last executing test programs: 4m14.222675261s ago: executing program 2 (id=94): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004b80), 0x80000, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r3, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 4m14.142367362s ago: executing program 2 (id=96): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r2 = syz_usb_connect(0x4, 0xbe2, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0xd8, 0x4e, 0xa6, 0x10, 0xbda, 0x8174, 0xdbae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd0, 0x2, 0x1, 0x3, 0x60, 0xfb, [{{0x9, 0x4, 0xbb, 0x5, 0x10, 0xf4, 0x45, 0xa7, 0x6, [@generic={0x18, 0x7, "95d0ca32472e20394d3fcbdf7d0dbad22be75f639d87"}], [{{0x9, 0x5, 0x9, 0x3, 0x400, 0x0, 0x5, 0x2, [@generic={0x90, 0x21, "44bff271154b1ad4c7a6d9fab6cf68cd797964c23efb36c11c65865050ea428e23671f23550b451170da61943e02f9b85219abe6067fb4d59b9f6a528b3f83f61b4090f936e86317e6c396c199fed6f2d3b33e7a3de0fb9b9eaebd4555e88976265d577e8437fdb4d1ed9349224a77b27759f2e0e0046dda37e29217a4a810a6f84262a0d69b73abd6955212e318"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x1, 0xff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0x7, 0xbf, [@generic={0x55, 0x8, "fd4270ecbe3c0486ac3ba11f7e5c9fd26d162845b0f736972afedddd85e4b39321bcb8fbafb7f859c373f70a93bbf35436c15d19bf1dc8f8660b856813d5be2d2fd4669752dd4423336f6d26019e646568603d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x610, 0x9, 0x9, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3aa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x2, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x0, 0x55, 0x1, [@generic={0xfd, 0x24, "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"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x10, 0x6a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}, @generic={0x85, 0x2, "6ef1c8d33925613c1f2e3c6299728308bcc69e61081df4c9c955cb7fdb9fdcec51cfc6352b7242553f60c1e52205ac8eee0f39a879a3823156f3475a800a512d441ce0a6d4e0b229ab79b38a49b632a9fae55452886189d43eb62402a6059abfba370ad12b38955b9b15a016b3a8455722f4d8d84aa8dfc57e45384f5da2011f2b5d7d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x59, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf5, 0x200}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x81, 0x9, 0x9, [@generic={0xd9, 0xd, "b8e05318a9851b15e411d6063afd6cd0f73abb66c6cb349883c8d3782a2bc84c3be4421ee60c2bb9a3c01bd0d3a0b25f0dfc0ba4b51fb533da1c8ff1cfd0324f2012a3673b646dba367dd3fa6e5998ff59fb7c17394470cf9551eddf6e672f9ba6e39d60d95734ed73ec7715c75a5f53e396d2043a862c03238200e6274c84395304abd18b98a8a9cf3fb8138f9b384ae332b7860259723c6d9c0b0bfcc8e273b62418a5cbc20be5951d0740c36bec33230b8cbfefde835af98dc696bed84e14510f872bf4355653eda1228900bb847314053f6daaac5d"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x9, 0x6d, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x0, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xa7, 0x76, 0x7, [@generic={0x21, 0xe, "2fe2a443ce80d0a0560f962869a0c23e2417f34cc8c978849cf79816457e76"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x6, 0x0, 0x24, [@generic={0x7b, 0x11, "dc1f4a7e030b375591a119f9d98c83b443215d59886f4538961d9f36bb1910d79728616f4211a5bb83197e884f513b275d2185abd1b0851b8de10cfc55359fb45dc89248eb6898de04ab91f885729c5b670c92d30e6f18986bac25b005c83feb5e04a3931290fc6ac52f23894924d6eac8fb7839897c333ff9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x2, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xe}, @generic={0x87, 0x22, "7a63b1bf6c406a9c95036051f746f7046b0cf54de48d68adce9f5143ea470d995821ca65409b918e6e8d57b984a6f4e3a5faf51ccee83a55ca29e21d74b4566b9831c5953d9eb73bda70d2db6aa4b1b4bd6114f1f16f799f3054f7c9de38ef181b4df45d81a72d794f4fb079d55729fd1be828a96f15d00efcc1980ae56f7178df0190bccb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x9, 0x3, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe0, 0xc}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x7, 0x1, [@generic={0xc5, 0x2, "623c84e811a34016789620e3e01b6cf80d9cb1407955f8996b0fcd999d48ba03234348787b1a1c8ed6f80acc62448b4563bf9e6feda10169d1314c5d1cda1a262d745286784f1414da62461b1d92f764d50cc6ca16d113fc6e078dc0b1a06d7706442758c1c93f3abb801cfadfbb1364d22d89a3a497faae67b1963593ae4e634311951a8ebca500852a8c758d6712b676d26ddf3dd5aa1bb558f76a474241a6dd0b0b32d4ba050d2b8b574005c4291d7983ed5354fcfd885588fb99ea02ff4e9e6668"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xa3}]}}, {{0x9, 0x5, 0x6, 0x280b6643fb36a969, 0x8, 0x7, 0x8, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x97, 0x5, 0x40, [@generic={0x54, 0x10, "834219f51827acbc9d91472c5176788340b6133cbadf4c9e7b86817eb356ef9212e1c14f5a0088609d754abd4c6f146526567cd419367b26438fb645fbc31b32e717e7c9b91381fb5bb13205fb6ffc4a3d8c"}]}}]}}, {{0x9, 0x4, 0x2b, 0x7, 0xc, 0x9e, 0xcd, 0x54, 0xb, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "1ade3b35b2"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xf807, 0x80, 0x3c}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0xd4d, 0xe0, 0x1}]}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x40, 0x40, "f678eccd37da"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0x7, "af58", 'b+'}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x73, 0xfc, 0x6, [@generic={0x4c, 0x0, "caf4ae95fb916776f55fc7fbd621a9249c124fbdf41f83f1d41fc713feb264c218ad47031592737b24840266d297a8437d91b6b55a0bc6a69fac746e854649bfe0d871481e0764aa6332"}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x9e, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x0, 0xc6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xff00}]}}, {{0x9, 0x5, 0x2, 0x18, 0x200, 0x1, 0xb7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x233}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3a, 0x5}]}}, {{0x9, 0x5, 0xb, 0x8, 0x30, 0x1, 0x0, 0x2, [@generic={0xac, 0xf, "48a71bf78f6763115bd848458a19262b0141363d64133d163d8bb52cc740df54f659b5c8748aa6c4584a2a044da91d0fea4734c3e36f51ce67e8641481093306b964114503d9f8ddd086262f62b0b238e9f945b470e42400a9a0364ec3170291902f2c68e9fb3dd61b357a7317dbd0743df6fdbcabbe16bdfa4a00ce24ffbcc1898bf14fb58992a5f2f24f6946ec460f08d18cc3c476ed501d1208886fc41bbae579f7f94c255193a63b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xb8, 0xf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfa, 0x6ab2}, @generic={0x1a, 0xb, "9f52e3fc3b73c81b00e0d1c4f3d3945d2e5b38ded352d348"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x4, 0x6, 0x8, [@generic={0xe0, 0x31, "2fda169a0cd0ec0bd4028c55462feb80068b53214cad71462f5ea73b5447d44471957be617784322e14ebc79a4b97ffd7ce03659bed7a62e44ef9e53507b1684d07417257c9783f7db03d94d34cc945e6fda72c686ffdf9ac63389562c5765e94542c12d8f7ba93a6e7cdffdb866d10bbecb99f462a63519f3e4a8dc4a91484b7450f0afddfb4b104f2332310c1f3b77ccf999568c262d085f82f90512bb9ee34cda6767f537c1c37281c467cca2d08f468cfc30471f1885df414c35e6561c5e3a6e602dc1271cac7eca94c1a49d9b9953d1de5e5a5a1832f93a6b3f168b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x7ff, 0x7e, 0x4, 0xe5, [@generic={0x9f, 0xa, "1e29201bdf313a26437f129eb8152bd19b5250400c64f57f5589541db1c8740aa05e6afadbe13ef395d7c5f85b366a8969b4090c1c905954287be3d8fed1308525dcb863b82cc15c2a43edbd76d7ee35b8a1c2bf7258b6ba057613301cef840d684c399ca834512da7d5ae99afb0f4d38e2400915eafdb45f2c85713586e02ec295d4c2fb648f414873e72f4fedda07e509a1a075c119202740c6e68f7"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x9, 0x80, 0x9, [@generic={0x96, 0xa, "c90df4a52d11f5ab642bbf16c9b7bfc2d99b6e856514e9fd065ce807d8f63613d9c84bda7a8affd1ad4078e40adb512485764b4d2c48bc940ee019c9cd14be4df2bc90feb14d32dd808eda8f119eb1a0fe429d5da13f7ad863b487bd0b3904d5f5ebd9e07acb8566ae66ccec04c8fa0b4e02bdd4cfacac0c17ba179f9fc46bb1362e62ff2cfb2b79ee61f4421b2d3e0cac4c580c"}]}}, {{0x9, 0x5, 0xb, 0x5, 0x40, 0x78, 0x3, 0x9, [@generic={0x71, 0x24, "88226c50d02c22f279d62400653e88657bf96c0bf533cc0a6539b261be5df57ef96d66c4a9baf365e775ea5463d237977beebcdeb042e14ab97a4e524d9f761df74939dc11a01f915189e324c835d658b9d66424a6ca42f78625ad43ee84c3129264a48e3404dc38970e4a5809d5cc"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x8, 0x5, 0x2, [@generic={0xb5, 0x10, "6765563efa10e72fb78d82899fd07222837ef7de918f76e3e84f26c14ccdda0e981c8d44d9071d86f17bdb2b273e87ca3d1ce648b54b0c454675720460e623368d51fbbdd79e3d3934e48552651a4f453693d948588a9dcd44aa6e49e2c637104a5e44d50a5bd3be9ce554d203187a740d1b55ae2a9e1e817baf04a7746cb486957f6d27619974b2b28b7698a3b0f32cc87c0552773986b2b19bff459fcc0ff22ff4d273a921a47653cf9e8d91430419ba5882"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x1e, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x6c}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x57, 0x3, 0x5, 0x40, 0x40}, 0x35, &(0x7f0000000080)={0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xa, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0xbf, 0x6, 0x200, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "f33bd647d88697f1a3d5c1ed4a21b928"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x3, 0x100}]}, 0x4, [{0x27, &(0x7f0000000100)=@string={0x27, 0x3, "b9e11f47fa30f6f3ad067fe8dc31c6d31cfea21bb4644a7d5cbddc15c1afd16abd97b0c44e"}}, {0xfd, &(0x7f0000000e40)=@string={0xfd, 0x3, "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"}}, {0xf7, &(0x7f0000000f40)=@string={0xf7, 0x3, "63b190e02d3b23de861246da636c4cc28546938cd00cc4cfb19d4551eadb00f26897a5e4ce00785062a12cebdbe40cf8971c26e0dd4dec04402c8525fb0af74afe7f0927f10beb2954f3754fa8b3d5604fcc4c42d9c29cfbe6beb94cd7f066778c751f4391750e59744e251c61fbab01b81095fc7b534ddbbb4c6b0bd97b60a0a41e534bb02e106a4843802a79b8bb5912067277da983ffd528e6da4668b048ab0aad7800a5a3c37a94a9569e2b4e4c95c2cb59432a9de5b69ec7bcb7664c39e4f5b2d9363d86463d8bca599f1e680c07cf4c3648c6d129f2317fc2caccc50e089f51dacb305ce91b960f9ca84271567f5fae9d700"}}, {0x39, &(0x7f0000000180)=@string={0x39, 0x3, "29cf27571a4004841d80841e56c61de1f8540f83be60a97e545566a21a864598ae7eb01ca12a92a9e78069643ced4691abfacea6c56be1"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000001100)={0x14, &(0x7f00000001c0)={0x40, 0x1, 0x10, {0x10, 0x2, "050312a4210802e3483989468853"}}, &(0x7f00000010c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5010}}}, &(0x7f0000001340)={0x44, &(0x7f0000001140)={0x40, 0x30, 0x11, "e8f08277a8f6c8e2f922d3f64f9fa7ee37"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001200)={0x20, 0x81, 0x1, "d1"}, &(0x7f0000001240)={0x20, 0x82, 0x1, "a1"}, &(0x7f0000001280)={0x20, 0x83, 0x3, "c86f33"}, &(0x7f00000012c0)={0x20, 0x84, 0x4, "cbfda4e9"}, &(0x7f0000001300)={0x20, 0x85, 0x3, "23acd4"}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async, rerun: 64) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) r5 = dup(r4) write$nbd(r5, &(0x7f0000000240)=ANY=[], 0x10) (async) finit_module(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000001680)={&(0x7f00000013c0), 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x220, r7, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x1e8, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @dsss={0x3, 0x1, 0xb0}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x51}, @random={0x74, 0x5a, "bfeb2cb375eec6e9a3d9f07ffa1551d1e979cf6e51ece51c1ef6a21631503500ed2ae5a9b285f8b1b06160498dd0e83bd4343955d1f3788bbece91279e38903b9c371f847738d9fe6b32659b2b310117eccca3ff05af5c1a4781"}, @chsw_timing={0x68, 0x4, {0x100, 0xa}}, @perr={0x84, 0x83, {0xe, 0x9, [{{}, @device_b, 0x80000001, @void, 0x2a}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x4}, {{}, @device_a, 0x8, @void, 0xd}, {{}, @device_a, 0x0, @void, 0x33}, {{}, @device_a, 0x8, @void, 0xa}, {{}, @device_a, 0x1, @void, 0x22}, {{}, @broadcast, 0x1ff, @void, 0x38}, {{}, @broadcast, 0xbfa, @void, 0x9}, {{0x0, 0x1}, @device_b, 0x100, @value=@broadcast}]}}, @fast_bss_trans={0x37, 0xd2, {0xd7, 0x6, "1c73e6fc2c466905a97024e757abdce0", "93e5c0a7e5a8b77ac9c7438b9c9b4e0639ac3b104d65a3cf1093b592c836e7eb", "ecb02a96e828a6b34d464f3dbfa25751bef13b3754fdd1768490fe6d5eb6560b", [{0x3, 0x23, "35f06aa0da130b75bcb21b62921b8e67e6eac23da29688736e6556fe8722b8c6348909"}, {0x4, 0xe, "ca8129324de90924d9bd7ba2d4f8"}, {0x3, 0x17, "036e6180ee53682b4cbd3f081242e502b7adccfca63c04"}, {0x4, 0x19, "e94842a29084e26295c6a060554bc2e66a7a456086eb0b7839"}, {0x2, 0x3, "0252d5"}, {0x2, 0x10, "78a613db1564876b8690de28af7a6f07"}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @val=0x2, @void, @val="57f27a2bff993a98253846b4787236a3"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x220}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0xffbe, 0x7fffffff, @loopback, 0xf0ce}, 0x1c) (async) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x105aa) (async) sendto$inet6(r10, &(0x7f0000000040)="2e97e3c1", 0x4, 0x24004004, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) ioctl$TIOCGPTPEER(r11, 0x5441, 0xfffffffffffffffc) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (rerun: 32) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000004"], 0x2a) (async) shutdown(r3, 0x0) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8002, 0x10) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.141871442s ago: executing program 2 (id=97): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x1003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r0, 0x7dfff000) 4m14.132399372s ago: executing program 2 (id=98): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc2, 0x0, 0xfffffffffffffffe}]}) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r7, 0xc02063a0, &(0x7f0000000340)=[0xf85, 0xc4, 0x31ce, 0x0, 0x3ff0000, 0x40, 0x6, 0x40]) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 4m11.039770538s ago: executing program 2 (id=107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x54, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@flat=@handle, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/160, 0xa0, 0x0, 0x2f}, @fda={0x66646185, 0x5, 0x0, 0x23}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close(0x3) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) eventfd2(0x9, 0xc00) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x0, 0x6a}) (async) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r3, 0x0, 0x1f00) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) (async) listen(r4, 0x100) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x2, 0x1b}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 4m10.589151064s ago: executing program 2 (id=114): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) shutdown(r0, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x100) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x100) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000000)={0x4, r4, 'id0\x00'}) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000100)=0x100000000) (async) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000100)=0x100000000) 4m10.511505285s ago: executing program 32 (id=114): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) shutdown(r0, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x100) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x100) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000000)={0x4, r4, 'id0\x00'}) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000100)=0x100000000) (async) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000100)=0x100000000) 1m56.115506777s ago: executing program 4 (id=2190): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1m56.046681908s ago: executing program 4 (id=2191): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10000020, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfffffffffffffff0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = dup2(r3, r0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x82) mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10000020, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x20}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfffffffffffffff0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) dup2(r3, r0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x82) (async) mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0x2) (async) 1m55.979570339s ago: executing program 4 (id=2192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="901240c26659aa57acb9e3d346635b8eef5a402800000c00000000000044a8b4e34a7a03174053bbbdfbfe1a67b393a01c767dd5c1c1a3dfb3938e3fb03f8c9f0fe8233600", 0x45}], 0x1}}], 0x1, 0xc8040) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000006c0)=""/206) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="343fd34f663303c8544e6c287016d33ae953ac1b72a09802406253d3be0c7d8d12c651d887ea0a1e012e16ef899e3681983dab2f700d2c0d3788ff86c19e589a5c3d0784a2f746dfe6f96b9645c217f77a35bfffa1bce7ef51fec4142bc27ca7b319a7dbda90ba2c6e7977f6d5e7475cc90b7f3bc340ab360fe9ac9e06fc9e9631eb8acbcfd15bda4dd2f75b1c7a08fa2606d9e9809198b671c8160524a0e858d4a9fe02ef956b6fc8c28b6993a173c29ee0c39e1132f11982d6e5f58bbf1bb79599a6da8fdf64454389f22540b61314283af6e6320e43", 0xd7, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000140)=0x7ff) 1m55.599684385s ago: executing program 4 (id=2196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe", 0xd3}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365", 0xa4}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9", 0x23}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00000000000000", 0x51}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d2", 0xc6}, {&(0x7f0000000e80)="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", 0x130}], 0x3}}], 0x2, 0x40000c0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r7, 0x80000000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1m55.486776856s ago: executing program 4 (id=2197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x222001, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) (async, rerun: 32) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x91, 0x1, {0x40027, 0x24, 0xc, 0x7, 0xa, 0x1ff, 0x6, 0x8}}) (async, rerun: 32) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x24, 0x26, 0x0, 0x1c, 0x3, 0x400004f, 0x100010, 0x2c, 0xffffffffffffffff}) r3 = socket(0x5, 0x803, 0x4) sendto(r3, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x48000, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000200)=""/51, 0x33}], 0x5}, 0x9}], 0x1, 0x97e3f8286987426c, 0x0) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = socket(0x1e, 0xa, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x10001, 0x1, 0x4, 0x5}, 0x10) (async, rerun: 32) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000042c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYBLOB="da636a25d0cd7ce890a6ceb7a6fba87725753a54601ac979a4ce9b3f6e92636df218368c1843e78514a1247812e94410c388"], 0x10}], 0x1, &(0x7f0000000240)=ANY=[], 0x10, 0x20000000}, 0x20000084) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000900)=[{{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) (async, rerun: 32) bind$can_raw(r8, &(0x7f0000000040), 0x10) (async, rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) lsm_get_self_attr(0x67, &(0x7f0000000300)={0x0, 0x0, 0x94, 0x74, ""/116}, &(0x7f0000000180)=0x94, 0x1) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d9bffffff000000000a"], 0x18}}, 0x0) 1m55.226882s ago: executing program 4 (id=2200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26b, 0x0, 0x4080000002000001}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x14, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="15"]}, 0x14}], 0x1}, 0x4000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f) close(r10) inotify_init1(0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)=0x100) r11 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000240)={0xe0000002}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r11) sendmsg$nl_generic(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x14, 0x17, 0x2, 0x70bd25, 0x25dfdafc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f00000000c0)=""/125) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000500), 0x8) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m55.187263051s ago: executing program 33 (id=2200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26b, 0x0, 0x4080000002000001}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x14, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="15"]}, 0x14}], 0x1}, 0x4000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x804) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f) close(r10) inotify_init1(0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)=0x100) r11 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000240)={0xe0000002}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r11) sendmsg$nl_generic(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x14, 0x17, 0x2, 0x70bd25, 0x25dfdafc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f00000000c0)=""/125) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000500), 0x8) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m2.198728222s ago: executing program 1 (id=2959): ioprio_set$pid(0x2, 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe2(0x0, 0x4000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b\v'], 0x68) socket(0x10, 0x2, 0x0) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mremap(&(0x7f0000a62000/0x1000)=nil, 0x1000, 0x600000, 0xa66b8c305436057f, &(0x7f0000a00000/0x600000)=nil) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x3f) (async) syz_io_uring_setup(0x2421, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x1ca) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000240)={[{@userxattr}, {@metacopy_on}]}) (async) close(0x3) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x400002, 0x10c08050, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) (async) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000001540)={&(0x7f0000000500)={0x50, 0xffffffffffffffda, 0x400, {0x7, 0x2b, 0x3, 0x40000000, 0x1000, 0x9, 0x9, 0x812, 0x0, 0x0, 0x10, 0x62ef5875}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ed3000/0x3000)=nil, 0x3000}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x6, &(0x7f00000003c0)=0x41c00) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) 1m2.197841822s ago: executing program 1 (id=2960): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) munlockall() ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0xfffd, 0x7}, 0x100, './file0\x00'}) madvise(&(0x7f00009bc000/0x3000)=nil, 0x3000, 0x4) 1m2.197635622s ago: executing program 1 (id=2961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000ab7000/0x4000)=nil, 0x4000, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) 1m2.196429872s ago: executing program 1 (id=2962): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x150, 0x0, 0x0, [{{0x5, 0x1, 0x7fffffff, 0xfff, 0x0, 0x2, {0x6, 0xc842, 0x0, 0x9, 0x7, 0xe1, 0x4000, 0x5, 0xae, 0x6000, 0x101, r7, r8, 0x47, 0x3}}, {0x3, 0x1, 0x8, 0x4, 'rootmode'}}, {{0x7, 0x2, 0xb2a, 0x78, 0x1ff, 0x1000, {0x5, 0x401, 0x2, 0x781, 0x80, 0x5, 0x5b93, 0xf, 0x70, 0xc000, 0x4, r7, r8, 0xd3, 0x70e}}, {0x4, 0x4fc, 0x5, 0x74b, '\xaa\xaa\xaa\xaa\xaa'}}]}, 0x0, 0x0, 0x0}) setresgid(r2, r4, r8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1m2.193717912s ago: executing program 1 (id=2963): mkdir(&(0x7f0000000280)='./file1\x00', 0x131) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f732c00000000697997aa2d4a6626a10b57dcf96d273cc02dcffaa5711e695fe111a8bb0dee568dfb259034486de4bd681922836eab1e46473e37565e86c1a557746048c7e97153ed1695be98207c67179f93ae5906f518920ae2d85674c35814b46f462e603e2f4ceb50f4aa4c32b2aac2b6c3be0a6670a2a04dde313a4018f15fdda99fcfefc4a4a2fec57d3b61aaf492f895c3ce49bc796d34f32ae2510ffa0ceed1be2770391c84f141453a66b98ddf87fec5abe7296128bc9d7bb79310217f11a2678f304749cf72063d1d148ac77a02e9abf93286495edf5a07f32773ac53bcdfb2000000004a"]) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000e400000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x420}, {r3}, {0xffffffffffffffff, 0x200}, {r3, 0x4000}], 0x4, &(0x7f0000000500), &(0x7f0000000540)={[0x3]}, 0x8) (async) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000002600)=""/4096, 0x1000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x1) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x2d, "f42a97b96d02faffffff75fdda624457697e22bd14ad3d5c3638f76f623a43edba52ff8d5cde1d3b8ad78583af"}}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r11, 0xffffffffffffffff, 0x2) 1m1.970929756s ago: executing program 1 (id=2965): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20033000203000a0292000098fc5a000000bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605197f71174aa951f3", 0xb8) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100400, 0x20) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x0, 0x0, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x4e}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x99b33000) socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x4, &(0x7f0000000100)) 1m1.945721906s ago: executing program 34 (id=2965): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20033000203000a0292000098fc5a000000bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605197f71174aa951f3", 0xb8) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100400, 0x20) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x0, 0x0, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x4e}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x99b33000) socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x4, &(0x7f0000000100)) 42.633211541s ago: executing program 3 (id=3212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002300)=[{{&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000001c0)=""/136, 0x88}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/35, 0x23}], 0x6, &(0x7f0000001380)=""/4, 0x4}, 0x21f}, {{&(0x7f00000013c0)=@can, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001440)=""/224, 0xe0}, {&(0x7f0000001540)=""/161, 0xa1}, {&(0x7f0000001600)=""/20, 0x14}], 0x3}, 0xffffff5b}, {{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001700)=""/84, 0x54}, {&(0x7f0000001780)=""/55, 0x37}, {&(0x7f00000017c0)=""/5, 0x5}, {&(0x7f0000001800)=""/92, 0x5c}, {&(0x7f0000001880)=""/235, 0xeb}, {&(0x7f0000001980)=""/155, 0x9b}, {&(0x7f0000001a40)=""/120, 0x78}, {&(0x7f0000001b40)=""/121, 0x79}], 0x8, &(0x7f0000001640)=""/47, 0x2f}, 0x2}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/179, 0xb3}], 0x1, &(0x7f0000001d40)=""/22, 0x16}, 0x5}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001dc0)=""/58, 0x3a}, {&(0x7f0000001e00)=""/32, 0x20}, {&(0x7f0000001e40)=""/47, 0x2f}, {&(0x7f0000001e80)=""/163, 0xa3}, {&(0x7f0000001f40)=""/1, 0x1}, {&(0x7f0000001f80)=""/172, 0xac}, {&(0x7f0000002040)=""/148, 0x94}], 0x7, &(0x7f0000002180)=""/163, 0xa3}, 0x8001}, {{&(0x7f0000002240)=@phonet, 0x80, &(0x7f00000022c0)}, 0x10}], 0x6, 0x40010022, &(0x7f0000002480)) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "365c350403785f5211ca3557f21b5a8f6683ba992b84eae8a9e518173cf8b86f76c6437b1602bb4799a1eaff90cd74e2453ed695e18adbdcffdde8d61ec4de5e", 0x2d}, 0x48, 0xfffffffffffffffb) keyctl$clear(0x7, r2) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 42.522916203s ago: executing program 3 (id=3214): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x10008a4, 0x0) (rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x160e) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x35, 0x35, 0x34, 0x31, 0x61, 0x36, 0x66], 0x2d, [0x32, 0x36, 0x32, 0x33], 0x2d, [0x62, 0x64, 0x63, 0x55], 0x2d, [0x63, 0x62, 0x36, 0x33], 0x2d, [0x35, 0x31, 0x63, 0x30, 0x66, 0x66, 0x32, 0x65]}}}, {@subj_type={'subj_type', 0x3d, '{.'}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@seclabel}]}}) 42.522414583s ago: executing program 3 (id=3215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x20001, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) 42.513874093s ago: executing program 3 (id=3216): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x6, 0x6, 0x0, 0x0, 0x1, 0x7, 0x9, 0x7, 0x2, 0x84, 0x3, 0x0, 0x9, 0x10, 0x8, 0xaf, 0xd, 0x6, '\x00', 0x0, 0x1}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}], 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf0d00000002000002800c000180080001000a00000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000001c0)="3e360fe17b0ab805000000b9315624370f01d9f00fbba622a5000066b802010f00d066baa100ecc744240000000080c7442402e4000000c7442406000000000f011c240f01c50f78ba586f00000f01c5f3aa", 0x52}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x202001, 0x0) 42.509819013s ago: executing program 3 (id=3217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400200, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS2(r4, 0x802c542a, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r7, 0x0, &(0x7f0000000c00)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRESHEX=r7]) close(r3) socket$inet6(0xa, 0x80002, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fda={0x66646185, 0xa, 0x2, 0x6}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 42.386309614s ago: executing program 3 (id=3221): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4a0200, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req={0x10, 0xfffffffb, 0x8, 0x4}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, r4, &(0x7f0000000180)={0x7, 0x1, 0x7, 0x3ee, 0x100000001, 0x3, 0xfb5f, 0x6, 0x3}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) (async) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 42.324595026s ago: executing program 35 (id=3221): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4a0200, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req={0x10, 0xfffffffb, 0x8, 0x4}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, r4, &(0x7f0000000180)={0x7, 0x1, 0x7, 0x3ee, 0x100000001, 0x3, 0xfb5f, 0x6, 0x3}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) (async) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 21.781105068s ago: executing program 0 (id=3541): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71, r2}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00') 21.769338729s ago: executing program 0 (id=3542): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0xeeef0000, 0x98, &(0x7f0000000340)=""/152}, {0x0, 0x48, &(0x7f0000000280)=""/72}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 21.717717789s ago: executing program 0 (id=3543): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x218000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040)=0xfa2f, 0x4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fff0000) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0xa8) openat$incfs(r6, &(0x7f0000000080)='.pending_reads\x00', 0x200, 0x110) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x481, 0x0, 0xc}]}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 21.635463921s ago: executing program 0 (id=3546): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') lsm_list_modules(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 21.631248061s ago: executing program 0 (id=3547): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x2, r0, 'id0\x00'}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000200)=0x5000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) preadv2(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) 21.465551623s ago: executing program 0 (id=3551): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r2, 0xffffffffffffffff, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x401, 0x3, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x1d12) 21.402271244s ago: executing program 36 (id=3551): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r2, 0xffffffffffffffff, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x401, 0x3, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x1d12) 5.208662043s ago: executing program 7 (id=3738): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) (async) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0xffffffffeed6b53c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/igmp\x00') bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xea5}, 0x1c) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r5, 0x400454cc, 0x206) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r7) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, r8, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) syz_usb_connect$uac1(0x1, 0xa7, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x6, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xd}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x2}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x1, 0x2, "530e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x3, 0x64, {0x7, 0x25, 0x1, 0x80, 0xf, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0xfe, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x4, 0x4c, "f3d4575074"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x1b4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x6, 0x6, {0x7, 0x25, 0x1, 0x83, 0x9, 0x3}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xd, 0xe9, 0x3d, 0x20, 0x5}, 0x5d, &(0x7f0000000100)={0x5, 0xf, 0x5d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x81, 0x4f, 0x872c}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "143795b37e44e1d009a95345b329537c"}, @wireless={0xb, 0x10, 0x1, 0xa7105aa2537f611d, 0x8530136a7780f277, 0x1, 0x4, 0x2, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0xca, "060c360fa5c7cb2ce6af4d7afc96e63b"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ba391dfc94f327534e94b36a9bd36b1e"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xc, 0x8001}]}, 0x1, [{0x28, &(0x7f0000000000)=@string={0x28, 0x3, "42368d37c0ff8cc8d9a056862d5bbd648c38fe656b0abcc53f080aa5120f13e085cbc99179d1"}}]}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.171753408s ago: executing program 7 (id=3779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) socket(0x1d, 0x3, 0x20000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4048002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 2.102887198s ago: executing program 7 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) ioctl$KVM_CREATE_VCPU(r3, 0x7704, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r2, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r6) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x82}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x2010, r5, 0x7dfff000) 2.02337466s ago: executing program 7 (id=3781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x4, @local}}, {{0xa, 0x4ea1, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}}, 0x108) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], 0x15) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r6, &(0x7f0000000400)=@known='system.sockprotoname\x00', &(0x7f0000000440)=""/4096, 0x1000) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="cf66"]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x10e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xc0, 0x42, [{{0x9, 0x4, 0x0, 0x59, 0x2, 0x3, 0x1, 0x1, 0x71, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xc2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7f, 0x6, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x9d, 0x3}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x50, 0x9, 0x7, 0xff, 0x4}, 0x40, &(0x7f00000000c0)={0x5, 0xf, 0x40, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x0, 0x79}, @generic={0x3, 0x10, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x18, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0xfe, 0x6, 0x2, 0x0, 0x8, [0x30, 0xff, 0xf, 0xc0, 0xa0f0, 0x0]}]}, 0x4, [{0x0, 0x0}, {0x2, &(0x7f0000000240)=@string={0x2}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43f}}, {0x0, 0x0}]}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) tkill(r11, 0x37) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x213b2000) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000540)="a6", 0x1}], 0x1, 0x8, 0x8000, 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.633080816s ago: executing program 5 (id=3788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1001, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000010000107000000000000000003000000060001"], 0x1c}}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010025b908000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4805}, 0x20004040) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x0, 0x0, {0x27}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fcntl$lock(r14, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x7fffffffffffffff}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x18004}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r16, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) close_range(r15, 0xffffffffffffffff, 0x0) r17 = dup3(0xffffffffffffffff, r14, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/181, 0xb5, 0x2, 0x16}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x110b}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 1.522440368s ago: executing program 5 (id=3791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="a00000002100010000000000feffffffff000000000000000000000000000000000000000000000000000000000100000000000008000a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6e000000000050001100ac14140c000000000000000000000000fc000000000000000000000000000001fc02000000000000000000000000000000000000000000000000000000000000ff0000000200000002000a00"], 0xa0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) socket$key(0xf, 0x3, 0x2) r4 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) listen(r5, 0x5) accept4(r5, &(0x7f0000000240)=@x25, 0x0, 0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0x9, 0x1, 0x0, 0x0, @adapter={0x1, 0x3, 0x4, 0xd7, 0xf055}}, {0xc, 0x1, 0x0, 0x0, @adapter={0x1, 0x8c, 0x1170, 0x4, 0x8}}]}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x3, 0x3, 0x28, '\x00', 0x4}) 1.35897713s ago: executing program 5 (id=3792): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x20) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040)='*\"', 0x2, 0x8, 0x0, 0x2}]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 1.30681534s ago: executing program 5 (id=3793): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000002a40)=0xffff, 0x4) sendmsg$inet(r6, &(0x7f0000003180)={&(0x7f0000002c80)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x48800) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x2000, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000380)={0x10201, 0x0, 0xeeee0000, 0x1000, &(0x7f000036d000/0x1000)=nil}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20222, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') 1.058792614s ago: executing program 8 (id=3795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001180)={0x1, 0x0, @pic={0x81, 0xfe, 0x5, 0x1, 0x6, 0x2, 0x40, 0x5b, 0x0, 0x8, 0xc, 0xfd, 0x0, 0x40, 0xfe, 0x3}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r4, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000201becd8aea897c018081278f7848cc0000000000000000000500000808000840a6c210673b1e459da951562b8b584c2fd64ebe4cb8e98535f3b99c3029484180ec9fecfc67b66f557e9a20dadb74bfbfb516fe3681425500a249cb09000000b9d325da45b1e1d1d1276950712c2a6e6d2449bf14"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r5, &(0x7f00000001c0)='./file1\x00', r5, 0x0, 0x1000) (async) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x3, 0x3000, 0x13d6, 0x0, 0xf}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x100a, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) fcntl$setpipe(r2, 0x407, 0x74) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0xfffffffffffffffe, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000340)=0x2604, 0x4) 1.058017304s ago: executing program 8 (id=3796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000200)="26470f01cbb9700500000f32b946020000b8a52f0000ba000000000f30b97e0a00000f32420f01c9b9750b00000f32c4c279594d00b9f10b00000f32b9870800000f32f4", 0x44}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 904.080846ms ago: executing program 8 (id=3797): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000380)=0xfff, 0x8, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/udp\x00') seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x300, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$inet(0x2, 0x2, 0x3) ppoll(&(0x7f0000000180)=[{r5, 0x2120}, {r2, 0x105}, {r0, 0x4}, {r8, 0x101}], 0x4, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000280)={[0x4]}, 0x8) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000580)={0x0, 0x7000, 0x800, 0x0, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x18, 0x0, &(0x7f0000000040)=[@register_looper, @register_looper, @increfs, @release={0x40046306, 0x40001}], 0x0, 0x0, 0x0}) 838.315937ms ago: executing program 5 (id=3798): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 739.826929ms ago: executing program 7 (id=3799): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWSETELEM={0x6a4, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x67c, 0x3, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb0d2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x97}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x39}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xf}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "913c3ca388c241eff0023008a5f31d329c7b25436c3e8a00e43b2d2f91b4f790d3e0a1a6cacc528c2f06ef20678e31ed0d56e4134f40ee1bb2fa9c0c4dac912196f8629bf15754db7b696246324d6b193e6b4d9cb6bf97d188a6852811d1c74e0eddf4ee41f55678d3dede4b0474a5be71215ee93180531c058aa058f8879fa991449fd59807e6749e4f3108bbce3fc54bf87558a2189f59854dd8b09007e9be5a6131d50e8069814f6f4ed891714dd7fe7e9f981a8f8634fd662ce66396a8c4a97c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x3f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "b0efea2c73d1e4dd537bc4f453072bd2dac6a19d0de19a36d3071b48d4100d74ea0c75ee45e8b315d28be33b4d3b73f4a2de95f72979c74a58ce0a9d81389350c0830dbd6e88400eb56a6bc7c75c19062d1c6017e67c3b9d9d4ada240db3690ee430dbd07dce270e9f0fe5e103856d49e735f79afb0123b8284780358681fd9508ee92e91380bba7a52127b2e149598c52aafc549b97e15586b145462d05007cdd37718ea6f0ed075669035b8c9eb2f0e8708e26b50c4abf65dc68962f9f48265d6b6b72760f5e6bbd7d253bec8f1abb168f2dfbd666aaff0b32471afb17b52b467529a3632d56226263"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4b18d378}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9b5e499}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x290, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x43}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x204, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1f4, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x24, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1e, 0x1, "292d847033e96e0b46dbdb50be7d53a6042c9808484c00cafc5c"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BITWISE_XOR={0xdc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4b, 0x1, "54fefc66fc4e2dedacea4cf8b0bf8fe69724639850ce92deac83b20450f54ca7d97187d6876d8cebb5dbbab5a1887d9306f8d95729deb7010832218174264dc65de43bd9fa6844"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000005}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_DATA={0xd8, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x83, 0x1, "eff36c9f8bb2b30115583ee70bc4ebe1285b9c7eed13a272ec62804c93f62e534d6a3d70668e8fe060ecd402f09bff2cb437ddd2790123553bfd19eba57e3ff7cd65177e511d0116907e51dfd70a24024f01647d9cc7d5c3c07cef60771c2fe3197eb07c1e2c11af7dd5d5b640bfe3c1d9317bb270f429aeff787520fac317"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffcdb}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x174, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x124, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0x91, 0xd, 0x1, 0x0, "4378a239ca10e379d7f78e3b2ffa229d0807f72253c4a3c5f777a5648885fd8ba442ee1f74768212a4f0e50945c0c866c3410e0458daef5093e40789efad7785cd1fa45b8ccdcb47f7bcaf25b84d522c27c22e74b38e02963091f2b952bef85a789ee82e8a9f0a6198bfaa07b9867b5e45ffaba58181367202d2cd1a1a53be7a5f94a99614b55acf4e23fb2e04"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9b8}, 0x1, 0x0, 0x0, 0x24008010}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 739.480279ms ago: executing program 5 (id=3800): syz_usb_connect(0x0, 0x4f, &(0x7f0000000d00)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0xc2, {0x9, 0x21, 0x8000, 0x7, 0x1, {0x22, 0x1b0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x7, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x6, 0x56, 0x81, 0xff, 0xde}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0xc, &(0x7f0000000100)=@string={0xc, 0x3, "9199fb0b1a803afef276"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x403}}, {0xb6, &(0x7f0000000180)=@string={0xb6, 0x3, "db33be5d895fcd89d3ee3d80e0f93a2b688a967438893ae79ef7afd8146015f0547486fbd91bee8153f236a1b7def4a46c317e62dc7ea4960084e5e728143a84fc7ca70879fcd89f2fb5a19cbd66844f8e704e0e7912087ec1f1985caa78ed5161ee3da2c23aa4ce1687992025b7fca3d88d37697f010d4b8173000d879eb0fa17750cd02457dfaf5bd0090bb02dc10cf4b6ea8a09181672d895c56b04b469f142407570a253b7038c660d30bfb4c4a62b40f005"}}, {0xda, &(0x7f0000000340)=@string={0xda, 0x3, "205f0eded3082cf2f0cc3b99819876cf2ae32e18cd03b691e71f441797dc62eb89c1939ba3a259be56cb5dfa120ea9bcd24d68490cf40e361b277422f66e9d00938833078fc826f590cc4b41237a2e7bd3345c114060f7eea2d463b2f42b58021f1871c4b7490ea6f7b5ec30c0808c22cd51cf89b40ebebfbf46e1214269cf5f97954b776ad9bb41cf1b7155865adf110d8daec8b1eec7b2e3f66a1b32841b09f254ff2e7c4d195c959f7d07dd58df549bfa2931d0d1f75c71d21f56044e9ab6d7737365282c7ea3aade077e6a343f918d0060feca53b25c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140c}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 728.827269ms ago: executing program 6 (id=3801): mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x208024, &(0x7f00000003c0)={[{@noprefix}, {@favordynmods}, {@subsystem='perf_event'}, {@nofavordynmods}, {@noprefix}, {@noprefix}, {@subsystem='io'}, {@name={'name', 0x3d, '\'@($'}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@appraise_type}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r2}, @increfs_done={0x40106308, 0x7}, @dead_binder_done], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) clock_gettime(0x0, &(0x7f0000000680)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = syz_usb_connect$cdc_ncm(0x3, 0x95, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x40, 0x70, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "14d085d48a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xc13, 0x4, 0x2, 0x5}, {0x6, 0x24, 0x1a, 0xf, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x1e, 0x81, 0x6, 0x8, 0xfff7}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x5, [0x1, 0x8372, 0x8000, 0x8e]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x35, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc0, 0x9, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x91, 0x0, 0x5, 0x7, 0x10, 0x9}, 0x1d, &(0x7f0000000440)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xd, 0x3, 0xf95b}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x4, 0x8, 0x9, 0x5}]}, 0x7, [{0x81, &(0x7f0000000780)=@string={0x81, 0x3, "4d9732831a5db1fa8b35eab1259f09dd4d8fdb2ee26b2346f387f5de016ff6e6e543accde4d12b225e1a34d62b8e4e24ac0c262c22aa6c0a90c4cbe1b224922663f450b41b3f0b6ad8e084849bb1985e0cf56c8b14fe17276616de251f7746a37d50dfa0fb1b12faf54a58d944fa2ec67064d8e8c17ae15de8659437445475"}}, {0xdb, &(0x7f0000000840)=@string={0xdb, 0x3, "46326fae9c79cf322ac58a2a2f0e78abde00fc2037bdd2685a57e1013cd2170d13856ff07cc885f1bf2683d8eeeea19ab86b50464cffb0b332e953b645314aabe99b52ef2d15725fb52d97e0b97ce762e47edece8f73a1b1e998259bce85000dc9de3d84a78f3eba3425c3f664d8c5c9296f1d51f347a3e617ddf77d0c3d215c180b585e41f66727134625e7ff21e48e5f5a10e86ffaba06ff82aa7494e3973a83ea8dfd8c61d13ef87f1315b2d878285d9fe2c7c6fbacd812b7a641b8953539f4c7b91c3ff9906aa46aaa65f6ca196a3da3976609f6dadf72"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x801}}, {0xda, &(0x7f0000000940)=@string={0xda, 0x3, "dca83db290755f0c7dc69b817492769faa107d08e370aed05e4e7a1a3adefe4a00296b3f884808e120187f2704170dd63434c1c82190bd8025e9075f9abfbeb946b6dfed85ea44a404df4146ca1ae4bf1b70c45b000def1cacfd7c72f6473b3acc30fabed12678b0003de9bef1448dbdc695ad92ba1ba1957ae1b103c5a6dc8a7ea49fcd553b3314b6ab50550c04d3ad790b1c2cfda2b008ff1d6fe47f30697975a734099ef70970c4949e8696e9fd12b5947c13bfee4c75a8640396c6aae493b6daa1b919a72bedff60473c5190f31410a225277b3c97bb"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x458}}, {0x18, &(0x7f0000000600)=@string={0x18, 0x3, "6cc2ff916fc1f950d5669fe915de0c7b747990142a8e"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x4e405e2f7f1340bc}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000bc0)={0x14, &(0x7f0000000ac0)={0x0, 0xc, 0x86, {0x86, 0x31, "7e18891a229bc4a86f76cf0263abdf2e427747cacd6e983cba9c3d1e82fa87416700a9b70ab9300a69fa2d73467c7477b9324de19f0ca24da62b6f1984f5fccb25d3bdd06e1df6cbab0abbeba85c91256b15ffd116650fb4d951ea4b726ee04bde09b61c29185f52096acc2658b972df3776fd6b630f7dc4e4e02cbfaaef29afa4a7d8aa"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c00)={0x0, 0x16, 0xce, "429ef6d4a21dbdc833e0ed0c107e379cbac0c2a6e4bdd0e15c2609c6e9317f844f01e3a9ef73741be35561e1eaf9aa28c362454e436b033f5189cde547491b6e3198b73164e1af625bb13017416a943473b39eb366e5a94db9765d1287fb0220366bbd6be1b82771b4ade450981c5bf89583c48cac45e00eaf856cc2d5f8ae68a586a6846d03a1ee89e5b53b23088be1590f91c91b704f72437ed6182fc0352fbac5f7044a9aaed3a4936a1195dfb45ccab3eb95e681bf742e6048d34532e91caf650d21ad6c2bb887828729d123"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000d80)={0x20, 0x80, 0x1c, {0x7fff, 0x5, 0x9, 0xe6b0, 0x80, 0x5, 0x1, 0x10001, 0xb5c, 0x97ec, 0x7ff, 0x2}}, &(0x7f0000000dc0)={0x20, 0x85, 0x4, 0xe752}, &(0x7f0000000e00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e40)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000e80)={0x20, 0x89, 0x2, 0x1}}) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x10000000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 711.408739ms ago: executing program 8 (id=3802): alarm(0x100000001) alarm(0x80000001) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) userfaultfd(0x80801) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x513f3295, 0x509002) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0x40044590, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x1010, 0xffffffffffffffff, 0xa27000) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a24010022000201020921"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r2, &(0x7f0000007640)=[{{&(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@timestamping={{0x18, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x814) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x20000) ioctl$BLKOPENZONE(r3, 0x40101286, 0x0) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x400004, 0x800000000004, @thr={&(0x7f0000000200)="ef14c498d0a38cd5541d0a13b9fba37ab2930137648505", &(0x7f0000000540)="8de32163de22edd381e619c8217e3c11648a9feaa2d4772298e5a7be1dcf2a9ce84797686648a20827afa8e5bf1692c1848a7d633e7245276aa478fcfc60f29804a799f250d3c9d7c77689acd58fdb7bcc695b792f908ce26b5b1c6d10d2d6009a0ffa6539cb0051f35998013d9d1d908ef302507fae2ff454e4ea0f276a5121f34dd1cf5f6aabcc879d8922cecd38848bcf455a7d0b52f1ec4dd4d31a53ba9574e4a4a69b7bbdabfa39c5551393b38e18fdbe10de6a593aa8e0793251b9e4601d81c30891279be09ca3"}}, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x244}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000680)={'binder1\x00'}) close(r0) 709.813179ms ago: executing program 7 (id=3803): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xfe81, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0xfffffffe, 0x3, 0x0, 0x10, 0x7f, 0x0, 0x3ffffd}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r5, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) accept(r5, 0x0, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000080)={0x100, 0x100, 0x7, 0x6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) accept4(r7, 0x0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) 166.578947ms ago: executing program 6 (id=3804): r0 = userfaultfd(0x80001) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140), 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000001080)=ANY=[@ANYBLOB="0100000000000000629903ccf473854f04000000"]) r4 = socket$nl_generic(0x10, 0x3, 0x10) flock(r4, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffef6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12112, r6, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000001040)=@ethtool_channels={0x3c, 0xef, 0xfffff811, 0x7ff, 0xffffff74, 0x8, 0xf, 0x400, 0x8}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r8) sendmsg$nl_xfrm(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYRES16, @ANYRESOCT=r9, @ANYRESOCT=r8, @ANYRESDEC=r0, @ANYRESHEX=r6, @ANYRES16=r6, @ANYRES16=r5, @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES16=r4, @ANYRES16=0x0], 0x10c}}, 0x2004c840) recvfrom(r10, &(0x7f0000001040), 0x0, 0x40000043, &(0x7f0000000300)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80) bind$802154_raw(r6, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_targets\x00') 166.087807ms ago: executing program 8 (id=3805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x48, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e08e3f5e65b767e24300f404854f0a982090000000000000001fddcbd83e620505e4c85f5ad460000f0d78b0000000000ee70d23c96757cfc"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x6a) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030fd41c1355a6cf9fb3034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) ppoll(&(0x7f0000000040)=[{r2, 0x14}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 165.727137ms ago: executing program 6 (id=3806): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000120, 0x0) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 91.064158ms ago: executing program 6 (id=3807): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x48, 0x1, 0x4, 0x0, 0x8f, 0x80, 0x2, 0x9, 0x5, 0x50, 0x9, 0x6, 0x567, 0x1, 0x1, 0x7, [0x6, 0x80]}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 87.012228ms ago: executing program 8 (id=3808): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffeffffffff7fb) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r0, 0x4758f000) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x9, 0xa3, 0x1, {0x22, 0xa06}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x41, 0x40, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0xc045d917bd3be610, 0x0, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x0, 0x0, 0x2, 0xff, 0x68}, 0x170, &(0x7f00000000c0)={0x5, 0xf, 0x170, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x26, 0x0, 0xc0, 0xde, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x2}, @generic={0x62, 0x10, 0x3, "7c51edc4bada45e9febd537a3f4b74871980c4e3037510b899fa3250f8cc320b3c090d572266132cd6f7cf2a68d2b0c598ca8acdd4853df915d18809b7f22a50390c6959e4728111775dfaa15b32e35bd41e45f00f16cc0bfb855ec9bc4c8d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0xfe, 0x6, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "3e68110a5e8cde555f495ec4d1e78efb"}, @generic={0xd8, 0x10, 0x2, "48e006880180cebb6f29a6aea1935c1f8abcb81041810ed6acdb65ff22b3f27e736483fc6a32cb7cadc359cbd7a5263c9b9108eadb4b1bf79c66ba1cab74a67797eaa96b221ca766d7b25f15ed0f79fc816ca9cf2b7edf2dcf1e37ed6154ac5b720a932ef2ac947ae9c12da41a9da8aae957c460a62232ce40cf1282cefa5ecee369b5b6729fcaa60fb8ed061d068ce4926b7b92a5a0e0ad11ae79b1ab7d984db6cdb1fea4fe757850429d8ffc094ce23ed0b22150c3e1dff69d965328b825983e4f90e708fd8a7a862d7070d4c60f854edb6c482c"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x89, &(0x7f0000000280)=@string={0x89, 0x3, "b0b02e6bb08a125e8b9407e1059ccf759192e0a46dd2af8bfb0727635c5a5f9a010fb153b15037513b042282c29ed5aa98225b1455ad294ed8efd527bf42cb56f8d18528c766b677233a78d4cecbae2611e391e87dc6064fcff15cee7ee34c962ae0e4f0514f40ce270ce52dde197d84f93bde72289b8f9013451b671ec22ba8fe9957e522e660"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x40, 0x23, 0xba, {0xba, 0xc, "e9e86cfca3dcd3abb9fa83614fbb0083a13e44b1f1def1f7107da1d450e2b9aae16891913f3303b1aeeb383554155087c20605eef41dfd7f2a16105cf2b90817785a3aa6f9aaf80a4f81355935e80bda4239e97b42c5a0a0a2f8bdca7ff9a27c10cf1cdc70417f75039d7e5fffc74cec45fa5b7e85b4a9aaa0e3e7954cfa0c56d5dbdeea7653257e490c869c635947b72e7ee0f21fc81fbd4bbcb004c16f0fd7eef483442170ffa0e7f84623c4df12b6d315ce0bfa18ae06"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c4d}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="000f57000000050f5700020b1001044e00090006000147100227d68a3e09000000bcc19f579a6c395cef2683fd058eb71fc6b196e91b6b66752a19d52f5a5d010d9e7754533465d0c824deeafd3b0e5f8190dcba566d437fa5331e7910"], &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x4, 0x7, 0x10, "6cb7b606", "5330f837"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x93, 0x1, 0x9, 0x6, 0x6, 0xe29c}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x40, 0x31, 0x16, "43d6e674435fb06a9ca54f1b8f3bbfec8c428784c5fd"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x0, 0x4}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xc0, 0x2}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "bd7c"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, 'xB'}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0x21, 0x1}}) 21.166449ms ago: executing program 6 (id=3809): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) read(r0, &(0x7f0000000040)=""/123, 0x7b) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r1, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004014) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0xffd7, 0x0, 0x0, &(0x7f0000000380)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred]}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) inotify_init() setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r6, @ANYBLOB="2fdddd2a73899d6553bf2f8c463df1f81179ac9247b2ff1adfab0e5ceedccf16b485", @ANYRESOCT, @ANYBLOB="f8c9e88a77904030595f99abae3f6c25765a9713a3b707dcdb4c3b40924dde8d0e1a8e2d1c8afd04f0fce6b8a6769de33b02561dddc07e85af978c0221c0675caed1ac638c594d944d2ea8ac48897825"], 0x200}}], 0x1, 0x4000006) (async) r10 = accept4$unix(r1, 0x0, 0x0, 0x80000) (async) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000140001002bbd7000ffdbdf25fc020000000000000000000000000001fc0000000000000000000000000000014e2200044e2300060a0020803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e72043f0cfaaf2815ebf6b6e00000100000a0006c1074d7d1d00fecf65f10f157ebcc4cb869a29415a317f0c9e771f98d06a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) (async) setsockopt$bt_BT_POWER(r11, 0x112, 0x9, 0x0, 0x0) (async) recvfrom$unix(r10, &(0x7f0000000140)=""/263, 0x107, 0x12, 0x0, 0x0) (async) accept$packet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=3810): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mknodat$loop(r0, &(0x7f0000000140)='./file0/file0\x00', 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) syz_usb_connect(0x6, 0x282, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2d, 0x29, 0x42, 0x20, 0x4dd, 0x9031, 0xc3ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x270, 0x1, 0xab, 0x18, 0x40, 0x7, [{{0x9, 0x4, 0x13, 0x58, 0xb, 0x2, 0xa, 0x0, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, '&YV'}, {0x5, 0x24, 0x0, 0xcfa}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x7f80, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x9, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xc3, 0x8, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3, 0x5, 0x6}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x5, [0xff, 0x6, 0x9, 0x1cb, 0x4]}]}, @hid_hid={0x9, 0x21, 0x29c, 0x10, 0x1, {0x22, 0x471}}], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x3}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x4b, 0x5, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xe}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x50, 0x8e, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xffff}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x2, 0xae, 0x5, [@generic={0xad, 0x31, "c07ed6ec3ecbd141544b3e37a31a5a8544b9b972add8e6fdada802a4b592bad36431d9b2197b18708e5b7b24c4c525d70a0d1fe5d9bf41a9eab96769de60adfbb98957e5d979bd532fcc380094b3ac34f317999b85db145679a1646b13fb7736abaf8e230b42513a9b4105e72d2dff9b9d30f7deb1b969b5281b3ff951b2be9058078ffe1e4d42f6ef1a24d443d2b7159fc71b53e2910f0b3336cdb284366b44c4867ea7f6b57563f98a07"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x33, 0x9, 0x9}}, {{0x9, 0x5, 0x1, 0x4, 0x3f7, 0x5d, 0x8, 0xec, [@generic={0xd1, 0xe, "d528d143a055d72ad21d142037695970ba0fd13b58a5fa02b001be3af8885ac10a0848b555aa78be47df30a24b50871aaa4f86b2ef2aa73cb476798da6419d27b2bbd9a9ec476ce7a110a310b473e14ea5e749dd7524d64604f1e24ea34355e0497427de28fb8a2cfdc870e57a872a464d1c9fd2fe0a25e28f50b180bad37d38c7ae3a5a83a5d236bdea89d91db5a62d95d8f768ea6956345b9395e44aea81e1ba15c3527dc325389a2a1d1989fc4a3ffe487e44c80900a225164ce4b7baaa0cde46c1662f39c7b09629bdc7024e0e"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0x53, 0xe}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xc6, 0x6, 0x1}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x7, 0x6c, 0x8, 0x40, 0x5}, 0xa0, &(0x7f0000000640)={0x5, 0xf, 0xa0, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x4, 0xfffb}, @generic={0x91, 0x10, 0x3, "c18d96bc8495492c26dbe07be8c38c4c6db05e7b735dd51da128f7aeb3710b36529d350e10cc40c81ab40cbe640bbaa06f8e0c1af5991004c657148d19052a1fc7571cb5272c411eb001e8faf1243f9c76c80b7410c2390bfc94045d1e53eb85d9fb75dda11529744d2e94df9eeecc2cd78104e611567b91094a6199e0cb8ea4ab39fd87d0c80432eb40c38ec9ee"}]}, 0x6, [{0x78, &(0x7f0000000700)=@string={0x78, 0x3, "5b30b04780f245b40af6f4c2dac264de2e0a55817c9f38116aaf3ca422f362397f0035fad6581dba96a09c986912d74bacf891782a5400e9eed1242d9117e45296fff5ef231e67aab324a0e8fd28bdaea2be949be5342600c26a66c833656267ee69e7ab928d17d6d5257dd9a9f37c257cc98037db18"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x405}}]}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/10, 0xa, 0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000280)={0xa8, 0x0, 0x1}) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): lp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 220.547518][ T45] usb 4-1: USB disconnect, device number 17 [ 220.555304][ T45] usblp0: removed [ 220.596801][ T10] hid-generic 0004:0009:80000001.0016: unknown main item tag 0x4 [ 220.604640][ T36] audit: type=1400 audit(4000000616.841:998): avc: denied { map } for pid=8098 comm="syz.1.2625" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 220.627874][ T10] hid-generic 0004:0009:80000001.0016: unknown main item tag 0x5 [ 220.635688][ T10] hid-generic 0004:0009:80000001.0016: unknown main item tag 0xd [ 220.643420][ T10] hid-generic 0004:0009:80000001.0016: item fetching failed at offset 48/97 [ 220.652303][ T10] hid-generic 0004:0009:80000001.0016: probe with driver hid-generic failed with error -22 [ 221.146976][ T8109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.157931][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.172891][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.494425][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 221.590497][ T8126] exFAT-fs (rnullb0): invalid boot record signature [ 221.597253][ T8126] exFAT-fs (rnullb0): failed to read boot sector [ 221.603682][ T8126] exFAT-fs (rnullb0): failed to recognize exfat type [ 221.654422][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 221.665465][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 221.669204][ T8132] binder: Bad value for 'max' [ 221.679905][ T8132] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2636'. [ 221.683921][ T10] usb 4-1: config 0 has no interface number 0 [ 221.704414][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 221.715502][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 221.725183][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.733208][ T10] usb 4-1: Product: syz [ 221.737462][ T10] usb 4-1: Manufacturer: syz [ 221.742093][ T10] usb 4-1: SerialNumber: syz [ 221.743073][ T36] audit: type=1400 audit(4000000617.982:999): avc: denied { map } for pid=8134 comm="syz.5.2637" path="socket:[46316]" dev="sockfs" ino=46316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.748007][ T10] usb 4-1: config 0 descriptor?? [ 221.783931][ T10] smsc75xx v1.0.0 [ 221.906692][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.915289][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.384844][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 222.386495][ T8116] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 222.396007][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 222.396039][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 222.406968][ T8116] rust_binder: Error while translating object. [ 222.426934][ T8116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.431382][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 222.441168][ T8116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 222.443382][ T8150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.460102][ T8151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.464331][ T10] usb 4-1: USB disconnect, device number 18 [ 222.478663][ T8150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 222.478929][ T8150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:871 [ 222.504326][ T8155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.516279][ T8155] rust_binder: Error while translating object. [ 222.522757][ T8155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 222.529187][ T8155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:874 [ 222.538805][ T8155] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.548309][ T8155] rust_binder: Read failure Err(EFAULT) in pid:874 [ 222.557203][ T8158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.578061][ T8153] rust_binder: Error in use_page_slow: ESRCH [ 222.584819][ T8153] rust_binder: use_range failure ESRCH [ 222.590838][ T8153] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 222.596465][ T8153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 222.604607][ T8153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:528 [ 223.099851][ T8182] rust_binder: Error while translating object. [ 223.109017][ T8182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.115265][ T8182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 223.804185][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 223.964097][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 223.970321][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 223.978714][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 223.987346][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 223.996338][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.006016][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.015690][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.028955][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 224.038216][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.047282][ T10] usb 4-1: config 0 descriptor?? [ 224.070555][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2664'. [ 224.255034][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 224.454838][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.463422][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.474543][ T10] usb 4-1: USB disconnect, device number 19 [ 224.484336][ T10] usblp0: removed [ 224.738810][ T8232] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 224.747805][ T8232] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 224.756851][ T8232] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 224.767943][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2672'. [ 225.179238][ T36] audit: type=1400 audit(4000000621.422:1000): avc: denied { map } for pid=8242 comm="syz.1.2677" path="socket:[46709]" dev="sockfs" ino=46709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.273980][ T319] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 225.425032][ T319] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 225.433245][ T319] usb 4-1: config 0 has no interface number 0 [ 225.443567][ T319] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 225.452740][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.460773][ T319] usb 4-1: Product: syz [ 225.464988][ T319] usb 4-1: Manufacturer: syz [ 225.469594][ T319] usb 4-1: SerialNumber: syz [ 225.475460][ T319] usb 4-1: config 0 descriptor?? [ 225.606001][ T8268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.606377][ T8268] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 225.621612][ T8268] rust_binder: Write failure EINVAL in pid:880 [ 225.622218][ T8268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.628840][ T8268] rust_binder: Error while translating object. [ 225.635621][ T8268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.641853][ T8268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:880 [ 225.681635][ T8241] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 200, size: 71) [ 225.690851][ T8241] rust_binder: Error while translating object. [ 225.701333][ T8241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.707566][ T8241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 225.717806][ T36] audit: type=1400 audit(4000000621.962:1001): avc: denied { watch watch_reads } for pid=8269 comm="syz.0.2687" path="/309/file0" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 225.735790][ T8272] SELinux: failed to load policy [ 225.757853][ T8241] overlayfs: missing 'lowerdir' [ 225.795517][ T8277] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2688'. [ 225.805365][ T8277] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2688'. [ 225.815372][ T8277] fuse: Unknown parameter 'groC' [ 225.857053][ T319] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 225.863536][ T319] usb 4-1: No valid video chain found. [ 225.869967][ T319] usb 4-1: USB disconnect, device number 20 [ 226.371556][ T6288] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.521175][ T8303] /dev/rnullb0: Can't open blockdev [ 226.536998][ T8307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 226.537028][ T8307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:891 [ 226.546545][ T8307] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 226.555749][ T8307] rust_binder: Read failure Err(EFAULT) in pid:891 [ 226.576007][ T8309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.582808][ T8309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.589338][ T8309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:893 [ 226.620307][ T8316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.630142][ T8316] incfs: Error accessing: ./file0. [ 226.641823][ T8316] incfs: mount failed -20 [ 226.646753][ T8316] rust_binder: Write failure EINVAL in pid:900 [ 226.932488][ T8346] cgroup: none used incorrectly [ 227.460857][ T8353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8353 comm=syz.1.2714 [ 227.474461][ T8353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8353 comm=syz.1.2714 [ 227.512445][ T8356] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2715'. [ 227.555853][ T36] audit: type=1400 audit(4000000623.802:1002): avc: denied { accept } for pid=8359 comm="syz.1.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 227.834193][ T6289] tipc: Subscription rejected, illegal request [ 227.858849][ T8401] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 227.889524][ T8408] futex_wake_op: syz.5.2733 tries to shift op by -1; fix this program [ 227.910627][ T8414] net_ratelimit: 4 callbacks suppressed [ 227.910649][ T8414] xfrm0: mtu less than device minimum [ 227.934636][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'. [ 227.989437][ T8424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.989492][ T8425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.027579][ T36] audit: type=1400 audit(4000000624.272:1003): avc: denied { setattr } for pid=8420 comm="syz.1.2738" name="NETLINK" dev="sockfs" ino=47009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.075081][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.083768][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.091896][ T8427] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2739'. [ 228.381300][ T8449] netlink: 'syz.0.2745': attribute type 12 has an invalid length. [ 228.393513][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 228.393630][ T410] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.989464][ T8468] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 228.989495][ T8468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 228.998598][ T8468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:271 [ 229.034967][ T8478] rust_binder: Error while translating object. [ 229.044194][ T8478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.050362][ T8478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 229.072810][ T8480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 229.082080][ T8480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:277 [ 229.343394][ T319] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.503377][ T319] usb 4-1: Using ep0 maxpacket: 32 [ 229.509772][ T319] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.518958][ T319] usb 4-1: config 0 has no interface number 0 [ 229.525425][ T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.536454][ T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.546372][ T319] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 229.555570][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.564770][ T319] usb 4-1: config 0 descriptor?? [ 229.564853][ T8489] netlink: 'syz.5.2762': attribute type 4 has an invalid length. [ 229.643434][ T8493] 9pnet_fd: Insufficient options for proto=fd [ 229.822998][ T8509] 9pnet_fd: Insufficient options for proto=fd [ 230.175957][ T319] uclogic 0003:28BD:0094.0017: pen parameters not found [ 230.179392][ T8483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 230.183729][ T319] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 230.202996][ T319] usb 4-1: USB disconnect, device number 21 [ 230.502410][ T36] audit: type=1400 audit(2000000000.960:1004): avc: denied { name_bind } for pid=8513 comm="syz.1.2771" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 230.607723][ T36] audit: type=1326 audit(2000000001.070:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.1.2777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5550f8e929 code=0x80000000 [ 231.140723][ T8551] /dev/rnullb0: Can't lookup blockdev [ 231.279772][ T8560] overlayfs: failed to resolve './file3': -2 [ 231.403141][ T8565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.405688][ T8565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 231.422929][ T8565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:958 [ 232.386856][ T8601] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 232.400791][ T8601] rust_binder: Error while translating object. [ 232.419020][ T8601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.425477][ T8601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 232.470649][ T8618] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2807'. [ 232.555277][ T8629] binder: Bad value for 'stats' [ 232.684447][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 232.695249][ T8648] SELinux: security_context_str_to_sid () failed with errno=-22 [ 232.807696][ T8667] rust_binder: Write failure EFAULT in pid:321 [ 233.103357][ T319] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 233.264076][ T319] usb 4-1: Using ep0 maxpacket: 32 [ 233.272690][ T319] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.281026][ T319] usb 4-1: config 0 has no interface number 0 [ 233.287233][ T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.298158][ T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.310216][ T319] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 233.319388][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.328193][ T319] usb 4-1: config 0 descriptor?? [ 233.934980][ T319] uclogic 0003:28BD:0094.0018: pen parameters not found [ 233.943446][ T8671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:323 [ 233.948685][ T319] uclogic 0003:28BD:0094.0018: interface is invalid, ignoring [ 233.970547][ T319] usb 4-1: USB disconnect, device number 22 [ 234.021740][ T8695] 9pnet_fd: Insufficient options for proto=fd [ 234.045097][ T8697] incfs: Backing dir is not set, filesystem can't be mounted. [ 234.054988][ T8697] incfs: mount failed -2 [ 234.091068][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 234.458075][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2844'. [ 234.476867][ T8717] binder: Bad value for 'max' [ 234.631172][ T8725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 234.631214][ T8725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:328 [ 234.725413][ T8748] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.2855'. [ 234.795263][ T8756] /dev/rnullb0: Can't lookup blockdev [ 234.834648][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2859'. [ 235.113286][ T319] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 235.264643][ T319] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 235.274660][ T319] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.288425][ T319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.297531][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.306346][ T319] usb 4-1: SerialNumber: syz [ 235.312242][ T8767] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 235.520294][ T8767] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 235.562779][ T8804] sock: sock_timestamping_bind_phc: sock not bind to device [ 235.929875][ T319] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 235.931358][ T8813] binder: Bad value for 'stats' [ 236.429591][ T319] usb 4-1: USB disconnect, device number 23 [ 236.499831][ T8828] x_tables: duplicate underflow at hook 1 [ 236.737151][ T8849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.777405][ T8853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.949261][ T8857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.958959][ T8856] rust_binder: Write failure EINVAL in pid:340 [ 237.049057][ T36] audit: type=1400 audit(2000000007.510:1006): avc: denied { ioctl } for pid=8862 comm="syz.3.2895" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 237.141568][ T8866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 237.141605][ T8866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:347 [ 237.141693][ T8865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.184321][ T36] audit: type=1400 audit(2000000007.650:1007): avc: denied { map } for pid=8871 comm="syz.3.2898" path="socket:[49264]" dev="sockfs" ino=49264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.187155][ T8876] lo: entered promiscuous mode [ 237.225992][ T8875] lo: left promiscuous mode [ 237.280122][ T8886] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 237.473217][ T319] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 237.624256][ T319] usb 4-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 237.634639][ T319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.644519][ T319] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.653642][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.661638][ T319] usb 4-1: SerialNumber: syz [ 237.784094][ T8920] overlayfs: failed to clone upperpath [ 237.870563][ T36] audit: type=1400 audit(2000000008.330:1008): avc: denied { append } for pid=8877 comm="syz.3.2900" name="pfkey" dev="proc" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 237.894938][ T8878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:354 [ 237.897932][ T319] usb 4-1: 0:2 : does not exist [ 237.920168][ T319] usb 4-1: USB disconnect, device number 24 [ 238.041979][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2919'. [ 238.151826][ T8956] bridge0: port 3(vlan0) entered blocking state [ 238.158462][ T8956] bridge0: port 3(vlan0) entered disabled state [ 238.165137][ T8956] vlan0: entered allmulticast mode [ 238.170475][ T8956] veth0_vlan: entered allmulticast mode [ 238.176893][ T8956] vlan0: entered promiscuous mode [ 238.182417][ T8956] bridge0: port 3(vlan0) entered blocking state [ 238.188750][ T8956] bridge0: port 3(vlan0) entered forwarding state [ 238.668145][ T319] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 238.823259][ T319] usb 4-1: Using ep0 maxpacket: 32 [ 238.830329][ T319] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.837842][ T8988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8988 comm=syz.1.2938 [ 238.838632][ T319] usb 4-1: config 0 has no interface number 0 [ 238.851158][ T8987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8987 comm=syz.1.2938 [ 238.859448][ T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.880284][ T8988] overlay: ./file1 is not a directory [ 238.881831][ T319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.896064][ T319] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 238.905311][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.914567][ T319] usb 4-1: config 0 descriptor?? [ 239.251704][ T36] audit: type=1400 audit(2000000009.710:1009): avc: denied { create } for pid=9020 comm="syz.0.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.284181][ T9024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.284758][ T9024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1009 [ 239.521319][ T319] uclogic 0003:28BD:0094.0019: pen parameters not found [ 239.524112][ T8958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:356 [ 239.530812][ T319] uclogic 0003:28BD:0094.0019: interface is invalid, ignoring [ 239.558457][ T319] usb 4-1: USB disconnect, device number 25 [ 239.597348][ T36] audit: type=1326 audit(2000000010.060:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.5.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x7fc00000 [ 239.948520][ T9045] overlayfs: failed to clone upperpath [ 240.047948][ T45] usb 2-1: USB disconnect, device number 31 [ 240.090074][ T9063] rust_binder: Error while translating object. [ 240.090106][ T9063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.098129][ T9063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 240.409771][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.436450][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.448425][ T9069] bridge_slave_0: entered allmulticast mode [ 240.455278][ T9069] bridge_slave_0: entered promiscuous mode [ 240.463573][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.472805][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.484388][ T9069] bridge_slave_1: entered allmulticast mode [ 240.492275][ T9069] bridge_slave_1: entered promiscuous mode [ 240.624287][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.631957][ T9069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.640323][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.648300][ T9069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.651236][ T9091] 9pnet_fd: Insufficient options for proto=fd [ 240.669373][ T36] audit: type=1400 audit(2000000011.120:1011): avc: denied { mounton } for pid=9090 comm="syz.5.2975" path="/286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.714459][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.768625][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.775755][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.821077][ T9069] veth0_vlan: entered promiscuous mode [ 240.847707][ T9069] veth1_macvtap: entered promiscuous mode [ 240.926763][ T9094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.939634][ T36] audit: type=1400 audit(2000000011.400:1012): avc: denied { setattr } for pid=9096 comm="syz.6.2967" name="RAWv6" dev="sockfs" ino=49863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.235649][ T36] audit: type=1400 audit(2000000011.700:1013): avc: denied { read write execute } for pid=9118 comm="syz.5.2982" name="file7" dev="tmpfs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 241.267710][ T36] audit: type=1400 audit(2000000011.730:1014): avc: denied { read } for pid=9121 comm="syz.5.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.338744][ T9133] rust_binder: Write failure EINVAL in pid:384 [ 241.356234][ T36] audit: type=1400 audit(2000000011.820:1015): avc: denied { getopt } for pid=9132 comm="syz.3.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 241.627582][ T9140] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 241.639922][ T9142] overlay: ./file0 is not a directory [ 241.980109][ T9180] netlink: 'syz.3.3004': attribute type 1 has an invalid length. [ 241.988753][ T9180] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 241.997087][ T9180] rust_binder: Write failure EINVAL in pid:407 [ 242.043161][ T45] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 242.213178][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 242.223516][ T45] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 242.232456][ T45] usb 7-1: config 0 has no interface number 0 [ 242.239611][ T45] usb 7-1: config 0 interface 2 has no altsetting 0 [ 242.248595][ T45] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 242.258165][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.266464][ T45] usb 7-1: Product: syz [ 242.270817][ T45] usb 7-1: Manufacturer: syz [ 242.275766][ T45] usb 7-1: SerialNumber: syz [ 242.284193][ T45] usb 7-1: config 0 descriptor?? [ 242.324863][ T9184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.331925][ T36] audit: type=1400 audit(2000000012.790:1016): avc: denied { map } for pid=9183 comm="syz.0.3006" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 242.384537][ T9189] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 242.393920][ T9189] rust_binder: Write failure EINVAL in pid:411 [ 242.411612][ T9194] rust_binder: Write failure EINVAL in pid:416 [ 242.460816][ T36] audit: type=1400 audit(2000000012.920:1017): avc: denied { accept } for pid=9197 comm="syz.0.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.493563][ T45] usb 7-1: invalid MIDI out EP 0 [ 242.504416][ T45] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 242.515124][ T45] usb 7-1: USB disconnect, device number 2 [ 242.529511][ T5512] udevd[5512]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.661880][ T36] audit: type=1400 audit(2000000013.120:1018): avc: denied { mount } for pid=9222 comm="syz.5.3020" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 242.719357][ T9230] batadv_slave_0: entered promiscuous mode [ 242.873236][ T333] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 242.920676][ T9233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.950330][ T36] audit: type=1400 audit(2000000013.410:1019): avc: denied { map } for pid=9238 comm="syz.0.3025" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 242.987637][ T9241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.988093][ T9241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.994792][ T9241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1031 [ 243.032089][ T9245] input: syz0 as /devices/virtual/input/input29 [ 243.043853][ T333] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 243.061054][ T333] usb 4-1: config 0 has no interface number 0 [ 243.067384][ T333] usb 4-1: config 0 interface 226 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.078803][ T333] usb 4-1: config 0 interface 226 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.090004][ T333] usb 4-1: config 0 interface 226 has no altsetting 0 [ 243.098589][ T333] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 243.107892][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.117242][ T333] usb 4-1: config 0 descriptor?? [ 243.390627][ T9259] SELinux: ebitmap: truncated map [ 243.396031][ T9259] SELinux: failed to load policy [ 243.406020][ T9259] binder: Unknown parameter ' ' [ 243.424035][ T9261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.424571][ T9261] rust_binder: Error while translating object. [ 243.431484][ T9261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 243.437911][ T9261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1044 [ 243.524615][ T333] uclogic 0003:256C:006D.001A: interface is invalid, ignoring [ 243.549650][ T9229] batadv_slave_0: left promiscuous mode [ 243.578468][ T9269] overlayfs: failed to clone upperpath [ 244.029698][ T9281] rust_binder: Error while translating object. [ 244.029744][ T9281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.036085][ T9281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 244.072320][ T9288] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 244.104607][ T9291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 244.107562][ T9290] rust_binder: Error while translating object. [ 244.117189][ T9290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.123653][ T9290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 244.152618][ T9301] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3046'. [ 244.172138][ T9301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 244.235778][ T9320] Invalid ELF header len 16 [ 244.249050][ T319] usb 4-1: USB disconnect, device number 26 [ 244.263325][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3052'. [ 244.311272][ T9310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.592840][ T9328] overlayfs: cannot append lower layer [ 244.593634][ T36] audit: type=1400 audit(2000000015.060:1020): avc: denied { audit_write } for pid=9325 comm="syz.6.3054" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 244.619853][ T36] audit: type=1107 audit(2000000015.060:1021): pid=9325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='€ž#ˆ‚þxî‡ÙNè†ÃÃ[ø¤ÇÀ¡„f—NÀúŠô…yí¡™~ü,²žh B\X]K^‘úäqÚX6?†Ií¥VÉq:_økÄÐQtœšØH+Ó¿íÌ X Fª' [ 244.677844][ T9341] binder: Unknown parameter '' [ 244.790823][ T36] audit: type=1326 audit(2000000015.250:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.5.3059" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02a978e929 code=0x0 [ 244.913190][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 245.053159][ T10] usb 7-1: device descriptor read/64, error -71 [ 245.293182][ T10] usb 7-1: device descriptor read/64, error -71 [ 245.492758][ T9351] FAT-fs (rnullb0): bogus number of reserved sectors [ 245.499524][ T9351] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 245.533098][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 245.663101][ T10] usb 7-1: device descriptor read/64, error -71 [ 245.743194][ T319] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 245.904374][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.916150][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.923208][ T10] usb 7-1: device descriptor read/64, error -71 [ 245.926528][ T319] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.941865][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.950840][ T319] usb 4-1: config 0 descriptor?? [ 246.033281][ T10] usb usb7-port1: attempt power cycle [ 246.373106][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 246.394507][ T10] usb 7-1: device descriptor read/8, error -71 [ 246.524229][ T10] usb 7-1: device descriptor read/8, error -71 [ 246.693070][ T319] usb 4-1: string descriptor 0 read error: -22 [ 246.763120][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 246.784121][ T10] usb 7-1: device descriptor read/8, error -71 [ 246.895167][ T319] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input30 [ 246.907871][ T319] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input31 [ 246.920345][ T36] audit: type=1400 audit(2000000017.390:1023): avc: denied { read } for pid=94 comm="acpid" name="event4" dev="devtmpfs" ino=642 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.921865][ T319] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input32 [ 246.955843][ T36] audit: type=1400 audit(2000000017.390:1024): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=642 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.961360][ T10] usb 7-1: device descriptor read/8, error -71 [ 246.980201][ T319] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input33 [ 246.991877][ T36] audit: type=1400 audit(2000000017.450:1025): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=642 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.013612][ T319] uclogic 0003:256C:006D.001B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 247.097726][ T10] usb usb7-port1: unable to enumerate USB device [ 247.113373][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.124797][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.134059][ T45] usb 4-1: USB disconnect, device number 27 [ 247.704885][ T9411] cgroup2: Unknown parameter 'obj_user' [ 247.774020][ T9422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.890673][ T9441] binder: Bad value for 'stats' [ 248.103107][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 248.153186][ T400] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 248.254442][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.266601][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.277593][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.288125][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.297311][ T10] usb 4-1: Product: syz [ 248.301987][ T10] usb 4-1: Manufacturer: 㨅匬앉ê¡á€³ë¯£èž—åŸâŒŠèœšå¼šëˆ†êª€à¸²çˆ†ê„©Þ¶ã‡¥ç­ˆï‡Ÿá¬¦ìš°è £ê¢‚湭招柄딯ﯺ↶ᇘ㴇î¼ä·°êŠ›ï¢ä¤§ìˆºáŠá—Žì²‘㣉铻 [ 248.319475][ T400] usb 7-1: Using ep0 maxpacket: 32 [ 248.326091][ T10] usb 4-1: SerialNumber: syz [ 248.332620][ T400] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.343402][ T400] usb 7-1: config 0 has no interface number 0 [ 248.350896][ T400] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.363788][ T400] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.374047][ T400] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 248.383204][ T400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.393894][ T400] usb 7-1: config 0 descriptor?? [ 248.765083][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.773792][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.782020][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.790691][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.803435][ T400] usbhid 7-1:0.1: can't add hid device: -71 [ 248.809782][ T9444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 248.814232][ T400] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 248.814517][ T10] usb 4-1: 0:2 : does not exist [ 248.837601][ T400] usb 7-1: USB disconnect, device number 7 [ 248.848351][ T10] usb 4-1: USB disconnect, device number 28 [ 248.864766][ T9451] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 248.919986][ T9454] tipc: Enabled bearer , priority 0 [ 249.133878][ T9453] tipc: Resetting bearer [ 249.149364][ T9453] tipc: Disabling bearer [ 249.307450][ T9470] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 249.351697][ T9477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.352073][ T9477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74 [ 249.430316][ T9477] rust_binder: Error in use_page_slow: ESRCH [ 249.439504][ T9477] rust_binder: use_range failure ESRCH [ 249.445709][ T9477] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 249.451258][ T9477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 249.459321][ T9477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:74 [ 249.497330][ T9481] netlink: 'syz.5.3105': attribute type 3 has an invalid length. [ 249.588941][ T9485] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 249.596266][ T9485] rust_binder: Write failure EINVAL in pid:79 [ 249.613021][ T45] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 249.684806][ T9497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.685171][ T9497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 249.692106][ T9497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:91 [ 249.723306][ T6288] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.801024][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.816473][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.834500][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.847653][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.857818][ T45] usb 4-1: Product: syz [ 249.862283][ T45] usb 4-1: Manufacturer: syz [ 249.868057][ T45] usb 4-1: SerialNumber: syz [ 250.077702][ T45] usb 4-1: 0:2 : does not exist [ 250.085606][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 250.097646][ T45] usb 4-1: USB disconnect, device number 29 [ 250.775334][ T9526] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 235) [ 250.775356][ T9526] rust_binder: Error while translating object. [ 250.786123][ T9526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.792432][ T9526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 250.802597][ T9526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:469 [ 251.153050][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 251.313093][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 251.320422][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 251.330166][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 251.340045][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 251.349507][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.361964][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.376316][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 251.392872][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 251.405086][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.414571][ T10] usb 4-1: config 0 descriptor?? [ 251.621783][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.753049][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 251.753257][ T410] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.823096][ T45] usb 4-1: USB disconnect, device number 30 [ 251.832677][ T45] usblp0: removed [ 252.113683][ T36] audit: type=1326 audit(2000000022.580:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.137212][ T36] audit: type=1326 audit(2000000022.580:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.160689][ T36] audit: type=1326 audit(2000000022.580:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.184155][ T36] audit: type=1326 audit(2000000022.580:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.207949][ T36] audit: type=1326 audit(2000000022.580:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.234855][ T36] audit: type=1326 audit(2000000022.580:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.258668][ T36] audit: type=1326 audit(2000000022.580:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.282102][ T36] audit: type=1326 audit(2000000022.580:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.305541][ T36] audit: type=1326 audit(2000000022.580:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.329036][ T36] audit: type=1326 audit(2000000022.580:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x7ffc0000 [ 252.592986][ T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 252.672313][ T9556] rust_binder: Write failure EFAULT in pid:102 [ 252.714034][ T9565] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 252.729674][ T9565] overlay: Unknown parameter 'mounts' [ 252.742961][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 252.751416][ T45] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 252.761537][ T45] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 252.771605][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 252.779707][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.788824][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.796855][ T45] usb 4-1: Product: 毹喛秓按὎㛳鶊ᤂèŸá´ã’°ê§¯î¿œàµˆé•©Ø푧ℼë§ê€¤ê´¿ë¥«ç‰ã¬­çˆšï©Šâž‘嗷ꬅꈢ段뿻瓮祫ï„ǡᘱ濬à¤ã•©í•›ê¦±í•œì¡…ꥷ뚕ï¸è´¹çŒ¦ìš­á©”집姞㉺᛬孧 [ 252.816200][ T45] usb 4-1: Manufacturer:   [ 252.820809][ T45] usb 4-1: SerialNumber: Ї [ 252.826588][ T9554] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.833906][ T9554] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.909469][ T9573] overlayfs: failed to clone upperpath [ 253.044085][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 253.054010][ T45] usb 4-1: USB disconnect, device number 31 [ 253.209664][ T9590] exFAT-fs (rnullb0): invalid boot record signature [ 253.216401][ T9590] exFAT-fs (rnullb0): failed to read boot sector [ 253.222871][ T9590] exFAT-fs (rnullb0): failed to recognize exfat type [ 253.833001][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 253.982981][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 253.989174][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.999307][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.009623][ T45] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.018724][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.026789][ T45] usb 7-1: Product: syz [ 254.030968][ T45] usb 7-1: Manufacturer: syz [ 254.033782][ T9616] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 254.035591][ T45] usb 7-1: SerialNumber: syz [ 254.451021][ T45] usb 7-1: cannot find UAC_HEADER [ 254.458140][ T45] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 254.473193][ T3644] udevd[3644]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.653216][ T400] usb 7-1: USB disconnect, device number 8 [ 255.036346][ T6289] bridge_slave_1: left allmulticast mode [ 255.042016][ T6289] bridge_slave_1: left promiscuous mode [ 255.047708][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.056120][ T6289] bridge_slave_0: left allmulticast mode [ 255.061811][ T6289] bridge_slave_0: left promiscuous mode [ 255.067507][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.227779][ T9649] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.235973][ T9649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.243228][ T9649] IPv6: NLM_F_CREATE should be set when creating new route [ 255.251915][ T6289] veth1_macvtap: left promiscuous mode [ 255.257722][ T6289] veth0_vlan: left promiscuous mode [ 255.307071][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3167'. [ 255.412968][ T400] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 255.562944][ T400] usb 7-1: Using ep0 maxpacket: 32 [ 255.569237][ T400] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.577309][ T400] usb 7-1: config 0 has no interface number 0 [ 255.583442][ T400] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.594343][ T400] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.604112][ T400] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 255.613182][ T400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.621835][ T400] usb 7-1: config 0 descriptor?? [ 256.029342][ T9642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:121 [ 256.030059][ T400] usbhid 7-1:0.1: can't add hid device: -71 [ 256.045285][ T400] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 256.054032][ T400] usb 7-1: USB disconnect, device number 9 [ 256.281773][ T9682] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3177'. [ 256.337699][ T9691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.389285][ T9702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.396165][ T9702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1071 [ 256.547935][ T9718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.852929][ T445] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 256.992945][ T445] usb 7-1: device descriptor read/64, error -71 [ 257.232941][ T445] usb 7-1: device descriptor read/64, error -71 [ 257.472929][ T445] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 257.612974][ T445] usb 7-1: device descriptor read/64, error -71 [ 257.641739][ T9748] batadv_slave_0: entered promiscuous mode [ 257.650133][ T9747] batadv_slave_0: left promiscuous mode [ 257.852991][ T445] usb 7-1: device descriptor read/64, error -71 [ 257.963319][ T445] usb usb7-port1: attempt power cycle [ 258.302961][ T445] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 258.324264][ T445] usb 7-1: device descriptor read/8, error -71 [ 258.464134][ T445] usb 7-1: device descriptor read/8, error -71 [ 258.712949][ T445] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 258.734201][ T445] usb 7-1: device descriptor read/8, error -71 [ 258.864405][ T445] usb 7-1: device descriptor read/8, error -71 [ 258.903044][ T9766] overlayfs: failed to clone upperpath [ 258.973012][ T445] usb usb7-port1: unable to enumerate USB device [ 259.588835][ T9789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.589659][ T9789] rust_binder: Error in use_page_slow: ESRCH [ 259.596347][ T9789] rust_binder: use_range failure ESRCH [ 259.602380][ T9789] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 259.607964][ T9789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 259.616030][ T9789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:126 [ 259.645657][ T9795] fuse: Unknown parameter 'fsuuid' [ 259.815324][ T6289] bridge_slave_1: left allmulticast mode [ 259.821268][ T6289] bridge_slave_1: left promiscuous mode [ 259.827712][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.843746][ T6289] bridge_slave_0: left allmulticast mode [ 259.851978][ T6289] bridge_slave_0: left promiscuous mode [ 259.857904][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.965805][ T6289] tipc: Disabling bearer [ 259.971568][ T6289] tipc: Left network mode [ 259.977890][ T6289] veth1_macvtap: left promiscuous mode [ 259.983564][ T6289] veth0_vlan: left promiscuous mode [ 260.064012][ T9821] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.071471][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.078936][ T9821] bridge_slave_0: entered allmulticast mode [ 260.085370][ T9821] bridge_slave_0: entered promiscuous mode [ 260.091923][ T9821] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.099227][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.106653][ T9821] bridge_slave_1: entered allmulticast mode [ 260.113755][ T9821] bridge_slave_1: entered promiscuous mode [ 260.165328][ T9821] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.173031][ T9821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.180785][ T9821] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.188298][ T9821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.202922][ T400] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 260.214243][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.222411][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.233915][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.241937][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.251479][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.259104][ T6290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.287364][ T9821] veth0_vlan: entered promiscuous mode [ 260.298384][ T9821] veth1_macvtap: entered promiscuous mode [ 260.363225][ T400] usb 7-1: Using ep0 maxpacket: 32 [ 260.370114][ T400] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.378323][ T400] usb 7-1: config 0 has no interface number 0 [ 260.384907][ T400] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.395992][ T400] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.405826][ T400] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 260.421592][ T400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.433851][ T400] usb 7-1: config 0 descriptor?? [ 260.439743][ T9833] rust_binder: Write failure EINVAL in pid:7 [ 260.507754][ T9837] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿ000000000000006,wfdno=0x0000000000000008,k [ 260.530346][ T9843] tipc: Started in network mode [ 260.535668][ T9843] tipc: Node identity 5ecc8ef1393a, cluster identity 4711 [ 260.543407][ T9843] tipc: Enabled bearer , priority 0 [ 260.620847][ T9858] tipc: Started in network mode [ 260.626442][ T9858] tipc: Node identity 4, cluster identity 4711 [ 260.632747][ T9858] tipc: Node number set to 4 [ 260.714144][ T6289] tipc: Resetting bearer [ 260.774099][ T9842] tipc: Resetting bearer [ 260.786799][ T9842] tipc: Disabling bearer [ 260.845031][ T400] usbhid 7-1:0.1: can't add hid device: -71 [ 260.854889][ T9820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137 [ 260.858580][ T400] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 260.873248][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 260.873271][ T36] audit: type=1326 audit(2000000031.340:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9861 comm="syz.7.3240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0ead8e929 code=0x0 [ 260.887801][ T400] usb 7-1: USB disconnect, device number 14 [ 260.944434][ T9863] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 260.952314][ T9863] rust_binder: Write failure EINVAL in pid:18 [ 261.037144][ T9865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.045619][ T9865] rust_binder: Error while translating object. [ 261.056725][ T9865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.063669][ T9865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1079 [ 261.104400][ T36] audit: type=1326 audit(2000000031.570:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.139578][ T36] audit: type=1326 audit(2000000031.570:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.166314][ T36] audit: type=1326 audit(2000000031.570:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.194575][ T36] audit: type=1326 audit(2000000031.570:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.221419][ T36] audit: type=1326 audit(2000000031.570:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.246622][ T36] audit: type=1326 audit(2000000031.570:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.275314][ T36] audit: type=1326 audit(2000000031.570:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.301867][ T36] audit: type=1326 audit(2000000031.570:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.331005][ T36] audit: type=1326 audit(2000000031.570:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb838e929 code=0x7ffc0000 [ 261.388234][ T9887] 9pnet_fd: Insufficient options for proto=fd [ 261.693576][ T9908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 261.699913][ T9908] rust_binder: Read failure Err(EFAULT) in pid:158 [ 261.727491][ T9912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.739431][ T9912] rust_binder: Error in use_page_slow: ESRCH [ 261.749770][ T9912] rust_binder: use_range failure ESRCH [ 261.756345][ T9912] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 261.763442][ T9912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 261.773150][ T9912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:160 [ 262.042876][ T319] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 262.203221][ T319] usb 7-1: Using ep0 maxpacket: 32 [ 262.212739][ T319] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.224228][ T319] usb 7-1: config 0 has no interface number 0 [ 262.231778][ T319] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.247342][ T319] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.260145][ T319] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 262.272184][ T319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.283840][ T319] usb 7-1: config 0 descriptor?? [ 262.699522][ T319] usbhid 7-1:0.1: can't add hid device: -71 [ 262.701028][ T9915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:162 [ 262.710258][ T319] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 262.737986][ T319] usb 7-1: USB disconnect, device number 15 [ 263.250588][ T9961] binder: Bad value for 'stats' [ 263.744972][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3275'. [ 264.202829][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 264.291003][ T9996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.291181][ T9997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.298055][ T9995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:177 [ 264.319265][ T9999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.329288][ T9999] rust_binder: Write failure EINVAL in pid:181 [ 264.352835][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 264.365545][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.373765][ T9] usb 8-1: config 0 has no interface number 0 [ 264.379988][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.391028][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.401097][ T9] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 264.410322][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.419141][ T9] usb 8-1: config 0 descriptor?? [ 264.830849][ T9989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 264.831318][ T9] usbhid 8-1:0.1: can't add hid device: -71 [ 264.847687][ T9] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 264.858428][ T9] usb 8-1: USB disconnect, device number 2 [ 264.999035][T10038] overlayfs: failed to clone upperpath [ 265.005758][T10040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.038805][T10044] netlink: 'syz.5.3299': attribute type 4 has an invalid length. [ 265.057555][T10045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 265.057594][T10045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1088 [ 265.079650][T10048] binder: Bad value for 'max' [ 265.372904][ T63] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 265.522772][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 265.529719][ T63] usb 7-1: config 1 interface 0 altsetting 174 endpoint 0x81 has an invalid bInterval 136, changing to 11 [ 265.541195][ T63] usb 7-1: config 1 interface 0 altsetting 174 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.554350][ T63] usb 7-1: config 1 interface 0 has no altsetting 0 [ 265.562438][ T63] usb 7-1: New USB device found, idVendor=045e, idProduct=003b, bcdDevice= 0.40 [ 265.571566][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.579615][ T63] usb 7-1: Manufacturer: 㕾쮮苨Ȕ報⣹è¯â½ŽâŸ°à¦»èˆ°éƒ…êºê¯ç ‰ê™ªç¦œêº‹â§˜ï¸œèŒ·á—«ë”±áŠ°ã«¡êžã«‘Ụ埉洛ꂗ瓭ë½æ¼•ïŽ¬ä˜ëˆ¾ä·œç¯…Ã…â»ë„³ì»¶è™ä‹‘ߺ呺ïžä·­ï»Œê…­á”²é›´èŒ‡Å¼ë›ºç³·ãµ®àµäŒ­è‹µéŽê‘ªå£Ôä´ï¬—斱ꦎ兺玾ଌ婸⦉튢៣磅⊱쟃矎æ Ñ´ã¶·è“²å€³î³—곜æ³æ«©í„풣厊඼ᴙ爃滗ꌠ乛溑蛯죉å›ä샸ឲíµí¡ì“Œ [ 265.612741][ T63] usb 7-1: SerialNumber:   [ 266.023432][ T63] usbhid 7-1:1.0: can't add hid device: -71 [ 266.029482][ T63] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 266.042940][ T63] usb 7-1: USB disconnect, device number 16 [ 266.212320][T10060] rust_binder: Write failure EFAULT in pid:1091 [ 266.291291][T10070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.299157][T10070] rust_binder: Error while translating object. [ 266.306042][T10070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 266.313628][T10070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1093 [ 266.336848][T10073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1095 [ 266.536030][T10086] netlink: 'syz.6.3313': attribute type 4 has an invalid length. [ 266.553256][T10086] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3313'. [ 266.590827][T10088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10088 comm=syz.6.3314 [ 267.312272][T10108] bpf: Bad value for 'mode' [ 267.316999][T10108] bpf: Bad value for 'mode' [ 267.321730][T10108] bpf: Bad value for 'mode' [ 267.326374][T10108] bpf: Bad value for 'mode' [ 267.331505][T10108] bpf: Bad value for 'mode' [ 267.336168][T10108] bpf: Bad value for 'mode' [ 267.340842][T10108] bpf: Bad value for 'mode' [ 267.345476][T10108] bpf: Bad value for 'mode' [ 267.350061][T10108] bpf: Bad value for 'mode' [ 267.354695][T10108] bpf: Bad value for 'mode' [ 267.359272][T10108] bpf: Bad value for 'mode' [ 267.363942][T10108] bpf: Bad value for 'mode' [ 267.368531][T10108] bpf: Bad value for 'mode' [ 267.373290][T10108] bpf: Bad value for 'mode' [ 267.377882][T10108] bpf: Bad value for 'mode' [ 267.382466][T10108] bpf: Bad value for 'mode' [ 267.387090][T10108] bpf: Bad value for 'mode' [ 267.391676][T10108] bpf: Bad value for 'mode' [ 267.396307][T10108] bpf: Bad value for 'mode' [ 267.400909][T10108] bpf: Bad value for 'mode' [ 267.405529][T10108] bpf: Bad value for 'mode' [ 267.410109][T10108] bpf: Bad value for 'mode' [ 267.414724][T10108] bpf: Bad value for 'mode' [ 267.419364][T10108] bpf: Bad value for 'mode' [ 267.423974][T10108] bpf: Bad value for 'mode' [ 267.428559][T10108] bpf: Bad value for 'mode' [ 267.433239][T10108] bpf: Bad value for 'mode' [ 267.437825][T10108] bpf: Bad value for 'mode' [ 267.442392][T10108] bpf: Bad value for 'mode' [ 267.447099][T10108] bpf: Bad value for 'mode' [ 267.451682][T10108] bpf: Bad value for 'mode' [ 267.456305][T10108] bpf: Bad value for 'mode' [ 267.460907][T10108] bpf: Bad value for 'mode' [ 267.465530][T10108] bpf: Bad value for 'mode' [ 267.470108][T10108] bpf: Bad value for 'mode' [ 267.474722][T10108] bpf: Bad value for 'mode' [ 267.479323][T10108] bpf: Bad value for 'mode' [ 267.483939][T10108] bpf: Bad value for 'mode' [ 267.488549][T10108] bpf: Bad value for 'mode' [ 267.493181][T10108] bpf: Bad value for 'mode' [ 267.497811][T10108] bpf: Bad value for 'mode' [ 267.502415][T10108] bpf: Bad value for 'mode' [ 267.507066][T10108] bpf: Bad value for 'mode' [ 267.511679][T10108] bpf: Bad value for 'mode' [ 267.516579][T10108] bpf: Bad value for 'mode' [ 267.521370][T10108] bpf: Bad value for 'mode' [ 267.526473][T10108] bpf: Bad value for 'mode' [ 267.531083][T10108] bpf: Bad value for 'mode' [ 267.535731][T10108] bpf: Bad value for 'mode' [ 267.540430][T10108] bpf: Bad value for 'mode' [ 267.545254][T10108] bpf: Bad value for 'mode' [ 267.549866][T10108] bpf: Bad value for 'mode' [ 267.554506][T10108] bpf: Bad value for 'mode' [ 267.559102][T10108] bpf: Bad value for 'mode' [ 267.563786][T10108] bpf: Bad value for 'mode' [ 267.568388][T10108] bpf: Bad value for 'mode' [ 267.573188][T10108] bpf: Bad value for 'mode' [ 267.578032][T10108] bpf: Bad value for 'mode' [ 267.582655][T10108] bpf: Bad value for 'mode' [ 267.587478][T10108] bpf: Bad value for 'mode' [ 267.592105][T10108] bpf: Bad value for 'mode' [ 267.596974][T10108] bpf: Bad value for 'mode' [ 267.601563][T10108] bpf: Bad value for 'mode' [ 267.606399][T10108] bpf: Bad value for 'mode' [ 267.610985][T10108] bpf: Bad value for 'mode' [ 267.631217][T10117] binder: Unknown parameter 'defcontext01777777777777777777777' [ 267.633859][T10118] rust_binder: Error while translating object. [ 267.638943][T10118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 267.645607][T10118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 267.831705][T10129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.902773][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 268.062734][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 268.069068][ T9] usb 8-1: config 0 has an invalid interface number: 57 but max is 0 [ 268.077237][ T63] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 268.084850][ T9] usb 8-1: config 0 has no interface number 0 [ 268.090949][ T9] usb 8-1: config 0 interface 57 has no altsetting 0 [ 268.099278][ T9] usb 8-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00 [ 268.108494][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.116601][ T9] usb 8-1: Product: syz [ 268.120787][ T9] usb 8-1: Manufacturer: syz [ 268.125431][ T9] usb 8-1: SerialNumber: syz [ 268.130818][ T9] usb 8-1: config 0 descriptor?? [ 268.136681][ T9] usb-storage 8-1:0.57: USB Mass Storage device detected [ 268.144751][ T9] scsi host1: usb-storage 8-1:0.57 [ 268.222745][ T63] usb 7-1: device descriptor read/64, error -71 [ 268.462806][ T63] usb 7-1: device descriptor read/64, error -71 [ 268.702859][ T63] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 268.832783][ T63] usb 7-1: device descriptor read/64, error -71 [ 268.856116][T10148] overlayfs: failed to clone upperpath [ 268.873598][T10150] overlayfs: failed to clone upperpath [ 268.956363][T10161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=10161 comm=syz.5.3337 [ 268.969238][T10161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10161 comm=syz.5.3337 [ 268.982360][T10161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10161 comm=syz.5.3337 [ 268.995696][T10161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=10161 comm=syz.5.3337 [ 269.072723][ T63] usb 7-1: device descriptor read/64, error -71 [ 269.146985][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 269.147005][ T36] audit: type=1400 audit(2000000039.610:1105): avc: denied { connect } for pid=10179 comm="syz.5.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.192886][ T63] usb usb7-port1: attempt power cycle [ 269.294103][T10193] 9pnet_fd: Insufficient options for proto=fd [ 269.336321][T10197] fuse: Bad value for 'group_id' [ 269.342335][T10197] fuse: Bad value for 'group_id' [ 269.401444][ T36] audit: type=1400 audit(2000000039.860:1106): avc: denied { setattr } for pid=10207 comm="syz.5.3353" name="" dev="pipefs" ino=57543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 269.532716][ T63] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 269.553965][ T63] usb 7-1: device descriptor read/8, error -71 [ 269.683775][ T63] usb 7-1: device descriptor read/8, error -71 [ 269.684399][T10220] overlayfs: failed to clone upperpath [ 269.922713][ T63] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 269.943735][ T63] usb 7-1: device descriptor read/8, error -71 [ 270.073938][ T63] usb 7-1: device descriptor read/8, error -71 [ 270.182923][ T63] usb usb7-port1: unable to enumerate USB device [ 270.234498][T10228] overlayfs: failed to clone lowerpath [ 270.273094][T10234] netlink: 'syz.5.3360': attribute type 63 has an invalid length. [ 270.281076][T10234] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3360'. [ 270.290115][T10234] gretap0: entered allmulticast mode [ 270.295712][T10234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.852432][T10254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10254 comm=syz.6.3366 [ 271.244287][T10277] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 271.294169][ T36] audit: type=1400 audit(2000000041.760:1107): avc: denied { read } for pid=10284 comm="syz.7.3376" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 271.335528][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 271.429037][T10295] /dev/rnullb0: Can't open blockdev [ 271.465938][T10304] overlayfs: failed to clone upperpath [ 271.493713][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.505454][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.521600][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 271.533191][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.553738][ T9] usb 7-1: config 0 descriptor?? [ 271.577942][ T36] audit: type=1400 audit(2000000042.040:1108): avc: denied { map } for pid=10309 comm="syz.0.3385" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 271.609873][T10310] overlayfs: missing 'lowerdir' [ 271.615213][ T36] audit: type=1400 audit(2000000042.040:1109): avc: denied { execute } for pid=10309 comm="syz.0.3385" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 271.617793][T10310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.822741][T10132] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 271.983122][T10132] usb 8-1: device firmware changed [ 271.988592][ T319] usb 8-1: USB disconnect, device number 3 [ 272.174481][T10330] 9p: Unknown access argument ‘er: -22 [ 272.202697][ T319] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 272.245688][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 272.251934][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 272.261028][ T9] usb 7-1: USB disconnect, device number 21 [ 272.362679][ T319] usb 8-1: Using ep0 maxpacket: 32 [ 272.368970][ T319] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.381177][ T319] usb 8-1: config 0 has no interface number 0 [ 272.387562][ T319] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.398518][ T319] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.408704][ T319] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 272.417878][ T319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.426729][ T319] usb 8-1: config 0 descriptor?? [ 272.565104][T10365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.566615][T10365] rust_binder: Error while translating object. [ 272.572089][T10365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 272.578729][T10365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1136 [ 272.857324][T10306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 272.865418][ T319] usbhid 8-1:0.1: can't add hid device: -71 [ 272.881061][ T319] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 272.898381][ T319] usb 8-1: USB disconnect, device number 4 [ 273.010832][T10396] cgroup2: Unknown parameter 'pids_local' [ 273.017053][T10396] rust_binder: Got transaction with invalid offset. [ 273.017112][T10396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.024080][T10396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1155 [ 273.065579][ T36] audit: type=1400 audit(2000000043.530:1110): avc: denied { setopt } for pid=10400 comm="syz.0.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.117375][T10404] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 273.117405][T10404] rust_binder: Error while translating object. [ 273.129875][T10404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.136283][T10404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1163 [ 273.297099][T10407] SELinux: failed to load policy [ 273.324755][T10413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.337437][T10415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.513101][T10421] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 273.583675][ T36] audit: type=1326 audit(2000000044.050:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10429 comm="syz.0.3427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdb838e929 code=0x0 [ 273.754309][T10434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.755830][T10434] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 273.762363][T10434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 273.771906][T10434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:238 [ 273.830638][T10442] binder: Unknown parameter 'stïZats' [ 273.862881][T10445] batadv_slave_0: entered promiscuous mode [ 273.864637][T10447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:244 [ 273.870193][T10443] batadv_slave_0: left promiscuous mode [ 274.460260][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 274.470757][T10465] netlink: 'syz.0.3439': attribute type 11 has an invalid length. [ 274.479142][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 274.489424][ T36] audit: type=1400 audit(2000000044.950:1112): avc: denied { listen } for pid=10464 comm="syz.0.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.511630][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 274.520175][ T36] audit: type=1400 audit(2000000044.960:1113): avc: denied { accept } for pid=10470 comm="syz.5.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 274.528926][T10465] rust_binder: Error in use_page_slow: ESRCH [ 274.539944][T10465] rust_binder: use_range failure ESRCH [ 274.540913][ T36] audit: type=1400 audit(2000000044.970:1114): avc: denied { bpf } for pid=10464 comm="syz.0.3439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.545995][T10465] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 274.546014][T10465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 274.546047][T10465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1185 [ 274.682623][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 274.704863][ T9] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 274.714055][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.722088][ T9] usb 8-1: Product: syz [ 274.732608][ T9] usb 8-1: Manufacturer: syz [ 274.740573][ T9] usb 8-1: SerialNumber: syz [ 274.749543][ T9] usb 8-1: config 0 descriptor?? [ 275.251664][T10483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:250 [ 275.318341][ T9] usb 8-1: USB disconnect, device number 5 [ 275.348892][T10488] rust_binder: Write failure EFAULT in pid:126 [ 275.650839][ T36] audit: type=1400 audit(2000000046.111:1115): avc: denied { map } for pid=10507 comm="syz.5.3456" path="socket:[58355]" dev="sockfs" ino=58355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 275.681844][T10513] PM: Enabling pm_trace changes system date and time during resume. [ 275.681844][T10513] PM: Correct system time has to be restored manually after resume. [ 275.729825][T10527] fuse: Unknown parameter '' [ 275.729847][ T36] audit: type=1400 audit(2000000046.191:1116): avc: denied { mounton } for pid=10526 comm="syz.5.3460" path="/file0" dev="ramfs" ino=58628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 275.737029][T10527] incfs: Error accessing: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 275.756926][ T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 275.757443][T10527] incfs: mount failed -36 [ 275.860222][ T36] audit: type=1400 audit(2000000046.201:1117): avc: denied { execute } for pid=10526 comm="syz.5.3460" name="file0" dev="ramfs" ino=58628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 275.882302][ T36] audit: type=1400 audit(2000000046.201:1118): avc: denied { execute_no_trans } for pid=10526 comm="syz.5.3460" path="/file0" dev="ramfs" ino=58628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 275.920981][T10529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.003948][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 276.016257][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 276.026616][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.035791][ T9] usb 8-1: Product: syz [ 276.040216][ T9] usb 8-1: Manufacturer: syz [ 276.046174][ T9] usb 8-1: SerialNumber: syz [ 276.052269][ T9] usb 8-1: config 0 descriptor?? [ 276.289574][ T9] usb 8-1: USB disconnect, device number 6 [ 276.886189][T10605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.886310][T10604] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 276.913822][T10559] rust_binder: Read failure Err(EFAULT) in pid:268 [ 277.037912][T10611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.152630][ T445] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 277.280041][T10617] bridge0: port 3(gretap0) entered blocking state [ 277.287348][T10617] bridge0: port 3(gretap0) entered disabled state [ 277.298302][T10617] gretap0: entered promiscuous mode [ 277.305078][T10617] bridge0: port 3(gretap0) entered blocking state [ 277.312197][T10617] bridge0: port 3(gretap0) entered forwarding state [ 277.324828][ T445] usb 8-1: unable to get BOS descriptor or descriptor too short [ 277.335404][ T445] usb 8-1: not running at top speed; connect to a high speed hub [ 277.349986][ T445] usb 8-1: config 0 has an invalid interface number: 233 but max is 0 [ 277.363045][ T445] usb 8-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 277.378664][ T445] usb 8-1: config 0 has no interface number 0 [ 277.385436][ T445] usb 8-1: config 0 interface 233 has no altsetting 0 [ 277.394005][ T445] usb 8-1: New USB device found, idVendor=0572, idProduct=1329, bcdDevice=61.83 [ 277.403795][ T445] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.412155][ T445] usb 8-1: Product: syz [ 277.417629][ T445] usb 8-1: Manufacturer: syz [ 277.424209][ T445] usb 8-1: SerialNumber: syz [ 277.432492][ T445] usb 8-1: config 0 descriptor?? [ 277.696910][ T445] usb 8-1: USB disconnect, device number 7 [ 277.980292][T10634] FAT-fs (rnullb0): bogus number of reserved sectors [ 277.987094][T10634] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 278.217917][ T36] audit: type=1400 audit(2000000048.681:1119): avc: denied { append } for pid=10640 comm="syz.7.3498" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.462591][ T445] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 278.612573][ T445] usb 8-1: Using ep0 maxpacket: 16 [ 278.618818][ T445] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.629737][ T445] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.639540][ T445] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 278.648701][ T445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.657437][ T445] usb 8-1: config 0 descriptor?? [ 278.687998][T10656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.689025][T10656] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 278.695561][T10656] rust_binder: Error while translating object. [ 278.704450][T10656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 278.710666][T10656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1196 [ 278.733250][T10658] rust_binder: Write failure EINVAL in pid:1198 [ 278.772248][ T36] audit: type=1400 audit(2000000049.231:1120): avc: denied { sqpoll } for pid=10657 comm="syz.0.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 278.863914][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.874281][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.920329][ T445] usbhid 8-1:0.0: can't add hid device: -71 [ 278.938107][ T445] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 278.951030][ T445] usb 8-1: USB disconnect, device number 8 [ 278.978682][T10670] rust_binder: Write failure EFAULT in pid:156 [ 279.074633][T10668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 279.612550][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 279.782578][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 279.792456][ T9] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 279.808527][ T9] usb 7-1: config 0 has no interface number 0 [ 279.822556][ T9] usb 7-1: config 0 interface 49 has no altsetting 0 [ 279.832713][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19 [ 279.844021][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.859498][ T9] usb 7-1: Product: syz [ 279.869566][ T9] usb 7-1: Manufacturer: syz [ 279.882553][ T9] usb 7-1: SerialNumber: syz [ 279.882615][T10712] binder: Unknown parameter 'mask' [ 279.906748][ T9] usb 7-1: config 0 descriptor?? [ 279.930431][ T9] snd-usb-audio 7-1:0.49: probe with driver snd-usb-audio failed with error -2 [ 279.946890][T10719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 279.948013][ T3644] udevd[3644]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.49/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 279.980474][T10726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:167 [ 280.002448][T10729] overlayfs: failed to clone upperpath [ 280.025213][T10729] overlayfs: failed to resolve './file1': -2 [ 280.137737][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3532'. [ 280.147101][ T9] usb 7-1: USB disconnect, device number 22 [ 280.148461][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3532'. [ 280.168879][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10745 comm=syz.5.3532 [ 280.181710][T10745] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3532'. [ 280.224490][T10752] random: crng reseeded on system resumption [ 280.225745][ T36] audit: type=1400 audit(2000000050.691:1121): avc: denied { append } for pid=10751 comm="syz.0.3534" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.261095][ T36] audit: type=1400 audit(2000000050.721:1122): avc: denied { ioctl } for pid=10751 comm="syz.0.3534" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.441782][T10780] overlayfs: failed to resolve './file1': -2 [ 280.460696][ T36] audit: type=1400 audit(2000000050.921:1123): avc: denied { mounton } for pid=10781 comm="syz.0.3543" path="/434/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 280.463482][T10782] incfs: mount failed -22 [ 280.490110][T10782] incfs: mount failed -22 [ 280.549344][ T36] audit: type=1400 audit(2000000051.011:1124): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 280.569766][ T36] audit: type=1400 audit(2000000051.031:1125): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 280.681319][ T6289] bridge_slave_1: left allmulticast mode [ 280.687158][ T6289] bridge_slave_1: left promiscuous mode [ 280.692913][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.700704][ T6289] bridge_slave_0: left allmulticast mode [ 280.706614][ T6289] bridge_slave_0: left promiscuous mode [ 280.712302][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.825255][ T6289] veth1_macvtap: left promiscuous mode [ 280.830956][ T6289] veth0_vlan: left promiscuous mode [ 280.922579][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 280.948027][T10801] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.955200][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.962450][T10801] bridge_slave_0: entered allmulticast mode [ 280.967012][ T36] audit: type=1326 audit(2000000051.431:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.6.3553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54ba78e929 code=0x0 [ 280.969597][T10801] bridge_slave_0: entered promiscuous mode [ 280.998055][T10801] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.005238][T10801] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.012328][T10801] bridge_slave_1: entered allmulticast mode [ 281.018979][T10801] bridge_slave_1: entered promiscuous mode [ 281.044695][T10807] lo: entered promiscuous mode [ 281.051990][T10807] lo: left promiscuous mode [ 281.074713][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 281.088960][ T10] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 281.103433][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.107245][T10801] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.119660][T10801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.122521][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.127033][T10801] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.134903][ T10] usb 8-1: Product: syz [ 281.141903][T10801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.146103][ T10] usb 8-1: Manufacturer: syz [ 281.158564][ T10] usb 8-1: SerialNumber: syz [ 281.176015][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.183538][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.193980][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.201162][ T6289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.215952][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.223088][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.254683][T10801] veth0_vlan: entered promiscuous mode [ 281.269065][T10801] veth1_macvtap: entered promiscuous mode [ 281.282182][ T36] audit: type=1326 audit(2000000051.741:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10815 comm="syz.5.3556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02a978e929 code=0x0 [ 281.365357][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.373997][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.382067][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.391289][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.399535][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.409287][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.426034][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.427667][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3557'. [ 281.441781][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.450043][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3557'. [ 281.453506][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.470006][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.479955][T10795] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 281.495705][ T10] cdc_ncm 8-1:1.0: bind() failure [ 281.507445][T10826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10826 comm=syz.8.3557 [ 281.508307][ T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 281.522167][T10826] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3557'. [ 281.527514][ T10] cdc_ncm 8-1:1.1: bind() failure [ 281.544750][ T10] usb 8-1: USB disconnect, device number 9 [ 281.872744][ T445] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 282.044289][ T445] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 282.055275][ T445] usb 9-1: config 0 has no interface number 0 [ 282.061477][ T445] usb 9-1: config 0 interface 41 has no altsetting 0 [ 282.069971][ T445] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 282.079394][ T445] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.087741][ T445] usb 9-1: Product: syz [ 282.092049][ T445] usb 9-1: Manufacturer: syz [ 282.096710][ T445] usb 9-1: SerialNumber: syz [ 282.102591][ T445] usb 9-1: config 0 descriptor?? [ 282.108654][ T445] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 282.310845][ T445] usb 9-1: USB disconnect, device number 2 [ 282.516234][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3570'. [ 282.528043][T10870] rust_binder: inc_ref_done called when no active inc_refs [ 282.917942][T10883] exFAT-fs (rnullb0): invalid boot record signature [ 282.933786][T10883] exFAT-fs (rnullb0): failed to read boot sector [ 282.942156][T10883] exFAT-fs (rnullb0): failed to recognize exfat type [ 283.311840][T10893] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3580'. [ 283.583905][T10900] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 283.619495][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3585'. [ 284.052543][ T445] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 284.212567][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 284.213810][ T445] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 284.231872][ T445] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.241712][ T445] usb 9-1: config 0 descriptor?? [ 284.372510][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 284.381001][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.388842][ T9] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 284.400836][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.411177][ T9] usb 8-1: config 0 descriptor?? [ 284.458198][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.469432][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.821521][ T9] uclogic 0003:5543:0522.001C: collection stack underflow [ 284.828776][ T9] uclogic 0003:5543:0522.001C: item 0 0 0 12 parsing failed [ 284.836404][ T9] uclogic 0003:5543:0522.001C: parse failed [ 284.842472][ T9] uclogic 0003:5543:0522.001C: probe with driver uclogic failed with error -22 [ 284.991910][T10923] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.021178][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.036923][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.097586][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.106853][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.123307][ T10] usb 8-1: USB disconnect, device number 10 [ 285.232469][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 285.393714][ T9] usb 7-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 285.410217][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 285.421331][ T9] usb 7-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 285.431800][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.441502][ T9] usb 7-1: Product: syz [ 285.447019][ T9] usb 7-1: Manufacturer: syz [ 285.450197][T10939] xfrm0: mtu less than device minimum [ 285.451866][ T9] usb 7-1: SerialNumber: syz [ 285.472448][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 285.481322][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 285.490884][ T9] r8152 7-1:0.0: Expected endpoints are not found [ 285.588401][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3598'. [ 285.707753][T10923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 285.754482][ T9] r8152-cfgselector 7-1: USB disconnect, device number 23 [ 285.814300][ T445] usb 9-1: Cannot set autoneg [ 285.820835][ T445] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 285.834897][ T445] usb 9-1: USB disconnect, device number 3 [ 286.289701][T10950] binder: Unknown parameter 'zw' [ 286.311491][T10954] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3602'. [ 286.342260][T10959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 286.342303][T10959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:318 [ 286.353383][T10959] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 286.364872][T10959] rust_binder: Read failure Err(EFAULT) in pid:318 [ 286.390482][T10962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.508002][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3608'. [ 286.543747][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3609'. [ 286.567887][T10978] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 286.932542][ T45] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 287.092516][ T45] usb 8-1: Using ep0 maxpacket: 32 [ 287.100025][ T45] usb 8-1: unable to get BOS descriptor or descriptor too short [ 287.110054][ T45] usb 8-1: config 8 has an invalid interface number: 193 but max is 0 [ 287.120853][ T45] usb 8-1: config 8 has no interface number 0 [ 287.129391][ T45] usb 8-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04 [ 287.139271][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.147838][ T45] usb 8-1: Product: syz [ 287.153346][ T45] usb 8-1: Manufacturer: syz [ 287.158836][ T45] usb 8-1: SerialNumber: syz [ 287.300518][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3618'. [ 287.481336][T11019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:335 [ 287.644485][T11021] raw_sendmsg: syz.8.3623 forgot to set AF_INET. Fix it! [ 287.740322][T11030] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 287.753607][ T45] snd-usb-audio 8-1:8.193: probe with driver snd-usb-audio failed with error -71 [ 287.765898][ T45] usb 8-1: USB disconnect, device number 11 [ 287.792748][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3628'. [ 288.006970][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3630'. [ 288.052415][T11045] binder: Bad value for 'stats' [ 288.058027][ T400] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 288.068502][T11045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 288.068845][T11045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 288.077048][T11045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:339 [ 288.175385][T11052] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3635'. [ 288.232599][ T400] usb 9-1: Using ep0 maxpacket: 16 [ 288.240105][ T400] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 288.251068][ T400] usb 9-1: config 0 has no interface number 0 [ 288.261167][ T400] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 288.275875][ T400] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 288.286623][ T400] usb 9-1: config 0 interface 41 has no altsetting 0 [ 288.297699][ T400] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 288.311621][ T400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.321364][ T400] usb 9-1: Product: syz [ 288.326110][ T400] usb 9-1: Manufacturer: syz [ 288.333010][ T400] usb 9-1: SerialNumber: syz [ 288.354742][ T400] usb 9-1: config 0 descriptor?? [ 288.360211][T11037] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 288.369610][T11037] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 288.492584][ T45] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 288.582102][T11036] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 288.591063][T11036] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 288.612448][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 288.632502][ T45] usb 7-1: device descriptor read/64, error -71 [ 288.762414][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 288.769578][ T9] usb 8-1: config 0 has an invalid interface number: 49 but max is 0 [ 288.780710][ T9] usb 8-1: config 0 has no interface number 0 [ 288.788676][ T9] usb 8-1: config 0 interface 49 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.806883][ T9] usb 8-1: config 0 interface 49 has no altsetting 0 [ 288.820582][ T400] Error reading MAC address [ 288.826758][ T400] sr9700 9-1:0.41: probe with driver sr9700 failed with error -71 [ 288.837024][ T9] usb 8-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19 [ 288.863648][ T400] usb 9-1: USB disconnect, device number 4 [ 288.873128][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.892404][ T45] usb 7-1: device descriptor read/64, error -71 [ 288.893652][ T9] usb 8-1: Product: syz [ 288.914933][T11087] overlayfs: failed to resolve './file0': -2 [ 288.919011][ T9] usb 8-1: Manufacturer: syz [ 288.929164][ T9] usb 8-1: SerialNumber: syz [ 288.935521][ T9] usb 8-1: config 0 descriptor?? [ 289.097856][T11105] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 289.142483][ T45] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 289.168432][ T445] usb 8-1: USB disconnect, device number 12 [ 289.292670][ T45] usb 7-1: device descriptor read/64, error -71 [ 289.532487][ T45] usb 7-1: device descriptor read/64, error -71 [ 289.642528][ T45] usb usb7-port1: attempt power cycle [ 289.982498][ T45] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 290.013583][ T45] usb 7-1: device descriptor read/8, error -71 [ 290.143542][ T45] usb 7-1: device descriptor read/8, error -71 [ 290.165073][ T36] audit: type=1326 audit(2000000001.760:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.7.3660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0ead8e929 code=0x0 [ 290.228218][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3663'. [ 290.382423][ T45] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 290.404197][ T45] usb 7-1: device descriptor read/8, error -71 [ 290.533575][ T45] usb 7-1: device descriptor read/8, error -71 [ 290.642538][ T45] usb usb7-port1: unable to enumerate USB device [ 291.149437][T11149] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 291.149465][T11149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 291.158315][T11149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:259 [ 291.195365][T11152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261 [ 291.949700][ T36] audit: type=1400 audit(2000000003.540:1129): avc: denied { listen } for pid=11168 comm="syz.5.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 292.256246][T11177] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 292.682352][ T445] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 292.775738][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.783814][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.791783][T11192] bridge_slave_0: entered allmulticast mode [ 292.799847][T11192] bridge_slave_0: entered promiscuous mode [ 292.808130][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.818531][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.825814][T11192] bridge_slave_1: entered allmulticast mode [ 292.832698][T11192] bridge_slave_1: entered promiscuous mode [ 292.852341][ T445] usb 7-1: Using ep0 maxpacket: 16 [ 292.876887][ T445] usb 7-1: config 0 has no interfaces? [ 292.884625][ T445] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.904049][ T445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.918588][ T445] usb 7-1: Product: syz [ 292.926092][ T445] usb 7-1: Manufacturer: syz [ 292.931591][ T445] usb 7-1: SerialNumber: syz [ 292.938662][ T445] usb 7-1: config 0 descriptor?? [ 292.980108][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.988881][T11192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.996271][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.004445][T11192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.031744][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.040387][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.052735][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.060837][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.071586][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.080433][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.111670][T11192] veth0_vlan: entered promiscuous mode [ 293.124809][T11192] veth1_macvtap: entered promiscuous mode [ 293.149245][T11184] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3680'. [ 293.166607][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.177419][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.271547][T11204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276 [ 293.319861][ T445] usb 7-1: USB disconnect, device number 28 [ 294.179188][T11221] rust_binder: Write failure EINVAL in pid:13 [ 294.179952][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3693'. [ 294.203619][T11223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.203764][T11224] rust_binder: Write failure EINVAL in pid:13 [ 294.574863][T11248] rust_binder: Write failure EFAULT in pid:22 [ 294.689815][T11213] sit0: entered promiscuous mode [ 294.718826][T11213] netlink: 'syz.6.3690': attribute type 1 has an invalid length. [ 294.745579][T11213] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3690'. [ 294.845276][ T36] audit: type=1400 audit(2000000006.440:1130): avc: denied { add_name } for pid=11258 comm="syz.5.3704" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.869745][ T36] audit: type=1400 audit(2000000006.440:1131): avc: denied { create } for pid=11258 comm="syz.5.3704" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.938406][ T36] audit: type=1400 audit(2000000006.440:1132): avc: denied { associate } for pid=11258 comm="syz.5.3704" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 294.992863][ T36] audit: type=1400 audit(2000000006.440:1133): avc: denied { create } for pid=11260 comm="syz.5.3704" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 295.051422][T11269] rust_binder: Failed copying remainder into alloc: EFAULT [ 295.051454][T11269] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 295.069732][T11269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 295.082318][T11269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 295.146077][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3710'. [ 295.209496][T11281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 295.253671][T11285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 295.278215][T11285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:303 [ 295.762319][ T319] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 295.782899][ T445] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 295.834177][ T10] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 295.852521][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.952299][ T445] usb 7-1: Using ep0 maxpacket: 32 [ 295.958841][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3723'. [ 295.967417][ T445] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.977159][ T445] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.986409][ T319] usb 8-1: config 0 has an invalid interface number: 104 but max is 0 [ 295.996248][ T319] usb 8-1: config 0 has no interface number 0 [ 296.004011][ T445] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 296.015077][ T319] usb 8-1: config 0 interface 104 has no altsetting 0 [ 296.022856][ T445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.036677][ T445] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 296.048837][ T445] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 296.063084][ T445] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 296.073600][ T445] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.083894][ T319] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 296.093747][ T319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.102093][ T319] usb 8-1: Product: syz [ 296.106975][ T319] usb 8-1: Manufacturer: syz [ 296.111854][ T445] usb 7-1: config 0 descriptor?? [ 296.117119][ T319] usb 8-1: SerialNumber: syz [ 296.124047][ T319] usb 8-1: config 0 descriptor?? [ 296.226414][T11324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:56 [ 296.322885][ T445] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 296.337502][ T10] usb 8-1: USB disconnect, device number 13 [ 296.522752][ C1] usblp0: nonzero read bulk status received: -71 [ 296.522816][ T10] usb 7-1: USB disconnect, device number 29 [ 296.537743][ T10] usblp0: removed [ 296.764765][T11332] overlayfs: failed to clone upperpath [ 296.779423][T11332] overlayfs: failed to clone upperpath [ 296.870127][T11345] tmpfs: Unknown parameter 'ap' [ 296.954612][T11346] fuse: Bad value for 'rootmode' [ 297.025718][ T36] audit: type=1326 audit(2000000008.620:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.7.3738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0ead8e929 code=0x0 [ 297.055075][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 297.078572][T11355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:368 [ 297.312315][ T445] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 297.462304][ T445] usb 8-1: device descriptor read/64, error -71 [ 297.702302][ T445] usb 8-1: device descriptor read/64, error -71 [ 297.715902][T11371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.755766][ T36] audit: type=1400 audit(2000000009.350:1135): avc: denied { read } for pid=11372 comm="syz.5.3747" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 297.791930][T11371] rust_binder: Error in use_page_slow: ESRCH [ 297.791958][T11371] rust_binder: use_range failure ESRCH [ 297.798502][T11371] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 297.805752][T11371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 297.815055][ T36] audit: type=1400 audit(2000000009.390:1136): avc: denied { map } for pid=11370 comm="syz.6.3746" path="socket:[64750]" dev="sockfs" ino=64750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.823139][T11371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:374 [ 297.841588][ T36] audit: type=1400 audit(2000000009.390:1137): avc: denied { accept } for pid=11370 comm="syz.6.3746" path="socket:[64750]" dev="sockfs" ino=64750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.915294][T11376] binder: Unknown parameter 'appraise_type' [ 297.935514][T11378] SELinux: security_context_str_to_sid () failed with errno=-22 [ 297.962270][ T445] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 297.972579][T11380] rust_binder: Write failure EFAULT in pid:380 [ 297.979002][T11382] overlayfs: failed to resolve './file0': -2 [ 297.991243][T11385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:382 [ 298.092353][ T445] usb 8-1: device descriptor read/64, error -71 [ 298.272379][ T306] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 298.342469][ T445] usb 8-1: device descriptor read/64, error -71 [ 298.422339][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 298.429846][ T306] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 298.440382][ T306] usb 6-1: config 0 has no interface number 0 [ 298.450872][ T306] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 298.461110][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.470034][ T445] usb usb8-port1: attempt power cycle [ 298.476999][ T306] usb 6-1: Product: syz [ 298.481545][ T306] usb 6-1: Manufacturer: syz [ 298.488424][ T306] usb 6-1: SerialNumber: syz [ 298.495986][ T306] usb 6-1: config 0 descriptor?? [ 298.503222][ T306] smsc95xx v2.0.0 [ 298.544150][T11401] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 298.548124][T11400] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 298.555136][T11401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.564974][T11400] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.748886][T11404] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 298.762271][ T36] audit: type=1400 audit(2000000010.350:1138): avc: denied { search } for pid=11406 comm="syz.8.3760" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 298.787096][ T36] audit: type=1400 audit(2000000010.350:1139): avc: denied { read } for pid=11406 comm="syz.8.3760" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 298.812134][ T36] audit: type=1400 audit(2000000010.350:1140): avc: denied { open } for pid=11406 comm="syz.8.3760" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 298.839207][ T445] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 298.862394][T11413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=11413 comm=syz.6.3762 [ 298.878816][T11413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11413 comm=syz.6.3762 [ 298.894187][T11413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11413 comm=syz.6.3762 [ 298.895030][ T445] usb 8-1: device descriptor read/8, error -71 [ 298.908284][T11413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11413 comm=syz.6.3762 [ 298.915241][ T306] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 298.946697][ T306] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 298.970421][T11419] overlayfs: failed to clone upperpath [ 298.978095][T11419] overlayfs: failed to clone lowerpath [ 299.043875][ T445] usb 8-1: device descriptor read/8, error -71 [ 299.157687][ T306] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 299.169588][ T306] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 299.181539][ T306] usb 6-1: USB disconnect, device number 2 [ 299.282348][ T445] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 299.303791][ T445] usb 8-1: device descriptor read/8, error -71 [ 299.434489][ T445] usb 8-1: device descriptor read/8, error -71 [ 299.552408][ T445] usb usb8-port1: unable to enumerate USB device [ 299.686499][ T445] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 299.702881][ T445] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.740404][T11455] fido_id[11455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.139422][T11467] 9pnet_fd: Insufficient options for proto=fd [ 300.382320][ T445] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 300.479588][T11476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 300.480447][T11476] rust_binder: Read failure Err(EFAULT) in pid:90 [ 300.504550][T11478] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3786'. [ 300.534524][ T445] usb 8-1: config 1 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 300.548708][ T445] usb 8-1: config 1 interface 0 altsetting 89 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 300.574800][ T445] usb 8-1: config 1 interface 0 has no altsetting 0 [ 300.578324][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3789'. [ 300.585386][ T445] usb 8-1: string descriptor 0 read error: -22 [ 300.599249][ T445] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40 [ 300.610071][ T445] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.620030][T11467] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 300.629540][T11467] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 300.746627][T11495] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 300.815181][T11498] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 300.864497][T11467] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 300.864528][T11467] rust_binder: Error while translating object. [ 300.877038][T11467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.885418][T11467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 301.062526][T11502] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 301.420578][T11518] rust_binder: Error while translating object. [ 301.420617][T11518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 301.428161][T11518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 301.452586][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3799'. [ 301.702205][ T319] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 301.852254][ T319] usb 6-1: Using ep0 maxpacket: 8 [ 301.859832][ T319] usb 6-1: unable to get BOS descriptor or descriptor too short [ 301.870324][ T319] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 301.881221][ T319] usb 6-1: config 0 has no interface number 0 [ 301.888139][ T319] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 301.902207][ T319] usb 6-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 301.916212][ T319] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 301.929046][ T319] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 301.941900][ T319] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 301.954385][ T319] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 301.966479][ T319] usb 6-1: config 0 interface 122 has no altsetting 0 [ 301.975759][ T319] usb 6-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 301.986444][ T319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.996638][ T319] usb 6-1: Product: syz [ 302.001975][ T319] usb 6-1: Manufacturer: syz [ 302.008917][ T319] usb 6-1: SerialNumber: syz [ 302.014822][ T36] audit: type=1400 audit(2000000013.610:1141): avc: denied { lock } for pid=11532 comm="syz.6.3804" path="socket:[65952]" dev="sockfs" ino=65952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.043750][ T319] usb 6-1: config 0 descriptor?? [ 302.046718][T11536] fuse: Bad value for 'rootmode' [ 302.055922][T11524] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 302.067078][T11524] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 302.083041][T11542] fuse: Bad value for 'fd' [ 302.212464][T11552] overlayfs: failed to clone upperpath [ 302.291052][T11524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.300232][T11524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.312568][ T319] pl2303 6-1:0.122: pl2303 converter detected [ 302.319495][ T319] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 302.329797][ T319] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 302.340575][ T319] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 302.349333][ T319] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 302.358443][ T9821] ------------[ cut here ]------------ [ 302.365619][ T9821] WARNING: CPU: 1 PID: 9821 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 302.375722][ T9821] Modules linked in: [ 302.380310][ T9821] CPU: 1 UID: 0 PID: 9821 Comm: syz-executor Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 302.397148][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.409291][ T9821] RIP: 0010:drop_nlink+0xce/0x110 [ 302.415166][ T9821] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 5f 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 302.437712][ T9821] RSP: 0018:ffffc9000147fc60 EFLAGS: 00010293 [ 302.445626][ T9821] RAX: ffffffff81ed3d2e RBX: ffff888115692d10 RCX: ffff888127760000 [ 302.454814][ T9821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.464342][ T9821] RBP: ffffc9000147fc88 R08: 0000000000000003 R09: 0000000000000004 [ 302.473698][ T9821] R10: dffffc0000000000 R11: fffff5200028ff7c R12: dffffc0000000000 [ 302.484197][ T9821] R13: 1ffff11022ad25ab R14: ffff888115692d58 R15: 0000000000000000 [ 302.493651][ T9821] FS: 0000555556db8500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 302.505746][ T9821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.515640][ T9821] CR2: 0000200000002e00 CR3: 0000000115e22000 CR4: 00000000003526b0 [ 302.525306][ T9821] Call Trace: [ 302.529031][ T9821] [ 302.532427][ T9821] shmem_rmdir+0x5f/0x90 [ 302.537169][ T9821] vfs_rmdir+0x3e0/0x560 [ 302.541670][ T9821] incfs_kill_sb+0x109/0x230 [ 302.546608][ T9821] deactivate_locked_super+0xd5/0x2a0 [ 302.552842][ T9821] deactivate_super+0xb8/0xe0 [ 302.558414][ T9821] cleanup_mnt+0x3f1/0x480 [ 302.563389][ T9821] __cleanup_mnt+0x1d/0x40 [ 302.569213][ T9821] task_work_run+0x1e0/0x250 [ 302.574079][ T9821] ? __cfi_task_work_run+0x10/0x10 [ 302.580033][ T9821] ? __x64_sys_umount+0x126/0x170 [ 302.585439][ T9821] ? __cfi___x64_sys_umount+0x10/0x10 [ 302.591650][ T9821] ? __kasan_check_read+0x15/0x20 [ 302.597658][ T9821] resume_user_mode_work+0x36/0x50 [ 302.603306][ T9821] syscall_exit_to_user_mode+0x64/0xb0 [ 302.609276][ T9821] do_syscall_64+0x64/0xf0 [ 302.614418][ T9821] ? clear_bhb_loop+0x50/0xa0 [ 302.621284][ T9821] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 302.628061][ T9821] RIP: 0033:0x7fa0ead8fc57 [ 302.633791][ T9821] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 302.659504][ T9821] RSP: 002b:00007ffd31f1f228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 302.668789][ T9821] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa0ead8fc57 [ 302.677182][ T9821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd31f1f2e0 [ 302.687137][ T9821] RBP: 00007ffd31f1f2e0 R08: 0000000000000000 R09: 0000000000000000 [ 302.697410][ T9821] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd31f20370 [ 302.706923][ T9821] R13: 00007fa0eae10925 R14: 0000000000049cf7 R15: 00007ffd31f203b0 [ 302.716029][ T9821] [ 302.719283][ T9821] ---[ end trace 0000000000000000 ]--- [ 302.725544][ T319] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 302.725797][ T9821] ================================================================== [ 302.737101][ T319] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 302.745160][ T9821] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 302.745203][ T9821] Write of size 4 at addr 0000000000000168 by task syz-executor/9821 [ 302.745221][ T9821] [ 302.745233][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz-executor Tainted: G W 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 302.745266][ T9821] Tainted: [W]=WARN [ 302.745275][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.745287][ T9821] Call Trace: [ 302.745297][ T9821] [ 302.745309][ T9821] __dump_stack+0x21/0x30 [ 302.745343][ T9821] dump_stack_lvl+0x10c/0x190 [ 302.745374][ T9821] ? __cfi_dump_stack_lvl+0x10/0x10 [ 302.745408][ T9821] print_report+0x3d/0x70 [ 302.745431][ T9821] kasan_report+0x163/0x1a0 [ 302.745477][ T9821] ? ihold+0x24/0x70 [ 302.745512][ T9821] ? _raw_spin_unlock+0x45/0x60 [ 302.745548][ T9821] ? ihold+0x24/0x70 [ 302.745583][ T9821] kasan_check_range+0x299/0x2a0 [ 302.745620][ T9821] __kasan_check_write+0x18/0x20 [ 302.745649][ T9821] ihold+0x24/0x70 [ 302.745683][ T9821] vfs_rmdir+0x26a/0x560 [ 302.745738][ T9821] incfs_kill_sb+0x109/0x230 [ 302.745770][ T9821] deactivate_locked_super+0xd5/0x2a0 [ 302.745797][ T9821] deactivate_super+0xb8/0xe0 [ 302.745822][ T9821] cleanup_mnt+0x3f1/0x480 [ 302.745857][ T9821] __cleanup_mnt+0x1d/0x40 [ 302.745892][ T9821] task_work_run+0x1e0/0x250 [ 302.745916][ T9821] ? __cfi_task_work_run+0x10/0x10 [ 302.745949][ T9821] ? __x64_sys_umount+0x126/0x170 [ 302.745976][ T9821] ? __cfi___x64_sys_umount+0x10/0x10 [ 302.746005][ T9821] ? __kasan_check_read+0x15/0x20 [ 302.746034][ T9821] resume_user_mode_work+0x36/0x50 [ 302.746060][ T9821] syscall_exit_to_user_mode+0x64/0xb0 [ 302.746098][ T9821] do_syscall_64+0x64/0xf0 [ 302.746133][ T9821] ? clear_bhb_loop+0x50/0xa0 [ 302.746161][ T9821] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 302.746187][ T9821] RIP: 0033:0x7fa0ead8fc57 [ 302.746209][ T9821] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 302.746231][ T9821] RSP: 002b:00007ffd31f1f228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 302.746260][ T9821] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa0ead8fc57 [ 302.746278][ T9821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd31f1f2e0 [ 302.746296][ T9821] RBP: 00007ffd31f1f2e0 R08: 0000000000000000 R09: 0000000000000000 [ 302.746321][ T9821] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd31f20370 [ 302.746339][ T9821] R13: 00007fa0eae10925 R14: 0000000000049cf7 R15: 00007ffd31f203b0 [ 302.746363][ T9821] [ 302.746373][ T9821] ================================================================== [ 302.756140][ T319] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 302.773085][ T9821] Disabling lock debugging due to kernel taint [ 302.774004][ T319] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 302.776369][ T9821] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 302.793445][ T319] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 302.796754][ T9821] #PF: supervisor write access in kernel mode [ 302.796772][ T9821] #PF: error_code(0x0002) - not-present page [ 302.796787][ T9821] PGD 80000001417ae067 P4D 80000001417ae067 PUD 0 [ 302.843364][ T319] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 302.846145][ T9821] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 302.846183][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz-executor Tainted: G B W 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 302.846220][ T9821] Tainted: [B]=BAD_PAGE, [W]=WARN [ 302.846230][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.851157][ T319] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 302.855950][ T9821] RIP: 0010:ihold+0x2a/0x70 [ 302.855997][ T9821] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 302.856017][ T9821] RSP: 0018:ffffc9000147fca0 EFLAGS: 00010246 [ 302.856037][ T9821] RAX: ffff888127760000 RBX: 0000000000000000 RCX: ffff888127760000 [ 302.856052][ T9821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.856067][ T9821] RBP: ffffc9000147fcb0 R08: ffffffff88957947 R09: 1ffffffff112af28 [ 302.861656][ T36] audit: type=1400 audit(2000000014.440:1142): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 302.865231][ T9821] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff888115692d1c [ 302.865260][ T9821] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 302.865274][ T9821] FS: 0000555556db8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 302.865296][ T9821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.865312][ T9821] CR2: 0000000000000168 CR3: 0000000115e22000 CR4: 00000000003526b0 [ 302.873166][ T36] audit: type=1400 audit(2000000014.450:1143): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.875332][ T9821] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 302.875357][ T9821] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.880971][ T36] audit: type=1400 audit(2000000014.450:1144): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.887561][ T9821] Call Trace: [ 302.887579][ T9821] [ 302.887590][ T9821] vfs_rmdir+0x26a/0x560 [ 302.887620][ T9821] incfs_kill_sb+0x109/0x230 [ 302.887647][ T9821] deactivate_locked_super+0xd5/0x2a0 [ 302.895884][ T319] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 302.899250][ T9821] deactivate_super+0xb8/0xe0 [ 302.912068][ T319] usb 6-1: USB disconnect, device number 3 [ 302.916645][ T9821] cleanup_mnt+0x3f1/0x480 [ 302.916689][ T9821] __cleanup_mnt+0x1d/0x40 [ 302.916717][ T9821] task_work_run+0x1e0/0x250 [ 302.916741][ T9821] ? __cfi_task_work_run+0x10/0x10 [ 302.924237][ T36] audit: type=1400 audit(2000000014.450:1145): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.929884][ T9821] ? __x64_sys_umount+0x126/0x170 [ 302.929925][ T9821] ? __cfi___x64_sys_umount+0x10/0x10 [ 302.938364][ T319] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 302.942045][ T9821] ? __kasan_check_read+0x15/0x20 [ 302.942083][ T9821] resume_user_mode_work+0x36/0x50 [ 302.949719][ T36] audit: type=1400 audit(2000000014.450:1146): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 302.955857][ T9821] syscall_exit_to_user_mode+0x64/0xb0 [ 302.955899][ T9821] do_syscall_64+0x64/0xf0 [ 302.955929][ T9821] ? clear_bhb_loop+0x50/0xa0 [ 302.962325][ T36] audit: type=1400 audit(2000000014.450:1147): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 302.966889][ T9821] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 302.966928][ T9821] RIP: 0033:0x7fa0ead8fc57 [ 302.966950][ T9821] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 302.974412][ T319] pl2303 6-1:0.122: device disconnected [ 302.978405][ T9821] RSP: 002b:00007ffd31f1f228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 302.978439][ T9821] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa0ead8fc57 [ 302.978455][ T9821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd31f1f2e0 [ 303.004007][ T36] audit: type=1400 audit(2000000014.450:1148): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.012437][ T9821] RBP: 00007ffd31f1f2e0 R08: 0000000000000000 R09: 0000000000000000 [ 303.012460][ T9821] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd31f20370 [ 303.012476][ T9821] R13: 00007fa0eae10925 R14: 0000000000049cf7 R15: 00007ffd31f203b0 [ 303.012497][ T9821] [ 303.012506][ T9821] Modules linked in: [ 303.012536][ T9821] CR2: 0000000000000168 [ 303.735358][ T9821] ---[ end trace 0000000000000000 ]--- [ 303.741747][ T9821] RIP: 0010:ihold+0x2a/0x70 [ 303.746811][ T9821] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 303.770566][ T9821] RSP: 0018:ffffc9000147fca0 EFLAGS: 00010246 [ 303.777584][ T9821] RAX: ffff888127760000 RBX: 0000000000000000 RCX: ffff888127760000 [ 303.787906][ T9821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.796967][ T9821] RBP: ffffc9000147fcb0 R08: ffffffff88957947 R09: 1ffffffff112af28 [ 303.805555][ T9821] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff888115692d1c [ 303.815994][ T9821] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 303.825908][ T9821] FS: 0000555556db8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 303.836494][ T9821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.844142][ T9821] CR2: 0000000000000168 CR3: 0000000115e22000 CR4: 00000000003526b0 [ 303.852810][ T9821] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 303.863177][ T9821] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.873317][ T9821] Kernel panic - not syncing: Fatal exception [ 303.882776][ T9821] Kernel Offset: disabled [ 303.887761][ T9821] Rebooting in 86400 seconds..