last executing test programs: 2m40.039459014s ago: executing program 1 (id=2097): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8a41, 0x0) mmap(&(0x7f000016f000/0x4000)=nil, 0x4000, 0x3000001, 0x22052, r0, 0xfffff000) fcntl$setflags(r0, 0x2, 0x1) lsm_list_modules(0x0, &(0x7f0000000000)=0x5690bbc2, 0x0) 2m39.984043005s ago: executing program 1 (id=2099): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x9a507facb4222330) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) lseek(r2, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002030102000000000000000001000000080001000100001f0900020080000000010015da05dc0000"], 0x28}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3"], 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r4, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x810) pread64(r1, &(0x7f0000000280)=""/235, 0xeb, 0x7) close(r1) 2m38.806241742s ago: executing program 1 (id=2111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x4, 0x0, 0xdddd0000, 0x2000, &(0x7f000007a000/0x2000)=nil}) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r8, 0x1, 0x1) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x600) r10 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000231001c0"]) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @broadcast}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000180)={'wg0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.748515913s ago: executing program 1 (id=2112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="050003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000000f80)={0x0, 0x6, 0x3, "0f4461"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000140)={0x40, 0x0, 0x3, "e46107"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x1d, 0x0, &(0x7f0000000080)=0xffffffffffffffef) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x14, 0x0, 0x0}) 2m37.478559762s ago: executing program 2 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x40) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3}) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="2a587de304e0cde6115ecf455b39450ba2debbe3f90730c46106b88237412ba48e457d99dbd9a0d0feada49df4e3d89f04f90492a511e9b6977650658ed6d58b4d72c2f8a2e8872fb413928adcf1fbc11d81f442467a1212a3e691b3f6c7486e9d49e54d531af2649d4eb8581353f8138880ca50468765543e0c83460959747ec90be2031b508e1094c2e63c68aec84cbfdca8369e", 0x95}, {&(0x7f00000006c0)="83fddfd96f788fb9877eaeb4a9b18caacdd22a8eeec854198b93ee0f609d2c76a7fbd181e7f7cfeb7015aeebbd859c18", 0x30}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="58a99e34c1ecfc63adbf3326d0a4bb5e8b60f14d8b6a85f6ff360ac1224ed437dcc182e78765680e05f637fa9f6c078fd4eb", 0x32}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f80)="76a0131008790be01e54167dbf902c476d24532574a15e94714576b5de51998391", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000037c0)="488fcf6e48", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f00000057c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000006cc0)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000072c0)}}], 0x7, 0xc0) r5 = dup3(r0, r1, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10000003) openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xa27000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 2m37.429924263s ago: executing program 2 (id=2140): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x3, 0x4, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) (async) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000740), 0x10080, &(0x7f0000000780)={[{@volatile}, {@workdir={'workdir', 0x3d, './file0'}}], [{@euid_lt={'euid<', r3}}]}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x67, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e43"}) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x99b33000) (async, rerun: 64) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r9, &(0x7f0000020240), 0x10010) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockopt$inet6_int(r6, 0x29, 0xce, 0x0, &(0x7f0000002940)) (rerun: 64) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) mmap(&(0x7f0000358000/0x1000)=nil, 0x1000, 0x100000c, 0x10010, r1, 0x61ce5000) (async) execveat(r10, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='{:\x00', &(0x7f00000001c0)='./binderfs/binder1\x00', &(0x7f0000000280)='./binderfs/binder1\x00', &(0x7f00000002c0)='./binderfs/binder1\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='^^!{-]\x00', &(0x7f0000000540)='-\x00E\xf3\x02/+v\xca\x9eHqV\x00'/27]}, &(0x7f0000000680)={[&(0x7f00000006c0)='\t\xf1c\x13\x7f\x8dp\x84\xeb\xadG\x04\xfa\x1aO\xa5\x14\xd5\xfay8\xe0\x85\n\t\xfc\xcf\xe6\xd4\xb8Y\xfa\xca\xa7\xd8\xa4=\x98\xa2\x17\xd8N\x0e\x03\xec\xdb-\x16\x98d\xe3\xd6R\x83\xcc\x02\xc5C{\xe1\xaf\xec\xda\x04\xa1\v\x82\x11o\xa1\xd2\x83\x85\x8e6\x95\x9f\xf0\x98\x85\x89S)8\xcb\xf4\xefH\xec\x8a\xd8\xf1Yc^\xbc\xe1w\xd5\xb6P\xcb~L', &(0x7f0000000580)='./binderfs/binder1\x00', &(0x7f00000005c0)='./binderfs/binder1\x00', &(0x7f0000000600)='-+*&\x00', &(0x7f0000000640)='%\x00']}, 0x1000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x29, 0xfd, 0x7f, 0x8, 0x20, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0x9, 0x9}}) (async, rerun: 64) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (rerun: 64) fstat(r12, &(0x7f0000000700)) (async) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000ec0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000001180)=@newtclass={0x51c, 0x28, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x3, 0x9}, {0x1, 0x10}, {0x8, 0xfff6}}, [@c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0x6}}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0x9}}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_FD={0x8, 0x1, r8}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x2}}}, @c_cbq={{0x8}, {0x440, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x0, 0x0, 0x6, 0x581, 0xb4eb}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x5, 0x9, 0x9, 0x5, 0x7, 0x4, 0x3, 0x10000, 0x80000001, 0x5, 0x7, 0x2, 0x4, 0x8, 0x2, 0x5, 0x4, 0x7, 0xbf3f, 0x8c8, 0xd, 0x0, 0x80000001, 0x0, 0x2, 0x9, 0x4, 0x7, 0x10001, 0x9, 0x0, 0x0, 0x0, 0xccf0, 0x7ff, 0x4, 0x2, 0x10, 0x6, 0x2, 0x4, 0x7, 0x8, 0x6, 0x6, 0x7ff, 0x400, 0xffffcea4, 0x5, 0x9, 0x5, 0x5, 0x79, 0x0, 0x1, 0x447, 0x0, 0xbe1, 0x44, 0x4, 0x7, 0x1, 0x9, 0x81, 0xf, 0x0, 0x6, 0x1beb, 0x3, 0x1, 0x8001, 0xa674, 0x5, 0xffff, 0x2, 0x3, 0x1, 0x0, 0x7, 0xe, 0x0, 0x5, 0x8fb, 0x6, 0x0, 0x5, 0x32ec, 0x8000, 0x6, 0x8, 0x2, 0x7f, 0x6, 0x100, 0x7, 0xb, 0x8, 0xc3, 0x1, 0xfffffffe, 0x3, 0x10c, 0xd, 0x400, 0x9, 0x200, 0xd17b, 0xfffffffc, 0x287, 0xffffffff, 0x2, 0xf97, 0xb414, 0x0, 0x7fffffff, 0xa, 0x7fff, 0xffffffff, 0x9, 0x8, 0x8, 0x2593, 0x2, 0x80, 0x5c, 0x7, 0x3, 0x2, 0x6, 0x4, 0x0, 0x12000, 0x9, 0x4ab, 0x0, 0x7, 0x9, 0xc, 0x6, 0xc0, 0x3, 0x9, 0xfffffffe, 0x5, 0x7, 0x80000000, 0x1, 0xfffffffe, 0x6, 0x3, 0xff0, 0x401, 0xb55, 0xf28, 0x8, 0x6, 0x7, 0x7, 0xd, 0x18b, 0x1ff, 0x10, 0x3, 0x200, 0x5, 0x9, 0xfffffff7, 0x8, 0x1, 0x3, 0x10001, 0x8, 0x25f, 0x7, 0x97, 0x200, 0x401, 0x0, 0xffff795a, 0x9, 0xffffff7f, 0x8, 0x2, 0xfffffff9, 0x8001, 0xfffffffe, 0xd, 0x5, 0x6, 0x1, 0x5, 0xffffffff, 0x7ca, 0x6, 0xdcd, 0x1, 0xfff, 0x3, 0x3, 0x2, 0x200, 0x4, 0x4, 0x0, 0x7, 0x6, 0x5, 0x3, 0x18000, 0x5, 0xffffffff, 0x8, 0x1, 0x1000, 0x1, 0x5, 0x7, 0x7, 0x5, 0x1, 0x9, 0xae7, 0x3, 0x3, 0x6, 0xe79, 0x5, 0x8, 0xe, 0xffffff81, 0x9, 0xc116, 0x2, 0x2, 0x3, 0x4, 0xb, 0x9, 0x7, 0xa, 0x3e, 0x6, 0x9, 0xfffffff7, 0x1, 0x1, 0x8, 0x7, 0x6, 0x7f, 0xfff, 0x1, 0x3, 0x2, 0x8]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x1, 0x8, 0x1, 0x5, 0x9, 0x9, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x2}, 0x5, 0xc00}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @c_atm={{0x8}, {0x44, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x2}}, @TCA_ATM_HDR={0x28, 0x3, "2817e0610843f24dbc5cf08430644c7025e70cfa14277d8e685cb0306a0526bc68db0571"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x5}}, @TCA_ATM_FD={0x8, 0x1, r8}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x40841}, 0x8000880) r13 = socket(0x15, 0x5, 0xc79f) getpeername$packet(r13, &(0x7f00000007c0), &(0x7f0000000800)=0x14) 2m37.429759703s ago: executing program 2 (id=2141): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.429024923s ago: executing program 2 (id=2142): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x12, r0, 0x13009000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000100)=0xfffffff3, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x12, r0, 0x13009000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000100)=0xfffffff3, 0x4) (async) 2m37.428830023s ago: executing program 2 (id=2143): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 2m37.427342223s ago: executing program 2 (id=2144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020}, 0x2020) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cf8f6d700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffffff, 0x101080) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) close_range(r3, 0xffffffffffffffff, 0x0) 2m33.736630119s ago: executing program 1 (id=2165): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x10e7) 2m33.65607091s ago: executing program 1 (id=2166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x615, @mcast1, 0x4}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@handle={0x73682a85, 0x0, 0x2}}, 0x0}, 0x10}, @exit_looper, @register_looper], 0x0, 0x0, 0x0}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x10001, @loopback, 0x3}, 0x1c) 2m33.64349885s ago: executing program 32 (id=2166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x615, @mcast1, 0x4}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@handle={0x73682a85, 0x0, 0x2}}, 0x0}, 0x10}, @exit_looper, @register_looper], 0x0, 0x0, 0x0}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x10001, @loopback, 0x3}, 0x1c) 2m22.133772844s ago: executing program 33 (id=2144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020}, 0x2020) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cf8f6d700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffffff, 0x101080) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) close_range(r3, 0xffffffffffffffff, 0x0) 1m31.776095334s ago: executing program 4 (id=2847): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)) (async) socket$inet6(0xa, 0x3, 0xff) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, &(0x7f0000001400)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000002400)="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") 1m31.744784315s ago: executing program 4 (id=2848): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x41b0c2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=r4, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) dup3(r2, r1, 0x0) (async) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x2}, @decrefs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x2}, @decrefs], 0x0, 0x0, 0x0}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m31.699651445s ago: executing program 4 (id=2849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01cbdfda0f20d86635200000000f22d8f30f38f63b2e0fc7b40000673e660f2c55040f20e06635000400000f22e00fc72a650fc7590766b8000800000f23c80f21f86635000060000f23f8", 0x4c}], 0x1, 0x63, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.583839338s ago: executing program 4 (id=2851): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) write$selinux_access(0xffffffffffffffff, 0x0, 0x5f) open_tree(r1, &(0x7f00000000c0)='./file0/../file0\x00', 0x8001) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) (async) write$selinux_access(0xffffffffffffffff, 0x0, 0x5f) (async) open_tree(r1, &(0x7f00000000c0)='./file0/../file0\x00', 0x8001) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) (async) 1m31.516119738s ago: executing program 4 (id=2853): r0 = socket$inet(0x2, 0x6, 0x2) sendto$inet(r0, &(0x7f0000000080)="f7262bae534fbee34d80da07a1528bf6e12f8485495e8d176e3eb20fe41ad20acc59de47f62d85db43a401e3c6a4f543bcb72678b72e823f87a39cdf6ce2af", 0x3f, 0x40800, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffffffff86f54b80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000540)) fcntl$setown(r1, 0x8, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 1m31.44499556s ago: executing program 4 (id=2854): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x10000001003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) 1m31.42122395s ago: executing program 34 (id=2854): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x10000001003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) 1m12.551994154s ago: executing program 6 (id=3059): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000a, 0x40010, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r3, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r4, 0x0, 0x0, 0x8800000, 0x0, 0x0, r4}]) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) write$ppp(r2, &(0x7f00000003c0)='\x00!', 0x2) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000140)={"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"}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000a30000000000100000002c00000000000000"], 0x20}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @pic={0x1, 0x7, 0x7f, 0x4, 0x1, 0x6, 0x39, 0xdc, 0x4, 0xd, 0x8b, 0x5, 0xe, 0x5, 0x6, 0xa}}) r8 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r10 = fsopen(&(0x7f0000000040)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f00000001c0)='posixacl\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000001b40)='posixacl\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x8e, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, 0x18, &(0x7f00000001c0)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x20000000000033}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m10.348076997s ago: executing program 6 (id=3078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r2, 0x40045436, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.292023178s ago: executing program 6 (id=3082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x210f06, 0x10) read(r5, &(0x7f0000000240)=""/22, 0x16) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') statx(r6, &(0x7f0000000180)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000240)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008) (async) clock_gettime(0x0, &(0x7f0000000680)) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @loopback}}) (async) dup3(r4, r7, 0x0) (async) io_setup(0xe4, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000140)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m10.253726029s ago: executing program 6 (id=3083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getpid() gettid() ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m10.144027311s ago: executing program 6 (id=3085): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdir(0x0, 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x10008}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m10.120200031s ago: executing program 6 (id=3087): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123c01, 0x0) ptrace(0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000100)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) syz_fuse_handle_req(r3, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r5, &(0x7f0000000700)=""/90, 0x20000) sched_setscheduler(0x0, 0x6, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) 53.856740947s ago: executing program 35 (id=3087): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123c01, 0x0) ptrace(0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000100)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) syz_fuse_handle_req(r3, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r5, &(0x7f0000000700)=""/90, 0x20000) sched_setscheduler(0x0, 0x6, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) 23.362986027s ago: executing program 7 (id=3854): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x4000003, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x786d) read(r1, &(0x7f0000000100)=""/147, 0x93) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getgroups(0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.264542259s ago: executing program 7 (id=3855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f80)={0x20, r3, 0x2eae5a70e8ad07e7, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 23.253208759s ago: executing program 7 (id=3856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004840) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x45809000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), r0) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004840) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x45809000) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) (async) 23.20004664s ago: executing program 7 (id=3857): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c0000"], 0x178}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x123200, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x5452, 0x20001439) ptrace(0x10, r5) ptrace$peekuser(0x3, r5, 0x390) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(r7, 0x0, r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x2}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x2, 0x2, 0xd, 0x9}]}) close_range(r10, 0xffffffffffffffff, 0x0) 23.198251529s ago: executing program 7 (id=3858): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, 0x0, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) getpid() (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x2) (async) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x1}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x0, 0x3, r2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) openat(0xffffffffffffffff, 0x0, 0x4000, 0x20) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 22.969175673s ago: executing program 7 (id=3862): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x2122, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x50050) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3500000005000000"], 0x35) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x40) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000580)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0xd}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) syz_io_uring_setup(0x2169, &(0x7f0000000480)={0x0, 0x77e7, 0x1000, 0x2, 0x1b3, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="0f04000300", @ANYRES32=r5, @ANYBLOB="0c009900080000002c0000000a0018000303030303030000080005000b00000005005300000000000a00e80008021100000100000a0018000303030303030000050053000000000005005300000000001c00e7000621c1839bbba0aafa39afa4611aa783c6bd4108eb7dc52e"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x800) 22.941652134s ago: executing program 36 (id=3862): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x2122, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x50050) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3500000005000000"], 0x35) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x40) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000580)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0xd}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) syz_io_uring_setup(0x2169, &(0x7f0000000480)={0x0, 0x77e7, 0x1000, 0x2, 0x1b3, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="0f04000300", @ANYRES32=r5, @ANYBLOB="0c009900080000002c0000000a0018000303030303030000080005000b00000005005300000000000a00e80008021100000100000a0018000303030303030000050053000000000005005300000000001c00e7000621c1839bbba0aafa39afa4611aa783c6bd4108eb7dc52e"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x800) 5.184702592s ago: executing program 3 (id=4213): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x185100, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000380)='./file0\x00', 0x10000040) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x20000000000006) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup3(r6, r7, 0x80000) setsockopt$inet_mtu(r8, 0x0, 0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6664bca1653b52bfeb69f9913d7be7682733c9e07c8f72c7eafffcdb453623a838d8e4dc3c3f5955d9de6ef9cd7e238590568714e20376c6a826ffda296258c47b68faa8e87a29cd5d9d1756ba59a6ca747bd3414333840ab5b9d2578e60ea0c237290c156139030425065e7fca9164b81dc00be572992cef2b9416f785a852f4ed3478ee7cda605bce228295227ec015a16c2d349fb5e56c1a1299254ebb5846b105b6039ec52bd11c98f4ff29a663a5321ae8c9d1a1a23157da57d5735bf35a599ff9682bc0a9e233faee11814b363197c", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64=r9]) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) write$FUSE_NOTIFY_RESEND(r9, &(0x7f0000000100)={0x14}, 0x14) r11 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x48) tee(r11, r2, 0x4, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0xfffffffd}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x442e41, 0x0) 4.233233376s ago: executing program 3 (id=4226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x10000, 0x80) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 4.171976927s ago: executing program 3 (id=4227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x703000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = inotify_init1(0x0) read(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) pwrite64(r6, &(0x7f0000000100)="eb5bce93", 0x4, 0x7fffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r8, 0x1) write$FUSE_STATFS(r6, &(0x7f0000000200)={0x60, 0x0, r7, {{0x5, 0xa1, 0x7, 0x8, 0x1, 0xd, 0xce32, 0x3}}}, 0x60) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000002030101000000000000000000000000080004400000002e080001000000000f080005400000bc81"], 0x2c}}, 0x814) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f00000001c0)=0x6, 0x4) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 3.29154221s ago: executing program 3 (id=4250): syz_usb_connect(0x0, 0x32e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b04af72024d05a5ea9160102030109021c0301000050000904e700050801000009"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x400004, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f0000000180)) recvmmsg(r4, &(0x7f0000003700)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000280)=""/38, 0x26}], 0x4, &(0x7f0000000340)=""/32, 0x20}, 0x6c380f1d}, {{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000003b80)=""/163, 0xa3}, {&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000640)=""/166, 0xa6}], 0x4}, 0x2}, {{&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/60, 0x3c}, {&(0x7f0000000900)=""/28, 0x1c}, {&(0x7f0000000940)=""/190, 0xbe}], 0x5}, 0x6d4}, {{&(0x7f0000000a80)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000038c0)=""/128, 0x80}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/185, 0xb9}, {&(0x7f0000001c40)=""/114, 0x72}, {&(0x7f0000001cc0)=""/106, 0x6a}, {&(0x7f0000001d40)=""/50, 0x32}], 0x6, &(0x7f0000001e00)=""/94, 0x5e}, 0x9}, {{&(0x7f0000001e80)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000001f00)=""/7, 0x7}, {&(0x7f0000001f40)=""/7, 0x7}, {&(0x7f0000001f80)=""/242, 0xf2}, {&(0x7f0000002080)=""/238, 0xee}], 0x4, &(0x7f00000021c0)=""/182, 0xb6}, 0x9}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002280)=""/180, 0xb4}, {&(0x7f0000002340)=""/53, 0x35}, {&(0x7f0000002380)=""/156, 0x9c}], 0x3, &(0x7f0000002480)=""/125, 0x7d}, 0x10004}, {{&(0x7f0000002500)=@xdp, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002580)=""/67, 0x43}, {&(0x7f0000002600)=""/167, 0xa7}], 0x2, &(0x7f0000002700)=""/4096, 0x1000}, 0x46}], 0x7, 0x6f093ed698a56170, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f00000043c0)={0x29, 0x3, 0x80000, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x84944000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) waitid(0x0, r10, 0x0, 0x8, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x49, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x1, 0xfb, 0x1, {0x22, 0xd9d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x5, 0x3}}}}}]}}]}}, &(0x7f0000003b00)={0xa, &(0x7f0000003940)={0xa, 0x6, 0x110, 0x2, 0x5, 0xe7, 0x8, 0x3}, 0x24, &(0x7f0000003b40)=ANY=[@ANYBLOB="050f24ffff04ff01088000087c060000141004fdbddad8adb0e79264bff95a3ef830938ced3113a7c933b9"], 0x2, [{0x4, &(0x7f00000039c0)=@lang_id={0x4, 0x3, 0x402}}, {0xdb, &(0x7f0000003a00)=@string={0xdb, 0x3, "6827469965591fba601e65549c81bb478a62b46a00f5721d956438cfee7ba859104129e24af41dc2b65557a0a6cbf1c30cd83ba886b27df77ceea2fbf99333e207ba0888bec8042ed390b2c19dfb4b18c548ca16c8508eefd737cc3e6d470d4549403bb1409434342f75639d747f4f0c2de8be91e8a379400afdbdf2ce4ed851f85715b3e28b92db01266a454545b93e7315ef7d530c9b0eba9cd11f72ec6c5fab5ae44e4226b8ecad43e51906e746552bafa4a79f9a2fdfb322c18d68ced1d3e2f119842a9f87aff1714a58e0a1c14c77a83b13e63c8e128c"}}]}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010153b100000000000000000a009e69040001800b492ad49b9fffa85f0296bf37914bb5a1d3c1a0d5a45bfe2b0814d6e83f4943ad3aca"], 0x18}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f00000002c0)={0x8, 'pimreg0\x00', {'ipvlan1\x00'}, 0xe}) 2.122569028s ago: executing program 0 (id=4276): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000100)=""/255, &(0x7f0000000240)=0xff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, &(0x7f0000000100)=0x0, &(0x7f0000000140)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$inet6(r1, &(0x7f0000000400)="83", 0x1, 0x4000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.122226428s ago: executing program 0 (id=4277): r0 = syz_open_procfs(0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x20000000) write$cgroup_devices(r0, &(0x7f00000000c0)={'a', ' *:* ', 'rw\x00'}, 0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0x7706, 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 2.111427778s ago: executing program 5 (id=4280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210009000122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.629213565s ago: executing program 8 (id=4287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x5, 0x6, 0x10, 0x7}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) ptrace(0x4206, r1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) syz_clone(0x1002000, &(0x7f0000000000)="9be1e461e07afb190548f88dd67b6e4b31a1987e75f6abf9c788da715e4d9a93f1c68f8452e5ae9c2b2a4c22d0e8fcbb384629dd0840cd6c5d7f0ffd138412381bd7b73d8860e59ba8a17746714d7da634980144495861e3096e03a4be601b441bf4f240f99246f21a1b4650894ba31243692917937e54797335cfdf9571371ea39a2f4f07a2ec6507a2d508b3a56f44e9ea73b36ae5cfcefa6ecaa1aea76a0132f4f4b116433fff2e01d62b1f3e165e47dec85970fe9d8420ffd9bb75a0088da8df88455ebebace4e4977bc6671643bdc72e38edcfc50e4f31652cb8141b6dcef266d9b53a96c1f26b1ed2be59a6dbe80b3c3201d84b64d", 0xf8, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="36cf2a1dd639836c0a3475d14404fff8") openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x5, 0x6, 0x10, 0x7}, 0x10) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) (async) ptrace(0x4206, r1) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) syz_clone(0x1002000, &(0x7f0000000000)="9be1e461e07afb190548f88dd67b6e4b31a1987e75f6abf9c788da715e4d9a93f1c68f8452e5ae9c2b2a4c22d0e8fcbb384629dd0840cd6c5d7f0ffd138412381bd7b73d8860e59ba8a17746714d7da634980144495861e3096e03a4be601b441bf4f240f99246f21a1b4650894ba31243692917937e54797335cfdf9571371ea39a2f4f07a2ec6507a2d508b3a56f44e9ea73b36ae5cfcefa6ecaa1aea76a0132f4f4b116433fff2e01d62b1f3e165e47dec85970fe9d8420ffd9bb75a0088da8df88455ebebace4e4977bc6671643bdc72e38edcfc50e4f31652cb8141b6dcef266d9b53a96c1f26b1ed2be59a6dbe80b3c3201d84b64d", 0xf8, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="36cf2a1dd639836c0a3475d14404fff8") (async) 1.569879156s ago: executing program 8 (id=4288): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1.553683616s ago: executing program 8 (id=4289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x51, 0x0, &(0x7f0000000440)="60f9a8d41bf24b5e8aaeb76caabde5e329ef50c179798b070d25cd969ff38ad0a69daa02e1d42e8637c4b5344becbb87ca649bbdf220f8497e4cd98e3aea8e696a9f1e52445d815e9a1f022a51a4092378"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1.476149137s ago: executing program 5 (id=4290): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='ext\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT]) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7, 0x0, 0x5, 0x4, 0xc, "0eb494b2281c8033"}) 1.475917068s ago: executing program 5 (id=4291): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f00005ed000/0x3000)=nil, 0x3000, 0x600000e, 0x110, r0, 0x4e4a4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x100, 0x4) 1.427641539s ago: executing program 8 (id=4293): mkdir(&(0x7f0000000040)='./file0\x00', 0x20) lsetxattr$system_posix_acl(&(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/214) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x1240024, &(0x7f0000000000)=ANY=[]) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) 1.349541129s ago: executing program 8 (id=4294): openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$netlink(0x10, 0x3, 0x13) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000000c0)=""/125, 0x7d}], 0x3}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x4}, 0x6}], 0x2, 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone(0x2048411, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x20000000, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="bf0000000000000077020000000000008fffff1e00ffffff"]) 1.159845482s ago: executing program 0 (id=4295): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000340)={0x80, 0x0, 0x0, &(0x7f0000000100), {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) syz_clone3(&(0x7f0000000340)={0x80, 0x0, 0x0, &(0x7f0000000100), {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfdb7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e22, 0x0, @mcast2, 0x7}}}, 0x32) (async) connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e22, 0x0, @mcast2, 0x7}}}, 0x32) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) sendto$inet6(r3, &(0x7f0000000140)="c70800000000001a4444d308aab32edc2980e96df30ad0b1e29144658b9554535f2654fea30791163e7e398d002660f9ce959ec0187b70b9f52b82163110f1faaa76ffbb8b9c17e318d060", 0x4b, 0xa8c0, 0x0, 0x0) write(r3, &(0x7f0000000000)="24fb4a97abde71c80a826e31a58dfc745093e42955187ad7f32efc6d141ac5e04cb376f3bbd26002b7b1f1de8c1adaded8df080000005281a98732b34520f290ce92926e408e52dec42a121ec62769b4878297c927c76c7c4960f5dc7b24e52d", 0x60) 1.134582113s ago: executing program 0 (id=4296): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10010, r0, 0x45807000) r1 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) keyctl$update(0x2, 0x0, &(0x7f00000000c0)='z', 0x1) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000000000000a00000200000005ff0100"/130], 0x90) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r6, 0x0) write$binfmt_misc(r5, &(0x7f0000000300), 0x5b0) listen(r2, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) capset(&(0x7f0000000740)={0x20080522, r1}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) syz_open_procfs(r1, &(0x7f00000000c0)='task\x00') readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) tee(r7, r8, 0x6, 0x0) ioctl$EVIOCGBITKEY(r9, 0x80404521, &(0x7f0000000180)=""/206) clock_gettime(0x0, &(0x7f0000000340)) 1.108702983s ago: executing program 0 (id=4297): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1.080428814s ago: executing program 0 (id=4298): setregid(0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) pivot_root(0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x14) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 633.97722ms ago: executing program 5 (id=4292): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9806d1267c49cd76", "c442e6adcb511ad19648396c5352e18f", "6086c2ca", "b973738a82366fb2"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000020603000000000000000000000000001e70a8a566"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmmsg$unix(r1, &(0x7f00000000c0), 0x3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8010, r0, 0x147a5000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) readv(r4, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x6, 0xff}, 0x2) unshare(0x6060600) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 580.031561ms ago: executing program 5 (id=4299): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) memfd_create(&(0x7f0000000280)='/dev/net/tun\x00', 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00150000000008ffffff2e00000097"], 0x18}], 0x1}, 0x8000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x101, 0x0, 0x3, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42, 0xb, 0x3}, {0x200003, 0xa, 0xff, 0x80, 0x40, 0x0, 0x5f, 0x5, 0x2, 0x2, 0x5, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x16803}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) unshare(0xc050500) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="f29c8961f23969f21893257efc86166afb3570", 0x13}], 0x1, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}, 0x20004000) close_range(r3, 0xffffffffffffffff, 0x0) 337.487845ms ago: executing program 5 (id=4300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4d01", 0x2, 0x4000085, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000140)=0x8, 0x4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="00f0ffffffffffffff"], 0x9) 287.557816ms ago: executing program 8 (id=4301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000540)={0x6, 0x74}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a40)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xeeee0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r7, 0xffffd000) ioctl$EVIOCSFF(r6, 0x40304580, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_pidfd_open(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 78.959509ms ago: executing program 3 (id=4302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000d71f3985310a0000000000000000000000867f741f137d7492021b70145dfd22c22394eaca271bcaa18014c327f1389e1960a275f725e0d4be4a12d6a0df67017f007ee93cd7b361303f88ebe0b72716e13771946592a859597602ef97d576f83029a035bbea7356b8183d1d13ea85b54af84719081d2a775f0bafd6f42e03008a202aaa12103671fcaba34aee34437a0b58c6fc8535590975a7861a669eda1f01b698228f3faa111197e3420a2289dcbd7ca675803565222148f8b44e1412431385c2da3eda0e0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) 0s ago: executing program 3 (id=4303): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x7) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') rmdir(&(0x7f0000000200)='./bus\x00') openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400140, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae"]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x104, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0xda1bd6dde61cc5e4, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "d5a34e94"}, @local=@item_012={0x0, 0x2, 0x1}]}}, 0x0}, 0x0) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r6, &(0x7f0000000040)="1c0000001a009b8a070000003b9b701f40000400000000120000000000", 0x1d) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10}) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x2005, 0x4, 0xffffffff, 0x0, 0x0, "0062ba7d82000000000000080000f7fffe7000"}) r7 = syz_open_pts(r4, 0x8182) r8 = dup3(r7, r4, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x17) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff7, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) sendmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xf8}, 0x4) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): 4114][ T9084] tmpfs: Bad value for 'uid' [ 227.796942][ T9093] rust_binder: Write failure EFAULT in pid:1555 [ 227.857544][ T64] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 227.872795][ T9100] rust_binder: Write failure EINVAL in pid:710 [ 227.879090][ T9102] /dev/rnullb0: Can't open blockdev [ 227.899332][ T9104] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 227.906662][ T9104] rust_binder: Write failure EINVAL in pid:714 [ 228.007198][ T64] usb 4-1: device descriptor read/64, error -71 [ 228.023550][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.032041][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.104813][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.113338][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.274454][ T64] usb 4-1: device descriptor read/64, error -71 [ 228.531021][ T64] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 228.669986][ T64] usb 4-1: device descriptor read/64, error -71 [ 228.926553][ T64] usb 4-1: device descriptor read/64, error -71 [ 228.958629][ T305] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 229.044219][ T64] usb usb4-port1: attempt power cycle [ 229.119005][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 229.125158][ T305] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 229.133382][ T305] usb 1-1: config 0 has no interface number 0 [ 229.140745][ T305] usb 1-1: New USB device found, idVendor=0b05, idProduct=edda, bcdDevice= 5.46 [ 229.149800][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.157804][ T305] usb 1-1: Product: syz [ 229.161974][ T305] usb 1-1: Manufacturer: syz [ 229.166552][ T305] usb 1-1: SerialNumber: syz [ 229.171615][ T305] usb 1-1: config 0 descriptor?? [ 229.407629][ T64] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 229.430148][ T64] usb 4-1: device descriptor read/8, error -71 [ 229.440436][ T9] usb 1-1: USB disconnect, device number 105 [ 229.569003][ T64] usb 4-1: device descriptor read/8, error -71 [ 229.824589][ T64] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 229.846931][ T64] usb 4-1: device descriptor read/8, error -71 [ 229.985987][ T64] usb 4-1: device descriptor read/8, error -71 [ 230.011092][ T36] audit: type=1400 audit(1751539759.640:730): avc: denied { bind } for pid=9120 comm="syz.0.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.048841][ T9130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.048862][ T9130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352 [ 230.094044][ T9135] can0: slcan on ptm0. [ 230.102606][ T64] usb usb4-port1: unable to enumerate USB device [ 230.159430][ T9135] can0 (unregistered): slcan off ptm0. [ 230.306927][ T305] usb 6-1: USB disconnect, device number 23 [ 230.530147][ T64] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 230.626359][ T305] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 230.691549][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.701709][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.711224][ T64] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 230.720331][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.728339][ T64] usb 1-1: SerialNumber: syz [ 230.765360][ T305] usb 6-1: device descriptor read/64, error -71 [ 231.021957][ T305] usb 6-1: device descriptor read/64, error -71 [ 231.029474][ T64] usb 1-1: 0:2 : does not exist [ 231.036794][ T64] usb 1-1: USB disconnect, device number 106 [ 231.045899][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.278507][ T305] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 231.417466][ T305] usb 6-1: device descriptor read/64, error -71 [ 231.652666][ T64] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 231.674080][ T305] usb 6-1: device descriptor read/64, error -71 [ 231.791735][ T305] usb usb6-port1: attempt power cycle [ 231.814369][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 231.822727][ T64] usb 4-1: config 16 has an invalid interface number: 195 but max is 0 [ 231.831121][ T64] usb 4-1: config 16 has no interface number 0 [ 231.837369][ T64] usb 4-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 231.847715][ T64] usb 4-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 231.858048][ T64] usb 4-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 231.869505][ T64] usb 4-1: config 16 interface 195 has no altsetting 0 [ 231.877714][ T64] usb 4-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 231.886743][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.887865][ T45] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 231.894876][ T64] usb 4-1: Product: syz [ 231.906593][ T64] usb 4-1: Manufacturer: syz [ 231.911207][ T64] usb 4-1: SerialNumber: syz [ 231.916700][ T9177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 231.923903][ T9177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.058907][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 232.065524][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 232.073129][ T45] usb 1-1: can't read configurations, error -61 [ 232.146584][ T64] usb 4-1: bad CDC descriptors [ 232.154221][ T64] usb 4-1: USB disconnect, device number 50 [ 232.165810][ T305] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 232.188234][ T305] usb 6-1: device descriptor read/8, error -71 [ 232.201594][ T36] audit: type=1400 audit(1751539761.688:731): avc: denied { listen } for pid=9184 comm="syz.4.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 232.222536][ T45] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 232.286139][ T9191] syzkaller0: entered promiscuous mode [ 232.328979][ T305] usb 6-1: device descriptor read/8, error -71 [ 232.379647][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 232.386067][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 232.393771][ T45] usb 1-1: can't read configurations, error -61 [ 232.400108][ T45] usb usb1-port1: attempt power cycle [ 232.582756][ T305] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 232.605282][ T305] usb 6-1: device descriptor read/8, error -71 [ 232.610369][ T9207] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.612104][ T9207] rust_binder: Write failure EINVAL in pid:751 [ 232.612259][ T9208] rust_binder: Write failure EINVAL in pid:751 [ 232.744222][ T305] usb 6-1: device descriptor read/8, error -71 [ 232.744378][ T9214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 232.756637][ T9214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:375 [ 232.776306][ T45] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 232.784429][ T9219] rust_binder: Write failure EINVAL in pid:379 [ 232.805930][ T7852] raw-gadget.4 gadget.4: failed to queue disconnect event [ 232.810430][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 232.826531][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 232.834227][ T45] usb 1-1: can't read configurations, error -61 [ 232.861756][ T305] usb usb6-port1: unable to enumerate USB device [ 232.978304][ T45] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 233.000009][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 233.006406][ T45] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 233.014230][ T45] usb 1-1: can't read configurations, error -61 [ 233.020740][ T45] usb usb1-port1: unable to enumerate USB device [ 233.053627][ T13] bridge_slave_1: left allmulticast mode [ 233.059280][ T13] bridge_slave_1: left promiscuous mode [ 233.064921][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.072371][ T13] bridge_slave_0: left allmulticast mode [ 233.078054][ T13] bridge_slave_0: left promiscuous mode [ 233.083628][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.239681][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.247060][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.254176][ T9225] bridge_slave_0: entered allmulticast mode [ 233.260418][ T9225] bridge_slave_0: entered promiscuous mode [ 233.266486][ T13] tipc: Left network mode [ 233.267534][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.277869][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.285549][ T9225] bridge_slave_1: entered allmulticast mode [ 233.292102][ T9225] bridge_slave_1: entered promiscuous mode [ 233.299540][ T13] veth1_macvtap: left promiscuous mode [ 233.305077][ T13] veth0_vlan: left promiscuous mode [ 233.384543][ T45] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 233.462999][ T9230] tipc: Enabled bearer , priority 0 [ 233.471614][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.478672][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.486645][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.493685][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.501633][ T9230] tipc: Disabling bearer [ 233.522921][ T9225] veth0_vlan: entered promiscuous mode [ 233.532988][ T9225] veth1_macvtap: entered promiscuous mode [ 233.566302][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 233.573708][ T45] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 233.582976][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.591041][ T45] usb 4-1: Product: syz [ 233.595189][ T45] usb 4-1: Manufacturer: syz [ 233.599807][ T45] usb 4-1: SerialNumber: syz [ 233.605202][ T45] usb 4-1: config 0 descriptor?? [ 233.736865][ T36] audit: type=1400 audit(1751539763.120:732): avc: denied { setattr } for pid=9241 comm="syz.6.2859" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.788080][ T9246] /dev/rnullb0: Can't open blockdev [ 233.804133][ T9249] binder: Unknown parameter 'd"' [ 233.908392][ T362] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 234.091209][ T362] usb 6-1: config index 0 descriptor too short (expected 8192, got 27) [ 234.099528][ T362] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.109618][ T362] usb 6-1: config 0 has no interfaces? [ 234.115155][ T362] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 234.124202][ T362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.132728][ T362] usb 6-1: config 0 descriptor?? [ 234.354365][ T362] usb 6-1: string descriptor 0 read error: -71 [ 234.361372][ T362] usb 6-1: USB disconnect, device number 28 [ 234.714111][ T9265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.849202][ T362] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 234.850657][ T9276] netlink: 'syz.0.2870': attribute type 1 has an invalid length. [ 234.877132][ T9276] rust_binder: 9276: no such ref 2 [ 234.882354][ T9276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1582 [ 234.951775][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.969601][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.000570][ T36] audit: type=1326 audit(1751539764.308:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9282 comm="syz.6.2873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f141918e929 code=0x0 [ 235.010240][ T362] usb 6-1: not running at top speed; connect to a high speed hub [ 235.036106][ T362] usb 6-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 235.046422][ T362] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.056771][ T9289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1590 [ 235.057141][ T362] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.075555][ T362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.083888][ T362] usb 6-1: Product: syz [ 235.088201][ T362] usb 6-1: Manufacturer: ⢮ౌ䱠ꖺṢ佑ⲿ뺓执꺾䖦ꦽ贗鮕唿셟ㄧï†è®¼à³®é½¸çª£ä¡ˆê±¯ã²“ä¬è§ã¦”砾㵺Ð￵培ã€è”ë’´蟜帘᪦Ɠ鲇횪俯䚽ڴ챩䖗곎㎔ꅖ視ᄘꓜ课쇙⥚⎺ꧮ旱钯䃈 [ 235.109889][ T362] usb 6-1: SerialNumber: syz [ 235.157839][ T36] audit: type=1107 audit(1751539764.448:734): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Xð' [ 235.186535][ T316] Bluetooth: hci0: Frame reassembly failed (-84) [ 236.438279][ T9306] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 236.438302][ T9306] rust_binder: Read failure Err(EFAULT) in pid:43 [ 236.446893][ T45] usb 4-1: USB disconnect, device number 51 [ 236.479629][ T9309] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 236.479649][ T9309] rust_binder: Read failure Err(EFAULT) in pid:386 [ 236.641044][ T9320] syzkaller0: entered promiscuous mode [ 236.653104][ T9320] syzkaller0: entered allmulticast mode [ 236.724025][ T9335] rust_binder: Error while translating object. [ 236.724053][ T9335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.730226][ T9335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 236.867784][ T9342] fuse: Bad value for 'fd' [ 237.000690][ T36] audit: type=1400 audit(1751539766.178:735): avc: denied { create } for pid=9345 comm="syz.6.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.318691][ T7780] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.351080][ T9360] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 237.351114][ T9360] rust_binder: Read failure Err(EFAULT) in pid:398 [ 237.359431][ T9361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.366013][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 237.372443][ T1099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.381098][ T9365] rust_binder: Write failure EINVAL in pid:403 [ 237.393887][ T9365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 237.422035][ T9373] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 237.479109][ T7780] usb 7-1: Using ep0 maxpacket: 16 [ 237.490706][ T7780] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.516394][ T7780] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.533143][ T7780] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.542320][ T7780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.550761][ T7780] usb 7-1: Product: syz [ 237.555049][ T7780] usb 7-1: Manufacturer: syz [ 237.559649][ T7780] usb 7-1: SerialNumber: syz [ 237.747479][ T362] usb 6-1: 0:2 : does not exist [ 237.757084][ T64] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 237.766471][ T362] usb 6-1: USB disconnect, device number 29 [ 237.799764][ T8083] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 237.929192][ T64] usb 1-1: config 0 has no interfaces? [ 237.934760][ T64] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 237.944006][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.952689][ T64] usb 1-1: config 0 descriptor?? [ 237.961562][ T8083] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.969614][ T8083] usb 4-1: not running at top speed; connect to a high speed hub [ 237.978696][ T8083] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.992434][ T8083] usb 4-1: config 8 interface 0 has no altsetting 0 [ 238.011837][ T8083] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 238.020796][ T9358] binder: Bad value for 'stats' [ 238.020960][ T8083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.034747][ T8083] usb 4-1: Product: syz [ 238.038939][ T8083] usb 4-1: Manufacturer: syz [ 238.043525][ T8083] usb 4-1: SerialNumber: syz [ 238.168672][ T7780] usb 7-1: cannot find UAC_HEADER [ 238.186240][ T7780] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.201542][ T7780] usb 7-1: USB disconnect, device number 2 [ 238.212730][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 238.264593][ T9375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:407 [ 238.266454][ T8083] usb 4-1: selecting invalid altsetting 0 [ 238.293884][ T8083] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 238.306479][ T8083] usb 4-1: USB disconnect, device number 52 [ 238.317241][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.906767][ T305] usb 1-1: USB disconnect, device number 111 [ 238.945624][ T9415] can0: slcan on ptm0. [ 239.006944][ T9419] rust_binder: 9415 RLIMIT_NICE not set [ 239.216599][ T9408] can0 (unregistered): slcan off ptm0. [ 239.339279][ T362] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 239.393978][ T9466] /dev/rnullb0: Can't open blockdev [ 239.414669][ T9468] rust_binder: Error while translating object. [ 239.414696][ T9468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.420883][ T9468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:417 [ 239.433081][ T9470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.455954][ T9475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.522050][ T362] usb 6-1: config 0 has an invalid interface number: 25 but max is 0 [ 239.537436][ T362] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.547548][ T362] usb 6-1: config 0 has no interface number 0 [ 239.553995][ T362] usb 6-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.567127][ T362] usb 6-1: config 0 interface 25 has no altsetting 0 [ 239.576776][ T362] usb 6-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 239.585132][ T9477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:424 [ 239.586038][ T362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.603158][ T362] usb 6-1: Product: syz [ 239.607335][ T362] usb 6-1: Manufacturer: syz [ 239.611966][ T362] usb 6-1: SerialNumber: syz [ 239.617173][ T362] usb 6-1: config 0 descriptor?? [ 239.659859][ T9481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.660128][ T9481] rust_binder: Write failure EINVAL in pid:430 [ 239.746674][ T36] audit: type=1326 audit(1751539768.751:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9484 comm="syz.3.2919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 239.894823][ T9430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.894845][ T9430] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 239.904291][ T9430] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:387 [ 239.918446][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.935354][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.946214][ T362] usb 6-1: Found UVC 0.00 device syz (1b3b:2951) [ 239.952715][ T362] usb 6-1: No valid video chain found. [ 239.959565][ T362] usb 6-1: USB disconnect, device number 30 [ 240.193702][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.202438][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.414242][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2923'. [ 240.440869][ T362] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 240.468350][ T9506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:446 [ 240.468566][ T9506] rust_binder: Write failure EINVAL in pid:446 [ 240.478106][ T9507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.496653][ T36] audit: type=1400 audit(1751539769.443:737): avc: denied { accept } for pid=9510 comm="syz.3.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.579357][ T362] usb 7-1: device descriptor read/64, error -71 [ 240.610377][ T9515] /dev/rnullb0: Can't open blockdev [ 240.733096][ T9534] syzkaller0: entered promiscuous mode [ 240.738663][ T9534] syzkaller0: entered allmulticast mode [ 240.835900][ T362] usb 7-1: device descriptor read/64, error -71 [ 240.859263][ T9539] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 240.859288][ T9539] rust_binder: Error while translating object. [ 240.870028][ T9539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.876278][ T9539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402 [ 240.942816][ T64] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 241.103179][ T362] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 241.124640][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 241.130826][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.140661][ T64] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.150345][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.160135][ T64] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.169905][ T64] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 241.179033][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.187562][ T64] usb 1-1: config 0 descriptor?? [ 241.242141][ T362] usb 7-1: device descriptor read/64, error -71 [ 241.410311][ T64] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 241.422374][ T64] usb 1-1: USB disconnect, device number 112 [ 241.429024][ T64] usblp0: removed [ 241.498727][ T362] usb 7-1: device descriptor read/64, error -71 [ 241.566310][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 241.575713][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 241.616421][ T362] usb usb7-port1: attempt power cycle [ 241.955396][ T36] audit: type=1326 audit(1751539770.809:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9258e929 code=0x7ffc0000 [ 241.979326][ T36] audit: type=1326 audit(1751539770.809:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9258e929 code=0x7ffc0000 [ 242.000072][ T9564] rust_binder: 9564: no such ref 7 [ 242.004822][ T362] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 242.011914][ T9564] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 242.015190][ T9564] rust_binder: Read failure Err(EFAULT) in pid:1625 [ 242.018278][ T36] audit: type=1326 audit(1751539770.827:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5e9258e929 code=0x7ffc0000 [ 242.053536][ T36] audit: type=1326 audit(1751539770.827:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9258e929 code=0x7ffc0000 [ 242.077873][ T362] usb 7-1: device descriptor read/8, error -71 [ 242.108085][ T64] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 242.215954][ T362] usb 7-1: device descriptor read/8, error -71 [ 242.234360][ T36] audit: type=1400 audit(1751539771.070:742): avc: denied { mounton } for pid=9572 comm="syz.3.2947" path="/158/file0" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 242.279144][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 242.285782][ T64] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 242.294034][ T64] usb 6-1: config 0 has no interface number 0 [ 242.301567][ T64] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 242.310616][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.318627][ T64] usb 6-1: Product: syz [ 242.322825][ T64] usb 6-1: Manufacturer: syz [ 242.327405][ T64] usb 6-1: SerialNumber: syz [ 242.333229][ T64] usb 6-1: config 0 descriptor?? [ 242.343330][ T64] smsc95xx v2.0.0 [ 242.346960][ T64] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 242.357044][ T64] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 242.385090][ T9579] rust_binder: Write failure EINVAL in pid:474 [ 242.450555][ T36] audit: type=1326 audit(1751539771.276:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9586 comm="syz.3.2951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 242.482378][ T362] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 242.504724][ T362] usb 7-1: device descriptor read/8, error -71 [ 242.511077][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2951'. [ 242.560398][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.571037][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.580024][ T493] usb 6-1: USB disconnect, device number 31 [ 242.643589][ T362] usb 7-1: device descriptor read/8, error -71 [ 242.730267][ T9594] rust_binder: Error while translating object. [ 242.730306][ T9594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 242.736554][ T9594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:489 [ 242.760287][ T362] usb usb7-port1: unable to enumerate USB device [ 242.854833][ T9602] batadv_slave_0: entered promiscuous mode [ 243.113027][ T8083] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 243.126594][ T9606] rust_binder: Write failure EINVAL in pid:1636 [ 243.136400][ T9608] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 243.146212][ T9610] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2960'. [ 243.238451][ T9615] rust_binder: 9614 RLIMIT_NICE not set [ 243.254824][ T9617] /dev/rnullb0: Can't open blockdev [ 243.273567][ T8083] usb 4-1: Using ep0 maxpacket: 32 [ 243.281708][ T8083] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 243.289841][ T8083] usb 4-1: config 0 has no interface number 0 [ 243.297432][ T8083] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 243.306490][ T8083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.314509][ T8083] usb 4-1: Product: syz [ 243.318693][ T8083] usb 4-1: Manufacturer: syz [ 243.323358][ T8083] usb 4-1: SerialNumber: syz [ 243.328589][ T8083] usb 4-1: config 0 descriptor?? [ 243.334190][ T8083] smsc95xx v2.0.0 [ 243.337854][ T8083] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 243.347889][ T8083] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 243.412343][ T45] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 243.550187][ T305] usb 4-1: USB disconnect, device number 53 [ 243.572708][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 243.578956][ T45] usb 6-1: config 4 has an invalid interface number: 60 but max is 0 [ 243.587067][ T45] usb 6-1: config 4 has no interface number 0 [ 243.593471][ T45] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=da.8d [ 243.593792][ T9627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 243.602541][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.621269][ T9601] batadv_slave_0: left promiscuous mode [ 243.807902][ T362] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 243.840949][ T9612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.849501][ T9612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.858011][ T305] usb 6-1: USB disconnect, device number 32 [ 243.969312][ T362] usb 1-1: config 0 has no interfaces? [ 243.974836][ T362] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 243.983909][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.992413][ T362] usb 1-1: config 0 descriptor?? [ 244.213411][ T8083] usb 1-1: USB disconnect, device number 113 [ 244.515375][ T9633] /dev/rnullb0: Can't open blockdev [ 245.069478][ T8083] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 245.230092][ T8083] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 245.238682][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.248794][ T8083] usb 1-1: config 0 has no interfaces? [ 245.254939][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.265130][ T8083] usb 1-1: config 0 has no interfaces? [ 245.271253][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.281344][ T8083] usb 1-1: config 0 has no interfaces? [ 245.287479][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.297764][ T8083] usb 1-1: config 0 has no interfaces? [ 245.303937][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.314258][ T8083] usb 1-1: config 0 has no interfaces? [ 245.320679][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.331139][ T8083] usb 1-1: config 0 has no interfaces? [ 245.337667][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.348114][ T8083] usb 1-1: config 0 has no interfaces? [ 245.355444][ T8083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.365736][ T305] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 245.373310][ T8083] usb 1-1: config 0 has no interfaces? [ 245.380344][ T8083] usb 1-1: New USB device found, idVendor=0525, idProduct=3aa1, bcdDevice=87.b4 [ 245.389376][ T8083] usb 1-1: New USB device strings: Mfr=204, Product=231, SerialNumber=43 [ 245.397822][ T8083] usb 1-1: Product: syz [ 245.401984][ T8083] usb 1-1: Manufacturer: syz [ 245.406548][ T8083] usb 1-1: SerialNumber: syz [ 245.416164][ T8083] usb 1-1: config 0 descriptor?? [ 245.526916][ T9674] /dev/sr0: Can't lookup blockdev [ 245.541512][ T305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.553922][ T305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.563011][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.571026][ T305] usb 4-1: Product: syz [ 245.575190][ T305] usb 4-1: Manufacturer: syz [ 245.579773][ T305] usb 4-1: SerialNumber: syz [ 245.638659][ T9680] rust_binder: Error while translating object. [ 245.638694][ T9680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.641011][ T9681] rust_binder: Error while translating object. [ 245.644901][ T9680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 245.654510][ T9681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.669607][ T9681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 245.691516][ T9683] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 245.710270][ T9683] SELinux: failed to load policy [ 245.827591][ T9687] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2986'. [ 246.014312][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.022853][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.038635][ T36] audit: type=1326 audit(1751539774.625:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141918e929 code=0x7fc00000 [ 246.062040][ T36] audit: type=1326 audit(1751539774.625:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f141918e929 code=0x7fc00000 [ 246.088364][ T36] audit: type=1326 audit(1751539774.625:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141918e929 code=0x7fc00000 [ 246.106369][ T362] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 246.119955][ T36] audit: type=1326 audit(1751539774.625:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141918e929 code=0x7fc00000 [ 246.298806][ T362] usb 6-1: Using ep0 maxpacket: 16 [ 246.305070][ T362] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.315665][ T362] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.325570][ T362] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.332802][ T362] usb 6-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18 [ 246.341996][ T362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.351097][ T362] usb 6-1: config 0 descriptor?? [ 246.358473][ T362] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 246.575521][ T8083] usb 6-1: USB disconnect, device number 33 [ 246.673671][ T305] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 246.680212][ T305] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 246.688038][ T305] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 246.887711][ T305] cdc_ncm 4-1:1.0: setting tx_max = 76 [ 246.895697][ T305] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 247.104895][ T8083] usb 4-1: USB disconnect, device number 54 [ 247.115499][ T8083] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 247.205886][ T9734] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 247.569201][ T9768] rust_binder: 9768: no such ref 0 [ 247.583565][ T9768] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 247.590982][ T9768] rust_binder: Write failure EINVAL in pid:467 [ 247.591196][ T9768] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 247.604656][ T9768] rust_binder: Write failure EINVAL in pid:467 [ 247.709976][ T8083] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 247.807872][ T9802] random: crng reseeded on system resumption [ 247.828663][ T36] audit: type=1326 audit(1751540032.307:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.3.3014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 247.870389][ T8083] usb 7-1: device descriptor read/64, error -71 [ 248.126916][ T8083] usb 7-1: device descriptor read/64, error -71 [ 248.148950][ T493] usb 1-1: USB disconnect, device number 114 [ 248.207737][ T9807] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 248.319216][ T9812] 9pnet_fd: Insufficient options for proto=fd [ 248.366368][ T9818] rust_binder: Error while translating object. [ 248.366400][ T9818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 248.372665][ T9818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1668 [ 248.382479][ T9818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.391827][ T8083] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 248.543850][ T8083] usb 7-1: device descriptor read/64, error -71 [ 248.800413][ T8083] usb 7-1: device descriptor read/64, error -71 [ 248.918081][ T8083] usb usb7-port1: attempt power cycle [ 249.025590][ T9846] rust_binder: 9846: no such ref 3 [ 249.156380][ T36] audit: type=1400 audit(1751540033.542:749): avc: denied { setopt } for pid=9853 comm="syz.5.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.281516][ T8083] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 249.303936][ T8083] usb 7-1: device descriptor read/8, error -71 [ 249.401926][ T9864] can0: slcan on ptm0. [ 249.432029][ T9864] can0 (unregistered): slcan off ptm0. [ 249.443511][ T8083] usb 7-1: device descriptor read/8, error -71 [ 249.709145][ T8083] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 249.731456][ T8083] usb 7-1: device descriptor read/8, error -71 [ 249.794640][ T493] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 249.870494][ T8083] usb 7-1: device descriptor read/8, error -71 [ 249.954986][ T493] usb 6-1: Using ep0 maxpacket: 8 [ 249.961325][ T493] usb 6-1: unable to get BOS descriptor or descriptor too short [ 249.969877][ T493] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 249.978070][ T493] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 249.986752][ T493] usb 6-1: config 4 has no interface number 0 [ 249.994243][ T493] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 249.997870][ T8083] usb usb7-port1: unable to enumerate USB device [ 250.003298][ T493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.019134][ T493] usb 6-1: Product: syz [ 250.024111][ T493] usb 6-1: Manufacturer: syz [ 250.028731][ T493] usb 6-1: SerialNumber: syz [ 250.216373][ T9877] fuse: Unknown parameter '01777777777777777777777ÿÿ0xffffffffffffffff' [ 250.250914][ T493] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 250.257342][ T493] usb 6-1: No valid video chain found. [ 250.264961][ T493] usb 6-1: USB disconnect, device number 34 [ 250.716799][ T36] audit: type=1326 audit(1751540035.011:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141918e929 code=0x7ffc0000 [ 250.740279][ T36] audit: type=1326 audit(1751540035.011:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141918e929 code=0x7ffc0000 [ 250.746288][ T9884] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 250.763876][ T36] audit: type=1326 audit(1751540035.011:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f141918e929 code=0x7ffc0000 [ 250.796734][ T36] audit: type=1326 audit(1751540035.011:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141918e929 code=0x7ffc0000 [ 250.865199][ T9895] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 250.865221][ T9895] rust_binder: Error while translating object. [ 250.873880][ T9895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.880968][ T9895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533 [ 251.074416][ T9907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 251.083694][ T9907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:519 [ 251.093368][ T9907] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 251.102508][ T9907] rust_binder: Read failure Err(EFAULT) in pid:519 [ 251.761221][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 251.761239][ T36] audit: type=1400 audit(1751540035.974:790): avc: denied { append } for pid=9930 comm="syz.6.3059" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 251.797123][ T36] audit: type=1400 audit(1751540035.974:791): avc: denied { sys_nice } for pid=9930 comm="syz.6.3059" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 252.112777][ T9953] /dev/rnullb0: Can't open blockdev [ 252.118146][ T45] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 252.200179][ T362] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 252.286605][ T45] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 252.295718][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.304280][ T45] usb 7-1: config 0 descriptor?? [ 252.372176][ T362] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.383188][ T362] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.392949][ T362] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.401990][ T362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.410591][ T362] usb 6-1: config 0 descriptor?? [ 252.413843][ T8083] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 252.416422][ T362] hub 6-1:0.0: USB hub found [ 252.575216][ T8083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.586146][ T8083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.596008][ T8083] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.608856][ T8083] usb 4-1: New USB device found, idVendor=1223, idProduct=0107, bcdDevice= 0.00 [ 252.618011][ T8083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.626633][ T8083] usb 4-1: config 0 descriptor?? [ 252.641477][ T362] hub 6-1:0.0: 1 port detected [ 252.651765][ T9970] usb usb8: usbfs: process 9970 (syz.0.3070) did not claim interface 0 before use [ 252.740352][ T9931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 252.740388][ T9931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:175 [ 253.060536][ T8083] hid (null): unknown global tag 0xc [ 253.074602][ T362] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 253.076151][ T8083] hid (null): usage index exceeded [ 253.083763][ T362] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 253.086754][ T8083] hid (null): usage index exceeded [ 253.095581][ T362] usbhid 6-1:0.0: can't add hid device: -71 [ 253.098983][ T8083] hid (null): unknown global tag 0xc [ 253.110206][ T362] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 253.110238][ T8083] hid (null): invalid report_size 1078742164 [ 253.124173][ T8083] hid (null): unknown global tag 0xc [ 253.130420][ T8083] hid-generic 0003:1223:0107.0015: unknown global tag 0xc [ 253.134016][ T362] usb 6-1: USB disconnect, device number 35 [ 253.137567][ T8083] hid-generic 0003:1223:0107.0015: item 0 1 1 12 parsing failed [ 253.151198][ T8083] hid-generic 0003:1223:0107.0015: probe with driver hid-generic failed with error -22 [ 253.178369][ T45] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 253.188466][ T45] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 253.215669][ T45] asix 7-1:0.0: probe with driver asix failed with error -71 [ 253.223876][ T45] usb 7-1: USB disconnect, device number 11 [ 253.722630][ T9981] rust_binder: 9981: no such ref 16 [ 253.728063][ T9981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:547 [ 253.890405][ T36] audit: type=1400 audit(1751540037.976:792): avc: denied { mount } for pid=9996 comm="syz.5.3077" name="/" dev="pstore" ino=2700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 253.922395][ T9997] /dev/rnullb0: Can't open blockdev [ 253.922589][ T36] audit: type=1400 audit(1751540038.004:793): avc: denied { mounton } for pid=9996 comm="syz.5.3077" path="/syzcgroup/unified/syz5" dev="pstore" ino=2700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 254.107473][T10015] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 254.107507][T10015] rust_binder: Error in use_page_slow: EBUSY [ 254.124021][T10015] rust_binder: use_range failure EBUSY [ 254.130211][T10015] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 254.135840][T10015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 254.143679][T10015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:185 [ 254.227749][ T36] audit: type=1400 audit(1751540038.285:794): avc: denied { setattr } for pid=9225 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.264359][T10021] rust_binder: 10021: no such ref 0 [ 254.269676][T10021] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 254.269692][T10021] rust_binder: Read failure Err(EFAULT) in pid:576 [ 254.278569][T10021] 9pnet_fd: p9_fd_create_unix (10021): problem connecting socket: ./file0/file0: -2 [ 254.295158][T10021] rust_binder: Write failure EINVAL in pid:576 [ 254.388259][T10025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:579 [ 254.409654][T10028] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 254.437281][T10031] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.3090' resets device [ 254.491275][T10035] overlayfs: missing 'lowerdir' [ 254.499224][T10035] fuse: Unknown parameter 'Youp_id' [ 254.550808][T10043] overlay: ./file1 is not a directory [ 254.733713][ T8083] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 254.916493][ T8083] usb 1-1: config 0 has no interfaces? [ 254.925686][ T8083] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 254.940079][ T8083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 254.955581][ T8083] usb 1-1: Product: syz [ 254.960575][ T8083] usb 1-1: Manufacturer: syz [ 254.965332][ T8083] usb 1-1: SerialNumber: syz [ 254.970408][T10063] overlayfs: failed to clone upperpath [ 254.980254][ T8083] usb 1-1: config 0 descriptor?? [ 255.367079][ T8083] usb 4-1: USB disconnect, device number 55 [ 255.571745][T10099] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=10099 comm=syz.5.3113 [ 257.401655][T10146] netlink: 'syz.5.3128': attribute type 12 has an invalid length. [ 257.564632][T10169] overlayfs: failed to resolve '/ ': -2 [ 257.756043][ T493] usb 1-1: USB disconnect, device number 115 [ 258.063032][T10173] netlink: 1235 bytes leftover after parsing attributes in process `syz.5.3137'. [ 258.122643][ T493] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 258.169532][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3140'. [ 258.284035][ T493] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.304360][ T493] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 258.313416][ T493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.325475][ T493] usb 1-1: config 0 descriptor?? [ 258.760099][ T493] wacom 0003:056A:00E6.0016: unknown main item tag 0x0 [ 258.775394][ T493] wacom 0003:056A:00E6.0016: hidraw0: USB HID v0.00 Device [HID 056a:00e6] on usb-dummy_hcd.0-1/input0 [ 258.974953][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.984616][T10201] tipc: Enabling of bearer rejected, failed to enable media [ 258.994019][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.017188][ T8083] usb 1-1: USB disconnect, device number 116 [ 259.058406][T10210] rust_binder: got new transaction with bad transaction stack [ 259.058434][T10210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1726 [ 259.090064][T10213] SELinux: security_context_str_to_sid (yz) failed with errno=-22 [ 259.737945][ T36] audit: type=1400 audit(1751572811.444:795): avc: denied { setattr } for pid=10235 comm="syz.5.3157" path="socket:[72077]" dev="sockfs" ino=72077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 260.105458][ T36] audit: type=1326 audit(1751572811.790:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.156042][ T36] audit: type=1326 audit(1751572811.790:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.179760][ T36] audit: type=1326 audit(1751572811.790:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.203570][ T36] audit: type=1326 audit(1751572811.790:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.226956][ T36] audit: type=1326 audit(1751572811.790:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.253722][ T36] audit: type=1326 audit(1751572811.790:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.277120][ T36] audit: type=1326 audit(1751572811.790:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.309924][ T36] audit: type=1326 audit(1751572811.790:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.333718][ T36] audit: type=1326 audit(1751572811.790:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x7ffc0000 [ 260.645623][ T5641] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 260.818089][ T5641] usb 1-1: not running at top speed; connect to a high speed hub [ 260.830947][ T5641] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 260.841938][ T5641] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.856628][ T5641] usb 1-1: config 1 interface 0 has no altsetting 0 [ 260.864893][ T5641] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 260.874314][ T5641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.882578][ T5641] usb 1-1: Product: ⹿鮪疛ì›ç•…ꆟ煰旈è´æŒ¢ä€·âƒ±à£ï®è½áˆ¸é¼¶æ”Žç˜§Ûëœâ–ë’ቃ庛亾Îⓔ慪ì¿é‡Šî±•æ¥±é†„龴ᮄ蒥鑥ì¦ã§–纙ïžä´ëªãŠšíŽ„쌥îœíˆ·ï’¿ç“¸à«¬èŠšæ°’䵲벓쾑铌銃è»ä ½ã±Žà¸³ã¤†å¯†æˆ£ä‹Œæ…ºá®®å¤½æ·ƒç«¡ä»¸éŒ¶ï»ªå³¼â§„笓·ᜧ篺둑ꔃî½á¬°æ¨ á«ã†‹ï£·ç‰’꺃鿠똥ࠧ닶柶쇘â³ã”‹å·…阹飜彩綑븜粶埌⚊㫎䴺愃췼拭礄탆詾 [ 260.917597][ T5641] usb 1-1: Manufacturer: 﫸儣â¸íŠ¾íâ´–æâ«à ¢ï²’奡á¯æŒšì¸‘猓醇䀹䤖泛䲠휔H뭯囧藄꿻ᆒ溑ꀜ何ピ횘妘é´á¥†î®³Ð‘뜆 [ 260.932308][ T5641] usb 1-1: SerialNumber: à°š [ 260.942216][T10262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.168875][ T5641] usbhid 1-1:1.0: can't add hid device: -71 [ 261.186915][ T5641] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 261.202513][ T5641] usb 1-1: USB disconnect, device number 117 [ 262.166954][T10317] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3183'. [ 262.182642][T10317] can0: slcan on ptm0. [ 262.226428][T10317] can0 (unregistered): slcan off ptm0. [ 262.501482][T10367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.501790][T10367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.521731][T10367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1762 [ 262.614475][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 262.811245][T10422] 9pnet_fd: Insufficient options for proto=fd [ 262.822844][T10426] 9pnet_fd: Insufficient options for proto=fd [ 262.845511][T10430] tipc: Started in network mode [ 262.850465][T10430] tipc: Node identity , cluster identity 4711 [ 262.856752][T10430] tipc: Failed to obtain node identity [ 262.862721][T10430] tipc: Enabling of bearer rejected, failed to enable media [ 263.003392][T10453] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3224'. [ 263.525849][T10471] overlayfs: failed to clone upperpath [ 263.576209][T10474] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 264.087633][ T5641] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 264.211571][T10485] tipc: Started in network mode [ 264.216620][T10485] tipc: Node identity , cluster identity 4711 [ 264.222823][T10485] tipc: Failed to obtain node identity [ 264.228718][T10485] tipc: Enabling of bearer rejected, failed to enable media [ 264.247964][ T5641] usb 1-1: Using ep0 maxpacket: 32 [ 264.256103][ T5641] usb 1-1: config 0 has an invalid interface number: 36 but max is 1 [ 264.264785][ T5641] usb 1-1: config 0 has an invalid interface number: 129 but max is 1 [ 264.273137][ T5641] usb 1-1: config 0 has no interface number 0 [ 264.279306][ T5641] usb 1-1: config 0 has no interface number 1 [ 264.285631][ T5641] usb 1-1: config 0 interface 129 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 264.296811][ T5641] usb 1-1: config 0 interface 36 has no altsetting 0 [ 264.303673][ T5641] usb 1-1: config 0 interface 129 has no altsetting 0 [ 264.311965][ T5641] usb 1-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=cb.5d [ 264.332235][ T5641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.343297][ T5641] usb 1-1: Product: syz [ 264.347868][ T5641] usb 1-1: Manufacturer: syz [ 264.352549][ T5641] usb 1-1: SerialNumber: syz [ 264.366387][ T5641] usb 1-1: config 0 descriptor?? [ 264.373661][T10490] 9pnet: Could not find request transport: fd‡/Ü [ 264.652166][T10482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3230'. [ 264.725085][T10523] netlink: 'syz.5.3249': attribute type 3 has an invalid length. [ 264.733168][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3249'. [ 265.336827][T10535] tmpfs: Bad value for 'huge' [ 266.085930][T10555] overlayfs: failed to clone upperpath [ 266.231640][ T7780] kernel write not supported for file [eventfd] (pid: 7780 comm: kworker/0:6) [ 266.415971][T10576] overlayfs: failed to clone upperpath [ 266.460075][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 266.789267][ T5641] asix 1-1:0.36 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 266.804231][ T5641] asix 1-1:0.36: probe with driver asix failed with error -71 [ 266.815247][ T5641] asix 1-1:0.129 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 266.825116][T10597] rust_binder: Write failure EFAULT in pid:1785 [ 266.839450][ T5641] asix 1-1:0.129: probe with driver asix failed with error -71 [ 266.874509][ T5641] usb 1-1: USB disconnect, device number 118 [ 267.459781][T10628] 9pnet_fd: Insufficient options for proto=fd [ 267.615633][ T6613] bridge_slave_1: left allmulticast mode [ 267.621359][ T6613] bridge_slave_1: left promiscuous mode [ 267.627245][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.634873][ T6613] bridge_slave_0: left allmulticast mode [ 267.640810][ T6613] bridge_slave_0: left promiscuous mode [ 267.646475][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.763343][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.772050][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.779454][T10626] bridge_slave_0: entered allmulticast mode [ 267.785758][T10626] bridge_slave_0: entered promiscuous mode [ 267.792180][ T6613] tipc: Left network mode [ 267.797797][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.805080][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.812288][T10626] bridge_slave_1: entered allmulticast mode [ 267.819026][T10626] bridge_slave_1: entered promiscuous mode [ 267.825658][ T6613] veth1_macvtap: left promiscuous mode [ 267.831466][ T6613] veth0_vlan: left promiscuous mode [ 267.958353][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.965444][T10626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.972742][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.979779][T10626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.004685][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.012568][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.029019][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.036085][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.044978][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.052016][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.083677][T10626] veth0_vlan: entered promiscuous mode [ 268.113483][T10626] veth1_macvtap: entered promiscuous mode [ 268.332685][T10659] fuse: Bad value for 'user_id' [ 268.337576][T10659] fuse: Bad value for 'user_id' [ 268.343279][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 268.343293][ T36] audit: type=1326 audit(1751573075.494:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.3295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 268.377663][ T36] audit: type=1326 audit(1751573075.522:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.3295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 268.406947][T10661] rust_binder: Write failure EFAULT in pid:7 [ 268.407099][T10661] rust_binder: Write failure EINVAL in pid:7 [ 268.812395][ T7780] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 268.947353][T10672] tipc: Enabling of bearer rejected, failed to enable media [ 268.960515][T10673] tipc: Enabling of bearer rejected, failed to enable media [ 268.995060][ T7780] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 269.004124][ T7780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.018535][ T7780] usb 1-1: config 0 descriptor?? [ 269.242135][ T7780] usb 1-1: Cannot read MAC address [ 269.247331][ T7780] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 269.262105][ T7780] usb 1-1: USB disconnect, device number 119 [ 269.923570][T10731] rust_binder: 10731: no such ref 0 [ 269.984307][T10733] rust_binder: Write failure EFAULT in pid:20 [ 270.595814][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.609032][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.616069][T10739] bridge_slave_0: entered allmulticast mode [ 270.622406][T10739] bridge_slave_0: entered promiscuous mode [ 270.828699][T10749] rust_binder: Write failure EINVAL in pid:28 [ 270.854851][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.867999][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.875050][T10739] bridge_slave_1: entered allmulticast mode [ 270.881679][T10739] bridge_slave_1: entered promiscuous mode [ 270.893627][ T6609] bridge_slave_1: left allmulticast mode [ 270.894112][T10756] rust_binder: 10756: no such ref 3 [ 270.899306][ T6609] bridge_slave_1: left promiscuous mode [ 270.910209][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.920970][ T6609] bridge_slave_0: left allmulticast mode [ 270.926615][ T6609] bridge_slave_0: left promiscuous mode [ 270.932427][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.057435][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.064474][T10739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.071741][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.078785][T10739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.100514][ T6609] veth1_macvtap: left promiscuous mode [ 271.144555][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.151855][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.160645][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.167691][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.177089][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.184146][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.209568][T10739] veth0_vlan: entered promiscuous mode [ 271.219582][T10739] veth1_macvtap: entered promiscuous mode [ 271.345828][ T36] audit: type=1400 audit(1751573078.301:828): avc: denied { watch } for pid=10768 comm="syz.7.3335" path="/1/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 271.377989][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3336'. [ 271.400621][ T36] audit: type=1400 audit(1751573078.357:829): avc: denied { create } for pid=10774 comm="syz.3.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 271.864911][T10784] 9pnet_fd: Insufficient options for proto=fd [ 271.902477][ T36] audit: type=1400 audit(1751573078.825:830): avc: denied { lock } for pid=10785 comm="syz.0.3341" path="socket:[74997]" dev="sockfs" ino=74997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 272.052331][T10804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10804 comm=syz.0.3349 [ 272.064894][T10804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10804 comm=syz.0.3349 [ 272.078141][ T36] audit: type=1400 audit(1751573078.984:831): avc: denied { create } for pid=10803 comm="syz.0.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 272.094434][T10806] SELinux: security_context_str_to_sid () failed with errno=-22 [ 272.115268][ T305] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 272.134769][T10810] batadv_slave_1: entered promiscuous mode [ 272.140875][T10810] batadv_slave_1: left promiscuous mode [ 272.276152][ T305] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 272.299148][ T305] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 272.307657][ T305] usb 8-1: can't read configurations, error -61 [ 272.315564][T10820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 272.315593][T10820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72 [ 272.326555][T10820] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 272.335657][T10820] rust_binder: Read failure Err(EFAULT) in pid:72 [ 272.380927][T10824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 272.457327][ T305] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 272.489451][T10846] /dev/rnullb0: Can't open blockdev [ 272.628646][ T305] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 272.637291][ T305] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 272.644894][ T305] usb 8-1: can't read configurations, error -61 [ 272.651401][ T305] usb usb8-port1: attempt power cycle [ 272.970857][T10915] binder: Unknown parameter 'eth0_macvtap' [ 273.013779][ T305] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 273.045938][ T305] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 273.059481][ T305] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 273.069570][ T305] usb 8-1: can't read configurations, error -61 [ 273.216251][ T305] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 273.238306][ T305] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 273.246958][ T305] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 273.254539][ T305] usb 8-1: can't read configurations, error -61 [ 273.260885][ T305] usb usb8-port1: unable to enumerate USB device [ 274.102947][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 274.112327][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 274.185291][ T36] audit: type=1400 audit(1751573080.958:832): avc: denied { lock } for pid=10947 comm="syz.0.3399" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 274.651846][ T36] audit: type=1400 audit(1751573081.398:833): avc: denied { connect } for pid=10966 comm="syz.0.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.130282][T10985] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3411'. [ 275.984760][ T5641] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 276.146078][ T5641] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.157662][ T5641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 276.168564][ T5641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 276.178337][ T5641] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.191821][ T5641] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.199300][T11006] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3419'. [ 276.200988][ T5641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.211813][T11006] rust_binder: Error while translating object. [ 276.218012][T11006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 276.220018][ T5641] usb 1-1: config 0 descriptor?? [ 276.224556][T11006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 276.666212][ T5641] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 276.683946][ T5641] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 277.059333][T11031] 9pnet_fd: Insufficient options for proto=fd [ 277.298274][T11043] sit0: entered promiscuous mode [ 277.304117][T11043] netlink: 'syz.7.3432': attribute type 1 has an invalid length. [ 277.311887][T11043] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3432'. [ 278.120702][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3453'. [ 278.130152][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3453'. [ 279.164048][T11128] rust_binder: Write failure EINVAL in pid:60 [ 279.252990][T11147] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 279.288226][ T8083] usb 1-1: USB disconnect, device number 120 [ 279.362104][T11153] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3473'. [ 279.384460][T11158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 279.384834][T11158] rust_binder: Error while translating object. [ 279.394021][T11158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.400246][T11158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 279.736696][ T8083] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 279.909423][ T8083] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 279.920477][ T8083] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.934755][ T8083] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 279.943809][ T8083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.951799][ T8083] usb 1-1: Product: syz [ 279.955948][ T8083] usb 1-1: Manufacturer: syz [ 279.960518][ T8083] usb 1-1: SerialNumber: syz [ 279.965158][ T5641] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 280.132160][ T5641] usb 8-1: Using ep0 maxpacket: 32 [ 280.138397][ T5641] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 280.146516][ T5641] usb 8-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 280.157066][ T5641] usb 8-1: config 0 has no interface number 0 [ 280.163136][ T5641] usb 8-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.177070][ T5641] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 280.186133][ T5641] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 280.194884][ T5641] usb 8-1: Manufacturer: syz [ 280.199536][ T5641] usb 8-1: SerialNumber: syz [ 280.204741][ T5641] usb 8-1: config 0 descriptor?? [ 280.210458][ T5641] smsc95xx v2.0.0 [ 280.214100][ T5641] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 280.224137][ T5641] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 280.232432][ T5641] cdc_acm 8-1:0.67: Zero length descriptor references [ 280.239227][ T5641] cdc_acm 8-1:0.67: probe with driver cdc_acm failed with error -22 [ 280.320995][ T36] audit: type=1400 audit(1751573086.693:834): avc: denied { create } for pid=11170 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 280.366793][T11173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11173 comm=syz.5.3480 [ 280.413905][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.422418][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.431954][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.440483][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.449010][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.457731][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.478913][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3483'. [ 280.587366][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3485'. [ 280.663458][ T36] audit: type=1400 audit(1751573087.020:835): avc: denied { setattr } for pid=11206 comm="syz.5.3491" name="" dev="pipefs" ino=76464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 280.680700][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.695927][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.711895][ T8083] usbhid 1-1:1.0: can't add hid device: -71 [ 280.717926][ T8083] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 280.727019][ T8083] usb 1-1: USB disconnect, device number 121 [ 281.297950][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3496'. [ 282.180687][T11255] 9pnet_fd: Insufficient options for proto=fd [ 282.197078][T11257] incfs: Options parsing error. -22 [ 282.205029][T11257] incfs: mount failed -22 [ 282.580002][ T493] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 282.740353][ T493] usb 1-1: Using ep0 maxpacket: 8 [ 282.746871][ T493] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.755415][ T493] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 282.763755][ T493] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 282.773870][ T493] usb 1-1: config 4 has no interface number 0 [ 282.781300][ T493] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 282.790367][ T493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.798363][ T493] usb 1-1: Product: syz [ 282.802506][ T493] usb 1-1: Manufacturer: syz [ 282.807101][ T493] usb 1-1: SerialNumber: syz [ 282.919458][ T7780] usb 8-1: USB disconnect, device number 6 [ 283.032011][ T493] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 283.038462][ T493] uvcvideo 1-1:4.147: Entity type for entity Output 251 was not initialized! [ 283.047256][ T493] usb 1-1: Failed to create links for entity 251 [ 283.053657][ T493] usb 1-1: Failed to register entities (-22). [ 283.062370][ T493] usb 1-1: USB disconnect, device number 122 [ 283.213331][ T36] audit: type=1326 audit(1751573089.406:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.236843][ T36] audit: type=1326 audit(1751573089.406:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.260451][ T36] audit: type=1326 audit(1751573089.406:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.269594][T11321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3531'. [ 283.288685][ T36] audit: type=1326 audit(1751573089.471:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.295791][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3531'. [ 283.316490][ T36] audit: type=1326 audit(1751573089.471:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.348454][ T36] audit: type=1326 audit(1751573089.480:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.373025][T11318] rust_binder: Error while translating object. [ 283.373054][T11318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 283.378804][ T36] audit: type=1326 audit(1751573089.480:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.379209][T11318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 283.412149][ T36] audit: type=1326 audit(1751573089.480:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.7.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce35f8e929 code=0x7ffc0000 [ 283.576680][T11330] can0: slcan on ptm0. [ 283.670683][T11330] can0 (unregistered): slcan off ptm0. [ 283.756726][T11336] /dev/rnullb0: Can't open blockdev [ 283.767009][T11338] incfs: Options parsing error. -22 [ 283.772521][T11338] incfs: mount failed -22 [ 283.784887][T11342] overlayfs: failed to clone upperpath [ 283.831289][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'. [ 283.840670][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'. [ 283.873384][ T7780] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 284.055112][ T7780] usb 8-1: Using ep0 maxpacket: 16 [ 284.061602][ T7780] usb 8-1: unable to get BOS descriptor or descriptor too short [ 284.069935][ T7780] usb 8-1: config 13 has an invalid interface number: 50 but max is 0 [ 284.078146][ T7780] usb 8-1: config 13 has no interface number 0 [ 284.084291][ T7780] usb 8-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 284.094399][ T7780] usb 8-1: config 13 interface 50 has no altsetting 0 [ 284.102566][ T7780] usb 8-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 284.111625][ T7780] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.119605][ T7780] usb 8-1: Product: syz [ 284.123736][ T7780] usb 8-1: Manufacturer: syz [ 284.128303][ T7780] usb 8-1: SerialNumber: syz [ 284.133977][T11334] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 284.358818][ T7780] usb 8-1: MIDIStreaming interface descriptor not found [ 284.369326][ T7780] usb 8-1: USB disconnect, device number 7 [ 284.890016][T11376] 9pnet_fd: Insufficient options for proto=fd [ 284.925843][T11382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 284.926145][T11382] rust_binder: Error while translating object. [ 284.935283][T11382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.941451][T11382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 285.202819][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3556'. [ 285.221231][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3556'. [ 285.766551][T11421] overlayfs: failed to clone lowerpath [ 286.319182][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 286.328418][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 286.344528][T11493] tc_dump_action: action bad kind [ 286.364285][ T305] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 286.481161][T11507] rust_binder: Error while translating object. [ 286.481184][T11507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 286.487382][T11507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 286.503038][ T305] usb 1-1: device descriptor read/64, error -71 [ 286.533483][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3603'. [ 286.542725][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3603'. [ 286.635609][T11529] binder: Unknown parameter 'maxring' [ 286.770182][ T305] usb 1-1: device descriptor read/64, error -71 [ 286.898432][ T8083] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 287.026725][ T305] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 287.059799][ T8083] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.070556][ T8083] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 287.082099][ T8083] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 287.093050][ T8083] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.107378][ T8083] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 287.116462][ T8083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.124471][ T8083] usb 8-1: Product: syz [ 287.128636][ T8083] usb 8-1: Manufacturer: syz [ 287.133230][ T8083] usb 8-1: SerialNumber: syz [ 287.142303][ T8083] usb 8-1: config 0 descriptor?? [ 287.147989][T11531] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 287.158835][ T8083] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input41 [ 287.168611][ T305] usb 1-1: device descriptor read/64, error -71 [ 287.373041][ T7780] usb 8-1: USB disconnect, device number 8 [ 287.422210][ T305] usb 1-1: device descriptor read/64, error -71 [ 287.539893][ T305] usb usb1-port1: attempt power cycle [ 287.903686][ T305] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 287.946993][ T305] usb 1-1: device descriptor read/8, error -71 [ 288.096614][ T305] usb 1-1: device descriptor read/8, error -71 [ 288.362883][ T305] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 288.385312][ T305] usb 1-1: device descriptor read/8, error -71 [ 288.524273][ T305] usb 1-1: device descriptor read/8, error -71 [ 288.640921][ T305] usb usb1-port1: unable to enumerate USB device [ 288.731651][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 288.731669][ T36] audit: type=1400 audit(1751573094.570:854): avc: denied { name_bind } for pid=11605 comm="syz.7.3635" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 288.766816][T11613] 9pnet_fd: Insufficient options for proto=fd [ 289.100432][ T305] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 289.260760][ T305] usb 8-1: Using ep0 maxpacket: 8 [ 289.267875][ T305] usb 8-1: unable to get BOS descriptor or descriptor too short [ 289.276066][ T305] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 289.283661][ T305] usb 8-1: can't read configurations, error -71 [ 289.466992][T11636] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 289.478621][T11636] overlayfs: missing 'lowerdir' [ 289.837894][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3648'. [ 289.847472][T11640] rust_binder: Write failure EFAULT in pid:149 [ 289.865713][T11644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.872270][T11644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 289.882262][T11644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.898119][T11646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.898190][T11646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 289.936228][ T36] audit: type=1326 audit(1751573095.692:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.7.3651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce35f8e929 code=0x0 [ 290.256695][T11674] @ÿ: renamed from veth0_vlan (while UP) [ 290.264079][T11674] netlink: 'syz.5.3657': attribute type 27 has an invalid length. [ 290.283741][T11676] rust_binder: Write failure EINVAL in pid:264 [ 290.283833][T11676] rust_binder: 11676: no such ref 2 [ 290.295563][T11676] rust_binder: 11676: no such ref 0 [ 290.503321][T11690] input: syz0 as /devices/virtual/input/input42 [ 291.389449][T11736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.393915][T11735] rust_binder: Error while translating object. [ 291.400405][T11735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.406559][T11735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 291.783420][ T7780] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 291.899478][T11741] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=11741 comm=syz.5.3684 [ 291.927743][T11748] netlink: 'syz.5.3686': attribute type 11 has an invalid length. [ 291.935613][T11748] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3686'. [ 291.956640][ T7780] usb 1-1: config 0 has no interfaces? [ 291.963588][ T7780] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 291.972952][ T7780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 291.982222][ T7780] usb 1-1: Product: syz [ 291.986542][ T7780] usb 1-1: Manufacturer: syz [ 291.996034][ T7780] usb 1-1: SerialNumber: syz [ 292.001353][ T7780] usb 1-1: config 0 descriptor?? [ 292.234608][ T36] audit: type=1400 audit(1751573097.844:856): avc: denied { write } for pid=11738 comm="syz.0.3683" name="file0" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.257154][ T36] audit: type=1400 audit(1751573097.844:857): avc: denied { open } for pid=11738 comm="syz.0.3683" path="/97/file0" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.308712][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3698'. [ 292.319729][ T36] audit: type=1400 audit(1751573097.928:858): avc: denied { watch_reads } for pid=11784 comm="syz.3.3699" path="/372/file0" dev="tmpfs" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.320097][T11785] fuse: Unknown parameter '÷&M±³½›YrootÉ#¦ø_èGi$·«y°d8*Ø0000!m$6' [ 292.439445][ T36] audit: type=1400 audit(1751573098.040:859): avc: denied { read } for pid=11798 comm="syz.3.3704" path="socket:[79515]" dev="sockfs" ino=79515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.443429][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3704'. [ 292.488930][ T7780] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 292.627878][ T7780] usb 8-1: device descriptor read/64, error -71 [ 292.884426][ T7780] usb 8-1: device descriptor read/64, error -71 [ 293.142517][ T7780] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 293.290687][ T7780] usb 8-1: device descriptor read/64, error -71 [ 293.547155][ T7780] usb 8-1: device descriptor read/64, error -71 [ 293.675491][ T7780] usb usb8-port1: attempt power cycle [ 294.038869][ T7780] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 294.061193][ T7780] usb 8-1: device descriptor read/8, error -71 [ 294.200190][ T7780] usb 8-1: device descriptor read/8, error -71 [ 294.455734][ T7780] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 294.478117][ T7780] usb 8-1: device descriptor read/8, error -71 [ 294.495582][T11873] overlayfs: failed to clone lowerpath [ 294.617061][ T7780] usb 8-1: device descriptor read/8, error -71 [ 294.733744][ T7780] usb usb8-port1: unable to enumerate USB device [ 294.751170][ T5641] usb 1-1: USB disconnect, device number 127 [ 294.776644][T11892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.776849][T11891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 294.783476][T11891] rust_binder: Error while translating object. [ 294.792703][T11891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 294.798943][T11891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 295.205774][ T5641] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 295.376934][ T5641] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 295.385299][ T5641] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.387933][T11963] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000003' [ 295.395629][ T5641] usb 1-1: config 0 has no interfaces? [ 295.412126][ T5641] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 295.421273][ T5641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 295.429367][ T5641] usb 1-1: Product: syz [ 295.433570][ T5641] usb 1-1: Manufacturer: syz [ 295.438138][ T5641] usb 1-1: SerialNumber: syz [ 295.443365][ T5641] usb 1-1: config 0 descriptor?? [ 295.855379][T11968] fuse: Unknown parameter '÷&M±³½›YrootÉ#¦ø_èGi$·«y°d8*Ø0000!m$6' [ 296.118350][T11986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:189 [ 296.174201][T12000] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 296.183423][T12000] rust_binder: Error while translating object. [ 296.183954][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3779'. [ 296.193974][T12000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 296.204243][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3779'. [ 296.209023][T12000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 296.301096][ T36] audit: type=1326 audit(1751573357.651:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.5.3785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc0f8e929 code=0x0 [ 296.357020][T12021] binder: Unknown parameter 'ÿÿÿÿ' [ 296.537938][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 296.547272][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 296.625722][ T362] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 296.764680][ T362] usb 8-1: device descriptor read/64, error -71 [ 297.021259][ T362] usb 8-1: device descriptor read/64, error -71 [ 297.213624][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3797'. [ 297.223031][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3797'. [ 297.277839][ T362] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 297.427507][ T362] usb 8-1: device descriptor read/64, error -71 [ 297.684077][ T362] usb 8-1: device descriptor read/64, error -71 [ 297.801779][ T362] usb usb8-port1: attempt power cycle [ 297.851554][T12061] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3803'. [ 297.860581][T12061] 0ªî{X¹¦: renamed from gretap0 [ 297.866126][T12061] 0ªî{X¹¦: entered allmulticast mode [ 297.871503][T12061] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 298.011008][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'. [ 298.096807][ T64] usb 1-1: USB disconnect, device number 2 [ 298.186574][ T362] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 298.187895][T12090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.198869][T12090] rust_binder: 12090: no such ref 1 [ 298.221811][ T362] usb 8-1: device descriptor read/8, error -71 [ 298.228533][T12093] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.361094][ T362] usb 8-1: device descriptor read/8, error -71 [ 298.624867][ T362] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 298.647281][ T362] usb 8-1: device descriptor read/8, error -71 [ 298.786250][ T362] usb 8-1: device descriptor read/8, error -71 [ 298.913619][ T362] usb usb8-port1: unable to enumerate USB device [ 299.417908][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3830'. [ 299.434243][T12141] futex_wake_op: syz.5.3831 tries to shift op by -1; fix this program [ 299.596408][ T36] audit: type=1400 audit(1751573360.728:861): avc: denied { setattr } for pid=12142 comm="syz.7.3832" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 299.811631][T12167] overlayfs: failed to clone lowerpath [ 299.817805][T12167] overlayfs: failed to clone upperpath [ 299.878132][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3841'. [ 300.035998][ T5641] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 300.197400][ T5641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.208340][ T5641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.218101][ T5641] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 300.227145][ T5641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.235773][ T5641] usb 1-1: config 0 descriptor?? [ 300.670407][ T5641] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 300.677292][ T5641] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 300.686897][ T5641] isku 0003:1E7D:319C.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 300.828104][T12193] rust_binder: 12193: no such ref 0 [ 300.833374][T12193] rust_binder: Write failure EINVAL in pid:219 [ 300.833578][T12193] rust_binder: Write failure EINVAL in pid:219 [ 300.840026][T12193] rust_binder: Read failure Err(EAGAIN) in pid:219 [ 300.885826][ T5641] isku 0003:1E7D:319C.0018: couldn't init struct isku_device [ 300.899742][ T5641] isku 0003:1E7D:319C.0018: couldn't install keyboard [ 300.909108][ T5641] isku 0003:1E7D:319C.0018: probe with driver isku failed with error -71 [ 300.918790][ T5641] usb 1-1: USB disconnect, device number 3 [ 301.108934][ T36] audit: type=1400 audit(1751573362.150:862): avc: denied { create } for pid=12215 comm="syz.7.3857" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 301.442380][T12229] 9pnet_fd: Insufficient options for proto=fd [ 301.554948][ T5040] bridge_slave_1: left allmulticast mode [ 301.560610][ T5040] bridge_slave_1: left promiscuous mode [ 301.566482][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.574764][ T5040] bridge_slave_0: left allmulticast mode [ 301.580532][ T5040] bridge_slave_0: left promiscuous mode [ 301.586632][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.656666][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.663735][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.670772][T12230] bridge_slave_0: entered allmulticast mode [ 301.677105][T12230] bridge_slave_0: entered promiscuous mode [ 301.683821][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.690903][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.697981][T12230] bridge_slave_1: entered allmulticast mode [ 301.704316][T12230] bridge_slave_1: entered promiscuous mode [ 301.710845][ T5040] veth1_macvtap: left promiscuous mode [ 301.716396][ T5040] veth0_vlan: left promiscuous mode [ 301.783612][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.790660][T12230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.797876][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.804895][T12230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.828269][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.835547][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.843188][ T362] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 301.852746][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.859799][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.868803][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.875856][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.899077][T12230] veth0_vlan: entered promiscuous mode [ 301.909322][T12230] veth1_macvtap: entered promiscuous mode [ 301.967425][T12249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.967452][T12249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.996389][T12256] rust_binder: Error while translating object. [ 302.002861][T12256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 302.004436][ T362] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.009297][T12256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 302.019357][ T362] usb 1-1: not running at top speed; connect to a high speed hub [ 302.043760][ T362] usb 1-1: config 11 has an invalid interface number: 229 but max is 0 [ 302.053784][ T362] usb 1-1: config 11 has no interface number 0 [ 302.060032][ T362] usb 1-1: config 11 interface 229 altsetting 241 endpoint 0xA has invalid wMaxPacketSize 0 [ 302.072159][ T362] usb 1-1: config 11 interface 229 has no altsetting 0 [ 302.080570][ T362] usb 1-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 302.089653][ T362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.097639][ T362] usb 1-1: Product: syz [ 302.103331][ T362] usb 1-1: Manufacturer: syz [ 302.107932][ T362] usb 1-1: SerialNumber: syz [ 302.408200][ T362] usb 1-1: USB disconnect, device number 4 [ 302.410049][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:11.229/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 302.842659][ T36] audit: type=1326 audit(1751573363.768:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.3.3880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 303.031826][T12290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 303.050429][T12295] netlink: 'syz.8.3886': attribute type 32 has an invalid length. [ 303.051190][T12293] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 303.067518][T12293] rust_binder: Read failure Err(EFAULT) in pid:355 [ 303.324688][T12316] 9pnet_fd: Insufficient options for proto=fd [ 303.410759][T12320] binder: Bad value for 'max' [ 303.457556][T12322] tipc: Started in network mode [ 303.462484][T12322] tipc: Node identity ca5d3aa51bc5, cluster identity 4711 [ 303.469970][T12322] tipc: Enabled bearer , priority 0 [ 303.476886][T12322] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 303.486346][T12322] rust_binder: Write failure EINVAL in pid:364 [ 303.486752][T12321] tipc: Resetting bearer [ 303.510281][T12321] tipc: Disabling bearer [ 304.005603][T12354] tipc: Enabling of bearer rejected, failed to enable media [ 304.257723][T12359] rust_binder: Write failure EINVAL in pid:35 [ 304.440592][T12366] overlay: Unknown parameter 'volatile:/' [ 304.453253][T12365] SELinux: syz.8.3914 (12365) set checkreqprot to 1. This is no longer supported. [ 304.638332][T12397] /dev/loop0: Can't lookup blockdev [ 304.650111][T12400] netlink: 'syz.3.3927': attribute type 4 has an invalid length. [ 304.657934][T12400] __nla_validate_parse: 1 callbacks suppressed [ 304.657947][T12400] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3927'. [ 304.674188][T12403] netlink: 'syz.3.3927': attribute type 4 has an invalid length. [ 304.682044][T12403] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3927'. [ 304.699808][T12405] 9pnet_fd: Insufficient options for proto=fd [ 304.781478][T12421] binder: Bad value for 'defcontext' [ 304.836954][ T36] audit: type=1326 audit(1751573365.639:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.0.3935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f281678e929 code=0x0 [ 304.890462][T12426] rust_binder: Write failure EINVAL in pid:54 [ 304.890528][T12426] rust_binder: 12426: no such ref 1048579 [ 304.926195][T12428] 9pnet_fd: Insufficient options for proto=fd [ 304.939885][T12430] /dev/rnullb0: Can't lookup blockdev [ 304.945399][T12432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.971373][T12442] rust_binder: Write failure EFAULT in pid:63 [ 304.971373][T12443] rust_binder: Write failure EFAULT in pid:63 [ 305.004938][T12445] syzkaller0: entered promiscuous mode [ 305.082958][T12450] usb usb8: selecting invalid altsetting 2 [ 305.128678][T12454] 9pnet_fd: Insufficient options for proto=fd [ 305.364432][T12467] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=12467 comm=syz.3.3952 [ 305.595122][ T8083] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 305.736276][T12471] netlink: 'syz.0.3954': attribute type 40 has an invalid length. [ 305.753435][ T36] audit: type=1400 audit(1751573366.490:865): avc: denied { remount } for pid=12472 comm="syz.0.3955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 305.776399][ T8083] usb 9-1: config 0 has no interfaces? [ 305.784522][ T8083] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 305.793586][ T8083] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 305.801671][ T8083] usb 9-1: Product: syz [ 305.805823][ T8083] usb 9-1: Manufacturer: syz [ 305.810407][ T8083] usb 9-1: SerialNumber: syz [ 305.815504][ T8083] usb 9-1: config 0 descriptor?? [ 305.884155][T12484] batadv_slave_1: entered promiscuous mode [ 305.891136][T12483] batadv_slave_1: left promiscuous mode [ 305.946967][T12490] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=24929 sclass=netlink_xfrm_socket pid=12490 comm=syz.3.3963 [ 306.448485][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3976'. [ 306.513185][T12531] overlayfs: failed to resolve '/"Àf¸x': -2 [ 307.113031][T12559] overlayfs: failed to clone upperpath [ 307.292740][T12575] overlayfs: failed to resolve './file1/file0': -2 [ 307.299346][ T8083] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 307.378322][ T36] audit: type=1326 audit(1751573369.010:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc0f8e929 code=0x0 [ 307.417045][T12590] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4000'. [ 307.426731][T12590] overlayfs: failed to clone upperpath [ 307.477653][ T8083] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 307.486669][ T8083] usb 1-1: config 1 has no interface number 1 [ 307.492981][ T8083] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 307.505804][ T8083] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 307.517987][ T8083] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.526370][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4002'. [ 307.527659][ T8083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.543918][ T8083] usb 1-1: Product: syz [ 307.548057][ T8083] usb 1-1: Manufacturer: syz [ 307.552644][ T8083] usb 1-1: SerialNumber: syz [ 307.772892][T12553] /dev/rnullb0: Can't open blockdev [ 307.779178][ T8083] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 307.787669][ T8083] usb 1-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 307.794969][ T8083] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 307.803900][ T8083] usb 1-1: USB disconnect, device number 5 [ 307.811476][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 308.326159][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4011'. [ 308.335388][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4011'. [ 308.479053][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 308.489237][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 308.552497][ T362] usb 9-1: USB disconnect, device number 2 [ 308.573058][T12658] /dev/rnullb0: Can't open blockdev [ 308.590312][T12664] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4029'. [ 308.755872][T12690] overlayfs: missing 'workdir' [ 309.550652][ T305] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 309.712341][ T305] usb 1-1: config 0 has no interfaces? [ 309.719390][ T305] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 309.729567][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 309.737797][ T305] usb 1-1: Product: syz [ 309.742026][ T305] usb 1-1: Manufacturer: syz [ 309.746833][ T305] usb 1-1: SerialNumber: syz [ 309.754433][ T305] usb 1-1: config 0 descriptor?? [ 309.756071][T12734] fuse: Bad value for 'user_id' [ 309.764272][T12734] fuse: Bad value for 'user_id' [ 309.783269][T12736] tipc: Enabling of bearer rejected, failed to enable media [ 309.967987][ T64] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 310.132029][ T64] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.143111][ T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 310.154557][ T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 310.164540][ T64] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.179329][ T64] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 310.188550][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.196704][ T64] usb 9-1: Product: syz [ 310.200908][ T64] usb 9-1: Manufacturer: syz [ 310.205709][ T64] usb 9-1: SerialNumber: syz [ 310.211258][ T64] usb 9-1: config 0 descriptor?? [ 310.646878][ T8083] usb 9-1: USB disconnect, device number 3 [ 311.258772][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=50 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.271352][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=63 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.283918][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.296445][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.309031][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.321585][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.334098][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.346608][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.359156][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.371662][T12834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=12834 comm=syz.8.4096 [ 311.523847][T12853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.523878][T12853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.573067][T12867] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 311.586635][T12867] rust_binder: Write failure EINVAL in pid:143 [ 311.586800][T12867] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967295 [ 311.600984][T12867] rust_binder: Write failure EINVAL in pid:143 [ 311.649420][T12870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.700425][T12875] rust_binder: Write failure EINVAL in pid:151 [ 311.700643][ T36] audit: type=1400 audit(2000000001.524:867): avc: denied { ioctl } for pid=12874 comm="syz.8.4109" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 311.884851][T12897] fuse: Unknown parameter '' [ 311.898151][T12899] netlink: 'syz.3.4119': attribute type 11 has an invalid length. [ 311.921253][T12899] __nla_validate_parse: 3 callbacks suppressed [ 311.921268][T12899] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4119'. [ 311.964954][T12910] fuse: Bad value for 'user_id' [ 311.970500][T12910] fuse: Bad value for 'user_id' [ 312.107750][ T36] audit: type=1326 audit(2000000001.898:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.5.4126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc0f8e929 code=0x0 [ 312.402548][ T64] usb 1-1: USB disconnect, device number 6 [ 312.420383][T12928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.421904][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.436535][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.444074][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.451564][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.459117][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.466689][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.474096][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.481501][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.488870][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.496341][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.503731][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.511096][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.518492][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.525876][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.533880][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.541251][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.548632][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.556029][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.563385][ T7780] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 312.571387][ T7780] hid-generic 0000:0004:0000.0019: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 312.586454][T12932] fido_id[12932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 312.638828][T12935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.638856][T12935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.854127][ T64] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 313.003857][ T64] usb 1-1: device descriptor read/64, error -71 [ 313.062184][T12951] overlayfs: failed to clone upperpath [ 313.260423][ T64] usb 1-1: device descriptor read/64, error -71 [ 313.516875][ T64] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 313.655871][ T64] usb 1-1: device descriptor read/64, error -71 [ 313.923122][ T64] usb 1-1: device descriptor read/64, error -71 [ 314.040793][ T64] usb usb1-port1: attempt power cycle [ 314.404193][ T64] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 314.426537][ T64] usb 1-1: device descriptor read/8, error -71 [ 314.579499][ T64] usb 1-1: device descriptor read/8, error -71 [ 314.831838][ T64] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 314.854277][ T64] usb 1-1: device descriptor read/8, error -71 [ 314.993180][ T64] usb 1-1: device descriptor read/8, error -71 [ 315.109832][ T64] usb usb1-port1: unable to enumerate USB device [ 315.496318][T13033] overlayfs: failed to clone upperpath [ 315.529511][T13042] overlay: ./file0 is not a directory [ 315.997107][ T305] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 316.073705][ T36] audit: type=1400 audit(2000000005.612:869): avc: denied { remount } for pid=13092 comm="syz.0.4182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 316.178009][T13110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.179801][ T305] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 316.195288][ T305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.203917][ T305] usb 9-1: config 0 descriptor?? [ 317.105029][T13138] rust_binder: 13138: no such ref 7 [ 317.110746][T13138] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 317.110764][T13138] rust_binder: Read failure Err(EFAULT) in pid:463 [ 317.234502][T13142] KVM: debugfs: duplicate directory 13142-4 [ 317.247460][T13142] KVM: debugfs: duplicate directory 13142-5 [ 317.253787][T13142] KVM: debugfs: duplicate directory 13142-6 [ 317.260070][T13142] KVM: debugfs: duplicate directory 13142-7 [ 317.266259][T13142] KVM: debugfs: duplicate directory 13142-8 [ 317.272520][T13142] KVM: debugfs: duplicate directory 13142-9 [ 317.278716][T13142] KVM: debugfs: duplicate directory 13142-10 [ 317.285677][T13142] KVM: debugfs: duplicate directory 13142-11 [ 317.291967][T13142] KVM: debugfs: duplicate directory 13142-12 [ 317.298290][T13142] KVM: debugfs: duplicate directory 13142-13 [ 318.574937][ T305] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 318.585065][ T305] asix 9-1:0.0: probe with driver asix failed with error -71 [ 318.593154][ T305] usb 9-1: USB disconnect, device number 4 [ 318.968707][T13155] overlayfs: failed to clone upperpath [ 319.231514][ T36] audit: type=1400 audit(2000000008.568:870): avc: denied { watch } for pid=13180 comm="syz.3.4213" path="/585/file0" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 319.232530][T13182] fuse: Unknown parameter 'fd¼¡e;R¿ëiù‘' [ 319.265869][T13184] fuse: Bad value for 'rootmode' [ 319.396738][ T362] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 319.558135][ T362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.569265][ T362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.579186][ T362] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 319.588243][ T362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.596773][ T362] usb 9-1: config 0 descriptor?? [ 319.821168][ T362] usbhid 9-1:0.0: can't add hid device: -71 [ 319.828100][ T362] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 319.845251][ T362] usb 9-1: USB disconnect, device number 5 [ 319.882482][T13196] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.002871][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4223'. [ 320.012909][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4223'. [ 320.022358][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4223'. [ 320.031588][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4223'. [ 320.112828][T13218] selinux_netlink_send: 1 callbacks suppressed [ 320.112844][T13218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13218 comm=syz.8.4225 [ 320.131762][T13218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=13218 comm=syz.8.4225 [ 320.144876][T13218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13218 comm=syz.8.4225 [ 320.214473][ T36] audit: type=1326 audit(2000000009.484:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13232 comm="syz.5.4230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fc0f8e929 code=0x0 [ 320.253434][T13235] rust_binder: Write failure EFAULT in pid:228 [ 320.303936][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4233'. [ 320.330125][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4233'. [ 320.536062][T13263] batadv_slave_1: entered promiscuous mode [ 320.542202][T13262] batadv_slave_1: left promiscuous mode [ 320.735286][T13272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.735789][T13272] fuse: Bad value for 'rootmode' [ 320.858804][T13276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.859450][T13278] rust_binder: Error while translating object. [ 320.865925][T13278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.872190][T13278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 320.903870][ T36] audit: type=1400 audit(2000000010.121:872): avc: denied { setattr } for pid=13279 comm="syz.8.4246" name="NETLINK" dev="sockfs" ino=88416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.904418][T13280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.939195][T13280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 320.945659][T13280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:247 [ 321.039161][ T36] audit: type=1326 audit(2000000010.251:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13287 comm="syz.3.4250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 321.080534][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4251'. [ 321.089904][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4251'. [ 321.167721][ T36] audit: type=1326 audit(2000000010.373:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13287 comm="syz.3.4250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f8e929 code=0x0 [ 321.404930][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4257'. [ 321.719284][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4260'. [ 321.738224][T13326] rust_binder: 13326: no such ref 1 [ 321.741672][T13321] binder: Unknown parameter 'contextÀ' [ 321.743483][T13326] rust_binder: Write failure EINVAL in pid:490 [ 321.773142][T13333] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 321.779325][T13333] rust_binder: Read failure Err(EFAULT) in pid:497 [ 321.963273][T13345] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 321.969803][T13345] rust_binder: Error while translating object. [ 321.980373][T13345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 321.986616][T13345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 322.131860][T13353] rust_binder: Error while translating object. [ 322.141026][T13353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 322.147401][T13353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:517 [ 322.236679][T13375] batadv_slave_1: entered promiscuous mode [ 322.252042][T13374] batadv_slave_1: left promiscuous mode [ 322.322692][T13376] /dev/rnullb0: Can't open blockdev [ 322.546152][T13381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.546707][T13381] rust_binder: Error while translating object. [ 322.553230][T13381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 322.559406][T13381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:264 [ 322.670972][T13387] rust_binder: Error while translating object. [ 322.680172][T13387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 322.686376][T13387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 322.717517][T13391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.727086][T13391] rust_binder: Error in use_page_slow: ESRCH [ 322.733558][T13391] rust_binder: use_range failure ESRCH [ 322.739530][T13391] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 322.745063][T13391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 322.753109][T13391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:274 [ 322.808736][T13399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 322.822994][T13399] rust_binder: Error while translating object. [ 322.833608][T13399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 322.844259][T13399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 323.012924][T13410] batadv_slave_1: entered promiscuous mode [ 323.081573][T13408] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.088682][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.096046][T13408] bridge_slave_0: entered allmulticast mode [ 323.102381][T13408] bridge_slave_0: entered promiscuous mode [ 323.109410][T13408] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.116454][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.126473][T13408] bridge_slave_1: entered allmulticast mode [ 323.132883][T13408] bridge_slave_1: entered promiscuous mode [ 323.163685][T13416] SELinux: failed to load policy [ 323.272546][T13426] devpts: called with bogus options [ 323.413509][ T6608] bridge_slave_1: left allmulticast mode [ 323.419408][ T6608] bridge_slave_1: left promiscuous mode [ 323.425023][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.433092][ T6608] bridge_slave_0: left allmulticast mode [ 323.438816][ T6608] bridge_slave_0: left promiscuous mode [ 323.444523][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.514247][T13408] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.521310][T13408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.528584][T13408] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.535617][T13408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.554294][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.561415][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 323.569116][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.578070][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.585112][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.593734][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.600784][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.624211][T13408] veth0_vlan: entered promiscuous mode [ 323.634514][T13408] veth1_macvtap: entered promiscuous mode [ 323.662753][ T6608] tipc: Left network mode [ 323.737112][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 323.743233][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.754131][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.763901][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.776693][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.785753][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.794340][ T45] usb 1-1: config 0 descriptor?? [ 323.941173][ T6608] veth1_macvtap: left promiscuous mode [ 323.946709][ T6608] @ÿ: left promiscuous mode [ 323.996390][T13409] batadv_slave_1: left promiscuous mode [ 324.228935][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.236191][ T45] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 324.245595][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.253289][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.260514][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.267878][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.276671][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.284726][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.301632][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.309047][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.316449][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.323666][ T45] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 324.332187][ T45] ================================================================== [ 324.340257][ T45] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 324.347904][ T45] Read of size 3904 at addr ffff888142d34b61 by task kworker/1:1/45 [ 324.355860][ T45] [ 324.358162][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.12.30-syzkaller-g06ca12d7d229 #0 9aba5d3c529198ed3462d1d46215a794785d0dd5 [ 324.358177][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.358185][ T45] Workqueue: usb_hub_wq hub_event [ 324.358210][ T45] Call Trace: [ 324.358215][ T45] [ 324.358221][ T45] __dump_stack+0x21/0x30 [ 324.358236][ T45] dump_stack_lvl+0x10c/0x190 [ 324.358249][ T45] ? __cfi_dump_stack_lvl+0x10/0x10 [ 324.358261][ T45] ? __cfi__printk+0x10/0x10 [ 324.358276][ T45] print_address_description+0x71/0x220 [ 324.358287][ T45] print_report+0x4a/0x70 [ 324.358296][ T45] kasan_report+0x163/0x1a0 [ 324.358310][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 324.358322][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 324.358334][ T45] kasan_check_range+0x299/0x2a0 [ 324.358348][ T45] ? mon_bin_event+0x12c1/0x23e0 [ 324.358359][ T45] __asan_memcpy+0x31/0x80 [ 324.358370][ T45] mon_bin_event+0x12c1/0x23e0 [ 324.358382][ T45] ? mon_bin_complete+0x50/0x50 [ 324.358394][ T45] ? __kmalloc_noprof+0x1b1/0x450 [ 324.358406][ T45] ? __hid_request+0x1e5/0x410 [ 324.358417][ T45] ? hid_connect+0x49a/0x1a20 [ 324.358429][ T45] ? hid_hw_start+0xcb/0x160 [ 324.358441][ T45] ? ms_probe+0x194/0x460 [ 324.358452][ T45] ? __cfi_mon_bin_submit+0x10/0x10 [ 324.358464][ T45] mon_bin_submit+0x2b/0x40 [ 324.358475][ T45] mon_submit+0x1b9/0x230 [ 324.358485][ T45] usb_hcd_submit_urb+0x12d/0x1a20 [ 324.358499][ T45] ? bus_probe_device+0x18b/0x270 [ 324.358510][ T45] ? usb_probe_device+0x1d4/0x380 [ 324.358523][ T45] ? really_probe+0x2d3/0x890 [ 324.358536][ T45] ? __driver_probe_device+0x198/0x280 [ 324.358549][ T45] ? driver_probe_device+0x54/0x3f0 [ 324.358563][ T45] ? __device_attach_driver+0x2f1/0x4b0 [ 324.358576][ T45] usb_submit_urb+0x111b/0x1800 [ 324.358588][ T45] usb_start_wait_urb+0x11b/0x2f0 [ 324.358600][ T45] ? usb_api_blocking_completion+0xd0/0xd0 [ 324.358612][ T45] ? __kasan_kmalloc+0x96/0xb0 [ 324.358625][ T45] ? __kasan_check_write+0x18/0x20 [ 324.358637][ T45] ? usb_alloc_urb+0x9b/0x200 [ 324.358647][ T45] usb_control_msg+0x25a/0x490 [ 324.358659][ T45] usbhid_raw_request+0x457/0x590 [ 324.358672][ T45] __hid_request+0x1e5/0x410 [ 324.358689][ T45] hidinput_connect+0x241b/0x3340 [ 324.358713][ T45] hid_connect+0x49a/0x1a20 [ 324.358726][ T45] ? usbhid_start+0x1a67/0x2530 [ 324.358737][ T45] ? __cfi_hid_connect+0x10/0x10 [ 324.358755][ T45] hid_hw_start+0xcb/0x160 [ 324.358773][ T45] ms_probe+0x194/0x460 [ 324.358784][ T45] hid_device_probe+0x2c1/0x5d0 [ 324.358797][ T45] ? __cfi_hid_device_probe+0x10/0x10 [ 324.358811][ T45] really_probe+0x2d3/0x890 [ 324.358825][ T45] __driver_probe_device+0x198/0x280 [ 324.358840][ T45] driver_probe_device+0x54/0x3f0 [ 324.358853][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 324.358868][ T45] __device_attach_driver+0x2f1/0x4b0 [ 324.358883][ T45] bus_for_each_drv+0x260/0x2f0 [ 324.358894][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 324.358908][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 324.358925][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 324.358938][ T45] __device_attach+0x2bd/0x3a0 [ 324.359049][ T45] ? device_attach+0x40/0x40 [ 324.359066][ T45] ? _raw_spin_lock+0x8c/0x120 [ 324.359077][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 324.359088][ T45] device_initial_probe+0x1e/0x30 [ 324.359101][ T45] bus_probe_device+0x18b/0x270 [ 324.359113][ T45] device_add+0x80c/0xc00 [ 324.359127][ T45] hid_add_device+0x39b/0x560 [ 324.359140][ T45] usbhid_probe+0xde3/0x12b0 [ 324.359152][ T45] usb_probe_interface+0x696/0xc00 [ 324.359167][ T45] ? __cfi_usb_probe_interface+0x10/0x10 [ 324.359181][ T45] really_probe+0x2d3/0x890 [ 324.359195][ T45] __driver_probe_device+0x198/0x280 [ 324.359208][ T45] driver_probe_device+0x54/0x3f0 [ 324.359221][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 324.359235][ T45] __device_attach_driver+0x2f1/0x4b0 [ 324.359249][ T45] bus_for_each_drv+0x260/0x2f0 [ 324.359260][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 324.359273][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 324.359284][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 324.359295][ T45] __device_attach+0x2bd/0x3a0 [ 324.359307][ T45] ? device_attach+0x40/0x40 [ 324.359320][ T45] ? _raw_spin_lock+0x8c/0x120 [ 324.359329][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 324.359339][ T45] device_initial_probe+0x1e/0x30 [ 324.359352][ T45] bus_probe_device+0x18b/0x270 [ 324.359363][ T45] device_add+0x80c/0xc00 [ 324.359376][ T45] usb_set_configuration+0x1ad4/0x20b0 [ 324.359391][ T45] usb_generic_driver_probe+0x95/0x160 [ 324.359403][ T45] usb_probe_device+0x1d4/0x380 [ 324.359416][ T45] ? __cfi_usb_probe_device+0x10/0x10 [ 324.359429][ T45] really_probe+0x2d3/0x890 [ 324.359443][ T45] __driver_probe_device+0x198/0x280 [ 324.359456][ T45] driver_probe_device+0x54/0x3f0 [ 324.359469][ T45] ? __device_attach_driver+0x2db/0x4b0 [ 324.359483][ T45] __device_attach_driver+0x2f1/0x4b0 [ 324.359497][ T45] bus_for_each_drv+0x260/0x2f0 [ 324.359507][ T45] ? __cfi___device_attach_driver+0x10/0x10 [ 324.359521][ T45] ? __cfi_bus_for_each_drv+0x10/0x10 [ 324.359532][ T45] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 324.359542][ T45] __device_attach+0x2bd/0x3a0 [ 324.359555][ T45] ? device_attach+0x40/0x40 [ 324.359567][ T45] ? _raw_spin_lock+0x8c/0x120 [ 324.359576][ T45] ? __cfi__raw_spin_lock+0x10/0x10 [ 324.359585][ T45] device_initial_probe+0x1e/0x30 [ 324.359598][ T45] bus_probe_device+0x18b/0x270 [ 324.359609][ T45] device_add+0x80c/0xc00 [ 324.359621][ T45] usb_new_device+0x9ed/0x1590 [ 324.359634][ T45] ? __cfi_usb_new_device+0x10/0x10 [ 324.359646][ T45] hub_event+0x265b/0x41a0 [ 324.359661][ T45] ? __cfi_hub_event+0x10/0x10 [ 324.359674][ T45] ? __kasan_check_write+0x18/0x20 [ 324.359686][ T45] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 324.359699][ T45] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 324.359709][ T45] ? kick_pool+0xb9/0x550 [ 324.359718][ T45] process_scheduled_works+0x7d5/0x1020 [ 324.359733][ T45] worker_thread+0xc58/0x1250 [ 324.359748][ T45] kthread+0x2c7/0x370 [ 324.359762][ T45] ? __cfi_worker_thread+0x10/0x10 [ 324.359776][ T45] ? __cfi_kthread+0x10/0x10 [ 324.359789][ T45] ret_from_fork+0x64/0xa0 [ 324.359801][ T45] ? __cfi_kthread+0x10/0x10 [ 324.359814][ T45] ret_from_fork_asm+0x1a/0x30 [ 324.359828][ T45] [ 324.359833][ T45] [ 324.980682][ T45] Allocated by task 45: [ 324.984816][ T45] kasan_save_track+0x3e/0x80 [ 324.989483][ T45] kasan_save_alloc_info+0x40/0x50 [ 324.994572][ T45] __kasan_kmalloc+0x96/0xb0 [ 324.999142][ T45] __kmalloc_noprof+0x1b1/0x450 [ 325.003969][ T45] __hid_request+0xa9/0x410 [ 325.008446][ T45] hidinput_connect+0x241b/0x3340 [ 325.013449][ T45] hid_connect+0x49a/0x1a20 [ 325.017922][ T45] hid_hw_start+0xcb/0x160 [ 325.022312][ T45] ms_probe+0x194/0x460 [ 325.026440][ T45] hid_device_probe+0x2c1/0x5d0 [ 325.031266][ T45] really_probe+0x2d3/0x890 [ 325.035747][ T45] __driver_probe_device+0x198/0x280 [ 325.041007][ T45] driver_probe_device+0x54/0x3f0 [ 325.046006][ T45] __device_attach_driver+0x2f1/0x4b0 [ 325.051371][ T45] bus_for_each_drv+0x260/0x2f0 [ 325.056197][ T45] __device_attach+0x2bd/0x3a0 [ 325.060933][ T45] device_initial_probe+0x1e/0x30 [ 325.065930][ T45] bus_probe_device+0x18b/0x270 [ 325.070762][ T45] device_add+0x80c/0xc00 [ 325.075152][ T45] hid_add_device+0x39b/0x560 [ 325.079803][ T45] usbhid_probe+0xde3/0x12b0 [ 325.084367][ T45] usb_probe_interface+0x696/0xc00 [ 325.089454][ T45] really_probe+0x2d3/0x890 [ 325.093931][ T45] __driver_probe_device+0x198/0x280 [ 325.099190][ T45] driver_probe_device+0x54/0x3f0 [ 325.104187][ T45] __device_attach_driver+0x2f1/0x4b0 [ 325.109543][ T45] bus_for_each_drv+0x260/0x2f0 [ 325.114381][ T45] __device_attach+0x2bd/0x3a0 [ 325.119128][ T45] device_initial_probe+0x1e/0x30 [ 325.124132][ T45] bus_probe_device+0x18b/0x270 [ 325.128955][ T45] device_add+0x80c/0xc00 [ 325.133263][ T45] usb_set_configuration+0x1ad4/0x20b0 [ 325.138701][ T45] usb_generic_driver_probe+0x95/0x160 [ 325.144139][ T45] usb_probe_device+0x1d4/0x380 [ 325.148971][ T45] really_probe+0x2d3/0x890 [ 325.153453][ T45] __driver_probe_device+0x198/0x280 [ 325.158784][ T45] driver_probe_device+0x54/0x3f0 [ 325.163790][ T45] __device_attach_driver+0x2f1/0x4b0 [ 325.169141][ T45] bus_for_each_drv+0x260/0x2f0 [ 325.173966][ T45] __device_attach+0x2bd/0x3a0 [ 325.178708][ T45] device_initial_probe+0x1e/0x30 [ 325.183711][ T45] bus_probe_device+0x18b/0x270 [ 325.188533][ T45] device_add+0x80c/0xc00 [ 325.192838][ T45] usb_new_device+0x9ed/0x1590 [ 325.197574][ T45] hub_event+0x265b/0x41a0 [ 325.201965][ T45] process_scheduled_works+0x7d5/0x1020 [ 325.207487][ T45] worker_thread+0xc58/0x1250 [ 325.212228][ T45] kthread+0x2c7/0x370 [ 325.216273][ T45] ret_from_fork+0x64/0xa0 [ 325.220663][ T45] ret_from_fork_asm+0x1a/0x30 [ 325.225405][ T45] [ 325.227705][ T45] The buggy address belongs to the object at ffff888142d34b60 [ 325.227705][ T45] which belongs to the cache kmalloc-8 of size 8 [ 325.241386][ T45] The buggy address is located 1 bytes inside of [ 325.241386][ T45] allocated 7-byte region [ffff888142d34b60, ffff888142d34b67) [ 325.255151][ T45] [ 325.257450][ T45] The buggy address belongs to the physical page: [ 325.263829][ T45] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142d34 [ 325.272649][ T45] flags: 0x4000000000000000(zone=1) [ 325.277825][ T45] page_type: f5(slab) [ 325.281780][ T45] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 325.290421][ T45] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 325.298974][ T45] page dumped because: kasan: bad access detected [ 325.305362][ T45] page_owner tracks the page as allocated [ 325.311046][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10739, tgid 10739 (syz-executor), ts 286500373563, free_ts 286500346992 [ 325.330550][ T45] post_alloc_hook+0x3b9/0x3f0 [ 325.335288][ T45] prep_new_page+0x1c/0x120 [ 325.339763][ T45] get_page_from_freelist+0x46bb/0x4750 [ 325.345280][ T45] __alloc_pages_noprof+0x30d/0x6c0 [ 325.350449][ T45] alloc_slab_page+0x6b/0x1f0 [ 325.355117][ T45] allocate_slab+0x69/0x440 [ 325.359596][ T45] ___slab_alloc+0x59a/0x8b0 [ 325.364159][ T45] __kmalloc_node_noprof+0x23e/0x450 [ 325.369414][ T45] __vmalloc_node_range_noprof+0x544/0x1420 [ 325.375279][ T45] vzalloc_noprof+0xfd/0x1d0 [ 325.379845][ T45] do_ipt_get_ctl+0x78f/0x1180 [ 325.384585][ T45] nf_getsockopt+0x288/0x2b0 [ 325.389152][ T45] ip_getsockopt+0x14c/0x1e0 [ 325.393713][ T45] tcp_getsockopt+0x106/0x130 [ 325.398363][ T45] sock_common_getsockopt+0xb2/0xd0 [ 325.403534][ T45] do_sock_getsockopt+0x3a3/0x6d0 [ 325.408551][ T45] page last free pid 10739 tgid 10739 stack trace: [ 325.415035][ T45] free_unref_page+0xae5/0xdd0 [ 325.419775][ T45] __free_pages+0x6b/0x3b0 [ 325.424162][ T45] vfree+0x3bf/0x580 [ 325.428035][ T45] do_ipt_get_ctl+0xe89/0x1180 [ 325.432772][ T45] nf_getsockopt+0x288/0x2b0 [ 325.437336][ T45] ip_getsockopt+0x14c/0x1e0 [ 325.441898][ T45] tcp_getsockopt+0x106/0x130 [ 325.446547][ T45] sock_common_getsockopt+0xb2/0xd0 [ 325.451724][ T45] do_sock_getsockopt+0x3a3/0x6d0 [ 325.456723][ T45] __x64_sys_getsockopt+0x1d5/0x280 [ 325.461892][ T45] x64_sys_call+0x10db/0x2ee0 [ 325.466543][ T45] do_syscall_64+0x58/0xf0 [ 325.470931][ T45] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 325.476804][ T45] [ 325.479100][ T45] Memory state around the buggy address: [ 325.484703][ T45] ffff888142d34a00: fa fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 325.492733][ T45] ffff888142d34a80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 325.500762][ T45] >ffff888142d34b00: fa fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 325.508791][ T45] ^ [ 325.515974][ T45] ffff888142d34b80: fa fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 325.524008][ T45] ffff888142d34c00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 325.532038][ T45] ================================================================== [ 325.540067][ T45] Disabling lock debugging due to kernel taint [ 325.565201][ T36] audit: type=1400 audit(2000000014.479:875): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 325.593642][ T36] audit: type=1400 audit(2000000014.479:876): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.619538][ T36] audit: type=1400 audit(2000000014.479:877): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.624958][ T45] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 325.641868][ T36] audit: type=1400 audit(2000000014.479:878): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.652974][ T45] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 325.688461][ T36] audit: type=1400 audit(2000000014.479:879): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.702492][ T45] microsoft 0003:045E:07DA.001A: no inputs found [ 325.709105][ T36] audit: type=1400 audit(2000000014.479:880): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.725697][ T45] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 325.738305][ T36] audit: type=1400 audit(2000000014.479:881): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.750140][ T45] usb 1-1: USB disconnect, device number 11