ T7631] usb 2-1: Using ep0 maxpacket: 16 [ 388.262257][ T7631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.273499][ T7631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.283334][ T7631] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 388.292610][ T7631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.301125][ T7631] usb 2-1: config 0 descriptor?? [ 388.509650][ T7631] usbhid 2-1:0.0: can't add hid device: -71 [ 388.515988][ T7631] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 388.524855][ T7631] usb 2-1: USB disconnect, device number 23 [ 389.680080][ T1154] usb 7-1: USB disconnect, device number 29 [ 389.700772][T21651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216 [ 389.760214][T21653] rust_binder: 218: no such ref 3 [ 389.764982][T21660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.769534][T21653] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 389.788704][T21653] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 389.795879][T21653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 389.872406][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7346'. [ 389.895715][T21672] rust_binder: 105: no such ref 0 [ 389.901563][T21672] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 389.909611][T21672] rust_binder: 105: no such ref 524290 [ 389.915664][T21672] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 389.924471][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7347'. [ 389.951230][T21680] netlink: 57 bytes leftover after parsing attributes in process `syz.1.7349'. [ 389.985272][T21685] rust_binder: Write failure EINVAL in pid:114 [ 389.985465][T21686] rust_binder: Write failure EINVAL in pid:114 [ 390.850051][T21701] binder: Bad value for 'max' [ 390.977390][T21718] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 390.984651][T21718] rust_binder: Read failure Err(EAGAIN) in pid:128 [ 391.081127][T21731] fuse: Bad value for 'fd' [ 391.095936][T21734] /dev/rnullb0: Can't open blockdev [ 391.232823][T21755] rust_binder: Write failure EFAULT in pid:589 [ 391.692342][ T36] audit: type=1326 audit(2000033295.384:48180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.723877][ T36] audit: type=1326 audit(2000033295.414:48181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.765603][ T36] audit: type=1326 audit(2000033295.414:48182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.785457][T21784] tipc: Trying to set illegal importance in message [ 391.789472][ T1154] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 391.806672][ T36] audit: type=1326 audit(2000033295.414:48183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.830830][ T36] audit: type=1326 audit(2000033295.414:48184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.854579][ T36] audit: type=1326 audit(2000033295.444:48185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.890513][T21782] veth1_macvtap: left promiscuous mode [ 391.894324][T21793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 391.896401][T21782] macsec0: entered promiscuous mode [ 391.909537][ T36] audit: type=1326 audit(2000033295.444:48186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.931084][T21782] macsec0: entered allmulticast mode [ 391.940324][ T36] audit: type=1326 audit(2000033295.444:48187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.964357][T21787] veth1_macvtap: entered promiscuous mode [ 391.977369][ T1154] usb 7-1: unable to get BOS descriptor or descriptor too short [ 391.989637][ T36] audit: type=1326 audit(2000033295.444:48188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 391.991416][T21787] veth1_macvtap: entered allmulticast mode [ 392.016761][ T1154] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.019366][T21787] macsec0: left promiscuous mode [ 392.029364][ T36] audit: type=1326 audit(2000033295.444:48189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21781 comm="syz.1.7387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe18558f6c9 code=0x7ffc0000 [ 392.034506][T21787] macsec0: left allmulticast mode [ 392.058208][ T1154] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 392.064343][T21796] rust_binder: Error while translating object. [ 392.074202][T21796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 392.074383][ T1154] usb 7-1: config 1 interface 2 has no altsetting 0 [ 392.080523][T21796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:252 [ 392.090503][T21787] veth1_macvtap: left allmulticast mode [ 392.117094][ T1154] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.127147][ T1154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.135156][ T1154] usb 7-1: Product: syz [ 392.141586][ T1154] usb 7-1: Manufacturer: syz [ 392.147023][ T1154] usb 7-1: SerialNumber: syz [ 392.495684][T19346] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 392.646770][T19346] usb 8-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.656870][T19346] usb 8-1: config 0 interface 0 has no altsetting 0 [ 392.663760][T19346] usb 8-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 392.672994][T19346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.681806][T19346] usb 8-1: config 0 descriptor?? [ 392.749443][T21820] fuse: Bad value for 'fd' [ 393.090937][T19346] apple 0003:05AC:027A.0029: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.7-1/input0 [ 393.291514][T21807] rust_binder: Read failure Err(EAGAIN) in pid:598 [ 393.292166][ T463] usb 8-1: USB disconnect, device number 33 [ 393.392613][T21835] tipc: Enabling of bearer rejected, failed to enable media [ 393.820591][T21841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.912372][T21843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.919247][T21843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.926174][T21843] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 393.950680][T21854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21854 comm=syz.1.7413 [ 394.000242][T21857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7412'. [ 394.800513][T21865] netlink: 112 bytes leftover after parsing attributes in process `syz.7.7416'. [ 395.268662][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7427'. [ 395.710535][T21909] 8021q: VLANs not supported on lo [ 395.715964][T21910] 8021q: VLANs not supported on lo [ 395.775964][T21914] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7433'. [ 395.879668][T21924] fuse: Bad value for 'fd' [ 396.460003][T21947] fuse: Bad value for 'fd' [ 396.585836][T21953] tipc: Started in network mode [ 396.590754][T21953] tipc: Node identity ac14142f, cluster identity 4711 [ 396.597762][T21953] tipc: New replicast peer: 0.0.0.0 [ 396.603311][T21953] tipc: Enabled bearer , priority 10 [ 397.239937][ T1154] usb 7-1: selecting invalid altsetting 0 [ 397.257113][ T1154] usb 7-1: USB disconnect, device number 30 [ 397.273375][T21963] tmpfs: Cannot retroactively limit inodes [ 397.294447][T21966] rust_binder: Error while translating object. [ 397.294480][T21966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 397.300897][T21966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:243 [ 397.404228][T21973] rust_binder: Write failure EFAULT in pid:251 [ 397.484823][T21981] /dev/rnullb0: Can't open blockdev [ 397.705600][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7461'. [ 397.716168][ T45] tipc: Node number set to 2886997039 [ 397.735709][ T1154] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 397.832968][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 397.832985][ T36] audit: type=1326 audit(2000033301.524:48243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21989 comm="syz.1.7463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7fe18558f6c9 code=0xffff0000 [ 397.886824][ T1154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.898387][ T1154] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 397.907686][ T1154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.916727][ T1154] usb 7-1: config 0 descriptor?? [ 398.323862][ T1154] kye 0003:0458:5011.002A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 398.343538][ T1154] kye 0003:0458:5011.002A: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 398.355112][ T1154] kye 0003:0458:5011.002A: tablet-enabling feature report not found [ 398.365183][ T1154] kye 0003:0458:5011.002A: tablet enabling failed [ 398.524731][ T1154] usb 7-1: USB disconnect, device number 31 [ 398.906431][T22037] rust_binder: 264: no such ref 3 [ 398.911503][T22037] rust_binder: 264: no such ref 1 [ 398.916605][T22037] rust_binder: Write failure EFAULT in pid:264 [ 398.926908][T22039] 9pnet_fd: Insufficient options for proto=fd [ 399.042668][ T36] audit: type=1326 audit(2000033302.734:48244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22050 comm="syz.6.7482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865618f6c9 code=0x0 [ 399.147139][T22052] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7482'. [ 399.180122][ T36] audit: type=1107 audit(2000033302.874:48245): pid=22054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 399.209909][T22057] fuse: Bad value for 'fd' [ 399.883169][T22078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 399.883200][T22078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 400.785334][T22097] rust_binder: 272: no such ref 0 [ 400.800114][T22098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.811442][ T36] audit: type=1400 audit(2000033305.504:48246): avc: denied { write } for pid=22131 comm="syz.7.7511" name="file0" dev="tmpfs" ino=1416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 402.020831][T22140] rust_binder: Error while translating object. [ 402.020865][T22140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 402.027404][T22140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:288 [ 402.282298][T22163] overlayfs: failed to clone lowerpath [ 402.314408][T22168] fuse: Unknown parameter 'f(q9̕CWn' [ 402.322121][T22168] fuse: Unknown parameter 'f(q9̕CWn' [ 402.395726][T19346] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 402.545633][T19346] usb 7-1: Using ep0 maxpacket: 8 [ 402.552044][T19346] usb 7-1: unable to get BOS descriptor or descriptor too short [ 402.560667][T19346] usb 7-1: config 6 has an invalid interface number: 254 but max is 0 [ 402.569141][T19346] usb 7-1: config 6 has no interface number 0 [ 402.575374][T19346] usb 7-1: config 6 interface 254 has no altsetting 0 [ 402.584471][T19346] usb 7-1: string descriptor 0 read error: -22 [ 402.590832][T19346] usb 7-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=30.2c [ 402.600348][T19346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.611592][T19346] usb-storage 7-1:6.254: USB Mass Storage device detected [ 402.612426][T22184] overlayfs: failed to clone upperpath [ 402.630949][T19346] usb-storage 7-1:6.254: Quirks match for vid 054c pid 0069: 1 [ 402.639666][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7531'. [ 402.654301][T22191] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 402.664656][ T36] audit: type=1400 audit(2000033306.354:48247): avc: denied { relabelto } for pid=22190 comm="syz.7.7531" name="file0" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 402.691865][ T36] audit: type=1400 audit(2000033306.354:48248): avc: denied { associate } for pid=22190 comm="syz.7.7531" name="file0" dev="tmpfs" ino=1450 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_exec_t:s0" [ 402.812776][T22157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.821558][T22157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.832565][ T399] usb 7-1: USB disconnect, device number 32 [ 403.285715][ T399] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 403.415743][ T399] usb 7-1: device descriptor read/64, error -71 [ 403.655766][ T399] usb 7-1: device descriptor read/64, error -71 [ 403.895725][ T399] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 404.025673][ T399] usb 7-1: device descriptor read/64, error -71 [ 404.265721][ T399] usb 7-1: device descriptor read/64, error -71 [ 404.375909][ T399] usb usb7-port1: attempt power cycle [ 404.715791][ T399] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 404.736734][ T399] usb 7-1: device descriptor read/8, error -71 [ 404.866999][ T399] usb 7-1: device descriptor read/8, error -71 [ 405.105670][ T399] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 405.126811][ T399] usb 7-1: device descriptor read/8, error -71 [ 405.257081][ T399] usb 7-1: device descriptor read/8, error -71 [ 405.365795][ T399] usb usb7-port1: unable to enumerate USB device [ 414.442259][ T36] audit: type=1400 audit(2000033318.134:48249): avc: denied { listen } for pid=22228 comm="syz.1.7544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 414.470764][T22239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 414.470854][T22239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 414.489461][T22239] rust_binder: Write failure EFAULT in pid:315 [ 414.812680][ T36] audit: type=1326 audit(2000033318.494:48250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.1.7572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe18558f6c9 code=0x0 [ 414.856462][T22310] netlink: 'syz.1.7572': attribute type 12 has an invalid length. [ 414.872198][T22302] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7570'. [ 415.036151][T22322] overlayfs: failed to clone upperpath [ 415.598519][T22340] 9pnet_fd: Insufficient options for proto=fd [ 415.903650][T22367] rust_binder: 329: no such ref 1 [ 415.919022][T22369] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7595'. [ 416.748812][T22405] can: request_module (can-proto-3) failed. [ 416.781594][T22411] overlayfs: failed to clone lowerpath [ 416.787393][T22410] overlayfs: failed to clone lowerpath [ 416.867712][T22422] netlink: 'syz.1.7616': attribute type 27 has an invalid length. [ 417.443458][T22466] rust_binder: 289: no such ref 0 [ 417.448697][T22466] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 417.455977][T22466] rust_binder: 289: no such ref 2 [ 417.461286][T22466] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 417.705630][ T45] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 417.853634][T22478] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7637'. [ 417.863545][T22478] 9pnet_fd: Insufficient options for proto=fd [ 417.870906][ T45] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.883101][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.894205][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.904071][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.917228][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.926467][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.935096][ T45] usb 7-1: config 0 descriptor?? [ 418.238248][T22481] rust_binder: 292: no such ref 0 [ 418.243932][T22481] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 418.251708][T22481] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 418.259076][T22481] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 418.266211][T22481] rust_binder: 292: no such ref 0 [ 418.345060][ T45] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 418.354441][ T45] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 418.606138][ T36] audit: type=1400 audit(2000033322.304:48251): avc: denied { create } for pid=22470 comm="syz.6.7635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.606463][T22471] binder: Unknown parameter '0x0000000000000000' [ 418.635836][ T463] usb 7-1: USB disconnect, device number 37 [ 418.801436][T22493] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 418.953123][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7644'. [ 418.978376][T22503] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7645'. [ 419.927536][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7662'. [ 419.943786][T22564] vcan0 (unregistering): left allmulticast mode [ 420.003209][T22566] rust_binder: 387: no such ref 3 [ 420.008489][T22566] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 420.015993][T22566] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 420.023084][T22566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:387 [ 420.085466][T22579] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=22579 comm=syz.1.7670 [ 420.367144][T22606] tipc: Enabling of bearer rejected, media not registered [ 420.390747][T22610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.391098][T22609] rust_binder: 311: no such ref 0 [ 420.402804][T22609] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 420.410002][T22609] rust_binder: 311: no such ref 2 [ 420.415120][T22609] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 420.759239][T22643] kvm: pic: non byte read [ 420.833239][T22651] rust_binder: Write failure EFAULT in pid:409 [ 420.849559][T22656] rust_binder: Write failure EFAULT in pid:414 [ 421.007551][T22670] overlay: ./file0 is not a directory [ 421.029128][T22674] 9pnet_fd: Insufficient options for proto=fd [ 421.067677][ T36] audit: type=1326 audit(2000033324.764:48252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.1.7708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe18558f6c9 code=0x0 [ 421.182481][T22684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 421.182511][T22684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:315 [ 421.216496][T22688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:319 [ 421.236069][T22689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 421.236474][T22689] rust_binder: Error in use_page_slow: ESRCH [ 421.242974][T22689] rust_binder: use_range failure ESRCH [ 421.249282][T22689] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 421.255017][T22689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 421.263279][T22689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:319 [ 421.284095][T22692] rust_binder: inc_ref_done called when no active inc_refs [ 421.390303][T22697] SELinux: failed to load policy [ 421.407076][T22701] binder: Bad value for 'stats' [ 421.420099][T22703] tipc: Started in network mode [ 421.425013][T22703] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 421.434924][T22703] tipc: Enabling of bearer rejected, failed to enable media [ 421.542892][T22726] overlay: Unknown parameter 'func' [ 421.558915][T22729] usb usb7: usbfs: process 22729 (syz.6.7723) did not claim interface 0 before use [ 421.644673][T22734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22734 comm=syz.6.7724 [ 421.658275][T22734] rust_binder: Write failure EFAULT in pid:438 [ 421.913343][T22736] netlink: 'syz.1.7725': attribute type 4 has an invalid length. [ 422.421369][ T36] audit: type=1400 audit(2000033326.114:48253): avc: denied { setattr } for pid=22784 comm="syz.6.7742" path="socket:[90663]" dev="sockfs" ino=90663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.427161][T22785] Unsupported ieee802154 address type: 0 [ 422.697393][T22803] rust_binder: Write failure EFAULT in pid:459 [ 423.578751][T22820] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 423.749181][T22851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22851 comm=syz.7.7767 [ 423.778376][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7768'. [ 424.609037][T22875] fuse: Unknown parameter '00000000000000000010T' [ 424.615900][T22876] fuse: Unknown parameter '00000000000000000010T' [ 424.637308][T22878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 424.637336][T22878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:350 [ 424.660917][T22880] veth0_to_team: entered promiscuous mode [ 424.676081][T22880] veth0_to_team: entered allmulticast mode [ 424.696092][T22882] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7777'. [ 424.706112][T22882] Invalid ELF header type: 3 != 1 [ 424.711219][ T36] audit: type=1400 audit(2000033328.404:48254): avc: denied { module_load } for pid=22881 comm="syz.6.7777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 424.732899][T22882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7777'. [ 424.773949][T22888] tmpfs: Unknown parameter 'nr_-locks' [ 424.814049][T22899] tipc: Enabling of bearer rejected, failed to enable media [ 424.829549][T22901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:359 [ 424.847095][T22905] overlayfs: failed to clone lowerpath [ 425.059490][T22936] /dev/rnullb0: Can't open blockdev [ 425.083150][T22938] x_tables: duplicate underflow at hook 1 [ 425.119787][T22945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 425.119898][T22945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 425.126633][T22945] rust_binder: Error while translating object. [ 425.133108][T22945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 425.139327][T22945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 425.233669][T22952] __vm_enough_memory: pid: 22952, comm: syz.5.7801, bytes: 18014402804453376 not enough memory for the allocation [ 425.278050][ T36] audit: type=1400 audit(2000033328.974:48255): avc: denied { map } for pid=22953 comm="syz.5.7802" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 425.611753][T22970] netlink: 182 bytes leftover after parsing attributes in process `syz.7.7809'. [ 425.655639][ T36] audit: type=1326 audit(2000033329.344:48256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22973 comm="syz.7.7811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f7fd8f6c9 code=0x0 [ 426.382028][T23005] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 426.382225][T23005] rust_binder: Error while translating object. [ 426.388714][T23005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 426.394971][T23005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:412 [ 426.422822][T23009] binder: Bad value for 'stats' [ 426.497797][T23013] x_tables: duplicate underflow at hook 1 [ 426.530631][T23019] IPv6: Can't replace route, no match found [ 426.607384][T23033] fuse: Bad value for 'fd' [ 426.890078][T23048] overlayfs: cannot append lower layer [ 426.897344][T23048] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 428.014032][T23101] netlink: 316 bytes leftover after parsing attributes in process `syz.7.7857'. [ 428.023487][T23101] netlink: 316 bytes leftover after parsing attributes in process `syz.7.7857'. [ 428.358518][ T36] audit: type=1326 audit(2000033332.054:48257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.382885][ T36] audit: type=1326 audit(2000033332.054:48258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.407366][ T36] audit: type=1326 audit(2000033332.054:48259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.439024][ T36] audit: type=1326 audit(2000033332.054:48260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.464569][ T36] audit: type=1326 audit(2000033332.054:48261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.486297][T23125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7867'. [ 428.488566][ T36] audit: type=1326 audit(2000033332.054:48262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.522397][ T36] audit: type=1326 audit(2000033332.054:48263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.546997][ T36] audit: type=1326 audit(2000033332.054:48264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 428.581060][ T36] audit: type=1326 audit(2000033332.054:48265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.605041][ T36] audit: type=1326 audit(2000033332.054:48266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23114 comm="syz.7.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f7fd8f6c9 code=0x7ffc0000 [ 428.698410][T23149] IPv6: syztnl0: Disabled Multicast RS [ 428.827116][T23178] 9pnet_fd: Insufficient options for proto=fd [ 428.917291][T23192] netlink: 'syz.7.7891': attribute type 27 has an invalid length. [ 429.105305][T23205] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7897'. [ 429.818592][T23232] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 429.870648][T23233] @0: renamed from bond_slave_1 (while UP) [ 429.969255][ T4385] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 429.976996][ T4385] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 429.993415][T23240] fuseblk: Bad value for 'source' [ 429.998777][T19346] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 430.095691][ T463] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 430.601938][T23276] 9pnet_fd: Insufficient options for proto=fd [ 430.608522][T23277] netlink: 'syz.1.7922': attribute type 58 has an invalid length. [ 430.617764][T23277] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 430.996005][ T463] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 430.996280][ T37] INFO: task syz.8.5924:17377 blocked for more than 122 seconds. [ 431.013906][ T37] Not tainted syzkaller #0 [ 431.019057][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.027964][ T37] task:syz.8.5924 state:D stack:0 pid:17377 tgid:17376 ppid:15703 flags:0x00004004 [ 431.038367][ T37] Call Trace: [ 431.041654][ T37] [ 431.044586][ T37] __schedule+0x1322/0x1df0 [ 431.049222][ T37] ? __sched_text_start+0x10/0x10 [ 431.054242][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 431.059715][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 431.065524][ T37] schedule+0xc6/0x240 [ 431.069622][ T37] super_lock+0x150/0x300 [ 431.073987][ T37] ? user_get_super+0x350/0x350 [ 431.078910][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 431.084472][ T37] ? __kasan_check_write+0x18/0x20 [ 431.089668][ T37] iterate_supers+0x8a/0x560 [ 431.094271][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 431.099512][ T37] ? security_quotactl+0x3b/0xf0 [ 431.104461][ T37] __se_sys_quotactl+0x308/0x7d0 [ 431.109410][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 431.114435][ T37] ? __kasan_check_write+0x18/0x20 [ 431.119574][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 431.125215][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 431.130081][ T37] x64_sys_call+0x2818/0x2ee0 [ 431.134854][ T37] do_syscall_64+0x58/0xf0 [ 431.139316][ T37] ? clear_bhb_loop+0x50/0xa0 [ 431.143988][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 431.149983][ T37] RIP: 0033:0x7f429d58f6c9 [ 431.154387][ T37] RSP: 002b:00007f429e448038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 431.162916][ T37] RAX: ffffffffffffffda RBX: 00007f429d7e5fa0 RCX: 00007f429d58f6c9 [ 431.170909][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 431.178904][ T37] RBP: 00007f429d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.186886][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.195027][ T37] R13: 00007f429d7e6038 R14: 00007f429d7e5fa0 R15: 00007fff8adb0a08 [ 431.203202][ T37] [ 431.207019][ T37] INFO: task syz.8.5924:17378 blocked for more than 123 seconds. [ 431.214977][ T37] Not tainted syzkaller #0 [ 431.221248][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.230299][ T37] task:syz.8.5924 state:D stack:0 pid:17378 tgid:17376 ppid:15703 flags:0x00004004 [ 431.240742][ T37] Call Trace: [ 431.244021][ T37] [ 431.246957][ T37] __schedule+0x1322/0x1df0 [ 431.251464][ T37] ? __sched_text_start+0x10/0x10 [ 431.256526][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 431.261980][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 431.267832][ T37] schedule+0xc6/0x240 [ 431.271920][ T37] super_lock+0x150/0x300 [ 431.276290][ T37] ? user_get_super+0x350/0x350 [ 431.281242][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 431.286709][ T37] ? __kasan_check_write+0x18/0x20 [ 431.291832][ T37] iterate_supers+0x8a/0x560 [ 431.296449][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 431.301649][ T37] ? security_quotactl+0x3b/0xf0 [ 431.306589][ T37] __se_sys_quotactl+0x308/0x7d0 [ 431.311521][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 431.316567][ T37] ? __kasan_check_write+0x18/0x20 [ 431.321696][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 431.326990][ T37] ? __kasan_check_read+0x15/0x20 [ 431.332068][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 431.338139][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 431.342993][ T37] x64_sys_call+0x2818/0x2ee0 [ 431.347693][ T37] do_syscall_64+0x58/0xf0 [ 431.352102][ T37] ? clear_bhb_loop+0x50/0xa0 [ 431.357226][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 431.363112][ T37] RIP: 0033:0x7f429d58f6c9 [ 431.367532][ T37] RSP: 002b:00007f429e427038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 431.376122][ T37] RAX: ffffffffffffffda RBX: 00007f429d7e6090 RCX: 00007f429d58f6c9 [ 431.384128][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 431.392113][ T37] RBP: 00007f429d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.400099][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.408073][ T37] R13: 00007f429d7e6128 R14: 00007f429d7e6090 R15: 00007fff8adb0a08 [ 431.416066][ T37] [ 431.420485][ T37] NMI backtrace for cpu 1 [ 431.420507][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 431.420530][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.420541][ T37] Call Trace: [ 431.420547][ T37] [ 431.420554][ T37] __dump_stack+0x21/0x30 [ 431.420582][ T37] dump_stack_lvl+0x10c/0x190 [ 431.420603][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 431.420626][ T37] dump_stack+0x19/0x20 [ 431.420644][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 431.420665][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 431.420686][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 431.420707][ T37] ? sched_show_task+0x379/0x560 [ 431.420726][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 431.420746][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.420767][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.420776][T23286] netlink: 'syz.6.7924': attribute type 4 has an invalid length. [ 431.420787][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 431.420809][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 431.420827][ T37] watchdog+0xd8f/0xed0 [ 431.420850][ T37] ? __cfi_watchdog+0x10/0x10 [ 431.420873][ T37] ? __kasan_check_read+0x15/0x20 [ 431.420899][ T37] ? __kthread_parkme+0x138/0x180 [ 431.420916][ T37] ? schedule+0xc6/0x240 [ 431.420940][ T37] kthread+0x2ca/0x370 [ 431.420958][ T37] ? __cfi_watchdog+0x10/0x10 [ 431.420979][ T37] ? __cfi_kthread+0x10/0x10 [ 431.420998][ T37] ret_from_fork+0x67/0xa0 [ 431.421020][ T37] ? __cfi_kthread+0x10/0x10 [ 431.421038][ T37] ret_from_fork_asm+0x1a/0x30 [ 431.421064][ T37] [ 431.421072][ T37] Sending NMI from CPU 1 to CPUs 0: [ 431.587489][ C0] NMI backtrace for cpu 0 [ 431.587504][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 431.587524][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.587535][ C0] RIP: 0010:sched_balance_update_blocked_averages+0x262/0x1320 [ 431.587560][ C0] Code: 00 00 48 8b 84 24 b8 00 00 00 49 89 c5 48 39 d8 0f 84 5f 0e 00 00 4c 89 e8 48 c1 e8 03 48 89 84 24 a0 00 00 00 42 80 3c 20 00 <74> 08 4c 89 ef e8 f4 6d 7d 00 49 8b 45 00 48 89 84 24 b8 00 00 00 [ 431.587572][ C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000046 [ 431.587586][ C0] RAX: 1ffff11023bee929 RBX: ffff8881f6e50560 RCX: d5f8fe781b9d1e00 [ 431.587598][ C0] RDX: 0000000000000161 RSI: dffffc0000000000 RDI: ffff8881f6e4fc1c [ 431.587609][ C0] RBP: ffffc90000007df0 R08: 0000000000000000 R09: 1ffff110215e051b [ 431.587620][ C0] R10: 0000000000000001 R11: ffff88810af028dc R12: dffffc0000000000 [ 431.587631][ C0] R13: ffff88811df74948 R14: 1ffff1102166662b R15: ffff88810af02800 [ 431.587643][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 431.587656][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.587666][ C0] CR2: 0000200000001140 CR3: 00000001212e8000 CR4: 00000000003526b0 [ 431.587680][ C0] Call Trace: [ 431.587686][ C0] [ 431.587695][ C0] ? sched_balance_domains+0xa10/0xa10 [ 431.587711][ C0] _nohz_idle_balance+0x31e/0x5a0 [ 431.587730][ C0] ? lapic_next_event+0x15/0x20 [ 431.587751][ C0] ? nohz_run_idle_balance+0x160/0x160 [ 431.587769][ C0] ? sched_clock+0x44/0x60 [ 431.587786][ C0] ? sched_clock_cpu+0x75/0x400 [ 431.587805][ C0] sched_balance_softirq+0x8a/0x170 [ 431.587818][ C0] handle_softirqs+0x1ab/0x630 [ 431.587832][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 431.587849][ C0] __irq_exit_rcu+0x48/0xc0 [ 431.587862][ C0] irq_exit_rcu+0xd/0x30 [ 431.587873][ C0] sysvec_call_function_single+0x7f/0x90 [ 431.587889][ C0] [ 431.587894][ C0] [ 431.587900][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 431.587916][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 431.587932][ C0] Code: cc cc cc b8 17 0c d9 79 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e2 39 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 431.587944][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c2 [ 431.587956][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858d70be [ 431.587967][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000063fa84 [ 431.587977][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 431.587995][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 431.588006][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cb2128 [ 431.588016][ C0] ? ct_kernel_exit+0x7e/0xb0 [ 431.588032][ C0] default_idle+0x17/0x30 [ 431.588047][ C0] arch_cpu_idle+0xd/0x20 [ 431.588062][ C0] default_idle_call+0x3f/0x80 [ 431.588077][ C0] do_idle+0x1a0/0x470 [ 431.588091][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 431.588107][ C0] cpu_startup_entry+0x48/0x70 [ 431.588121][ C0] rest_init+0x10b/0x130 [ 431.588153][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 431.588172][ C0] start_kernel+0x46a/0x4bb [ 431.588190][ C0] x86_64_start_reservations+0x2e/0x30 [ 431.588207][ C0] x86_64_start_kernel+0x6a/0x7b [ 431.588223][ C0] common_startup_64+0x13b/0x157 [ 431.588243][ C0] [ 431.589028][T23287] netlink: 'syz.6.7924': attribute type 4 has an invalid length. [ 434.115844][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!