last executing test programs: 6m40.97618099s ago: executing program 2 (id=498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x80000000, 0xf}, 0x100, './file0\x00'}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 6m40.86953236s ago: executing program 2 (id=500): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0xfffffff0, 0x4001}, 0xc000000) 6m40.8693376s ago: executing program 2 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000000000100000000000000014100000018001704fffff0000000005974683a76"], 0x34}}, 0x0) 6m40.81351469s ago: executing program 2 (id=504): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f737761872c00a0d172c304c9ce220bffe3c9c4f67bd72e74cbf7719d9a7684891e6c4799a4229f21fa26976b75372770684bedee4ef8a374cc60eac1bc67fa1d317533d92fa4cb19471c1562d18e7c35112beed58334fe0cd759d9ff81fc1db33576311dec6a92d84646bd2e8862dadd8836c1caa789619cd9d2ecba85380cebe097b1"]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x47) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 6m40.72235797s ago: executing program 2 (id=507): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000380)=0xe8) mount$cgroup2(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2080001, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_hugetlb_accounting}], [{@measure}, {@uid_eq={'uid', 0x3d, r1}}, {@subj_user={'subj_user', 0x3d, '/dev/rnullb0\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/rnullb0\x00'}}, {@flag='lazytime'}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}) 6m40.293990372s ago: executing program 2 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000133000/0x18000)=nil, &(0x7f00000009c0)=[@text16={0x10, &(0x7f00000003c0)="daca0f01c20f01cff30f07b8bb000f233d0f20e06635000020000f22e0ba4000ecbaf80c66b8106cac8466efbafc0ced66dbe10f08", 0x35}], 0x1, 0xa, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3, 0x0, 0x2}, @cstype3={0x5, 0xd}], 0x2) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]}) r5 = epoll_create(0x3) epoll_wait(r5, &(0x7f0000000000), 0x0, 0x1ff) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3a3"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000000000000370000000500000001000000000000000500000001040000000000000000000000000000000000000000000000000000e2c7000004000000011337c0cb0000000d9a000002000000000000000000000000000000000000000000000000000000090000000500000001000000000000003f0200003905000000000000000000000000000000000000000000000000000005000000040000000100000000000000050000000d00"/200]) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x24, 0x0, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x102cf44, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x3, r9}, 0x10) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRES64=0x0], 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) close_range(r0, r1, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) 6m39.718490055s ago: executing program 1 (id=535): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x500}], 0x400000000000172, 0x4001c00) 6m39.651229905s ago: executing program 1 (id=536): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f000000000b0000", 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 6m39.621636705s ago: executing program 1 (id=539): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0x97ffffff}], 0x1, 0x4001c00) 6m39.604142185s ago: executing program 1 (id=540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 6m39.507470106s ago: executing program 1 (id=541): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) r0 = socket(0x840000000002, 0x3, 0xfe) shutdown(r0, 0x1) syz_clone(0x4000000, &(0x7f0000000140)="6ada9b", 0x3, 0x0, 0x0, &(0x7f0000000300)="a6861b6f22468f335bc776ba192d767aabdf247c66518597017ca62e650a67b9739515931d6120b148a3f9cc72f78841f89d00c301c8d5e083eefcb7f70490b96708bc5c8be5369381652b2fb7e878a5270d12c9d88c") openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}, 0xff97}], 0x1, 0x20004086) 6m39.499169365s ago: executing program 1 (id=543): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x8002) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001340)={0x80, 0x6, 0x300, 0x2, 0x0, 0x3, 0x0}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x0, r4}) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000002f000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="2e410f01f136f26f66440f68db3e67470fba2d9a0000000fc7442400cf000000c744240218000000ff1c24c44225dfb004000000460fc77385c4027d1ea2000000000f01c5815f0e45000000", 0x4c}], 0x1, 0x30, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) fadvise64(r2, 0x10000001003, 0x9, 0x5) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r2, 0x7dfff000) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x20, 0x80, 0x40, 0x0, 0x5f, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r8 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000"], 0x70}}, 0x0) (async) sendmmsg(r8, &(0x7f0000000340)=[{{&(0x7f0000000100)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="68210db5cab5", 0x6}], 0x1, &(0x7f0000000440)=[{0xb8, 0x103, 0xff, "eda3b1fa9e1871d0b9ffe6fff0f47ba1312d1c16d014d208f645341a58003af182b47dd895babd15d7d3d9b8e1b1773c4c14969505749d2b5fc6482e47880f774f6c02717c001dc39c949ace7d140bfd905c41500000ec30c024871c004d9daa7335c5ca73871c8592f294041be3ae539b54cb2fb2b4e9139c10dfad15ed1c8a62c0747ea945fa4273a80d7e6215e95374ec0d1f04cd075735806049f2fae4dcd78ac9"}, {0x80, 0x10d, 0x3, "211a88f2a4b4ed08284728cd74378c7d36d0ecb2252ad48a8f21de47aacc179273a8328f06d965df57b567bdd691b874c61f4b6a8a3d1327cce204f50b58dd71b6c8fc098e804e378f66018f06f0bd53b70123575544a5fd88a7fe14dc1e7235f8db01865f28bb046b166c387120"}, {0xe8, 0x0, 0x100, "4c00ddc959a551da43d5074a2df6eaae592e2cc5681a037493b1d4e4c2a027fad8179c5bf1a368dd39eacd784f8b7725165a43eebf24759127c178b4db3f419303410a0e26effb5f9d07cfab81202a073fe589cf37a9ae2bf671bad53196f4a26ff2d2ae88fb75948450e10d0fda4f11f8f955af268a46d608c43ab7334239ead11fd79f5e6be068a2356aae137203ec05fad8963d682aedb99e6fb2c54c75d8bcf062e9959b8f1431f5adfd3d860ee3cb8ff8c162129af68add433063efa4894cb3bc94507365bf7abded98a9251ae78dbbda"}, {0x70, 0x0, 0x1ff, "4e69d49e14c66134ff571b02c831b44a427534930b0679f26ba76d5dfa37bdd2c44bbae52c853a6cd79c6258f7f8510f6f880a44a5f244c99bf387148984ae9cdd32372c1664a3ccd03c102a5e6623ab8bee83e8fa7bd46cb332a226ddd871"}], 0x290}}], 0x1, 0x50) (async) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r2, 0x3d7c3000) 6m39.394389626s ago: executing program 3 (id=545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000030000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001"], 0x23c}}, 0x0) 6m38.841875648s ago: executing program 3 (id=547): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) 6m36.752117287s ago: executing program 3 (id=550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000003000000000a"], 0x23c}}, 0x0) 6m31.770842247s ago: executing program 3 (id=552): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 6m24.448668777s ago: executing program 32 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000133000/0x18000)=nil, &(0x7f00000009c0)=[@text16={0x10, &(0x7f00000003c0)="daca0f01c20f01cff30f07b8bb000f233d0f20e06635000020000f22e0ba4000ecbaf80c66b8106cac8466efbafc0ced66dbe10f08", 0x35}], 0x1, 0xa, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3, 0x0, 0x2}, @cstype3={0x5, 0xd}], 0x2) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]}) r5 = epoll_create(0x3) epoll_wait(r5, &(0x7f0000000000), 0x0, 0x1ff) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3a3"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000000000000370000000500000001000000000000000500000001040000000000000000000000000000000000000000000000000000e2c7000004000000011337c0cb0000000d9a000002000000000000000000000000000000000000000000000000000000090000000500000001000000000000003f0200003905000000000000000000000000000000000000000000000000000005000000040000000100000000000000050000000d00"/200]) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x24, 0x0, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x102cf44, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x3, r9}, 0x10) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRES64=0x0], 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) close_range(r0, r1, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) 6m21.527962889s ago: executing program 33 (id=543): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x8002) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001340)={0x80, 0x6, 0x300, 0x2, 0x0, 0x3, 0x0}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x0, r4}) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000002f000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="2e410f01f136f26f66440f68db3e67470fba2d9a0000000fc7442400cf000000c744240218000000ff1c24c44225dfb004000000460fc77385c4027d1ea2000000000f01c5815f0e45000000", 0x4c}], 0x1, 0x30, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) fadvise64(r2, 0x10000001003, 0x9, 0x5) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r2, 0x7dfff000) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x20, 0x80, 0x40, 0x0, 0x5f, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r8 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000"], 0x70}}, 0x0) (async) sendmmsg(r8, &(0x7f0000000340)=[{{&(0x7f0000000100)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="68210db5cab5", 0x6}], 0x1, &(0x7f0000000440)=[{0xb8, 0x103, 0xff, "eda3b1fa9e1871d0b9ffe6fff0f47ba1312d1c16d014d208f645341a58003af182b47dd895babd15d7d3d9b8e1b1773c4c14969505749d2b5fc6482e47880f774f6c02717c001dc39c949ace7d140bfd905c41500000ec30c024871c004d9daa7335c5ca73871c8592f294041be3ae539b54cb2fb2b4e9139c10dfad15ed1c8a62c0747ea945fa4273a80d7e6215e95374ec0d1f04cd075735806049f2fae4dcd78ac9"}, {0x80, 0x10d, 0x3, "211a88f2a4b4ed08284728cd74378c7d36d0ecb2252ad48a8f21de47aacc179273a8328f06d965df57b567bdd691b874c61f4b6a8a3d1327cce204f50b58dd71b6c8fc098e804e378f66018f06f0bd53b70123575544a5fd88a7fe14dc1e7235f8db01865f28bb046b166c387120"}, {0xe8, 0x0, 0x100, "4c00ddc959a551da43d5074a2df6eaae592e2cc5681a037493b1d4e4c2a027fad8179c5bf1a368dd39eacd784f8b7725165a43eebf24759127c178b4db3f419303410a0e26effb5f9d07cfab81202a073fe589cf37a9ae2bf671bad53196f4a26ff2d2ae88fb75948450e10d0fda4f11f8f955af268a46d608c43ab7334239ead11fd79f5e6be068a2356aae137203ec05fad8963d682aedb99e6fb2c54c75d8bcf062e9959b8f1431f5adfd3d860ee3cb8ff8c162129af68add433063efa4894cb3bc94507365bf7abded98a9251ae78dbbda"}, {0x70, 0x0, 0x1ff, "4e69d49e14c66134ff571b02c831b44a427534930b0679f26ba76d5dfa37bdd2c44bbae52c853a6cd79c6258f7f8510f6f880a44a5f244c99bf387148984ae9cdd32372c1664a3ccd03c102a5e6623ab8bee83e8fa7bd46cb332a226ddd871"}], 0x290}}], 0x1, 0x50) (async) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r2, 0x3d7c3000) 6m21.049606881s ago: executing program 3 (id=555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) (async) recvmmsg$unix(r1, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 6m11.572534029s ago: executing program 3 (id=558): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1fd, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000998000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r2, 0x93c9e000) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x954b, 0x0, 0x5}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r2, 0xfffff000) 5m55.077470747s ago: executing program 34 (id=558): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1fd, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000998000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r2, 0x93c9e000) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x954b, 0x0, 0x5}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r2, 0xfffff000) 4m42.112066212s ago: executing program 0 (id=1887): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) 4m42.085213993s ago: executing program 0 (id=1888): ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) (async, rerun: 64) mkdir(&(0x7f00000020c0)='./file1\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x49f8d0e3963fa42f, 'freezer'}, {0x2b, 'memory'}, {0x2d, 'net_cls'}, {0x2d, 'net_prio'}]}, 0x24) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async, rerun: 32) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) (rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000040"]) (async) close_range(r2, r1, 0x0) 4m42.035942233s ago: executing program 0 (id=1890): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000002000020000000000040006000000000012000400000000002000010000000000"], 0x24, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') chdir(&(0x7f0000001440)='./file0\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x401, 0xffffffff}}) r6 = syz_usb_connect(0x4, 0x5b3, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x6, 0xb0, 0x7f, 0x10, 0x13d8, 0x20, 0xb4b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a1, 0x1, 0x10, 0x9, 0x0, 0x1, [{{0x9, 0x4, 0x44, 0x7c, 0xe, 0x2e, 0xec, 0x48, 0x9, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x6, 0xe}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x3, 0xb, "9bbf07"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x7, 0x8}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x2, "53be14ce045e"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x400, 0x5, 0xb8, 0x2, [@generic={0xbf, 0x10, "1f2f832bb9241bfbcbcb2c97c8216bba266bf54a8d10c0004be6c81fdd2164a96f1c6c3709b13f627caf9e0c9da6509db6a424e0b06be2baca1a8d30cf7f3d189d542351db9898c7d8682fc3f74b8205f8e3a430e814328605ebaa3d4e11193c86c57d31417afa92cbf37b9263d7fc536a634577a7df749afe2b1ef60e10f159412172250407b371725e3883b959f12c6e97b4c2f61b5ae8d39a7f2821e9c92094ecba537859e60c8060369ea595f2606aba29da7677d9156c0ef1db2c"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x7, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7}, @generic={0xf9, 0x3, "f56d0af5bfec8b89006bac7bcde21d3237939e59a50162909e3e3d392e037b7e1dfe71fb4b501218722c727ad473e2fc5022e83c5fc0f7f0db2d3e7f3e9ab2938d2e7f4706d607968c8410fe01931dab8df067fe5c05a19575161399b8c10501645e442d2d50cc6e2b09d69c120e15a7d0fcc597a41436c8dcd6d9d38cf356860f6b1ac245a8625ea740694eb955ed6be7296059b4fc8edde9240bd4e8d41ec4ce205dfa8a01ed32e18fb5270d3400cad89d700e4d19e2b6078ed15c032a18eedd04732976e7e04d6c4dbb4615e9953bcb1321df895eb14c6b3f5630efd830d5b5ef08860d43af9369f80f0bafcba17136f7d90d073ca1"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x3, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xc, 0x2, 0x8, [@generic={0xb9, 0x31, "0adb09effd314c8aa4ca12c23a86b63b5f22c86461bdff2a6e293a17238f8550133133d7f0882c1e825f28f91cf805f32a415738790bf25e0d8698effaffe8baf73d7cfc10c2bd181d5924c157016a45e6b9ec6ffa124b989542147e161b0db8a349ed86284115a9b9f6c263691cf6d8da382c0518a5fbc1b2a39453058cf356a0eb9889ef95201e7f6ebb41db5ce0cf24b7997f4ddab373f396798789d0437a4f488931f9a3fbbaf6bcf880a2e816225200371e635634"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x8, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5046}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x220, 0x2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x2, 0xfa, 0x83, [@generic={0xc2, 0xa, "35d72f8f9ef13c5f24302b57e3867b44e74d091b8702b396f248b5148c3121525b0af2878d9f5ad6e7478ed19526cc74ed4642ace9a1c05956b8cb1ce262cd292cdfef10fe013ae0c4161ea0839d491edd0d86ea340413cda793076573f44f4e381ca7f5c7c458b481bde5b38378cc495f3538e93cf4a53b604dd891deafcf3b1819998002497ef9e2c40fdc1e4e153d62efd367b6b2559eb4e16e6d417cebd3dbae32c88c6c1f99bd0c4e1592d88870e361e82ec7b3cb78a29282f17eb08416"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x9, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xc4df}]}}, {{0x9, 0x5, 0x2, 0x2, 0x0, 0xfe, 0xc, 0x4, [@generic={0x44, 0x31, "0a6c4599dc45538533fb7bb4ab22bafee06387d789510ecb25c04d9e47ae47f146b2ca049c5a0aa628efb1cd171f9405866d200bc883030a4d079836cc9956e126aa"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x9, 0x6, 0xe, [@generic={0x97, 0x9, "a2092fa021c8ecb524a06bbcee72cdd6e13cad1a2aa6eb173c6b3fb0bbcc345c0ca7d5c44663dc913dae362cb42b89a802c43e63f5c5ff6e7d6aa3ef5cc67497fbef34cc4465cce2cf6920290d91d883860a4c0d28d2cbba54003fec67c27be7a4e392f2563ad8db05846dfadb5e8016ce2a88990bad3616993679cae88ca3db8594e685180ccae5f0ed5cde8d65263ac346c80033"}, @generic={0x71, 0x23, "d511a3f3e34717b93585086db22e135c658788348a090352c5f06939f3f1ac4ff850c4055a8a7b79e21b8e822788f72bd690e2d5b88da20a7743c531de50a6860d6a5013688f9be9638c9e973a3655947df3a32e46d3896546659606b6bd2776d0404cb811377fa556fd009bd034c7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x72, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd1, 0x8b48}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x8a, 0x9f, 0xd9, [@generic={0x14, 0x3, "e4291b1646834c41e2fffdf13b64834fc998"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x34}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x4, 0xc1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x70, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x28, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8001}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xc, 0x8, 0x4, 0xff, 0x9}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c1a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44a}}, {0xa4, &(0x7f0000000240)=@string={0xa4, 0x3, "37f36d315d6876e20c21d5040408eba54edec4176872fc880c97a9d2ef31b661ee8135935f47cb710cf444a63e61e60163f1cd333b7b11f1c396f05d00144c4641af1deb25e910318956455035a9d84113ec3025ff545e3dc53d2a014ac07c0dffd1bf6504ea05b67f43464bde7534ca1a9ddb9bd9700f9f639ff75ba819f770abf0af32ba7fd9ba5468dcfc8136c85e32d0fa5ed5875c459dc80d9a46f23c7591cf"}}, {0xc0, &(0x7f0000000900)=@string={0xc0, 0x3, "3078227037b1a9ad4d449c897e39eb3add3ec948a1c0968229624a7aca6b3c5dffa7b23fdb5e17178a9793353af2c19b57f9f6592a057191eca1d82470ae6098a887bf3b740a697673257c0278807f9f115e414a2d01443e7554d7519daad373e6db1e142e34a092f817d43ac83254666e8232e77fa276b637e3f3cdfd65f59c71068d5d9bac41894eb14689f826c50e40c9fccad42fa671691728af38dc7c8e3aa9d051c86d4f7e5f8a8ed2a1ca7394285b2651ad3312350c9fc9bf16f2"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x804}}, {0xa5, &(0x7f0000000a00)=@string={0xa5, 0x3, "48d36c05e4fada7c4a6d51f86142443d1adab819e336675003bf0d94d16b3f64888ec4be2df56f365a30ab799a5179acf07ffa3a5790625551d0b2cbbb80dbc01819322f7265917292ee5def44c614dbc591d48601e9235ffefba1b0900b359ffa6235218fd86bb7918b2dc067f811f3ce509c81be651ede30277c13ad580488b29db2d66e2f4c8273338f8ae6db1e05e821936bc2fc060dc51795fba75634b1c46d61"}}]}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000d80)=0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000502, r7, &(0x7f00000012c0)) syz_usb_control_io(r6, &(0x7f0000000e40)={0x2c, &(0x7f0000000b40)={0x0, 0x30, 0xf1, {0xf1, 0x24, "abbd0340f27898d0ca75a4b402bcbb67f7407aff68094c51f388ba20a0ba24104b70c153103e3eecd793ffa44bb919024ee370f930b51552e9298964c5967efc04ff32e977357cfc55b13cfedb5a7d8dd77e646344383085c146c927aac2ee3a775a2148bb79463c0881a5241c3eaae71771e261f582a4852e6c54b0cecf74dc181a58478cb902bfeb8722853293e76b7c90b6b48f95eff6bdca9c3d261904eed8697b78496ea03690a489108fac71629dc2936e9d5e41a8ebb44e976b0d26d0c193eb904be0969c647948bc2c836d7b1c3aa53b76c54420489ff6c5282f8178b7693cb3eb5500c29884cc522cbd1d"}}, &(0x7f0000000c40)=ANY=[@ANYBLOB="0003ce000000ce0304e0de9d67edb6db26b7db678741607f4b4782bb22b6bb3f57769e59da6c585a3ae9d2c2d63b069156dae02c1657d822872845c05c5cfe2d461dbd9c91ca0fd2b252896ced1cd174f9220bb6ad215757d54fca448689bb827b99d1462e5866a16ca91cfb9ecc6873e1ce277af3cd1bd669d195cb3103d017d9f14be7613c686234b8441b6caef20e3c44eee2c493001c0ac5d46cf27eebb33b5da216a68caf81a2b20baff3fdbd2f24fc53fd5de34ce24d6a85468e2e136faa2bfdfec855b4e8ca42d0e37acdbf64c8a98fa7"], &(0x7f0000001480)=ANY=[@ANYBLOB="100f42000000050f4200050b100142ac00000107000607100202850300141004c7b1c14caf9ced5c8487572e2e1f0c1c7df79898af62b0ead207e718114846b4d33fd2edad0baf1410045a80d74d1078"], &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0xd6, 0x4, "d6963e10", "ec9ab513"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x0, 0x5c, 0x9, 0x100b, 0x6}}}, &(0x7f0000001300)={0x84, &(0x7f0000000e80)={0x20, 0x0, 0x7c, "c855473cc6358c30d12018be957ce2b149ba59a616d97526b71fae616030fc9889a1892a7cc246901a7def478d5756be3299667458ea9d7061107fd86420f2dba27391a719ab4fbbd621b75e1a3c000cacd0065336983f79d53e85657038969d5b9ed2578e93271b0cdd383e909847de2afc457a5184a24599b11129"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000f80)={0x0, 0x8, 0x1}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x120, 0x4}}, &(0x7f0000001040)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000010c0)={0x40, 0xb, 0x2, '\x00y'}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000001140)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000001180)={0x40, 0x17, 0x6}, &(0x7f00000011c0)={0x40, 0x19, 0x2, '{\a'}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x5}}) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000740)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002000a000900040a240402010600a7ce790924060502010610000924030303030505f5"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0x10001, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000013c0)=0x0) syz_open_procfs(r9, &(0x7f0000001400)='net/igmp6\x00') 4m40.789376798s ago: executing program 0 (id=1930): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) ioctl(r0, 0x1ff, &(0x7f0000000140)="609dec79fae5d74d66088dc414a49eba504cf2b3c59be25c122ada22b82ee0efd934d958376712a752df9dd34179faa13595893904ec067bab67205b33425e001b74a31c7d698989dfd104b2abfd97351db7081b83d3d2c05b22669e4509f532b0314e85d27af5fa0cb54c40f84d0d32670af2b178da93798b2d37d10a3bb376166ce114dde3dbc85cfaf06ddd97cb920061a88c9254c8350c7e374802c74c7082b5ccf59a0de8b65f283aa85a44668a91dd97f3938a0c86c8a2a5545934dd37a41d1104dc014b444f14bec4f1e017370d035f6b7042d2bf407df27dffa83e8e937845a6a9ba9c4686729d0bde70ad624afa40e8b580fa48d6") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 4m38.715465636s ago: executing program 0 (id=1954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000003e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000"], 0x23c}}, 0x0) 4m38.492336437s ago: executing program 0 (id=1961): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f00000000000000", 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 4m38.492201007s ago: executing program 35 (id=1961): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f00000000000000", 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 2m9.145356314s ago: executing program 6 (id=4443): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x10c, 0x10, 0x1, 0x70bd22, 0x25dfdbfc, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x3c}, @in=@local, {}, {}, {0x0, 0x6, 0x14000000}, 0x0, 0x3507, 0x2, 0x0, 0xdf, 0x20}, [@encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e23, @in=@multicast1}}]}, 0x10c}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) syz_usb_connect(0x3, 0x33d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x6d, 0x5c, 0xba, 0xff, 0x403, 0xfc0b, 0x7b02, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32b, 0x1, 0xfd, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0x54, 0x6, 0x8, 0x33, 0x87, 0xe4, 0x5, [@generic={0x6d, 0xd, "529710025a2289d7d3cdd099beedc395f184bd7e88a49c2a160ab30fbc12e83244fa8ea05c240c339b83dfc37e06d5ae6d98a524d7a1e2d215463e15b5f1401d1d6537629ea1be56013f38cba8e36826143f61138e44164ef2e5f51ebbedd5d128df05585921f97b8cfb58"}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c834d273a824"}, {0x5, 0x24, 0x0, 0x34c}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0xb8, 0x8}}], [{{0x9, 0x5, 0xe0a1e591a6b5f32c, 0x10, 0x200, 0x0, 0x2, 0x3, [@generic={0xbb, 0x24, "7a642b9bdec183ce4d909625059e15839606f9b81ef0b6fbc644c53deacd94c42fae18220a7d335ce6d14f8759f68e24a87d1290e66832abe4bd7a0bbf6e3b18f6f72823a831fb6f63842b861622c15778b1753fc3ee07be3f462b7a672811863929a88cdc32f84d59e1bcb95e6ea4873bf1215c32ba10ecabb1ba818448ac0d15cf4d722ea3283d4c9890b994a83bea24985d83d21ef3df85477d8933464a141209bc866a894402cf67feaf36332e8dbaf02ee8d5496f7017"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x4, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x60, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x57, 0xfff8}, @generic={0xc2, 0x12, "7912a4e22570507fbdf341b0443b664fa3593da0e0f187c8f06eb067120d52d1b39713971d4c09169ff06154a7a0adc5877ab87573d778bd985faf97932696f8ec2c177ae569581b9744b38f66bd7643f79eedc4e2d029d4d6af0103201dde2cbeb7867a41929d358273ece047963ec4dcd7ae34dcff4cb078c8dbfacda854cfaf1ae2214e010e1e515604df0801d59fae0a2708cda66c9215b9ea43eb9fa22373e264eacb94242ef52549446a65b6b132307f68b77b470ff9bced04d4cbff3c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x9, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2f, 0xfd, 0x5}}, {{0x9, 0x5, 0x4, 0x6be39c32762bc63a, 0x10, 0xf7, 0x4, 0xb, [@generic={0x4e, 0xf, "f915d67daf447ba15bed6a7a52da673d15869080f878b56d8c91455f51c70126a0ce0bcc48a348fe86c2036e9dc33775332e99204f17dde21241292f950664d977be14d5984e74d14aaab41f"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x1ff}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x0, 0x1, 0xb0, [@generic={0x68, 0xd, "835e727edcc0fe552df250957c4ea5b23ed2575939b229e0d658bdb4500b01a3a1f7d8286c29830e53826e3dbf350a70c87d1a27876cc84eb15ce03540c07614d0d07b7b8f0bf7188025c8b81fe2f885cf3fa3c3187b0720696701ab234740caedd81ef16034"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x9, 0x2, 0x1}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x6, 0x6, 0x2, 0x40, 0x98}, 0x76, &(0x7f0000000440)={0x5, 0xf, 0x76, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b7460f47e0ba319a61bcbf078391a9ec"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x7, 0x84}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x0, 0x6, 0xb4b0, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x73, 0x6, 0x1}, @generic={0x2d, 0x10, 0x0, "6f4bdd866075a7861bfc261ad375ba2a87a2d3d630fe13bb1a1eb37eda7c6bf15cdd4dd81dce14a9087a"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3341fcb8f1aceaf09c6866882f8902e1"}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2801}}]}) 2m6.202329826s ago: executing program 6 (id=4514): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000006d00)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xf, @local, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000180)="488c5948a73fe697bd6daf24643f5ee59657c54c93b2078ca44230288cf77297ee3a914a0bc056283ca7ed27b872a52ddb8fac35", 0x34}, {&(0x7f0000000280)="c47892b1e1d12030f310ecc1f75e331e35df8312a613452037c9aba219403b8013af019c8b8064224ef262213eb96d1f21cde09cb16440ca4dded36ed84bc7a1b9c1f5263f21d80169c5c862a5b73982d0e392bfc9231e93604f02d86228c5cd4a3da10d395c06a02a9be193c6f44a4ff4a47720d5ebd4957a2fd34690f667b04a73857ee8771ac16f1b9ed399e36390f023e50f6a1dcb50bbfafa12902bba969eabf633ed436d95", 0xa8}, {&(0x7f0000000340)="24e40d744504730dc67500ba2cfa41304c80cfc90cea6dd3b9cbcf0a7949254a603081e57d0e623c1609b45b95332135faa5fbeeba7142dcee019820070a556b474a4b0b1d10e803c5cc0091c1aecacf6f26a0ebbf7d3b3a4f71d3a22dfd69a130185d1d1946202252a5da720a195d430e32d8103c87b7b659f9c801910894d144577a3e7e1378e7", 0x88}, {&(0x7f0000003a00)="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", 0x3b1}], 0x4, &(0x7f0000006f80)=ANY=[@ANYBLOB="980000000000120029000000360000000c0f00"], 0x98}}], 0x1, 0x24000004) 2m6.148221797s ago: executing program 6 (id=4515): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000010000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500"], 0x23c}}, 0x0) 2m6.145971647s ago: executing program 6 (id=4516): syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109027d00020100010009040098620001020d00ff816cbe00052406"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000010000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a010102000000000000000000000000000000003200000002"], 0x23c}}, 0x0) 2m4.791113182s ago: executing program 6 (id=4550): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x10001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0xb5005b152fff58f1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0xc04, &(0x7f0000000100)={[{@stats}, {@stats}], [{@fowner_lt={'fowner<', 0xee00}}, {@smackfsroot}, {@fowner_eq={'fowner', 0x3d, r2}}]}) 2m4.728400912s ago: executing program 6 (id=4551): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'lo\x00', {0x3}, 0x81}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000002], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x2, @remote}}}, 0x32) setsockopt(r1, 0x2, 0x0, &(0x7f0000000040)="d22618e839b2e8927d4ce5bfaa0fc8473d6442a26b5571a65684f3633805a3b0ed03c610726f250ca338784bbcf24147ddf8430926423ef9012d98172254140a80cd6e0ea38b6446a41a0b8f", 0x4c) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="0f56041d9776dba6d7e4c721819a4a5c764388dbbc74fae693f092d1a35ff482bf15bdad6cdd382595911204059965f0e1e2380384e952df7b029efda8fab5b1464ab429bb2cc297500907882c718bf23a25e0bce74067fe3fb85e1e1944cde37c320fa47f0a92429eef77b546147bc9b4546cff123317e1d6bd8335051c2894071314537cd485bc962fe4112bcdb532bb34f65ee97262a786ccfa0797737cf7197e049d674da3824e48480583e765cc68ad0bca4734f490839559c1ce0973d47f102b26236d96c9239f0d30c1cbba901e9c62a14192bbf10b52f26408b1fb48782551cf8871ebfa39a313e6bbd1472ba7e4414aa465711e16bc75d36617f44f72aba1e0") 1m49.732087433s ago: executing program 36 (id=4551): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'lo\x00', {0x3}, 0x81}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000002], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x2, @remote}}}, 0x32) setsockopt(r1, 0x2, 0x0, &(0x7f0000000040)="d22618e839b2e8927d4ce5bfaa0fc8473d6442a26b5571a65684f3633805a3b0ed03c610726f250ca338784bbcf24147ddf8430926423ef9012d98172254140a80cd6e0ea38b6446a41a0b8f", 0x4c) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="0f56041d9776dba6d7e4c721819a4a5c764388dbbc74fae693f092d1a35ff482bf15bdad6cdd382595911204059965f0e1e2380384e952df7b029efda8fab5b1464ab429bb2cc297500907882c718bf23a25e0bce74067fe3fb85e1e1944cde37c320fa47f0a92429eef77b546147bc9b4546cff123317e1d6bd8335051c2894071314537cd485bc962fe4112bcdb532bb34f65ee97262a786ccfa0797737cf7197e049d674da3824e48480583e765cc68ad0bca4734f490839559c1ce0973d47f102b26236d96c9239f0d30c1cbba901e9c62a14192bbf10b52f26408b1fb48782551cf8871ebfa39a313e6bbd1472ba7e4414aa465711e16bc75d36617f44f72aba1e0") 52.323084797s ago: executing program 7 (id=5440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000540)={{0x89, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x4, 0x10000, 0x78}, {@remote, 0x4e21, 0x10004, 0x0, 0x0, 0x9}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000540)={{0x89, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x4, 0x10000, 0x78}, {@remote, 0x4e21, 0x10004, 0x0, 0x0, 0x9}}, 0x44) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000005c0)) 52.293040677s ago: executing program 7 (id=5441): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1e, 0x2, 0x0) pipe(&(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000fffffff00a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 52.280818437s ago: executing program 7 (id=5442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000300000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d"], 0x23c}}, 0x0) 52.228442797s ago: executing program 7 (id=5443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000001480)='./file0\x00') (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$cgroup_pid(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 52.224426137s ago: executing program 7 (id=5444): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f00000000000000", 0x28}], 0x1, 0x0, 0x0, 0x2f00}, 0x28000000}], 0x1, 0x20000084) 52.139588538s ago: executing program 7 (id=5445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000ffffffffffffff8000000000000000000000000000000000000000000003000000000a0000"], 0x23c}}, 0x0) 52.096077688s ago: executing program 37 (id=5445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000ffffffffffffff8000000000000000000000000000000000000000000003000000000a0000"], 0x23c}}, 0x0) 6.858110402s ago: executing program 4 (id=5832): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="000314"], 0x0, 0x0}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000481000/0x2000)=nil) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async, rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000000640), 0x6, 0x591201) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045520, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) (async) stat(&(0x7f0000000480)='./file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f00000050c0)=ANY=[@ANYBLOB="a42600004200200026bd7000fcdbdf251000000047d0e15af8d6045d936df60cd8be525d22c31b43b04edc25ea46b2ff44e5493fb03931d067eb6a22983862c8e9a9504cbbc7a3b427228ce44a94289f29ca592f9a1967a59fc3240180f51bf476e6701fd161847dbe2858f090fa8eacb223cdece191bf3ecb8546547b632e9c7a099c11b7e8c6bc69f742b3757159be13770043ab620f32266203f3f0d8cff2dc250d5f516bf01b0ffb65c386c23c73e642308c6e38130e8bb9450f111b3eb08f03546b765356d155c4bc6ee711b335fe4222a96197a56890e208000500", @ANYRES32=r2, @ANYRES16=r7, @ANYRES32=r4, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="0800fb00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="5420c1800410b7007160c65bafb547cd39715f8a425c2c05f09dff4829ac2dba154935f4a33feb78c907515265995602de668dee9b87683d9167ab80cdbe7b35e4db5f460b3afc5f5b7dd4a548cc7aade3be61cbcfb016f4fe93a0e0a3092638a24b440d70d5f962ffc0494c26ffdecd52e6708274a7b2bba61e74dc21379de8f6ff9aa7469d0d7ed89cf91cda2f45f29976061c7172267914f243b23164382467b93a68685e0704916eb4230ec7091e54e4cddc38e8b0771b78171f9d5defbab452ebc585367448f2eb882c8fdb7c6bc7704149aa98eb290db58e663f888f5812ef8fed551f5dcac9e7d0b568936958b9d55597fd2d7fa4da4af10544bf23d2574aea28cc0c0081a60f5be34f23bc32c64f82aad9ead74507f8290883bbede46c27762b5411e73f29210c500a5364b7b16ea2cf13c40540bccae31393059951772f026059c30ae91738e5ddbc8ab80b748a9459312cd1799d3c5376ebb7d48a2a12bf29095d72d4b9665a31c7de9766da1c8451f6796c09aad551d71563423814521cf6547e10e31535cf53f35a97abc6c137ae42d3514966d2389c74ac2d748186156ef49bab2c43e61af00c9ea110d82784a97b35a397e87444248919c58829680e4cb2cb9fd72b2a2f479efe85b70cde44e33dad7cbe5530ce23ac5928f0be3d05bd5f252264ab3831bf47b2d1d117dc550f6783de13ed8ce48e6ab3d61bb5c93c060ea22ed46a2619cc50cd0c54ef05c901efd16fcc1f9de4285a43a3a298685e41ba356c0f83565d3dbd8cbb1e4b5383978b66c434f4e82ade3e2a298263653bc8b53a129852369b1207929637938046de36dea3eb48db9e9c36311fd15fdb9dd029081942d96398022c32840dfb899d028536626372b9af83def599adb00f112890e2f13611fc28b7706c65219fa241b87ebcbba14bc1b69d116f8f7b87260742e93f33acc73b788068ee591032e351e51f0b90a9c0e4c7befa32d7445c1c35f57f7597a35731c16b2367e7186f99ea82f4648746f59f06517e3ce67cb6a6868a804a2b555a4e4da953f24bc267c55a7630859f3757efeb63237fd7388a5144bd6d6e876f82a1b0f25573d22a0083a575eebe19494c8245b72a4088c0a7daca4e38641a62b8a8ca7404d7ae6b12dab208daa65f79c512bd9cc54ce5cd0edb40d9b6e9308e1bc49e9372a783e258b8fc39f634dfece2433cdfd22b65ee817da912ea366049faa3bfeebff264e621e18577bb004d213b036c1bbd1a17f13571b5f1136d758b847e0ab9d743ad4a1b52de24ed9623ae01f410bbbc0abedd50a1029b7c89a6d3da309e7227ca7b03061b80396fbab9d0e91ab263373c798423f20c5b4391df4a101a168e9c9299b160e06d2c6fec7f4278a809d6ce66a0fc6a8b903f0004489d7cc5f2faab16e7ad3ded55c95dd294922792eac1558166cd497d334e11dbb2e31e71e0f701c590af600ffac0f2100670e4c6c63a0c1bfcfb920ed057418e9544747bc9e4b6b0f7949febbd08fbb4236f9386cc76cd2dc86da81798112efd0b0bb1f7d1044e961efca963eaa85c94fc1e1a0053094748c339ab94bf0bdb24084a12fc108dadde7f54f34a7f99e3590380e7dfcc1a316395fc4f7f2340ac2710d177984029a878386244b9094058d7a16a74af5d48e400c610b0571b945fff2e75e49c07184e5341515d967f38791f74eeaf79ccd4a3479bdadea4eba94189fd9234811cde96bc49750ec0f49291a5f45203bf9ef583354049c07108fe0e6123903fa0607a4334873f9eac440efcbca6935e3262046a3a926ed444303e08907f5ccda01252b0af9199b09b635259a28572c8e530da2ad809eccc96057a358ab35da1a531eaa1f3336b957d90c4bcc8d58be47acd48209c2cae3a25763e5327097dbde02f206819ef2f32038ec896cd3462fa9d5af58426cfa94ded205817e4047ec0cbf2a97d1972c3bd510aaec9f56e55cc58b43acd369f272ebe99b8fdfdbcbb28b154d1f1e0cea8d70187fde60ca0d6e3343405768d45473e8592bf2a8965bd2f1242cff068e31ec9ad9111c83eeb11b8217cd943b341c2cf07a8696ed9696f926e678cc7072ebdbc641ba6aa8faa3896a19ddaf9adad7fe7c3b20800063179d00e78753930805c9c9f96f594310f24854f5c1d840112d7e1a047c097a28f81c4fda58acee53e988a547d9ff9c161687680044a8f2a34b58cbdf6a6e439ec958cdf73cc6dc38a69cd3ac27566b5cd2c06ab7cff5042ef9ef625bd91c904665150d775785e084a699c90efd310e8b93110a8a285a1cfe738ad6551a0a448b153d3da945bbb14d52fb948ad13681d54e8448605fec4791505d28da94b3c5f39e2d1963c6aeac5ca3e12ebc7946d216c4f41f42822feb94d77bf6f12b5faf11752cdb539839c9589efaa292eee5326a780be821c8a18b3a28fb389b86d36d188fe0dc8ae29b7c308350d4ea08cc37159504e5f8999f05d047d3cdfa4c8ceba6021d0d6ca46523210f238f0040ae0a171a6282e565d76ff4130b4b833f5f5c3a7f4c08c67ab70c653706e60d8c1e00c913efa91d248d26ac01d3c76febe29f65496e9935f9a06d89f42758050884cd88bf0542bd4f702ae0d4adbd638d1d689460ccd6625c034d8818d4a3b34b94d6f97c584b3dcdfb3f1771eadcccef7648f4487d223fa5235336998d310b8aa4229ba7a3803b5bf34c401a2c5bec2e39d1c7bf68e7671a7f2f7e4ab836352651411eb1e5d9ede5d0617730564882a1abc779f2a2f7114913cede9807a4e38a9832f5311ef27abbdaa6b3ed7dccb8146d258a5674cb02b99a48b775fe0bd378262a5275456c1037c5f57ea36f4a6069e8a7f2d8202a2307b79bf05db7fc3dd8bd46e90445605dc41d398794f78caaf2e93455fa0b96bfd46c5591d0bdd45cafc33e0d45f153d65ab5fb288227717ca479a497b23ad621d995000277c81581da84dd32eea37876d5848b45887062788508f7d515cfecda10d28830aa9ea71cccd03e6aecb5c2984aac246af622e92fbcb5cddf05cc2293daac5f18901722a6cc7b9c6f8bb07d66d897c69e8f555cab69ce42ebf4759acd02282be2dcfdc883328996b4981a10b75c1e9e195dbd141f41b6a7a633cf6d2163d6550800f95535c3a0276a8afd2d1f7b560232696e5cceeddf1348227eb848366d27f9bf71f8adeea632740eaee52afef12b99149ed890973e29c87f8ea932bee412a96fc22bb3b74bff6cf6f772ac52e34c736c54a9279d87cebc05ef98f8978d65d872478a7b903553bc61e22d5f516fa67e8d09496b200cebbdfe128c4661d6e67e8967117a38eb9f49aca8236fb0ef7547d635b2620eb63aef5ffc102cdc08a59a790780a3168f200247a8a542a170c6ab4bf611e67c190aada6f57c3d4f57015b61ec30653dbd8ed1beaed94720f14850ec67771e995bd0d5ce24e667174621cab5d76a55202756f1e13732ea4d3d18f0909a5145a09b2df7716e8c6cba9996b6fe01605fb428a0240e8efd2b2ca2edc6f2ddc644bc1ca47fd7ad3cd242ce8cabbf9a79e773107acafbb2ba043b82ad42161b6e16e7c07df1dcf6060f9a1e7f76514ac3fef1d85cdbae497c9f03205b530fa854cd5f7eb5e21ffe08bbc011b1e47b113833bfc07d0fcaf86a54d33e4153564eff9ed8c5bfaa313cf4e6e9aa172c7c98dcb1815a5f60f36a32b40c674589edc3c78b52d0ee6779d6cb2b175cdfc30fd2739b2f459f4f24c049d43a15904a8205b2839c5ae52a0dde6889bf0702a7592042b1b9aa2650af0acbd6f34a7f9382d358e4dee255310c94d0a2ec2103c01901f941a3669ebf89369bcbfb929baa4b184fef6e180c7cc1de1143ccc57db39f47b71e15def61aad33f6c718df049ce9d7212d1571f7a5e02122d7c77bbb8dde258482b0487c30205514157a196d0bf11c35d3b5b60c6f40867fbc3c67658a3fde9e90a07e75060bfdad622e3837cd23656a15a5998e909b0b7ae06558385c4c64ee187d86d930ef3d0d7411d2441b42d7d02602c318af7e834090c20b37f0c54efcee351b39ce491657e3e815432bbb453963ffab12deefac9cf1a82f10b55c09777ec7524dd55eec732e1e63d03c17b8fa1112edf1952ecdc8d151affe12820c7142b8e007570c3b0dc9e965858fa0928b72cea56814732b413dbdd9b8f8fa944d91c06e3c01d9300481925178ea05db63f7f7de55feab995367d4a13d14b1cbcb667e8e1a44256710c2b49370b9b9a12e2327208cad102971461e1a3a66892a4c5eea9453b654b97853d91fcc97f555341dee912e3a5506cc2b5b9bd412e35b71660b1cb7fda67370ccf94558062491244f3bde65f664886a680bc4ff25de93c51e3e45cd8d2f9826a783532f2b3a02a9aa2521f6b0ee1c1f5042ae7e03b5cccf53367d9e046228977c136f4d5e0c2365e4bea30d16b45f25e202578b94768f342b4c5c86b1285c3b90120372105da0d6d6ed7d446dc367a8433fd0484b5d5feca9d19ffdcc9d8912ac1fa2f34461819b5a18788a3883f1121763f081f2288d540ccd2e065b7ea5ef5da5036396ccb22fa072bed5a5d8a45b2bde622478bc8966833d872d7abef56d9d8d64ebbf1a644f57b163a828128de0dfc9b73ac9e9fc62e7cd4d713ba7dc0064809dadbd39d20f2b313fd5604b256c5474dcefe5a9eea6d7847d50b770f0d2b7cdf7461f3b234adf8e178979cbb7c73d926708e74ddbaf4a1e31f9133a6b4f73370061e90cffb0da8035fbadbe426ffe133ed10d40be9569e2a152270602218969afba6f2ffb90750932dcde9ae1e4d3d388f98d3caac4065333b9090461b1442a4a24aef9d0a4d9c4daed11cc933ca0f85a6fce854bc9546dc6be239ad0ebca1583fb9b233d75ef7cea4f6c5fde29e4a74793b8835e6fd0755246d35edbd4fa2ca72c3d3751f143b7effce6080ba7978cc5b8bfa04420e6f2b08424825bc2698faeae3c21a69a79713f2c5c4887d6cf3d7b776dbb9bb70837b8caa4534047da354f46db6c657f318d2561e456f919ce4e4996a8518773df896d41ae905fb6feb5fdb6e5b10dd69eb5da7c0c40c468a768fb0bf7eb0689c96da85bbed0ec7a7bc10320b2987bfed66aaadf093cbbb16d8d7166eb03495e9b7ed3fc50572696391defd6d65284dc73fb10dba73dd22d8d254dc29dcaa161ab91c12073520baeee193b9f1e1e50e9ffe4c92a1d916ec9bd09196ff342ceeee32f82681cb9f33acff4177599d12ee5fe766477ac4fba212e788397a157e280ac6d0afea194e74a4d43f495afebf9331e837268fb2274cde751a83b92cc7b7d4d903ea1154243abb99b0ed61660771b1e64371e578c3a9f0249d7f9fb9c0e406c196efbb9d56b23e66220bfe8ef56f5cf70c1e15e957557abdab7317f68c0724c5f8380d09a4646cec1a1d0535a8127e68e6f131a52fb7b9550da66636f17911425d3552af1be51e61c44aa266c2a5e4b3d05c07e3cc1bc44330bdd0abf0b53cc23ebd686e53d2041fb3b3ea0cd12648fdb44443775b37b1b15fdc570b5096c50f15bc85ca80099fb746b6d0dc11580efb31b3aec3b193931452212dce9cd9b0831dddc6488e0d1f0cd6b027ce2f3997f191b20165f19e15dfed524c6586698d89fd88b7dae71339ade22f2c7acf86799ef49e9898389bb2dc64d71c24aa00f96523c8b7d5ce3b8f82176573573614542188d506db88ee4a4040acd5b6229db88d5126ab93867f4a48635731d3901fdcd5658db4b980f4fcb2e05d943375f376b21b7a5303a7a6f8442f6f478c15a043a2c5c7998ec304004a800400ec8036000900295f407ba23ce84abf18389e739603e3ce0f185d03d7ffefb6e8b81d3902830f1fdfd1cf2d4873cb22108ccd3768e9b9812300000800f500", @ANYRES32=r7, @ANYBLOB="04000a8045605b6319f1853056b873cf5530f3dd5ab874b24ea93e97b8fb94fdbfe58d890c0bd690e93f95b1fbd3b852267d459655b9013249fe46f8c5a2cdc16a0c211916999f4524474d4709a0a60f34ee8cb8994ae8a581841ed5cceaa6369966d281dd6db0fb9be5ac854fa7032e24c83cfb3a5b53c7a7dbaed8ab2d7a50851c12c8e99c0e44e97a468cd71bbdc97fb78c26aa0b1f7b2a9dc61b57a1fd00517aed33dfa92a65a65aa814f1c04f8d6beefa0017c91ccb7e2a357d5564f99262076a8c4f94ff9e27a9c6482667a83b6cdcd006be52e115017705d102745cff2c202fb7f20429e2fafcdf5808859c772e6c43790a6cf6252961bf4489d06dd84e9c8061170a3b6bca4b7f18997cc46308c499aa0d513282ac16a5c974ce14ab81068fcf3466080a785dbefa1c827b9e9c772c4359e91d2e9ee570485fbf854ce63bd067c42455dbe3cd1c23be0e30dbe176e3d141e5c9d9dc16d800496f92452514dcde04ffd051320a81a68da7d1ba6f464902ad583c367539d94b1de7df9fe0012c14185e0653c10cff768f81fbb6df0833783b40d223980b031b93b3a4ac13c0f739fc602ebd33b8efedc7ea287c4a9add4565b33a4a417cc035c9aa40438a1dce58944b3f10413046b0d1580ca08aa737dad4dbaaa0e1c96e8ee1b52bc518a425761fc7cb9898abe92e0b59d6b350e060202173a4c3f31f320251e3b2245023857ea0668e294e88a13ae7c5b8b89767d51fd5ad0d1e3ad964dc1c707cb41af17cb6e30fd441a18ce875f6bd41dfce92925d079d4fc28c9b13937bad92861dcbdf3277d92ecb1d86665dea1c4ade9d8a822eb379b2df1c3efd2a945012d5c1d89928329c48e2ca61462fb8bd3fe87518f1369679b21ffa71a139a221a4919ffdd0550e84e826750aead51fd63a061d269782cd199150510704c5185d4266c300224a11db86f76ae6520dbc39c3d89ba0799184e405af41528dbcd76e20c2e31d1cbbb215aed530ee010fddccd9650cc61909b4e813e6ebef09f1dd4ca892bc9c702076e320931b275646aa9f7eaa7da5cacf823f43f5365ec740cf0859272d3d1340ca4cd94b1e9b3323c2a1711d124b249c48bd310d538406f79fe0571bbf02f424b3d44c34c700218a44c4ace891eaf83a09c425d5b9a75debe953bd6d00fe4a8561317f49be6bf41c181725c0f26045e99f6eff582cdccbf02e58f5987b1eeb9938eee57d2a9b5696a659b41b995b83a679641ff5f8702bbbfecd68c0ee04e8269c9e832a7cb86cbdbc1ebf4108cb402a3f2bb2870ce6534a95a4232042ed8e5ba623f5741d6e2bc2d3493824dca6d2632fdab4630d43e69b7c4e7ee8ec777e7d90543637bac3f91a63a92890092c1fca13ef4b240f0a3a1ff7bd6cb96638da3168ba3bd4f2eb669972d902889af014ab614906b99e1e43e9f94e4b926b74dfc72fb0fc77ad254b8e2af884a4c20b8379f304961bc8ded1fcce03e4fb3be1a3b9e788cd733e9a34d750ab80e1c3f7dcc8005e752dfe368f033f6f8ac58db6611702d45dbd81a2d56844bf060d4e611e6bf906f47368f16d4600ca3b75e478dfe5502e974ee0ce17b2b5e6108c00503dc047460d1f568e777207220ece0c161266b64da5c081e1e521783fac36528161efc4ec6110c68f4ce76b4ea5dd0ce8feb8046df6d00d73443d67df83c1abc41c41d5580211b21b98c013e61efafd75ce040078bc7ec454729e58bc37f300deae15f7437431a95bfd9b3c073bc88dd9822d4efb16c02efadf59f631c489e0febba84bfa0a8ddcf7b17ff6b53fc588bd3a2687e740719ff12b0022bc27e732e40663ab355f3dc93be123fd4bba68c1dec6358ea2dac60acaedaec9a769f0c254eb58a1fa6eb963488c1223f93d3d7e331753ab21f19055547c39a2be19076a5885e35645ca931c48e3a5709ee7344b62a2e9b7d252120f9c1430e771e84ec0081428a2813bebd2e7c6b6930d02d08ef475f195937ad5207819bc37b30ba0b905501b2bdb235e68dfccce7535adad359c07c3204335207bbbac65ff900e983e51d29d2703c623acd96372955c77ffdf975e5530bad52dac09b13f1ac701b756811b47681f6db5eeef0f716bc17c26f8e8044bb47a6df0ea1519b9bafc494494ce04c159018223a7824574fe195206766f5961cb406f28fb08ba84c82fda1b6b5a2069003b4a4eb4858da84fa1a4145fb16297b8e26d1a01c35544cd25dcc394e1a9d925dac7ead044e9e46c3561d0299c865312ddcf61a4c9e1ffeb2681d82d93df799cb2da90af993e7687ee51857c4a1fb59452bd78b968d70d9ef542a93fcedb96ee4ded1af0e099e334cb6d233064c2fcb06ff57a8607be166114efc5c76bbc764f0bc1790caf7c592bc17898561a1c53f08999a4013e47118d7b43fb0e540800ca15b79e11e901ac303b06f2101d3722cbbf52a6f2c38c1859a6e978501d58a59b3ed92cbc247cb96229950ecd68e8d2940ee0ef96d31188b118f8cfa759d8c837158b348036fc85075fd9562c9287082f50d29096ebc0ac5482dafecb92b12fbace52224394c8cd6be72ad891395f21e2bdb90fa22724e6648695a5f20dc659da2c131675ff5f924c08ee699d170ff8d53c9bf5e4b09edf1630be42cee445d24d1d6aac585549d7b42aec0a9567b96661dd237982db996133afd5836982aecbeaf49087b39a8bd459585d048805046a39c814f8e5de8f628a9dbc2f781bbc63f71f2858c21219e20f9f516ef8dfbe6897419b16ce89e81e1745c8e3f1dcfe7399ba1cb5ede4e4b8b075b08e5db03dc0d31c27c63b261ae91e188ac6fb2446daa407aa248eb87a1f265b76786cc60fee391614faa5d5e0b36c6dc94e141e8313adb86d48ce63a286be5fc52d6caf1df90c6d3506f02c9cfc1516f717a8fe30ae0cf5747e6af95d5609cb81ba9529e8e2e990fbfe2bf5d3e3946d9f8059ad81c8405073a8ffb2988fa7e1ac8d8ef7597ad4481dfd2b8fb8198e964c8238a1d868f9575f42782a259cf9693635b128461113bd4565b412da12068f465765b6d1baa1ac2bd7fe0f84e802d8c33535cb1a66ad570e924a09df59fa351cf2e632df294400b2e43ccec3fc98ec6de5ccfe6fcf41c780cd22a311040890777f01d7585b1a71d24baf0cff700d69ca452e109292c65632d51dc4f282adf21fef5c39472b0ec13718a7d4094eb48c3cba2abe21f6499981302c4dcedc3315213de3293c5ef9fa8f20a9222f0b75e50620693171739c465d6f8716743002015bd48174b0e70ec40c46f0f2d9cc381b090735df20fc6d5e9c6642f612b7fcf244d1d7edcf8320c3bdb823a8ae350d297b6ce8417f16d6213f0a7c113a49a8a0b154e666c091905f7d9d342814c07867ec7815bfaa08b9cce8f52d38d7791ed46701c8625701df65df88fa7ddf46f93068d791c4d7b3785bbbcdff22f6e96e977db543fb24f493c16d8491a99b2c62e99fb909f52ab466dff69795daaeda2c572e3cca11d0bcecab73d8236c7bc62ff59a0de6bb3eb9383deb5426486e331fe2ed33c8dcdc7c8656dde670a9994cdb0bf7a8f560a380f322b91cf7373794ec71bbb4d6e722181672f24442452fde7b8583191ca291d4a095105ea9924047503dc9f8fd67a40b2eb9fc4a536bce24a5b390b885be358304368a476c0adbf8e5c2e2052c7bb9c40418832a1fbd163813726bb097e6db089934bd628e035c1ba3d6788f8b6c552cce44690e6d1e98f9a96ece1d03035fcdfec5656dcad0242ad76f7f9477466db7fd2d4a53ee8b8ee045a08efd2bb0444091db640a7ecd6074b398b1c184128c1803ec04bb8098b29dca1b240bad9c76f83cb0be99134ac229c2ae6bd75be25e240bc5226ec2ba77a843628cdf641122e379321127ebfe7e8155764c00c4b875df666315e963aa31700be21822ffe2428ad494e827ef50029381f7fddddad48ae780a607f5ebba33cf80595787b245b663df964015e7544a386ff30485f175fdab4672e0c06ba9034db01b83f7088ffa6a61608e190f45ed7b17c5a2ecf2ccea43443b4e321b76599084217c0dc34d72035e8648b077ee994a4e34af4edad445d50329556784bd0fd100aaf7e1c0fde0f2732bb3f124e24f9afb04425092b4eb6d910a0b565fa39c5c46e177b4739743da169a948d4901438ad3897266eafa3365044e9387b32c036d9d2f059a030428633943f680cdbae25b3e7c6f0b716d2d0657b94df3c1280b3b91af27819606ea17f0f4bb50a79933967cab645442bb12024859bb0ba5ca4477b2bd4ddec49c6cee3b2230140c59949f0888985b1e23d6d64b42187ad18a7c647c21b107d20588f1c7763e9cd09a955f26ae9521998302a30e526f6481631a7a2d0a01eb402f2f35e931c60708d9dc22309d4e4bd3e40c80c13f47ffc3a892c8870f6d984d954cde66fe584669520a45013fd552f4e565887651ca8bf5a7cc15cfd24dccf06ba9e56a1487fefac504600ec9a2f54965080eab6f76075cf207f44e8bbdc70fc737efa31b5178603a9c821f28e6a3302d5c47f29ac4b34a603956fd3e3a0a4dc603cd9ac2b1228b0f47a74416bf91065831f7a8a352649f65b48bc90c99730fd13a2ccbbd2617c3e652e2aa10439fc803bde8453b47aadc357a79360ba88f0587fca3ddad6439d9053ef810647fd2f151b570da3fddb1adbff75fbb2d9445f7941c13860adb2cc494b43f13e8f80de9312994b7eae500574742d8c2b38efa33bc667cd51f7a5a62ffe570f07a0ac5a3b60f9599ff1b2ab2394ae80549bf4e2d166fe015aa66374fc53c13c085ec476cd87dcd846df444019d218b9e58c78898aa48451eb766b2df40df3b08d3573f41ee17ef574bd4f2a8fd13b57b92c1ab8543d06a6f3a89854d496e1fbaf077af93f90b7c2af24e6defbaca20a49c35aaf0a230bbcd3b4a3ca1e4aa888aac8d14df929c07f6ef2a36df9be048513cf7808ee64aa4235b947647ee00af8f0b5c2c27fa3fcc36d71386bb604398c422c5b7370bded382d9c991ab1fc04e02a972938a38ec01f171351766dc73dc2716fe82d71ab4eeb3d0c0aa6c8f1a36db2b3806b3259b74ccd4fd9d54cfcf46ee3b6a8e13d4491a89723a8d998bdebf832607d0b645beafd5912b1f25a777972d3e59ce6210a44bb7ca14288346d952709ea4dd7204ecba232e2538c2cb2ab935718cbf4cf5c94443c30ac4de96fd483a347a610c9a4d57988e1be715fabb0d450abf976f702401211d52ddcc85204452cadd949091c392a9b6394c2ddf12f62e2789c544dfd7717a8338b7bff9ffcc6079ee2a8f562aa60c98c740e36ef9795ad8797e808878061b7eee24fbe4fcef12f43241e597f4f6149962f1694fe34e3a4cd26bf45fe9e3e8885074c158e262c1aac5f5e49353d16d478c14f1e575bd8d3db3bf5a8e0686c3a393c127ad83b8f2e7a704da08115c9205356010201ae343759e48d7ee516731f3ecc084a7b27a5631da3292d1bc8e55d01c16c2140414cb2bb60d57b3e89b5d39ca042564a087fcad114a2017807e8a957bc1e77ba5957f04e39b728e1772c5fe5ae9cc760b3ea22d7e76f07689812e29c3610c216fbffbc82fad1d7216237713e87ee6fa6aab874fcf634d7e06bd003c480517166d258d12180baaff72d93c0fed89126af2d27b1a6ff59ec1ac5cde6ec73955e1859e24280286d5d89c495e724aa780c3aa024db117ba6c9877cf52ef7197220f997781d39fb784b60164309d1faf3ad86e9d3fb2fb6565ffdb14d536f53f2f8b7886fff655b697154f206d006a1a529252f695fd76eed9725c07f6d5f5ea6736eb25ad35b8277c7c4f10cfa9ee9fa1c64217ba883e457aa821c83f769c1ce8113e71a43f671e62c736836207be3ebf404544b4da0c925030e19940c79efa2fe865d406344f4b40e75001b280c0b80b97c10e02e447c29cafb99bbcf9790cbc924a399012f369b65deceae1f3e60399e5f2db22ebb4a2330d255d9298eae01e3273f1c9bd8714000000"], 0x26a4}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffa) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000000)={0x0, 0x80000000, 0x0, [0xd, 0x4, 0x2, 0x6c4, 0x9], [0x789, 0x9, 0x2, 0x4, 0x7, 0x7, 0x4, 0x3, 0x5, 0x200, 0x8, 0xfdb, 0x4, 0x6, 0x6, 0x3f, 0x11f135bb, 0xff, 0x170, 0x7, 0x1, 0x0, 0xfffffffffffffff4, 0x5, 0x5, 0x6a, 0x4, 0x9, 0x10, 0xc7cb, 0x9, 0xa6, 0x5, 0x95c1, 0x2, 0x9, 0xce, 0xf, 0x1, 0x6, 0xfffffffffffff8eb, 0x3ff, 0x8, 0x5, 0x8, 0xfffffffffffffe01, 0x100000000, 0x4, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffbb59, 0x31, 0x8000000000000, 0xfa, 0xffffffffffffff7a, 0x4, 0x9, 0x8, 0x0, 0x2, 0x45, 0x3, 0x80000000, 0x401, 0x401, 0x5, 0x0, 0x3, 0x8, 0x9, 0xe, 0x0, 0xd0a, 0x6, 0x5, 0x1, 0x5, 0x0, 0x397, 0x100, 0x6, 0x5, 0x6, 0x28, 0x707e, 0x800, 0x200, 0x3, 0x2, 0x58, 0x7, 0xffffffff, 0x4, 0x80000001, 0x3, 0x9, 0x4, 0x81, 0x0, 0xff, 0x56920c38, 0x5, 0x5a2, 0x7, 0x2, 0x3, 0x5, 0x3ff, 0x57, 0x2, 0x6, 0x800000009, 0x40000000000, 0xfffffffffffffffc, 0xdf76, 0x322, 0x101, 0xd, 0x401, 0x95b]}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000f00)={r9, 0x6, 0x4, 0x1}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) (async) prctl$PR_SVE_SET_VL(0x32, 0xf732) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) fcntl$setlease(r10, 0x400, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.846031514s ago: executing program 4 (id=5854): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r1, &(0x7f00000003c0), 0x100000000000022d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x99b33000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) 3.834680794s ago: executing program 4 (id=5855): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$pptp(0x18, 0x1, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x4, r3, 0x1, 0x1, 0x6, @local}, 0x14) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) ioctl$KVM_GET_IRQCHIP(r5, 0x40046721, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) userfaultfd(0x801) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600870025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 3.700342534s ago: executing program 4 (id=5856): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x9, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfc}) 3.700005924s ago: executing program 4 (id=5857): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x2f, &(0x7f0000000380)=0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r5, &(0x7f0000000340)="896102aecdfcc44f", 0xfdef, 0x2, 0x0, 0xf400}]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000980)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x1ff, 0x2040008, 0x4, 0x4, 0x800, 0x1, 0x0, 0x0, 0x2, 0xf}}, &(0x7f0000000f80)={0x18, 0x0, 0x7, {0x7}}, &(0x7f0000000fc0)={0x18, 0x0, 0x1d01, {0x7fffffffffffffff}}, &(0x7f0000001000)={0x18, 0x0, 0x8, {0x7fffffff}}, &(0x7f0000001040)={0x18, 0x0, 0x8, {0xbc5}}, &(0x7f0000001080)={0x28, 0x0, 0x7fffffff, {{0x5, 0x3, 0x0, r4}}}, &(0x7f00000010c0)={0x60, 0x0, 0x7, {{0xa, 0x10001, 0x6, 0x3, 0x7, 0xe8e3, 0x8, 0x5}}}, &(0x7f0000001280)={0x18, 0x0, 0x8, {0xb1}}, &(0x7f00000012c0)={0x1a, 0x0, 0x1, {'/dev/fuse\x00'}}, &(0x7f0000001300)={0x20, 0x0, 0x7, {0x0, 0x1}}, &(0x7f0000001340)={0x78, 0x0, 0x7082, {0x7fffffff, 0x19, 0x0, {0x4, 0xffff, 0x41bc, 0x4, 0x2, 0x8, 0x9, 0xfffffffa, 0xf, 0x2000, 0xe, 0x0, 0x0, 0x6, 0x9}}}, &(0x7f00000013c0)={0x90, 0x0, 0x9, {0x2, 0x1, 0x8001, 0x3, 0xff, 0x4, {0x4, 0x6, 0x4, 0x47, 0x4, 0x10000, 0x6, 0x9, 0x5, 0x4000, 0x7, 0x0, 0x0, 0x0, 0x86e}}}, &(0x7f0000001480)={0x50, 0x0, 0x3ff, [{0x3, 0x0, 0x1, 0x19, '-'}, {0x1, 0x2, 0x1, 0x4, '\x00'}]}, &(0x7f0000001500)={0x158, 0xfffffffffffffffe, 0x4, [{{0x2, 0x0, 0x9, 0x6, 0xed, 0x4, {0x3, 0xc6, 0x100, 0x80, 0x5, 0x5, 0x100, 0xbc, 0x3, 0x2000, 0x2, 0x0, r3, 0xb, 0x4}}, {0x5, 0xfffffffffffffff7, 0x1, 0xa7c, '\x00'}}, {{0x1, 0x2, 0xc00000000000000, 0x3, 0x7, 0x3, {0x0, 0xa, 0x4eb0, 0x2d, 0x81, 0x7ff, 0x7, 0x1, 0x31, 0x4000, 0x4, r2, r3, 0xd9, 0x414}}, {0x5, 0x4, 0xf, 0x90c0, '-!@..][&,},\'+!$'}}]}, &(0x7f0000001680)={0xa0, 0xfffffffffffffff5, 0x1, {{0x1, 0x1, 0x4, 0x1, 0xb2, 0x7, {0x0, 0x3d7e, 0x3, 0xab5, 0x0, 0xffffffffffffff1c, 0x2, 0x7, 0xfffffe9e, 0x6000, 0x97, r2, 0x0, 0x2ac, 0x7fff}}, {0x0, 0x11}}}, &(0x7f0000001740)={0x20, 0x0, 0x8, {0xffffffd7, 0x0, 0x15c, 0x8}}, &(0x7f0000001780)={0x130, 0x0, 0x4, {0x3d, 0xe, 0x0, '\x00', {0x7ff, 0x5, 0x926, 0x6, r2, 0x0, 0x2000, '\x00', 0x1, 0x1000, 0x0, 0x1000, {0x7fffffffffffffff, 0x243}, {0xfffffffffffff001}, {0x7, 0x2}, {0x8, 0x9}, 0x3a9, 0x2, 0x9553, 0xfff}}}}) 1.960141742s ago: executing program 8 (id=5874): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) 1.948625632s ago: executing program 8 (id=5875): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) socket$netlink(0x10, 0x3, 0x6) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x4000, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x4000, 0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) (async) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) (async) 1.915807122s ago: executing program 8 (id=5876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ffffffffffffff8000000000000000000032000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000840f000000000000000200000000000000000000000000000000000000000000000000000a000000cd00000000000000480002"], 0x1a0}}, 0x0) 1.852291102s ago: executing program 8 (id=5877): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000080ffffff0000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000000"], 0x23c}}, 0x0) 1.852163692s ago: executing program 8 (id=5878): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r1) r2 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/238, 0xee}], 0x1}}], 0x1, 0x0, 0x0) close(r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x4d75c000) 1.694419793s ago: executing program 8 (id=5879): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x9}, 0x4, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xc, 0x0, 0x3, 0x0, 0x6, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a8, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd, 0x4], [0x8, 0xc1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0xf, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x40, 0x14, 0xf, "fc5c37c0b4e61e85bc45d11ab3371d"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x140, 0x20, [0x7]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x557c}, 0x0, &(0x7f00000006c0)={0x40, 0xb, 0x2, "00bb"}, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") tkill(0x0, 0x7) 633.487717ms ago: executing program 5 (id=5894): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2800000000000b0000000000070000004418149c"], 0x28}}], 0x1, 0x40) 633.439747ms ago: executing program 5 (id=5895): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070041000f0000ff3f04000000170a001700000000040037000f00030001332564aa11f6bbf44d00000000008984bd5862ff7f", 0x3e}], 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400100, 0x100) 587.745217ms ago: executing program 5 (id=5896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) syz_usb_connect$uac1(0x2, 0xad, &(0x7f0000000740)=ANY=[@ANYBLOB="12010003000000106b1d010140000102030109029b00030156c00209040000000101fcff0924010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002000a0009000405240402010924060502010600000924030303030505"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socket(0x2a, 0x4, 0x10000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x2}, @clear_death={0x400c630f, 0x3}, @acquire, @register_looper], 0x0, 0x1000000, 0x0}) syz_usb_connect$uac1(0x3, 0xc3, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x7, 0x0, 0x8f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4f, 0x1}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0x2, 0xf7, "6f8d870cde"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x4, 0x8, 0xe, 0x2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x2, 0x9, "d32052744c9122dd82"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5f, 0x3, 0x4, 0x7f, "", "e179"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x2, 0x2, "c96726e9b59c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x2, 0x1, "22a6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0x10, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xcc, 0x7, 0xc, {0x7, 0x25, 0x1, 0x1, 0x7, 0x4}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xef, 0x5, 0x86, 0xff}, 0xb9, &(0x7f0000000580)={0x5, 0xf, 0xb9, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0xb99, 0xf00, 0x2, [0xff, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xa1, 0x9, 0xc}, @generic={0x96, 0x10, 0x2, "67f8ddeb724d816061ed544f563081e1cadd1ee59eee5f7bde1ed4500d10ecfd8f39bf231d0ab36844bcf392806b94b4934850a1abc05b63ed2aaacb388c86506fd05c55c90df6932a8e2fa11196c30eb4aae096b3eb0e1cea4b1159d6667d70a78a9292841f8e076482c62ffb2b50319d0c60fe1ff9407116fbb4d6f4047c5dab81575c3aee50f187a3523947874497437acf"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2809}}, {0xd8, &(0x7f0000000340)=@string={0xd8, 0x3, "f720c5f82f4ee9722d2714c4a01b6c964d507ea81001376f2f7ca78be8d0b55dd8d688fefdac29f36a9b675c078af0e96164a1b5700872b7601863b7353001d002f75b1146691a37bf8d974b0b40abe173ba87cbcc485dc53a38da0becfaa09b1e1b127aabe27f135e3e5435d0005bf388f70becb6a1026a44bca7347fbddc6d82abca0e92c6521f03fa4cfd0fa0b3d6f61993bf9384ec4685338cba203309cf8c88e1c73906882b253cea5a8083052ea65be5f223065832565b78ed8c33e1f7f8be5dd6c40ae3233f0b140755cc2a8b07dc4ebb69a6"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x816}}]}) r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17}]}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(r1, r0, 0x80000) 500.739457ms ago: executing program 9 (id=5897): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a0017000000ff040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 500.547448ms ago: executing program 4 (id=5898): r0 = gettid() write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") tkill(r0, 0x7) 416.442418ms ago: executing program 9 (id=5899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000080ffffffffffffff0000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 415.643158ms ago: executing program 9 (id=5900): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x0, 0xc8, {{0x38, 0x4, 0x3, 0x3, 0xe0, 0x68, 0x0, 0xef, 0x2f, 0x0, @private=0xa010100, @local, {[@lsrr={0x83, 0x7, 0xd8, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x34, 0xdc, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x3}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3}, {@loopback, 0x91}, {@multicast1, 0x2}]}, @timestamp={0x44, 0x24, 0x81, 0x0, 0xb, [0x3, 0x200, 0xfffffff9, 0x0, 0x3, 0x1, 0x6, 0x80000001]}, @lsrr={0x83, 0x7, 0x7d, [@multicast2]}, @timestamp_prespec={0x44, 0x24, 0xae, 0x3, 0x4, [{@private=0xa010102, 0x52b7}, {@multicast2, 0x5}, {@empty, 0xb}, {@multicast2, 0x10000}]}, @ssrr={0x89, 0x13, 0x50, [@dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0x2c, 0x65, 0x3, 0x0, [{@remote, 0x1000}, {@private=0xa010102, 0x3}, {@loopback, 0x9}, {@loopback}, {@private=0xa010102, 0x80}]}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x1, 0xfff, 0x1c, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7, 0x3ff, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001800)={&(0x7f0000000380)={0x1454, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x204}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{]@{\x1c\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x194, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '~h;^@[[(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-/,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67e0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\x00.*$.]-:{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '+,\xcc*:(^(+$/-*${\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, './$#({]-],-]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(%#:#+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-[*-.'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ']\'{@.\'*^%\\#,\'{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2dfd1f7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$-@-\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x11dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "c23440ffb8e957ba0c16c9d0fd490ae8ffada46eb7f346f75ba0bf84ce0a356d9bcd9c93eeb7ba2c9e27dab76e2db5c0e4b10f25ca2bc800f1b71606e75fb00515e4d506556ce0445dfbe18840a053f0541ee261de9b17a2ed0bbb827257d76e5f9a9e8cf60518c1a679f26bf63756eab6ef989bace29340506a5a5eced2b23577b019fc0f940210f501653797616e06bb7b020c495bbe46fcaab6edc1e228a1bf71dca67f2cf83a6df88d421db68b0aa668d101b2f97d61c21f587cb24761e15ea4e2dac141b23a85e2fbc86362dba0c7510755026802c88524bf7ae0138074808331588b5c33"}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%}%.Z^-@\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\\}(#-&!\\\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xa3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "5e9316b82dffe5814d0fb1403627bca2b03b236086e28a21682cb594cb1f40b1c220ba57501e7660a9225be84ccbdce4cdedc47d15cea401b86ef18efa646320eb627c22e74e467b38c59503504fe22a36"}]}]}, 0x1454}, 0x1, 0x0, 0x0, 0x800}, 0x8800) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, r8, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xe25e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40440d1) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x3374, 0x4e24, 0x0, 0x3, 0xa0, 0x60, 0x6a, 0x0, 0xee01}, {0x4, 0x3, 0x0, 0x3, 0x30, 0x5, 0x1, 0x6}, {0x6, 0x8, 0x1672e3f0, 0x4}, 0x332d, 0x6e6bb7, 0x3, 0x2, 0x1, 0x1}, {{@in=@loopback, 0x4d6, 0xff}, 0x2, @in=@rand_addr=0x64010101, 0x3504, 0x2, 0x2, 0x81, 0x8, 0x2, 0x6}}, 0xe8) (async) setuid(0xee00) (async) r10 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(r10, 0x8030942b, &(0x7f0000001ac0)={0x6, {0x4, 0x9, 0x7, 0x4, 0x4}}) getsockopt$sock_buf(r9, 0x1, 0x37, &(0x7f0000001b00)=""/115, &(0x7f0000001b80)=0x73) (async) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f0000001c00)={0x8, 0x40, [0xfffffffffffffff8, 0x4, 0x7, 0x401], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setgid(r1) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c80), r10) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000002e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x6002}, 0xc, &(0x7f0000002dc0)={&(0x7f0000001cc0)={0x10dc, r12, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd090}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NODE={0x10a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a2cfc70a725e9b576902ff8f7b8e58ec5fb5e7dd17"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "f95f2b7c7a10e0a4bdb8c14acc7d83abd0ea740ab4"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) getsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f0000002e80)={@empty, 0x0}, &(0x7f0000002ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000002f80)={'ip_vti0\x00', &(0x7f0000002f00)={'syztnl2\x00', r6, 0x8, 0x7, 0x5, 0x7f, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp={0x44, 0x28, 0x8d, 0x0, 0x8, [0x9, 0xd29d, 0x8, 0xfffffff9, 0x7e9, 0x7cec, 0x9, 0x8001, 0x4163]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000003100)={&(0x7f0000002e40), 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xdc, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000003140)='syztnl2\x00', &(0x7f0000003180)='ipvlan0\x00', 0x0) (async) stat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)) (async) ioctl$HIDIOCGPHYS(r10, 0x80404812, &(0x7f0000003280)) openat$dir(0xffffffffffffff9c, &(0x7f00000032c0)='./file0\x00', 0x101240, 0x32) 415.404768ms ago: executing program 9 (id=5901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000080ffffff000000000000000000000000000000000000000000000003000000000a"], 0x23c}}, 0x0) 414.531858ms ago: executing program 9 (id=5902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000003000000000000000000000000000000000000000000000000003000000000a0000"], 0x23c}}, 0x0) 408.666448ms ago: executing program 9 (id=5903): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) getcwd(&(0x7f0000000040)=""/24, 0x18) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cpuset\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x18, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @decrefs], 0x0, 0x0, 0x0}) 54.835349ms ago: executing program 5 (id=5904): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) 280.86µs ago: executing program 5 (id=5905): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x2}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000, 0x301440) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 0s ago: executing program 5 (id=5906): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x47ec, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'pim6reg\x00', 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x19, 0x0, 0x101}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x880102, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.8.4863'. [ 359.290633][T11939] 0ªö»ôM: renamed from gretap0 (while UP) [ 359.297181][T11939] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 359.385493][ T31] usb 8-1: device descriptor read/8, error -71 [ 359.406117][T11941] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 359.494565][ T31] usb usb8-port1: unable to enumerate USB device [ 359.674493][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 359.825476][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.836459][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.846255][ T9] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 359.855341][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.864042][ T9] usb 9-1: config 0 descriptor?? [ 360.064935][T11953] fuse: Unknown parameter 'group_id00000000000000000000' [ 360.147845][T11955] fuse: Bad value for 'user_id' [ 360.152748][T11955] fuse: Bad value for 'user_id' [ 360.184835][T11957] netlink: 388 bytes leftover after parsing attributes in process `syz.7.4872'. [ 360.206117][T11959] netlink: 388 bytes leftover after parsing attributes in process `syz.7.4873'. [ 360.229375][T11961] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4874'. [ 360.247544][T11961] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4874'. [ 360.259164][T11961] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4874'. [ 360.268335][T11965] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4875'. [ 360.278925][ T9] hid-steam 0003:28DE:1142.0029: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 360.282988][T11965] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 360.300913][T11965] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 360.354469][ T9] hid-steam 0003:28DE:1142.0029: Steam wireless receiver connected [ 360.365097][ T9] hid-steam 0003:28DE:1142.002A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 360.480311][ T2754] usb 9-1: USB disconnect, device number 7 [ 360.490456][ T2754] hid-steam 0003:28DE:1142.0029: Steam wireless receiver disconnected [ 360.684453][T11973] tipc: Started in network mode [ 360.689403][T11973] tipc: Node identity 7ad7bf50f469, cluster identity 4711 [ 360.696760][T11973] tipc: Enabled bearer , priority 0 [ 360.704629][T11973] tipc: Disabling bearer [ 360.746942][T11975] 9pnet_fd: Insufficient options for proto=fd [ 360.753487][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 360.753504][ T36] audit: type=1400 audit(2000000178.597:66081): avc: denied { shutdown } for pid=11974 comm="syz.4.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.763209][T11977] fuse: Unknown parameter 'group_id00000000000000000000' [ 360.810701][T11981] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4882'. [ 360.859705][T11987] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4885'. [ 360.901187][T11991] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 360.907849][T11991] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 360.937788][T11996] SELinux: syz.4.4888 (11996) set checkreqprot to 1. This is no longer supported. [ 361.039681][T12009] netlink: 'syz.8.4893': attribute type 5 has an invalid length. [ 361.061573][T12011] fuse: Unknown parameter 'group_id00000000000000000000' [ 361.200736][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.209643][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.434373][ T63] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 361.564371][ T63] usb 9-1: device descriptor read/64, error -71 [ 361.759511][T12036] 0ªî{X¹¦: renamed from 30ªö»ôM (while UP) [ 361.766399][T12036] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 361.804334][ T63] usb 9-1: device descriptor read/64, error -71 [ 361.898761][T12047] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 361.898784][T12047] rust_binder: Error while translating object. [ 361.911273][T12047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 361.917567][T12047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1144 [ 361.954377][T12051] tipc: MTU too low for tipc bearer [ 362.046476][ T63] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 362.062677][T12064] rust_binder: Write failure EFAULT in pid:1161 [ 362.184325][ T63] usb 9-1: device descriptor read/64, error -71 [ 362.354314][ T9] usb 8-1: new full-speed USB device number 67 using dummy_hcd [ 362.434299][ T63] usb 9-1: device descriptor read/64, error -71 [ 362.515395][ T9] usb 8-1: config 0 has an invalid interface number: 144 but max is 0 [ 362.523703][ T9] usb 8-1: config 0 has no interface number 0 [ 362.531418][ T9] usb 8-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=25.0f [ 362.540569][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.549028][ T63] usb usb9-port1: attempt power cycle [ 362.554480][ T9] usb 8-1: Product: syz [ 362.558665][ T9] usb 8-1: Manufacturer: syz [ 362.563256][ T9] usb 8-1: SerialNumber: syz [ 362.568869][ T9] usb 8-1: config 0 descriptor?? [ 362.775479][T12066] __nla_validate_parse: 7 callbacks suppressed [ 362.775499][T12066] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4919'. [ 362.790765][T12066] 0ªö»ôM: renamed from 30ªî{X¹¦ (while UP) [ 362.797911][T12066] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 362.814684][ T9] usb 8-1: USB disconnect, device number 67 [ 362.904279][ T63] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 362.925301][ T63] usb 9-1: device descriptor read/8, error -71 [ 363.055336][ T63] usb 9-1: device descriptor read/8, error -71 [ 363.294261][ T63] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 363.315242][ T63] usb 9-1: device descriptor read/8, error -71 [ 363.349565][T12071] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4921'. [ 363.392466][T12078] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4923'. [ 363.441570][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4926'. [ 363.451465][ T63] usb 9-1: device descriptor read/8, error -71 [ 363.469853][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4927'. [ 363.495546][T12088] fuse: Bad value for 'fd' [ 363.574337][ T63] usb usb9-port1: unable to enumerate USB device [ 364.067493][T12093] new mount options do not match the existing superblock, will be ignored [ 364.192911][T12096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:897 [ 364.482487][T12117] random: crng reseeded on system resumption [ 364.519844][T12115] fuse: Bad value for 'fd' [ 364.581971][T12123] bridge0: port 3(syz_tun) entered blocking state [ 364.588496][T12123] bridge0: port 3(syz_tun) entered disabled state [ 364.595075][T12123] syz_tun: entered allmulticast mode [ 364.600864][T12123] syz_tun: entered promiscuous mode [ 364.606274][T12123] bridge0: port 3(syz_tun) entered blocking state [ 364.612791][T12123] bridge0: port 3(syz_tun) entered forwarding state [ 364.630166][T12123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 364.630199][T12123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:146 [ 364.689408][T12133] can0: slcan on ttyS3. [ 364.716866][T12136] netlink: 388 bytes leftover after parsing attributes in process `syz.8.4947'. [ 364.742097][T12139] random: crng reseeded on system resumption [ 364.816425][T12133] can0 (unregistered): slcan off ttyS3. [ 364.843615][T12154] fuse: Bad value for 'fd' [ 364.896617][ T2756] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 364.936051][T12170] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4953'. [ 364.938751][T12169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 365.004943][T12179] rust_binder: Write failure EINVAL in pid:156 [ 365.039544][T12184] random: crng reseeded on system resumption [ 365.055177][ T2756] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 365.065547][ T2756] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 365.074802][ T2756] usb 8-1: config 220 interface 0 has no altsetting 0 [ 365.083064][ T2756] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 365.092480][ T2756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.101527][T12186] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4958'. [ 365.107341][ T2756] usb 8-1: Product: syz [ 365.115660][ T2756] usb 8-1: Manufacturer: syz [ 365.120295][ T2756] usb 8-1: SerialNumber: syz [ 365.174258][T12194] fuse: Invalid rootmode [ 365.238644][T12196] netlink: 'syz.4.4963': attribute type 4 has an invalid length. [ 365.246539][T12196] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4963'. [ 365.338993][ T36] audit: type=1400 audit(2000000183.190:66082): avc: denied { map } for pid=12126 comm="syz.7.4943" path="/proc/1175/net/fib_triestat" dev="proc" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 365.366542][ T2756] usb 8-1: USB disconnect, device number 68 [ 365.780646][T12202] random: crng reseeded on system resumption [ 366.114120][ T2756] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 366.265095][ T2756] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.276067][ T2756] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.285852][ T2756] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 366.294951][ T2756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.303692][ T2756] usb 8-1: config 0 descriptor?? [ 366.594289][T12215] fuse: Invalid rootmode [ 366.672634][T12222] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4973'. [ 366.707318][T12226] random: crng reseeded on system resumption [ 366.741522][ T2756] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 366.750214][ T2756] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 366.757522][ T2756] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 366.764862][ T2756] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 366.773025][ T2756] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 366.779437][T12228] 0ªö»ôM: renamed from 31ªî{X¹¦ (while UP) [ 366.793373][ T2756] hid-rmi 0003:06CB:81A7.002B: hidraw0: USB HID v7f.ff Device [HID 06cb:81a7] on usb-dummy_hcd.7-1/input0 [ 366.805417][T12228] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 366.925993][T12240] fuse: Invalid rootmode [ 366.975111][ T2756] usb 8-1: USB disconnect, device number 69 [ 367.026416][T12249] 0ªî{X¹¦: renamed from 30ªö»ôM (while UP) [ 367.033202][T12249] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 367.061287][T12251] random: crng reseeded on system resumption [ 367.104033][ T2754] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 367.255251][ T2754] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.266328][ T2754] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 367.275446][ T2754] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.284138][ T2754] usb 9-1: config 0 descriptor?? [ 367.490131][T12257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.490314][T12257] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 367.490608][T12258] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 367.541053][T12264] rust_binder: Error while translating object. [ 367.548909][T12264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 367.555412][T12264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1191 [ 367.578544][T12266] fuse: Bad value for 'rootmode' [ 367.675413][T12272] random: crng reseeded on system resumption [ 367.717735][T12274] netlink: 'syz.7.4994': attribute type 4 has an invalid length. [ 367.739971][T12276] netlink: 'syz.7.4995': attribute type 4 has an invalid length. [ 367.762924][T12278] __vm_enough_memory: pid: 12278, comm: syz.7.4996, bytes: 70373039144960 not enough memory for the allocation [ 367.836460][T12284] fuse: Bad value for 'rootmode' [ 367.964580][T12292] random: crng reseeded on system resumption [ 368.022670][T12297] __nla_validate_parse: 7 callbacks suppressed [ 368.022693][T12297] netlink: 25 bytes leftover after parsing attributes in process `syz.5.5004'. [ 368.024015][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5005'. [ 368.064189][T12305] fuse: Bad value for 'rootmode' [ 368.162101][T12315] random: crng reseeded on system resumption [ 368.315670][T12324] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5016'. [ 368.419584][T12332] new mount options do not match the existing superblock, will be ignored [ 368.453507][T12334] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5020'. [ 368.543122][T12338] random: crng reseeded on system resumption [ 368.579774][T12321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 368.579833][T12321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1072 [ 368.685836][T12350] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5026'. [ 368.718487][T12350] 0ªî{X¹¦: renamed from 31ªö»ôM (while UP) [ 368.728987][T12350] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 368.971093][T12365] random: crng reseeded on system resumption [ 369.047451][T12371] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5036'. [ 369.871903][ T2754] usbhid 9-1:0.0: can't add hid device: -71 [ 369.878928][ T2754] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 369.890161][ T2754] usb 9-1: USB disconnect, device number 12 [ 369.903555][T12381] netlink: 'syz.8.5040': attribute type 4 has an invalid length. [ 369.933614][T12385] random: crng reseeded on system resumption [ 370.343915][ T2754] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 370.494936][ T2754] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.504707][ T2754] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.514392][ T2754] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.528721][ T2754] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 370.537827][ T2754] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 370.545944][ T2754] usb 9-1: Product: syz [ 370.550102][ T2754] usb 9-1: Manufacturer: syz [ 370.554738][ T2754] usb 9-1: SerialNumber: syz [ 370.762686][T12388] tipc: Started in network mode [ 370.767668][T12388] tipc: Node identity 4, cluster identity 4711 [ 370.773939][T12388] tipc: Node number set to 4 [ 370.780634][ T2754] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 370.982089][ T36] audit: type=1400 audit(2000000188.827:66083): avc: denied { read write } for pid=12386 comm="syz.8.5043" name="lp0" dev="devtmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 370.983709][ T2754] usb 9-1: USB disconnect, device number 13 [ 371.006730][ T36] audit: type=1400 audit(2000000188.827:66084): avc: denied { open } for pid=12386 comm="syz.8.5043" path="/dev/usb/lp0" dev="devtmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 371.198556][T12391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.433810][ T2754] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 371.594903][ T2754] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 371.603282][ T2754] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 371.613634][ T2754] usb 8-1: config 220 has no interface number 2 [ 371.619943][ T2754] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 371.633145][ T2754] usb 8-1: config 220 interface 0 has no altsetting 0 [ 371.639965][ T2754] usb 8-1: config 220 interface 76 has no altsetting 0 [ 371.646863][ T2754] usb 8-1: config 220 interface 1 has no altsetting 0 [ 371.655182][ T2754] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 371.664350][ T2754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.672392][ T2754] usb 8-1: Product: syz [ 371.676689][ T2754] usb 8-1: Manufacturer: syz [ 371.681308][ T2754] usb 8-1: SerialNumber: syz [ 371.887249][T12390] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 371.894478][T12390] rust_binder: Write failure EINVAL in pid:1232 [ 371.894488][T12391] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 371.894509][T12391] rust_binder: Write failure EINVAL in pid:1232 [ 372.204930][T12400] binder: Unknown parameter 'ÿ' [ 372.216860][T12400] binder: Unknown parameter 'ÿ' [ 372.237479][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5049'. [ 372.275710][T12408] random: crng reseeded on system resumption [ 372.983491][T12386] usblp0: removed [ 373.138758][ T36] audit: type=1400 audit(2000000190.987:66085): avc: denied { create } for pid=12423 comm="syz.8.5056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 373.424030][ T1139] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 373.575147][ T1139] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 373.583309][ T1139] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.594864][ T1139] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 373.605786][ T1139] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.616959][ T1139] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.629883][ T1139] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.638984][ T1139] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.647820][ T1139] usb 9-1: config 0 descriptor?? [ 373.653100][T12426] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 374.062230][ T1139] plantronics 0003:047F:FFFF.002C: unknown main item tag 0xd [ 374.069945][ T1139] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 374.077407][ T1139] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 374.085072][ T1139] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 374.094223][ T1139] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 374.207740][ T2754] usb 8-1: selecting invalid altsetting 0 [ 374.213777][ T2754] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 374.216338][T12430] new mount options do not match the existing superblock, will be ignored [ 374.220161][ T2754] usb 8-1: No valid video chain found. [ 374.240419][ T2754] usb 8-1: USB disconnect, device number 70 [ 374.256781][T12432] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5059'. [ 374.265911][T12432] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5059'. [ 374.274955][T12432] netlink: 'syz.7.5059': attribute type 6 has an invalid length. [ 374.282725][T12432] netlink: 'syz.7.5059': attribute type 5 has an invalid length. [ 374.290608][T12432] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5059'. [ 374.324180][T12426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.328338][T12434] random: crng reseeded on system resumption [ 374.332783][T12426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.349964][ T1139] usb 9-1: USB disconnect, device number 14 [ 374.713662][ T63] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 374.864776][ T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 374.874613][ T63] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 374.884481][ T63] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.899196][T12441] netlink: 'syz.8.5063': attribute type 11 has an invalid length. [ 374.907351][ T63] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 374.916831][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 374.935066][ T63] usb 8-1: Product: syz [ 374.939319][ T36] audit: type=1400 audit(2000000192.787:66086): avc: denied { read write } for pid=12444 comm="syz.8.5065" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 374.969066][ T63] usb 8-1: Manufacturer: syz [ 374.977082][ T63] usb 8-1: SerialNumber: syz [ 374.986130][ T36] audit: type=1400 audit(2000000192.787:66087): avc: denied { open } for pid=12444 comm="syz.8.5065" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 375.013317][ T36] audit: type=1400 audit(2000000192.787:66088): avc: granted { setsecparam } for pid=12444 comm="syz.8.5065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 375.048791][ T36] audit: type=1400 audit(2000000192.787:66089): avc: denied { map } for pid=12444 comm="syz.8.5065" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 375.072450][ T36] audit: type=1400 audit(2000000192.857:66090): avc: denied { sys_module } for pid=12444 comm="syz.8.5065" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 375.107139][T12452] fuse: Bad value for 'rootmode' [ 375.189595][T12454] random: crng reseeded on system resumption [ 375.215503][T12437] tipc: Cannot configure node identity twice [ 375.232432][ T63] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 375.253491][T12458] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5071'. [ 375.307810][T12468] tipc: Enabled bearer , priority 0 [ 375.315658][T12468] tipc: Disabling bearer [ 375.348332][T12473] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5078'. [ 375.369252][T12475] random: crng reseeded on system resumption [ 375.383957][T12471] rust_binder: Error while translating object. [ 375.383997][T12471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 375.390501][T12471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1095 [ 375.431312][ T31] usb 8-1: USB disconnect, device number 71 [ 375.663608][ T63] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 375.814661][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.825813][ T63] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 375.834901][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.843655][ T63] usb 9-1: config 0 descriptor?? [ 377.385561][T12437] usblp0: removed [ 377.409286][T12483] FAULT_INJECTION: forcing a failure. [ 377.409286][T12483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.422511][T12483] CPU: 1 UID: 0 PID: 12483 Comm: syz.7.5083 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 377.422551][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.422573][T12483] Call Trace: [ 377.422582][T12483] [ 377.422593][T12483] __dump_stack+0x21/0x30 [ 377.422625][T12483] dump_stack_lvl+0x10c/0x190 [ 377.422650][T12483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 377.422677][T12483] dump_stack+0x19/0x20 [ 377.422695][T12483] should_fail_ex+0x3d9/0x530 [ 377.422714][T12483] should_fail+0xf/0x20 [ 377.422737][T12483] should_fail_usercopy+0x1e/0x30 [ 377.422766][T12483] _copy_from_user+0x22/0xb0 [ 377.422797][T12483] evdev_ioctl_handler+0x560/0x1e50 [ 377.422829][T12483] ? evdev_fasync+0x70/0x70 [ 377.422851][T12483] ? vfs_write+0x8ba/0xe80 [ 377.422871][T12483] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 377.422905][T12483] ? __cfi_vfs_write+0x10/0x10 [ 377.422933][T12483] ? __kasan_check_write+0x18/0x20 [ 377.422959][T12483] ? mutex_unlock+0x8b/0x240 [ 377.422982][T12483] ? __fget_files+0x2c5/0x340 [ 377.423007][T12483] ? __fget_files+0x2c5/0x340 [ 377.423031][T12483] evdev_ioctl+0x2b/0x40 [ 377.423063][T12483] ? __cfi_evdev_ioctl+0x10/0x10 [ 377.423090][T12483] __se_sys_ioctl+0x132/0x1b0 [ 377.423122][T12483] __x64_sys_ioctl+0x7f/0xa0 [ 377.423145][T12483] x64_sys_call+0x1878/0x2ee0 [ 377.423166][T12483] do_syscall_64+0x58/0xf0 [ 377.423184][T12483] ? clear_bhb_loop+0x50/0xa0 [ 377.423211][T12483] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 377.423234][T12483] RIP: 0033:0x7fe02598e929 [ 377.423252][T12483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.423272][T12483] RSP: 002b:00007fe026874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.423289][T12483] RAX: ffffffffffffffda RBX: 00007fe025bb5fa0 RCX: 00007fe02598e929 [ 377.423302][T12483] RDX: 0000200000000000 RSI: 0000000080284504 RDI: 0000000000000005 [ 377.423313][T12483] RBP: 00007fe026874090 R08: 0000000000000000 R09: 0000000000000000 [ 377.423326][T12483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.423343][T12483] R13: 0000000000000000 R14: 00007fe025bb5fa0 R15: 00007ffed6cb8c38 [ 377.423363][T12483] [ 377.696022][T12489] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 377.751577][T12493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1255 [ 377.751967][T12493] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 4096) [ 377.761278][T12493] rust_binder: Error while translating object. [ 377.771913][T12493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 377.778118][T12493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1255 [ 377.817424][T12495] random: crng reseeded on system resumption [ 377.961734][T12499] netlink: 25 bytes leftover after parsing attributes in process `syz.7.5090'. [ 377.983555][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5091'. [ 378.028941][T12503] netlink: 'syz.7.5092': attribute type 11 has an invalid length. [ 378.052852][T12505] can0: slcan on ttyS3. [ 378.075606][T12504] can0 (unregistered): slcan off ttyS3. [ 378.097136][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5094'. [ 378.131574][T12515] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 378.220921][T12532] fuse: Unknown parameter '0x0000000000000004' [ 378.342555][T12550] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5101'. [ 378.385498][T12554] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5103'. [ 378.410492][ T1139] hid-generic C98F:0003:0000.002D: unknown main item tag 0x0 [ 378.418022][ T1139] hid-generic C98F:0003:0000.002D: unknown main item tag 0x0 [ 378.426158][ T1139] hid-generic C98F:0003:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 378.441317][ T63] usbhid 9-1:0.0: can't add hid device: -71 [ 378.449814][ T63] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 378.459100][ T63] usb 9-1: USB disconnect, device number 15 [ 378.468118][T12559] fido_id[12559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 378.474718][T12561] fuse: Unknown parameter 'user_id00000000000000000000' [ 378.509557][T12563] fuse: Unknown parameter '0x0000000000000004' [ 378.639928][ T36] audit: type=1326 audit(2000000196.487:66091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1d8e929 code=0x7ffc0000 [ 378.663815][ T36] audit: type=1326 audit(2000000196.517:66092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa8d1d8e929 code=0x7ffc0000 [ 378.693419][ T2754] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 378.714863][ T36] audit: type=1326 audit(2000000196.567:66093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1d8e929 code=0x7ffc0000 [ 378.718185][T12570] binder: Bad value for 'max' [ 378.740506][ T36] audit: type=1326 audit(2000000196.597:66094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8d1d8e929 code=0x7ffc0000 [ 378.766787][ T36] audit: type=1326 audit(2000000196.597:66095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1d8e929 code=0x7ffc0000 [ 378.790549][ T36] audit: type=1326 audit(2000000196.597:66096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d1d8e929 code=0x7ffc0000 [ 378.843371][ T2754] usb 8-1: Using ep0 maxpacket: 16 [ 378.849706][ T2754] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.859909][ T2754] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.868900][ T2754] usb 8-1: too many endpoints for config 1 interface 0 altsetting 152: 98, using maximum allowed: 30 [ 378.880084][ T2754] usb 8-1: config 1 interface 0 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 378.893385][ T2754] usb 8-1: config 1 interface 0 has no altsetting 0 [ 378.901694][ T2754] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.910878][ T2754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.919001][ T2754] usb 8-1: Product: syz [ 378.923351][ T2754] usb 8-1: Manufacturer: syz [ 378.928006][ T2754] usb 8-1: SerialNumber: syz [ 379.151084][ T2754] usb 8-1: USB disconnect, device number 72 [ 379.658875][T12588] fuse: Unknown parameter '0x0000000000000004' [ 379.727548][T12590] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 380.083386][ T63] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 380.244617][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.255607][ T63] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 380.264688][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.273332][ T63] usb 8-1: config 0 descriptor?? [ 380.831616][ T63] usbhid 8-1:0.0: can't add hid device: -71 [ 380.837710][ T63] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 380.846484][ T63] usb 8-1: USB disconnect, device number 73 [ 381.370050][T12599] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5122'. [ 381.705315][T12603] netlink: 'syz.5.5124': attribute type 5 has an invalid length. [ 381.723417][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5125'. [ 381.759361][ T36] audit: type=1400 audit(2000000199.607:66097): avc: denied { listen } for pid=12609 comm="syz.5.5127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.779171][ T36] audit: type=1400 audit(2000000199.607:66098): avc: denied { accept } for pid=12609 comm="syz.5.5127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.163259][ T63] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 382.250549][T12618] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 382.313177][ T63] usb 8-1: Using ep0 maxpacket: 16 [ 382.319862][ T63] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.325848][T12622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.330321][ T63] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.345748][ T63] usb 8-1: too many endpoints for config 1 interface 0 altsetting 152: 98, using maximum allowed: 30 [ 382.356728][ T63] usb 8-1: config 1 interface 0 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 382.369964][ T63] usb 8-1: config 1 interface 0 has no altsetting 0 [ 382.378092][ T63] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.383857][T12623] rust_binder: Failed copying remainder into alloc: EFAULT [ 382.387220][ T36] audit: type=1400 audit(2000000200.227:66099): avc: denied { map } for pid=12621 comm="syz.5.5133" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 382.387720][T12623] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 382.394532][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.394562][ T63] usb 8-1: Product: syz [ 382.417447][T12623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 382.427419][ T63] usb 8-1: Manufacturer: syz [ 382.433914][T12623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1115 [ 382.438673][ T63] usb 8-1: SerialNumber: syz [ 382.500710][T12627] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5135'. [ 382.523696][ T36] audit: type=1400 audit(2000000200.377:66100): avc: denied { ioctl } for pid=12628 comm="syz.8.5136" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 382.672585][ T63] usb 8-1: USB disconnect, device number 74 [ 383.477397][T12644] netlink: 'syz.8.5142': attribute type 4 has an invalid length. [ 383.498132][T12646] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5143'. [ 383.534261][T12653] 9pnet_fd: Insufficient options for proto=fd [ 383.636190][T12661] netlink: 'syz.8.5149': attribute type 5 has an invalid length. [ 383.700858][T12665] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.5151'. [ 383.735311][T12670] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5153'. [ 383.790355][T12679] overlay: ./file0 is not a directory [ 384.067583][T12685] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5160'. [ 384.098946][T12689] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5162'. [ 384.129705][T12693] FAT-fs (rnullb0): bogus number of reserved sectors [ 384.136489][T12693] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 384.144923][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 384.144941][ T36] audit: type=1400 audit(2000000201.997:66104): avc: denied { map } for pid=12692 comm="syz.5.5164" path="socket:[66327]" dev="sockfs" ino=66327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 384.174863][ T36] audit: type=1400 audit(2000000201.997:66105): avc: denied { accept } for pid=12692 comm="syz.5.5164" path="socket:[66327]" dev="sockfs" ino=66327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 384.224333][T12699] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5167'. [ 384.309315][T12708] syz.5.5171 (12708): /proc/12707/oom_adj is deprecated, please use /proc/12707/oom_score_adj instead. [ 384.375164][T12718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16659 sclass=netlink_route_socket pid=12718 comm=syz.5.5176 [ 384.423029][T12724] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5179'. [ 384.458196][T12726] overlay: Unknown parameter 'subj_user' [ 384.465390][T12726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1161 [ 384.516447][T12729] rust_binder: Write failure EINVAL in pid:1161 [ 384.615787][T12733] new mount options do not match the existing superblock, will be ignored [ 384.773049][ T31] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 384.924129][ T31] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.933906][ T31] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.943679][ T31] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.958805][ T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 384.967907][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 384.976052][ T31] usb 8-1: Product: syz [ 384.980213][ T31] usb 8-1: Manufacturer: syz [ 384.984873][ T31] usb 8-1: SerialNumber: syz [ 385.192772][T12730] tipc: Cannot configure node identity twice [ 385.200498][ T31] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 385.350305][T12745] netlink: 'syz.4.5188': attribute type 4 has an invalid length. [ 385.402426][ T63] usb 8-1: USB disconnect, device number 75 [ 385.603227][T12730] usblp0: removed [ 385.653017][ T1139] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 385.804141][ T1139] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.815225][ T1139] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 385.824442][ T1139] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.833468][ T1139] usb 9-1: config 0 descriptor?? [ 386.241022][ T1139] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 386.250765][ T1139] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.002E/input/input65 [ 386.319594][ T1139] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 386.324115][T12754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 386.332957][T12754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1061 [ 386.394483][T12762] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5195'. [ 386.426752][T12764] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5196'. [ 386.731791][ T31] usb 9-1: USB disconnect, device number 16 [ 387.264615][T12779] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 387.274069][T12779] kvm: pic: level sensitive irq not supported [ 387.274142][T12779] kvm: pic: non byte read [ 387.339021][T12785] netlink: 'syz.8.5204': attribute type 11 has an invalid length. [ 387.396858][T12789] binder: Bad value for 'max' [ 387.402282][T12790] binder: Bad value for 'max' [ 387.422319][T12793] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5207'. [ 387.431406][T12793] 0ªö»ôM: renamed from 30ªî{X¹¦ (while UP) [ 387.438616][T12793] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 387.451383][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.463010][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.472490][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.482234][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.678672][T12808] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5213'. [ 387.792896][ T63] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 387.944161][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.955328][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.965177][ T63] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 387.974303][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.983085][ T63] usb 8-1: config 0 descriptor?? [ 388.347128][T12818] netlink: 'syz.5.5217': attribute type 5 has an invalid length. [ 388.367532][ T36] audit: type=1326 audit(2000000206.223:66106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.5.5218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f3bb8e929 code=0x0 [ 388.392869][ T63] usbhid 8-1:0.0: can't add hid device: -71 [ 388.398909][ T63] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 388.407668][ T63] usb 8-1: USB disconnect, device number 76 [ 388.892820][ T31] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 389.034010][T12837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1343 [ 389.043971][ T31] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 389.063026][ T31] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 389.072688][ T31] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.087027][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 389.096137][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 389.105325][ T31] usb 9-1: Product: syz [ 389.109524][ T31] usb 9-1: Manufacturer: syz [ 389.114199][ T31] usb 9-1: SerialNumber: syz [ 389.167238][T12842] netlink: 'syz.7.5226': attribute type 11 has an invalid length. [ 389.214604][T12846] netlink: 'syz.5.5228': attribute type 4 has an invalid length. [ 389.241327][T12848] 9pnet_fd: Insufficient options for proto=fd [ 389.324152][ T31] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 389.525124][ T63] usb 9-1: USB disconnect, device number 17 [ 389.727219][T12824] usblp0: removed [ 390.078544][T12857] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5232'. [ 390.571177][T12870] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5237'. [ 390.593395][T12872] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5238'. [ 390.656459][T12876] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5240'. [ 391.029399][T12889] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 391.237423][ T13] bridge_slave_1: left allmulticast mode [ 391.251152][ T13] bridge_slave_1: left promiscuous mode [ 391.257219][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.264912][ T13] bridge_slave_0: left allmulticast mode [ 391.270656][ T13] bridge_slave_0: left promiscuous mode [ 391.276406][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.350706][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.357833][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.365022][T12896] bridge_slave_0: entered allmulticast mode [ 391.371336][T12896] bridge_slave_0: entered promiscuous mode [ 391.377892][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.384967][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.392214][T12896] bridge_slave_1: entered allmulticast mode [ 391.398638][T12896] bridge_slave_1: entered promiscuous mode [ 391.408565][ T13] tipc: Left network mode [ 391.414238][ T13] veth1_macvtap: left promiscuous mode [ 391.419792][ T13] veth0_vlan: left promiscuous mode [ 391.502838][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.509896][T12896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.517208][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.524276][T12896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.548805][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.556182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.566188][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.573303][ T7962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.582566][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.589687][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.619852][T12896] veth0_vlan: entered promiscuous mode [ 391.632208][T12896] veth1_macvtap: entered promiscuous mode [ 391.660790][T12903] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5248'. [ 391.862681][ T31] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 392.013741][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.024786][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.034593][ T31] usb 9-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 392.043729][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.052437][ T31] usb 9-1: config 0 descriptor?? [ 392.436929][T12918] netlink: 'syz.5.5255': attribute type 11 has an invalid length. [ 392.463041][ T31] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 392.470269][ T31] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 392.477424][ T31] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 392.484612][ T31] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 392.491692][ T31] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 392.499453][ T31] hid-rmi 0003:06CB:81A7.002F: hidraw0: USB HID v7f.ff Device [HID 06cb:81a7] on usb-dummy_hcd.8-1/input0 [ 392.594757][T12929] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5260'. [ 392.604520][ T36] audit: type=1400 audit(2000000210.463:66107): avc: denied { map } for pid=12926 comm="syz.5.5259" path="socket:[69075]" dev="sockfs" ino=69075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 392.630786][T12930] FAT-fs (rnullb0): bogus number of reserved sectors [ 392.637774][T12930] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 392.665500][ T1139] usb 9-1: USB disconnect, device number 18 [ 392.683393][T12939] netlink: 388 bytes leftover after parsing attributes in process `syz.7.5264'. [ 392.694200][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5266'. [ 392.709367][T12944] rust_binder: Fixups oob 154 158 203 174 [ 392.709397][T12944] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 392.716583][T12944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 392.725091][T12944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 393.179177][T12956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.197628][ T36] audit: type=1400 audit(2000000211.048:66108): avc: denied { append } for pid=12955 comm="syz.8.5272" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 393.295556][T12956] kvm: user requested TSC rate below hardware speed [ 393.303584][T12956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.430286][T12959] FAULT_INJECTION: forcing a failure. [ 393.430286][T12959] name failslab, interval 1, probability 0, space 0, times 0 [ 393.442998][T12959] CPU: 0 UID: 0 PID: 12959 Comm: syz.8.5273 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 393.443036][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.443051][T12959] Call Trace: [ 393.443059][T12959] [ 393.443075][T12959] __dump_stack+0x21/0x30 [ 393.443107][T12959] dump_stack_lvl+0x10c/0x190 [ 393.443133][T12959] ? __cfi_dump_stack_lvl+0x10/0x10 [ 393.443160][T12959] ? synchronize_rcu_expedited+0x6d9/0x7b0 [ 393.443192][T12959] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 393.443222][T12959] dump_stack+0x19/0x20 [ 393.443245][T12959] should_fail_ex+0x3d9/0x530 [ 393.443270][T12959] should_failslab+0xac/0x100 [ 393.443300][T12959] __kmalloc_cache_noprof+0x41/0x3c0 [ 393.443328][T12959] ? find_css_set+0x94a/0x1a40 [ 393.443356][T12959] find_css_set+0x94a/0x1a40 [ 393.443382][T12959] ? __kasan_check_write+0x18/0x20 [ 393.443411][T12959] ? cgroup_migrate_prepare_dst+0x930/0x930 [ 393.443441][T12959] ? __asan_memcpy+0x5a/0x80 [ 393.443469][T12959] cgroup_migrate_prepare_dst+0xe4/0x930 [ 393.443500][T12959] cgroup_attach_task+0x307/0x600 [ 393.443528][T12959] ? __cfi_cgroup_attach_task+0x10/0x10 [ 393.443557][T12959] ? cgroup_attach_permissions+0x422/0x8b0 [ 393.443583][T12959] ? __kasan_check_write+0x18/0x20 [ 393.443610][T12959] ? revert_creds+0xbc/0x150 [ 393.443645][T12959] __cgroup_procs_write+0x266/0x2e0 [ 393.443671][T12959] cgroup_procs_write+0x2b/0x50 [ 393.443692][T12959] ? __cfi_cgroup_procs_write+0x10/0x10 [ 393.443714][T12959] cgroup_file_write+0x2b1/0x590 [ 393.443736][T12959] ? __cfi_cgroup_file_write+0x10/0x10 [ 393.443757][T12959] ? mutex_lock+0x92/0x1c0 [ 393.443783][T12959] ? __cfi_mutex_lock+0x10/0x10 [ 393.443808][T12959] ? __virt_addr_valid+0x2a6/0x380 [ 393.443842][T12959] ? __kasan_check_write+0x18/0x20 [ 393.443869][T12959] kernfs_fop_write_iter+0x2fb/0x4d0 [ 393.443892][T12959] ? __cfi_cgroup_file_write+0x10/0x10 [ 393.443912][T12959] vfs_write+0x694/0xe80 [ 393.443932][T12959] ? __cfi_kernfs_fop_write_iter+0x10/0x10 [ 393.443949][T12959] ? __cfi_vfs_write+0x10/0x10 [ 393.443967][T12959] ? __kasan_slab_free+0x6a/0x80 [ 393.443992][T12959] ? putname+0x113/0x150 [ 393.444014][T12959] ? __kasan_check_read+0x15/0x20 [ 393.444033][T12959] ksys_write+0x141/0x250 [ 393.444053][T12959] ? __cfi_ksys_write+0x10/0x10 [ 393.444082][T12959] ? __kasan_check_read+0x15/0x20 [ 393.444100][T12959] __x64_sys_write+0x7f/0x90 [ 393.444121][T12959] x64_sys_call+0x271c/0x2ee0 [ 393.444142][T12959] do_syscall_64+0x58/0xf0 [ 393.444161][T12959] ? clear_bhb_loop+0x50/0xa0 [ 393.444179][T12959] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 393.444196][T12959] RIP: 0033:0x7f3ad538e929 [ 393.444210][T12959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.444224][T12959] RSP: 002b:00007f3ad6174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 393.444242][T12959] RAX: ffffffffffffffda RBX: 00007f3ad55b5fa0 RCX: 00007f3ad538e929 [ 393.444255][T12959] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000007 [ 393.444265][T12959] RBP: 00007f3ad6174090 R08: 0000000000000000 R09: 0000000000000000 [ 393.444276][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.444285][T12959] R13: 0000000000000000 R14: 00007f3ad55b5fa0 R15: 00007ffc5677c068 [ 393.444298][T12959] [ 393.801962][T12962] netlink: 352 bytes leftover after parsing attributes in process `syz.4.5274'. [ 393.818963][T12970] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5277'. [ 393.873487][T12981] netlink: 'syz.4.5281': attribute type 4 has an invalid length. [ 393.954538][T12998] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5287'. [ 393.991868][T13005] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5290'. [ 394.029527][T13010] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 394.063175][T13014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 394.138960][T13018] netlink: 'syz.4.5295': attribute type 11 has an invalid length. [ 394.276115][ T36] audit: type=1400 audit(2000000212.128:66109): avc: denied { create } for pid=13028 comm="syz.4.5299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 394.356633][T13035] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5301'. [ 394.514315][T13045] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 394.556053][T13049] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5305'. [ 394.577459][T13051] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 394.577471][T13052] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 394.790688][T13066] FAULT_INJECTION: forcing a failure. [ 394.790688][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 394.803430][T13066] CPU: 1 UID: 0 PID: 13066 Comm: syz.8.5311 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 394.803467][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.803482][T13066] Call Trace: [ 394.803490][T13066] [ 394.803499][T13066] __dump_stack+0x21/0x30 [ 394.803527][T13066] dump_stack_lvl+0x10c/0x190 [ 394.803546][T13066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 394.803566][T13066] dump_stack+0x19/0x20 [ 394.803584][T13066] should_fail_ex+0x3d9/0x530 [ 394.803603][T13066] should_failslab+0xac/0x100 [ 394.803627][T13066] __kmalloc_cache_noprof+0x41/0x3c0 [ 394.803648][T13066] ? allocate_cgrp_cset_links+0xe6/0x430 [ 394.803668][T13066] allocate_cgrp_cset_links+0xe6/0x430 [ 394.803686][T13066] find_css_set+0x969/0x1a40 [ 394.803705][T13066] ? __kasan_check_write+0x18/0x20 [ 394.803726][T13066] ? cgroup_migrate_prepare_dst+0x930/0x930 [ 394.803746][T13066] ? __asan_memcpy+0x5a/0x80 [ 394.803767][T13066] cgroup_migrate_prepare_dst+0xe4/0x930 [ 394.803788][T13066] cgroup_attach_task+0x307/0x600 [ 394.803808][T13066] ? __cfi_cgroup_attach_task+0x10/0x10 [ 394.803828][T13066] ? cgroup_attach_permissions+0x422/0x8b0 [ 394.803847][T13066] ? __kasan_check_write+0x18/0x20 [ 394.803866][T13066] ? revert_creds+0xbc/0x150 [ 394.803890][T13066] __cgroup_procs_write+0x266/0x2e0 [ 394.803908][T13066] cgroup_procs_write+0x2b/0x50 [ 394.803923][T13066] ? __cfi_cgroup_procs_write+0x10/0x10 [ 394.803938][T13066] cgroup_file_write+0x2b1/0x590 [ 394.803953][T13066] ? __cfi_cgroup_file_write+0x10/0x10 [ 394.803968][T13066] ? mutex_lock+0x92/0x1c0 [ 394.803986][T13066] ? __cfi_mutex_lock+0x10/0x10 [ 394.804003][T13066] ? __virt_addr_valid+0x2a6/0x380 [ 394.804028][T13066] ? __kasan_check_write+0x18/0x20 [ 394.804049][T13066] kernfs_fop_write_iter+0x2fb/0x4d0 [ 394.804065][T13066] ? __cfi_cgroup_file_write+0x10/0x10 [ 394.804081][T13066] vfs_write+0x694/0xe80 [ 394.804101][T13066] ? __cfi_kernfs_fop_write_iter+0x10/0x10 [ 394.804118][T13066] ? __cfi_vfs_write+0x10/0x10 [ 394.804137][T13066] ? __kasan_slab_free+0x6a/0x80 [ 394.804161][T13066] ? putname+0x113/0x150 [ 394.804182][T13066] ? __kasan_check_read+0x15/0x20 [ 394.804202][T13066] ksys_write+0x141/0x250 [ 394.804222][T13066] ? __cfi_ksys_write+0x10/0x10 [ 394.804242][T13066] ? __kasan_check_read+0x15/0x20 [ 394.804261][T13066] __x64_sys_write+0x7f/0x90 [ 394.804281][T13066] x64_sys_call+0x271c/0x2ee0 [ 394.804309][T13066] do_syscall_64+0x58/0xf0 [ 394.804322][T13066] ? clear_bhb_loop+0x50/0xa0 [ 394.804341][T13066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 394.804358][T13066] RIP: 0033:0x7f3ad538e929 [ 394.804377][T13066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.804391][T13066] RSP: 002b:00007f3ad6174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.804408][T13066] RAX: ffffffffffffffda RBX: 00007f3ad55b5fa0 RCX: 00007f3ad538e929 [ 394.804420][T13066] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000007 [ 394.804432][T13066] RBP: 00007f3ad6174090 R08: 0000000000000000 R09: 0000000000000000 [ 394.804442][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.804452][T13066] R13: 0000000000000000 R14: 00007f3ad55b5fa0 R15: 00007ffc5677c068 [ 394.804465][T13066] [ 395.177355][T13075] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.382458][ T2756] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 395.533675][ T2756] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.545252][ T2756] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 395.556153][ T2756] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 395.565939][ T2756] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.578886][ T2756] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.587981][ T2756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.596752][ T2756] usb 8-1: config 0 descriptor?? [ 395.995070][T13099] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 396.004983][ T2756] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max [ 396.018528][ T2756] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 396.031512][ T2756] plantronics 0003:047F:FFFF.0030: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 396.096536][T13113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1231 [ 396.096880][T13113] rust_binder: Error while translating object. [ 396.106366][T13113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 396.112652][T13113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1231 [ 396.211925][T13131] tipc: Enabled bearer , priority 0 [ 396.229341][T13131] tipc: Disabling bearer [ 396.353192][T13143] rust_binder: Error while translating object. [ 396.353218][T13143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 396.359490][T13143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:349 [ 396.814758][ T1139] usb 8-1: USB disconnect, device number 77 [ 397.030232][T13154] __nla_validate_parse: 2 callbacks suppressed [ 397.030254][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5347'. [ 397.186324][T13166] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5351'. [ 397.333561][T13172] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5354'. [ 397.372529][T13176] syzkaller0: entered promiscuous mode [ 397.378433][T13176] syzkaller0: entered allmulticast mode [ 397.387258][T13178] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5357'. [ 397.390848][T13180] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5358'. [ 397.401875][T13178] gretap0: entered allmulticast mode [ 397.411457][T13176] rust_binder: Write failure EFAULT in pid:363 [ 397.463862][T13186] netlink: 'syz.4.5361': attribute type 4 has an invalid length. [ 397.480180][T13188] rust_binder: Error while translating object. [ 397.480213][T13188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 397.486719][T13188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:365 [ 397.573624][ T36] audit: type=1400 audit(2000000215.428:66110): avc: denied { lock } for pid=13201 comm="syz.8.5369" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 397.608747][T13182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.608886][T13182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 397.616061][ T36] audit: type=1400 audit(2000000215.468:66111): avc: denied { rename } for pid=13181 comm="syz.7.5359" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 397.915905][T13234] netlink: 'syz.4.5381': attribute type 11 has an invalid length. [ 397.956248][T13238] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 398.009872][T13242] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5385'. [ 398.031245][T13244] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5386'. [ 398.053915][T13246] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5387'. [ 398.080439][T13248] can0: slcan on ttyS3. [ 398.196424][T13248] can0 (unregistered): slcan off ttyS3. [ 398.288878][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5391'. [ 399.070105][T13298] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5397'. [ 399.242936][T13306] can0: slcan on ttyS3. [ 399.310501][T13316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1249 [ 399.310959][T13316] rust_binder: Error while translating object. [ 399.335636][T13305] can0 (unregistered): slcan off ttyS3. [ 399.347629][T13316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 399.347679][T13316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1249 [ 399.505303][T13340] netlink: 'syz.5.5407': attribute type 4 has an invalid length. [ 400.253251][T13382] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 400.263426][T13382] kvm: pic: level sensitive irq not supported [ 400.263513][T13382] kvm: pic: non byte read [ 400.274638][T13382] kvm: pic: non byte read [ 400.365492][T13388] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 400.374032][T13388] FAULT_INJECTION: forcing a failure. [ 400.374032][T13388] name failslab, interval 1, probability 0, space 0, times 0 [ 400.386793][T13388] CPU: 1 UID: 0 PID: 13388 Comm: syz.5.5423 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 400.386829][T13388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.386851][T13388] Call Trace: [ 400.386860][T13388] [ 400.386868][T13388] __dump_stack+0x21/0x30 [ 400.386892][T13388] dump_stack_lvl+0x10c/0x190 [ 400.386915][T13388] ? __cfi_dump_stack_lvl+0x10/0x10 [ 400.386935][T13388] ? avc_has_perm+0x144/0x220 [ 400.386952][T13388] ? __cfi_avc_has_perm+0x10/0x10 [ 400.386970][T13388] dump_stack+0x19/0x20 [ 400.386987][T13388] should_fail_ex+0x3d9/0x530 [ 400.387006][T13388] should_failslab+0xac/0x100 [ 400.387030][T13388] __kmalloc_cache_noprof+0x41/0x3c0 [ 400.387050][T13388] ? vhost_task_create+0x101/0x350 [ 400.387072][T13388] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 400.387097][T13388] vhost_task_create+0x101/0x350 [ 400.387118][T13388] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 400.387143][T13388] ? __cfi_vhost_task_create+0x10/0x10 [ 400.387166][T13388] ? __cfi_vhost_task_fn+0x10/0x10 [ 400.387187][T13388] ? __kasan_check_write+0x18/0x20 [ 400.387206][T13388] ? mutex_lock+0x92/0x1c0 [ 400.387224][T13388] ? __cfi_mutex_lock+0x10/0x10 [ 400.387241][T13388] ? kernel_text_address+0xa9/0xe0 [ 400.387259][T13388] kvm_mmu_post_init_vm+0x1a6/0x310 [ 400.387279][T13388] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 400.387297][T13388] ? _parse_integer_limit+0x195/0x1e0 [ 400.387315][T13388] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 400.387333][T13388] ? kstrtoull+0x13b/0x1e0 [ 400.387349][T13388] ? kstrtouint+0x78/0xf0 [ 400.387366][T13388] ? ioctl_has_perm+0x1aa/0x4d0 [ 400.387389][T13388] ? __asan_memcpy+0x5a/0x80 [ 400.387407][T13388] ? ioctl_has_perm+0x3e0/0x4d0 [ 400.387430][T13388] ? has_cap_mac_admin+0xd0/0xd0 [ 400.387453][T13388] ? __kasan_check_write+0x18/0x20 [ 400.387471][T13388] ? mutex_lock_killable+0x92/0x1c0 [ 400.387489][T13388] ? __cfi_mutex_lock_killable+0x10/0x10 [ 400.387508][T13388] ? proc_fail_nth_write+0x17e/0x210 [ 400.387526][T13388] kvm_vcpu_ioctl+0x96f/0xee0 [ 400.387548][T13388] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 400.387569][T13388] ? __cfi_vfs_write+0x10/0x10 [ 400.387590][T13388] ? __kasan_check_write+0x18/0x20 [ 400.387608][T13388] ? mutex_unlock+0x8b/0x240 [ 400.387626][T13388] ? __cfi_mutex_unlock+0x10/0x10 [ 400.387644][T13388] ? __fget_files+0x2c5/0x340 [ 400.387667][T13388] ? __fget_files+0x2c5/0x340 [ 400.387690][T13388] ? bpf_lsm_file_ioctl+0xd/0x20 [ 400.387708][T13388] ? security_file_ioctl+0x34/0xd0 [ 400.387730][T13388] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 400.387751][T13388] __se_sys_ioctl+0x132/0x1b0 [ 400.387774][T13388] __x64_sys_ioctl+0x7f/0xa0 [ 400.387796][T13388] x64_sys_call+0x1878/0x2ee0 [ 400.387817][T13388] do_syscall_64+0x58/0xf0 [ 400.387830][T13388] ? clear_bhb_loop+0x50/0xa0 [ 400.387869][T13388] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 400.387887][T13388] RIP: 0033:0x7f5f3bb8e929 [ 400.387900][T13388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.387915][T13388] RSP: 002b:00007f5f3ca21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.387933][T13388] RAX: ffffffffffffffda RBX: 00007f5f3bdb5fa0 RCX: 00007f5f3bb8e929 [ 400.387945][T13388] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 400.387955][T13388] RBP: 00007f5f3ca21090 R08: 0000000000000000 R09: 0000000000000000 [ 400.387965][T13388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.387975][T13388] R13: 0000000000000000 R14: 00007f5f3bdb5fa0 R15: 00007fff4b803898 [ 400.387988][T13388] [ 400.761370][T13394] binder: Unknown parameter 'defcontext01777777777777777777777' [ 400.763856][T13391] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 400.803356][T13391] kvm: pic: level sensitive irq not supported [ 400.803471][T13391] kvm: pic: non byte read [ 400.829305][T13391] kvm: pic: level sensitive irq not supported [ 400.829375][T13391] kvm: pic: non byte read [ 400.874775][T13407] netlink: 'syz.7.5429': attribute type 11 has an invalid length. [ 400.947196][T13416] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 400.954171][T13416] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 401.091912][T13436] rust_binder: Error while translating object. [ 401.091962][T13436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 401.098491][T13437] rust_binder: Error while translating object. [ 401.104628][T13436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 401.108864][T13437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 401.123366][T13437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 401.167118][T13445] rust_binder: Failed copying remainder into alloc: EFAULT [ 401.176243][T13445] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 401.183582][T13445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 401.191857][T13445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:91 [ 401.277049][ T7962] bridge_slave_1: left allmulticast mode [ 401.292072][ T7962] bridge_slave_1: left promiscuous mode [ 401.297876][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.305911][ T7962] bridge_slave_0: left allmulticast mode [ 401.311662][ T7962] bridge_slave_0: left promiscuous mode [ 401.317586][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.459482][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.466795][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.474023][T13448] bridge_slave_0: entered allmulticast mode [ 401.480317][T13448] bridge_slave_0: entered promiscuous mode [ 401.487256][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.494438][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.501577][T13448] bridge_slave_1: entered allmulticast mode [ 401.508015][T13448] bridge_slave_1: entered promiscuous mode [ 401.525230][ T7962] veth1_macvtap: left promiscuous mode [ 401.530786][ T7962] veth0_vlan: left promiscuous mode [ 401.614101][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.621311][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.628655][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.635750][T13448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.657554][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.665186][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.676186][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.683284][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.692978][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.700098][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.727387][T13448] veth0_vlan: entered promiscuous mode [ 401.738721][T13448] veth1_macvtap: entered promiscuous mode [ 401.772910][T13453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 401.773161][T13453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 401.782703][T13453] rust_binder: Write failure EINVAL in pid:2 [ 401.996998][T13461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 402.003219][T13461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 402.024508][T13463] 0ªî{X¹¦: renamed from 31ªö»ôM (while UP) [ 402.040596][T13463] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 402.062660][ T63] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 402.212086][ T63] usb 10-1: Using ep0 maxpacket: 16 [ 402.218785][ T63] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 402.227927][ T63] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.238245][ T63] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.253473][ T63] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.264445][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.273136][ T63] usb 10-1: Product: syz [ 402.273709][T13467] tmpfs: Unknown parameter 'nïswap' [ 402.277666][ T63] usb 10-1: Manufacturer: syz [ 402.287502][ T63] usb 10-1: SerialNumber: syz [ 402.694873][ T63] usb 10-1: 0:2 : does not exist [ 403.300145][T13485] binder: Bad value for 'max' [ 403.589746][T13491] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.599766][T13491] kvm: pic: level sensitive irq not supported [ 403.599862][T13491] kvm: pic: non byte read [ 403.610977][T13491] kvm: pic: non byte read [ 403.657433][ T7962] Bluetooth: hci0: Frame reassembly failed (-84) [ 403.663955][T13495] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 403.671463][ T7962] Bluetooth: hci0: Frame reassembly failed (-84) [ 403.959658][T13507] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.969090][T13507] kvm: pic: level sensitive irq not supported [ 403.969199][T13507] kvm: pic: non byte read [ 403.980419][T13507] kvm: pic: non byte read [ 403.994653][ T63] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 404.007434][ T63] usb 10-1: USB disconnect, device number 2 [ 404.016244][ T6797] udevd[6797]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 404.048579][T13513] __nla_validate_parse: 9 callbacks suppressed [ 404.048595][T13513] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5469'. [ 404.063839][T13513] 1ªö»ôM: renamed from 30ªö»ôM (while UP) [ 404.070652][T13513] A link change request failed with some changes committed already. Interface 31ªö»ôM may have been left with an inconsistent configuration, please check. [ 404.100930][T13515] rust_binder: Write failure EINVAL in pid:1303 [ 404.101564][T13515] usb usb8: usbfs: process 13515 (syz.4.5470) did not claim interface 0 before use [ 404.101603][T13516] rust_binder: Read failure Err(EAGAIN) in pid:1303 [ 404.801961][ T2756] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 404.855069][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5473'. [ 404.973033][ T2756] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 404.982898][ T2756] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 404.992711][ T2756] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.007030][ T2756] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 405.016218][ T2756] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 405.024433][ T2756] usb 10-1: Product: syz [ 405.028682][ T2756] usb 10-1: Manufacturer: syz [ 405.033416][ T2756] usb 10-1: SerialNumber: syz [ 405.242425][T13522] tipc: Started in network mode [ 405.247333][T13522] tipc: Node identity 4, cluster identity 4711 [ 405.253584][T13522] tipc: Node number set to 4 [ 405.259919][ T2756] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 405.461977][ T2756] usb 10-1: USB disconnect, device number 3 [ 405.468671][ T2756] usblp0: removed [ 405.661894][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 405.661905][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 405.686785][T13537] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5477'. [ 406.563701][T13572] rust_binder: Write failure EFAULT in pid:465 [ 407.566520][T13591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.572958][T13591] Invalid ELF header type: 3 != 1 [ 407.584965][T13591] rust_binder: Write failure EFAULT in pid:14 [ 408.095914][T13612] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5496'. [ 408.154814][T13619] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5499'. [ 408.486853][T13629] rust_binder: Error while translating object. [ 408.486891][T13629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 408.493349][T13629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:490 [ 408.534931][T13633] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5505'. [ 408.566626][T13635] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5506'. [ 408.575659][T13635] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 408.582396][T13635] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 408.611346][ T36] audit: type=1326 audit(2000000226.456:66112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.9.5507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f874978e929 code=0x0 [ 409.473995][T13646] netlink: 'syz.9.5510': attribute type 4 has an invalid length. [ 409.516912][T13649] rust_binder: Write failure EINVAL in pid:501 [ 409.517054][T13649] rust_binder: Read failure Err(EAGAIN) in pid:501 [ 410.423513][T13663] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5517'. [ 410.451845][T13665] rust_binder: Write failure EFAULT in pid:510 [ 410.504580][T13676] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5523'. [ 410.533301][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5524'. [ 410.980022][T13683] rust_binder: Error while translating object. [ 410.980048][T13683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 410.986398][T13683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1294 [ 411.248826][T13695] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5531'. [ 411.280113][T13697] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5532'. [ 411.289176][T13697] 0ªî{X¹¦: renamed from 31ªö»ôM (while UP) [ 411.296388][T13697] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 411.328672][T13699] netlink: 'syz.4.5533': attribute type 11 has an invalid length. [ 411.338262][T13699] netlink: 'syz.4.5533': attribute type 1 has an invalid length. [ 411.346073][T13699] netlink: 3593 bytes leftover after parsing attributes in process `syz.4.5533'. [ 411.641545][ T63] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 411.792606][ T63] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.802981][ T63] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 411.812748][ T63] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.827339][ T63] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 411.836515][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 411.844759][ T63] usb 10-1: Product: syz [ 411.849063][ T63] usb 10-1: Manufacturer: syz [ 411.853789][ T63] usb 10-1: SerialNumber: syz [ 412.063573][ T63] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 412.265422][ T63] usb 10-1: USB disconnect, device number 4 [ 412.272284][ T63] usblp0: removed [ 414.023902][T13708] FAULT_INJECTION: forcing a failure. [ 414.023902][T13708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.037073][T13708] CPU: 1 UID: 0 PID: 13708 Comm: syz.5.5537 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 414.037111][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.037127][T13708] Call Trace: [ 414.037136][T13708] [ 414.037144][T13708] __dump_stack+0x21/0x30 [ 414.037169][T13708] dump_stack_lvl+0x10c/0x190 [ 414.037187][T13708] ? __cfi_dump_stack_lvl+0x10/0x10 [ 414.037208][T13708] dump_stack+0x19/0x20 [ 414.037225][T13708] should_fail_ex+0x3d9/0x530 [ 414.037244][T13708] should_fail+0xf/0x20 [ 414.037261][T13708] should_fail_usercopy+0x1e/0x30 [ 414.037281][T13708] _copy_from_user+0x22/0xb0 [ 414.037303][T13708] memdup_user+0x81/0x180 [ 414.037321][T13708] ? strndup_user+0x40/0xd0 [ 414.037339][T13708] strndup_user+0x6c/0xd0 [ 414.037357][T13708] __se_sys_mount+0x9f/0x480 [ 414.037377][T13708] ? ksys_write+0x1ef/0x250 [ 414.037397][T13708] ? __x64_sys_mount+0xf0/0xf0 [ 414.037418][T13708] __x64_sys_mount+0xc3/0xf0 [ 414.037437][T13708] x64_sys_call+0x2021/0x2ee0 [ 414.037458][T13708] do_syscall_64+0x58/0xf0 [ 414.037472][T13708] ? clear_bhb_loop+0x50/0xa0 [ 414.037490][T13708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 414.037514][T13708] RIP: 0033:0x7f5f3bb8e929 [ 414.037527][T13708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.037541][T13708] RSP: 002b:00007f5f3ca21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.037559][T13708] RAX: ffffffffffffffda RBX: 00007f5f3bdb5fa0 RCX: 00007f5f3bb8e929 [ 414.037571][T13708] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 414.037582][T13708] RBP: 00007f5f3ca21090 R08: 00002000000000c0 R09: 0000000000000000 [ 414.037593][T13708] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 414.037603][T13708] R13: 0000000000000000 R14: 00007f5f3bdb5fa0 R15: 00007fff4b803898 [ 414.037617][T13708] [ 414.252884][T13712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 414.252913][T13712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1302 [ 414.284304][T13716] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5541'. [ 414.367942][T13728] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5547'. [ 414.393566][T13732] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5549'. [ 414.419179][T13735] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5550'. [ 414.428554][T13735] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 414.435943][T13735] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 414.476104][T13737] FAT-fs (rnullb0): bogus number of reserved sectors [ 414.480399][T13733] netlink: 'syz.9.5548': attribute type 4 has an invalid length. [ 414.483083][T13737] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 414.492853][T13733] lo: entered promiscuous mode [ 414.577496][T13729] lo: left promiscuous mode [ 414.613653][T13761] netlink: 'syz.4.5561': attribute type 11 has an invalid length. [ 414.700340][T13774] exFAT-fs (rnullb0): invalid boot record signature [ 414.707072][T13774] exFAT-fs (rnullb0): failed to read boot sector [ 414.713541][T13774] exFAT-fs (rnullb0): failed to recognize exfat type [ 414.759031][T13778] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 414.981746][T13787] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.988827][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.996103][T13787] bridge_slave_0: entered allmulticast mode [ 415.002650][T13787] bridge_slave_0: entered promiscuous mode [ 415.009060][T13787] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.016140][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.023852][T13787] bridge_slave_1: entered allmulticast mode [ 415.030188][T13787] bridge_slave_1: entered promiscuous mode [ 415.044470][T13558] bridge_slave_1: left allmulticast mode [ 415.050149][T13558] bridge_slave_1: left promiscuous mode [ 415.055897][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.063567][T13558] bridge_slave_0: left allmulticast mode [ 415.069218][T13558] bridge_slave_0: left promiscuous mode [ 415.074957][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.146740][T13558] veth1_macvtap: left promiscuous mode [ 415.152370][T13558] veth0_vlan: left promiscuous mode [ 415.212956][T13787] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.220036][T13787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.227370][T13787] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.234437][T13787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.261798][T13562] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.269082][T13562] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.278661][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.285775][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.294824][T13562] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.301902][T13562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.329057][T13787] veth0_vlan: entered promiscuous mode [ 415.340390][T13787] veth1_macvtap: entered promiscuous mode [ 415.552846][T13799] netlink: 'syz.9.5576': attribute type 4 has an invalid length. [ 415.842859][T13806] rust_binder: Error while translating object. [ 415.842904][T13806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 415.849127][T13806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 415.891351][ T1139] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 416.031337][ T1139] usb 10-1: device descriptor read/64, error -71 [ 416.271316][ T1139] usb 10-1: device descriptor read/64, error -71 [ 416.511316][ T1139] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 416.641323][ T1139] usb 10-1: device descriptor read/64, error -71 [ 416.881244][ T1139] usb 10-1: device descriptor read/64, error -71 [ 416.991382][ T1139] usb usb10-port1: attempt power cycle [ 417.331259][ T1139] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 417.352390][ T1139] usb 10-1: device descriptor read/8, error -71 [ 417.482230][ T1139] usb 10-1: device descriptor read/8, error -71 [ 417.523016][T13810] FAULT_INJECTION: forcing a failure. [ 417.523016][T13810] name failslab, interval 1, probability 0, space 0, times 0 [ 417.535883][T13810] CPU: 1 UID: 0 PID: 13810 Comm: syz.5.5580 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 417.535919][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.535933][T13810] Call Trace: [ 417.535941][T13810] [ 417.535949][T13810] __dump_stack+0x21/0x30 [ 417.535978][T13810] dump_stack_lvl+0x10c/0x190 [ 417.536001][T13810] ? __cfi_dump_stack_lvl+0x10/0x10 [ 417.536030][T13810] dump_stack+0x19/0x20 [ 417.536055][T13810] should_fail_ex+0x3d9/0x530 [ 417.536082][T13810] should_failslab+0xac/0x100 [ 417.536105][T13810] __kmalloc_cache_noprof+0x41/0x3c0 [ 417.536126][T13810] ? __se_sys_mount+0x15f/0x480 [ 417.536147][T13810] __se_sys_mount+0x15f/0x480 [ 417.536166][T13810] ? ksys_write+0x1ef/0x250 [ 417.536187][T13810] ? __x64_sys_mount+0xf0/0xf0 [ 417.536208][T13810] __x64_sys_mount+0xc3/0xf0 [ 417.536228][T13810] x64_sys_call+0x2021/0x2ee0 [ 417.536248][T13810] do_syscall_64+0x58/0xf0 [ 417.536263][T13810] ? clear_bhb_loop+0x50/0xa0 [ 417.536285][T13810] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 417.536305][T13810] RIP: 0033:0x7f5f3bb8e929 [ 417.536319][T13810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.536334][T13810] RSP: 002b:00007f5f3ca21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 417.536352][T13810] RAX: ffffffffffffffda RBX: 00007f5f3bdb5fa0 RCX: 00007f5f3bb8e929 [ 417.536364][T13810] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 417.536376][T13810] RBP: 00007f5f3ca21090 R08: 00002000000000c0 R09: 0000000000000000 [ 417.536387][T13810] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 417.536397][T13810] R13: 0000000000000000 R14: 00007f5f3bdb5fa0 R15: 00007fff4b803898 [ 417.536411][T13810] [ 417.641246][T13817] FAULT_INJECTION: forcing a failure. [ 417.641246][T13817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.736210][T13817] CPU: 1 UID: 0 PID: 13817 Comm: syz.5.5582 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 417.736249][T13817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.736267][T13817] Call Trace: [ 417.736274][T13817] [ 417.736283][T13817] __dump_stack+0x21/0x30 [ 417.736313][T13817] dump_stack_lvl+0x10c/0x190 [ 417.736339][T13817] ? __cfi_dump_stack_lvl+0x10/0x10 [ 417.736365][T13817] dump_stack+0x19/0x20 [ 417.736390][T13817] should_fail_ex+0x3d9/0x530 [ 417.736416][T13817] should_fail+0xf/0x20 [ 417.736439][T13817] should_fail_usercopy+0x1e/0x30 [ 417.736467][T13817] _copy_from_user+0x22/0xb0 [ 417.736499][T13817] evdev_ioctl_handler+0x560/0x1e50 [ 417.736540][T13817] ? evdev_fasync+0x70/0x70 [ 417.736570][T13817] ? vfs_write+0x8ba/0xe80 [ 417.736595][T13817] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 417.736629][T13817] ? __cfi_vfs_write+0x10/0x10 [ 417.736656][T13817] ? __kasan_check_write+0x18/0x20 [ 417.736684][T13817] ? mutex_unlock+0x8b/0x240 [ 417.736703][T13817] ? __fget_files+0x2c5/0x340 [ 417.736726][T13817] ? __fget_files+0x2c5/0x340 [ 417.736749][T13817] evdev_ioctl+0x2b/0x40 [ 417.736769][T13817] ? __cfi_evdev_ioctl+0x10/0x10 [ 417.736789][T13817] __se_sys_ioctl+0x132/0x1b0 [ 417.736812][T13817] __x64_sys_ioctl+0x7f/0xa0 [ 417.736834][T13817] x64_sys_call+0x1878/0x2ee0 [ 417.736855][T13817] do_syscall_64+0x58/0xf0 [ 417.736869][T13817] ? clear_bhb_loop+0x50/0xa0 [ 417.736887][T13817] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 417.736904][T13817] RIP: 0033:0x7f5f3bb8e929 [ 417.736918][T13817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.736931][T13817] RSP: 002b:00007f5f3ca21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.736948][T13817] RAX: ffffffffffffffda RBX: 00007f5f3bdb5fa0 RCX: 00007f5f3bb8e929 [ 417.736960][T13817] RDX: 0000200000000000 RSI: 0000000080284504 RDI: 0000000000000003 [ 417.736971][T13817] RBP: 00007f5f3ca21090 R08: 0000000000000000 R09: 0000000000000000 [ 417.736981][T13817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.736991][T13817] R13: 0000000000000000 R14: 00007f5f3bdb5fa0 R15: 00007fff4b803898 [ 417.737004][T13817] [ 417.961190][ T1139] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 417.979795][ T36] audit: type=1326 audit(2000000235.825:66113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.5.5585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f5f3bb8e929 code=0x0 [ 417.992412][ T1139] usb 10-1: device descriptor read/8, error -71 [ 418.132181][ T1139] usb 10-1: device descriptor read/8, error -71 [ 418.241263][ T1139] usb usb10-port1: unable to enumerate USB device [ 418.554159][ T36] audit: type=1400 audit(2000000236.405:66114): avc: denied { name_bind } for pid=13827 comm="syz.8.5586" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 418.852835][T13840] __nla_validate_parse: 2 callbacks suppressed [ 418.852871][T13840] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5591'. [ 418.991099][ T1139] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 419.142157][ T1139] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 419.156098][ T1139] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 419.166187][ T1139] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.180763][ T1139] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 419.190246][ T1139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 419.198710][ T1139] usb 10-1: Product: syz [ 419.203193][ T1139] usb 10-1: Manufacturer: syz [ 419.207975][ T1139] usb 10-1: SerialNumber: syz [ 419.272448][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5598'. [ 419.344055][T13868] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5603'. [ 419.427067][ T1139] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 419.439091][ T1139] usb 10-1: USB disconnect, device number 9 [ 419.446818][ T1139] usblp0: removed [ 419.855696][T13878] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5607'. [ 419.877431][T13880] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5608'. [ 419.899227][T13882] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 419.922980][T13884] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5610'. [ 419.945231][T13886] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5611'. [ 419.954244][T13886] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 419.960751][T13886] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 420.012610][T13894] FAULT_INJECTION: forcing a failure. [ 420.012610][T13894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.025943][T13894] CPU: 1 UID: 0 PID: 13894 Comm: syz.4.5613 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 420.025984][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.025999][T13894] Call Trace: [ 420.026007][T13894] [ 420.026017][T13894] __dump_stack+0x21/0x30 [ 420.026051][T13894] dump_stack_lvl+0x10c/0x190 [ 420.026079][T13894] ? __cfi_dump_stack_lvl+0x10/0x10 [ 420.026109][T13894] dump_stack+0x19/0x20 [ 420.026134][T13894] should_fail_ex+0x3d9/0x530 [ 420.026162][T13894] should_fail+0xf/0x20 [ 420.026186][T13894] should_fail_usercopy+0x1e/0x30 [ 420.026214][T13894] _copy_from_user+0x22/0xb0 [ 420.026246][T13894] __se_sys_mount+0x182/0x480 [ 420.026276][T13894] ? ksys_write+0x1ef/0x250 [ 420.026305][T13894] ? __x64_sys_mount+0xf0/0xf0 [ 420.026336][T13894] __x64_sys_mount+0xc3/0xf0 [ 420.026365][T13894] x64_sys_call+0x2021/0x2ee0 [ 420.026402][T13894] do_syscall_64+0x58/0xf0 [ 420.026423][T13894] ? clear_bhb_loop+0x50/0xa0 [ 420.026451][T13894] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 420.026476][T13894] RIP: 0033:0x7f7b2478e929 [ 420.026495][T13894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.026516][T13894] RSP: 002b:00007f7b25566038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 420.026542][T13894] RAX: ffffffffffffffda RBX: 00007f7b249b5fa0 RCX: 00007f7b2478e929 [ 420.026561][T13894] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 420.026576][T13894] RBP: 00007f7b25566090 R08: 00002000000000c0 R09: 0000000000000000 [ 420.026593][T13894] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 420.026607][T13894] R13: 0000000000000000 R14: 00007f7b249b5fa0 R15: 00007fff518500b8 [ 420.026627][T13894] [ 421.176769][T13902] rust_binder: Error while translating object. [ 421.176813][T13902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 421.183297][T13902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 421.241376][T13912] FAULT_INJECTION: forcing a failure. [ 421.241376][T13912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.263934][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.4.5620 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 421.263971][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.263985][T13912] Call Trace: [ 421.263993][T13912] [ 421.264002][T13912] __dump_stack+0x21/0x30 [ 421.264042][T13912] dump_stack_lvl+0x10c/0x190 [ 421.264070][T13912] ? __cfi_dump_stack_lvl+0x10/0x10 [ 421.264100][T13912] dump_stack+0x19/0x20 [ 421.264126][T13912] should_fail_ex+0x3d9/0x530 [ 421.264154][T13912] should_fail+0xf/0x20 [ 421.264177][T13912] should_fail_usercopy+0x1e/0x30 [ 421.264201][T13912] _copy_to_user+0x24/0xa0 [ 421.264224][T13912] simple_read_from_buffer+0xed/0x160 [ 421.264241][T13912] proc_fail_nth_read+0x19e/0x210 [ 421.264259][T13912] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 421.264277][T13912] ? bpf_lsm_file_permission+0xd/0x20 [ 421.264296][T13912] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 421.264312][T13912] vfs_read+0x278/0xb60 [ 421.264331][T13912] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 421.264355][T13912] ? __cfi_vfs_read+0x10/0x10 [ 421.264373][T13912] ? __kasan_check_write+0x18/0x20 [ 421.264392][T13912] ? mutex_lock+0x92/0x1c0 [ 421.264410][T13912] ? __cfi_mutex_lock+0x10/0x10 [ 421.264428][T13912] ? __fget_files+0x2c5/0x340 [ 421.264452][T13912] ksys_read+0x141/0x250 [ 421.264471][T13912] ? __cfi_ksys_read+0x10/0x10 [ 421.264491][T13912] ? __kasan_check_read+0x15/0x20 [ 421.264510][T13912] __x64_sys_read+0x7f/0x90 [ 421.264529][T13912] x64_sys_call+0x2638/0x2ee0 [ 421.264550][T13912] do_syscall_64+0x58/0xf0 [ 421.264564][T13912] ? clear_bhb_loop+0x50/0xa0 [ 421.264583][T13912] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 421.264600][T13912] RIP: 0033:0x7f7b2478d33c [ 421.264614][T13912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.264628][T13912] RSP: 002b:00007f7b25566030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.264645][T13912] RAX: ffffffffffffffda RBX: 00007f7b249b5fa0 RCX: 00007f7b2478d33c [ 421.264658][T13912] RDX: 000000000000000f RSI: 00007f7b255660a0 RDI: 0000000000000004 [ 421.264668][T13912] RBP: 00007f7b25566090 R08: 0000000000000000 R09: 0000000000000000 [ 421.264679][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.264689][T13912] R13: 0000000000000000 R14: 00007f7b249b5fa0 R15: 00007fff518500b8 [ 421.264704][T13912] [ 421.585986][T13917] netlink: 'syz.4.5622': attribute type 11 has an invalid length. [ 421.673495][T13928] binder: Unknown parameter '0x0000000000000003' [ 421.734947][T13938] netlink: 'syz.9.5631': attribute type 4 has an invalid length. [ 421.842007][T13944] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5633'. [ 421.866101][T13946] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5635'. [ 421.889797][T13950] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5637'. [ 421.902223][T13953] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 421.909909][T13953] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 421.990956][ T2758] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 422.130993][ T2758] usb 10-1: device descriptor read/64, error -71 [ 422.370957][ T2758] usb 10-1: device descriptor read/64, error -71 [ 422.610914][ T2758] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 422.740935][ T2758] usb 10-1: device descriptor read/64, error -71 [ 422.922641][T13973] FAULT_INJECTION: forcing a failure. [ 422.922641][T13973] name failslab, interval 1, probability 0, space 0, times 0 [ 422.935393][T13973] CPU: 1 UID: 0 PID: 13973 Comm: syz.8.5645 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 422.935430][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.935444][T13973] Call Trace: [ 422.935452][T13973] [ 422.935461][T13973] __dump_stack+0x21/0x30 [ 422.935493][T13973] dump_stack_lvl+0x10c/0x190 [ 422.935518][T13973] ? __cfi_dump_stack_lvl+0x10/0x10 [ 422.935546][T13973] dump_stack+0x19/0x20 [ 422.935572][T13973] should_fail_ex+0x3d9/0x530 [ 422.935598][T13973] should_failslab+0xac/0x100 [ 422.935630][T13973] kmem_cache_alloc_noprof+0x42/0x3a0 [ 422.935655][T13973] ? getname_flags+0xc6/0x710 [ 422.935677][T13973] getname_flags+0xc6/0x710 [ 422.935699][T13973] user_path_at+0x2b/0x60 [ 422.935722][T13973] __se_sys_mount+0x288/0x480 [ 422.935743][T13973] ? ksys_write+0x1ef/0x250 [ 422.935763][T13973] ? __x64_sys_mount+0xf0/0xf0 [ 422.935784][T13973] __x64_sys_mount+0xc3/0xf0 [ 422.935805][T13973] x64_sys_call+0x2021/0x2ee0 [ 422.935826][T13973] do_syscall_64+0x58/0xf0 [ 422.935840][T13973] ? clear_bhb_loop+0x50/0xa0 [ 422.935859][T13973] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 422.935884][T13973] RIP: 0033:0x7f3ad538e929 [ 422.935898][T13973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.935913][T13973] RSP: 002b:00007f3ad6174038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 422.935930][T13973] RAX: ffffffffffffffda RBX: 00007f3ad55b5fa0 RCX: 00007f3ad538e929 [ 422.935943][T13973] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 422.935954][T13973] RBP: 00007f3ad6174090 R08: 00002000000000c0 R09: 0000000000000000 [ 422.935965][T13973] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 422.935975][T13973] R13: 0000000000000000 R14: 00007f3ad55b5fa0 R15: 00007ffc5677c068 [ 422.935989][T13973] [ 423.130456][ T2758] usb 10-1: device descriptor read/64, error -71 [ 423.241012][ T2758] usb usb10-port1: attempt power cycle [ 423.581044][ T2758] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 423.601935][ T2758] usb 10-1: device descriptor read/8, error -71 [ 423.732013][ T2758] usb 10-1: device descriptor read/8, error -71 [ 423.970887][ T2758] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 423.991907][ T2758] usb 10-1: device descriptor read/8, error -71 [ 424.121949][ T2758] usb 10-1: device descriptor read/8, error -71 [ 424.230989][ T2758] usb usb10-port1: unable to enumerate USB device [ 425.109322][T13992] __nla_validate_parse: 1 callbacks suppressed [ 425.109338][T13992] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5653'. [ 425.151512][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5655'. [ 425.239806][T14009] netlink: 'syz.4.5661': attribute type 11 has an invalid length. [ 425.272564][T14012] netlink: 'syz.5.5663': attribute type 4 has an invalid length. [ 425.281671][T14014] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 425.314412][T14025] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5668'. [ 425.411648][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.420922][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.440623][T14040] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5673'. [ 425.460752][T14043] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5674'. [ 425.469770][T14043] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 425.476666][T14043] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 426.235077][T14056] FAULT_INJECTION: forcing a failure. [ 426.235077][T14056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.248299][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.5.5680 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 426.248339][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.248354][T14056] Call Trace: [ 426.248363][T14056] [ 426.248370][T14056] __dump_stack+0x21/0x30 [ 426.248393][T14056] dump_stack_lvl+0x10c/0x190 [ 426.248412][T14056] ? __cfi_dump_stack_lvl+0x10/0x10 [ 426.248432][T14056] dump_stack+0x19/0x20 [ 426.248450][T14056] should_fail_ex+0x3d9/0x530 [ 426.248470][T14056] should_fail+0xf/0x20 [ 426.248487][T14056] should_fail_usercopy+0x1e/0x30 [ 426.248506][T14056] strncpy_from_user+0x28/0x270 [ 426.248524][T14056] ? getname_flags+0xc6/0x710 [ 426.248547][T14056] getname_flags+0x102/0x710 [ 426.248594][T14056] user_path_at+0x2b/0x60 [ 426.248617][T14056] __se_sys_mount+0x288/0x480 [ 426.248642][T14056] ? ksys_write+0x1ef/0x250 [ 426.248663][T14056] ? __x64_sys_mount+0xf0/0xf0 [ 426.248687][T14056] __x64_sys_mount+0xc3/0xf0 [ 426.248708][T14056] x64_sys_call+0x2021/0x2ee0 [ 426.248729][T14056] do_syscall_64+0x58/0xf0 [ 426.248744][T14056] ? clear_bhb_loop+0x50/0xa0 [ 426.248763][T14056] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 426.248781][T14056] RIP: 0033:0x7f5f3bb8e929 [ 426.248794][T14056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.248808][T14056] RSP: 002b:00007f5f3ca21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 426.248826][T14056] RAX: ffffffffffffffda RBX: 00007f5f3bdb5fa0 RCX: 00007f5f3bb8e929 [ 426.248839][T14056] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 426.248850][T14056] RBP: 00007f5f3ca21090 R08: 00002000000000c0 R09: 0000000000000000 [ 426.248862][T14056] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 426.248872][T14056] R13: 0000000000000000 R14: 00007f5f3bdb5fa0 R15: 00007fff4b803898 [ 426.248888][T14056] [ 426.992259][T14064] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5683'. [ 427.012484][T14066] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5684'. [ 427.049753][T14070] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5686'. [ 428.300660][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 428.300700][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 428.523662][ T36] audit: type=1400 audit(2000000246.378:66115): avc: denied { shutdown } for pid=14076 comm="syz.4.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.639017][T14097] netlink: 'syz.8.5697': attribute type 29 has an invalid length. [ 428.647128][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5697'. [ 428.705225][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5700'. [ 428.769075][ T36] audit: type=1326 audit(2000000246.620:66116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14117 comm="syz.4.5705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b2478e929 code=0x0 [ 429.567723][T14123] netlink: 'syz.8.5707': attribute type 11 has an invalid length. [ 429.699073][T14132] binder: Unknown parameter 'defcontext01777777777777777777777' [ 429.723315][T14134] netlink: 'syz.8.5712': attribute type 4 has an invalid length. [ 429.830516][T14149] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 429.837375][T14149] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 430.166840][T14159] rust_binder: Write failure EFAULT in pid:1403 [ 430.428030][T13558] bridge_slave_1: left allmulticast mode [ 430.439998][T13558] bridge_slave_1: left promiscuous mode [ 430.445672][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.453167][T13558] bridge_slave_0: left allmulticast mode [ 430.458819][T13558] bridge_slave_0: left promiscuous mode [ 430.464638][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.598042][T14165] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.605160][T14165] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.612255][T14165] bridge_slave_0: entered allmulticast mode [ 430.618524][T14165] bridge_slave_0: entered promiscuous mode [ 430.625002][T14165] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.632055][T14165] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.639111][T14165] bridge_slave_1: entered allmulticast mode [ 430.645499][T14165] bridge_slave_1: entered promiscuous mode [ 430.697523][T14165] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.704720][T14165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.712061][T14165] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.719124][T14165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.741655][T13558] tipc: Left network mode [ 430.747406][T13562] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.755259][T13562] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.770529][T13558] veth1_macvtap: left promiscuous mode [ 430.776092][T13558] veth0_vlan: left promiscuous mode [ 430.791992][T14171] FAULT_INJECTION: forcing a failure. [ 430.791992][T14171] name failslab, interval 1, probability 0, space 0, times 0 [ 430.810840][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.8.5726 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 430.810882][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.810897][T14171] Call Trace: [ 430.810906][T14171] [ 430.810915][T14171] __dump_stack+0x21/0x30 [ 430.810948][T14171] dump_stack_lvl+0x10c/0x190 [ 430.810975][T14171] ? __cfi_dump_stack_lvl+0x10/0x10 [ 430.811005][T14171] dump_stack+0x19/0x20 [ 430.811030][T14171] should_fail_ex+0x3d9/0x530 [ 430.811058][T14171] should_failslab+0xac/0x100 [ 430.811090][T14171] __kmalloc_cache_noprof+0x41/0x3c0 [ 430.811120][T14171] ? alloc_fs_context+0x70/0x830 [ 430.811142][T14171] alloc_fs_context+0x70/0x830 [ 430.811162][T14171] ? _raw_read_unlock+0x16/0x40 [ 430.811185][T14171] fs_context_for_mount+0x26/0x40 [ 430.811206][T14171] do_new_mount+0x116/0xb40 [ 430.811234][T14171] ? security_capable+0xcf/0xf0 [ 430.811260][T14171] path_mount+0x688/0x1050 [ 430.811288][T14171] ? putname+0x113/0x150 [ 430.811317][T14171] __se_sys_mount+0x2bd/0x480 [ 430.811345][T14171] ? ksys_write+0x1ef/0x250 [ 430.811373][T14171] ? __x64_sys_mount+0xf0/0xf0 [ 430.811404][T14171] __x64_sys_mount+0xc3/0xf0 [ 430.811433][T14171] x64_sys_call+0x2021/0x2ee0 [ 430.811462][T14171] do_syscall_64+0x58/0xf0 [ 430.811482][T14171] ? clear_bhb_loop+0x50/0xa0 [ 430.811517][T14171] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 430.811541][T14171] RIP: 0033:0x7f3ad538e929 [ 430.811560][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.811581][T14171] RSP: 002b:00007f3ad6174038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.811606][T14171] RAX: ffffffffffffffda RBX: 00007f3ad55b5fa0 RCX: 00007f3ad538e929 [ 430.811624][T14171] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 430.811640][T14171] RBP: 00007f3ad6174090 R08: 00002000000000c0 R09: 0000000000000000 [ 430.811656][T14171] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 430.811670][T14171] R13: 0000000000000000 R14: 00007f3ad55b5fa0 R15: 00007ffc5677c068 [ 430.811690][T14171] [ 431.038941][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.040946][T14176] __nla_validate_parse: 2 callbacks suppressed [ 431.040968][T14176] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5729'. [ 431.046067][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.071048][T14178] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5730'. [ 431.086529][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.093635][T13559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.128655][T14179] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 431.128687][T14179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 431.137743][T14165] veth0_vlan: entered promiscuous mode [ 431.161190][T14179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:120 [ 431.169506][T14165] veth1_macvtap: entered promiscuous mode [ 431.244164][T14184] overlayfs: failed to resolve './file1': -2 [ 431.258652][T14184] fuse: Unknown parameter 'keyring' [ 431.264935][T14186] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5732'. [ 431.351367][T14189] SELinux: ebitmap start bit (3808428352) is beyond the end of the bitmap (1472) [ 431.364427][T14189] SELinux: failed to load policy [ 431.661723][ T36] audit: type=1326 audit(2000000249.520:66117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.4.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2478e929 code=0x7fc00000 [ 431.922114][T14210] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 431.922143][T14210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 431.930256][T14210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:112 [ 432.781210][T14223] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5746'. [ 432.799309][T14223] 0ªö»ôM: renamed from 31ªî{X¹¦ (while UP) [ 432.806429][T14223] 0ªö»ôM: entered allmulticast mode [ 432.812048][T14223] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 436.880948][T14252] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 436.964365][T14257] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5759'. [ 437.023591][T14262] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 437.023613][T14262] rust_binder: Error while translating object. [ 437.034199][T14262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 437.040456][T14262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 437.584961][T14275] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 437.951596][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.951632][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.958132][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.964648][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.971131][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.977572][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.984038][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.990515][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.996960][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.003421][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.009878][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.016368][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.430068][ T2756] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 438.591056][ T2756] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.601345][ T2756] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.614375][ T2756] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.623572][ T2756] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.632446][ T2756] usb 10-1: config 0 descriptor?? [ 438.638439][ T2756] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 440.732653][T14314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670 [ 441.198293][ T1139] usb 10-1: USB disconnect, device number 15 [ 441.208898][T14323] netlink: 388 bytes leftover after parsing attributes in process `syz.9.5785'. [ 441.238526][T14325] netlink: 'syz.9.5786': attribute type 27 has an invalid length. [ 441.255324][T14325] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.262596][T14325] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.289490][T13559] tipc: Subscription rejected, illegal request [ 441.373324][T14328] netlink: 388 bytes leftover after parsing attributes in process `syz.9.5787'. [ 441.505294][T14339] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5792'. [ 441.929493][T14344] binder: Bad value for 'max' [ 443.798202][T14371] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5804'. [ 443.922156][T14379] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 443.931457][T14379] kvm: pic: level sensitive irq not supported [ 443.931532][T14379] kvm: pic: non byte read [ 443.942430][T14379] kvm: pic: level sensitive irq not supported [ 443.942496][T14379] kvm: pic: non byte read [ 443.953323][T14379] kvm: pic: level sensitive irq not supported [ 443.953373][T14379] kvm: pic: non byte read [ 443.964175][T14379] kvm: pic: level sensitive irq not supported [ 443.964245][T14379] kvm: pic: non byte read [ 443.975056][T14379] kvm: pic: level sensitive irq not supported [ 443.975110][T14379] kvm: pic: non byte read [ 444.042476][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5809'. [ 444.066401][T14385] kvm: kvm [14384]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 444.075835][T14385] __vm_enough_memory: pid: 14385, comm: syz.4.5810, bytes: 70373039144960 not enough memory for the allocation [ 444.715884][T14404] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5819'. [ 444.724972][T14404] 0ªö»ôM: renamed from 31ªî{X¹¦ (while UP) [ 444.731993][T14404] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 444.869653][ T1139] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 445.029734][ T1139] usb 10-1: Using ep0 maxpacket: 32 [ 445.038370][ T1139] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.048044][ T1139] usb 10-1: config 0 has no interface number 0 [ 445.054377][ T1139] usb 10-1: config 0 interface 184 has no altsetting 0 [ 445.062827][ T1139] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.072115][ T1139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.080252][ T1139] usb 10-1: Product: syz [ 445.084528][ T1139] usb 10-1: Manufacturer: syz [ 445.089237][ T1139] usb 10-1: SerialNumber: syz [ 445.100225][ T1139] usb 10-1: config 0 descriptor?? [ 445.107665][ T1139] smsc75xx v1.0.0 [ 446.415773][ T1139] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 446.427298][ T1139] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 446.436941][ T1139] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 446.448014][ T1139] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 446.458096][ T1139] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 446.468885][ T1139] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 446.479662][ T1139] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 446.491955][ T1139] usb 10-1: USB disconnect, device number 16 [ 446.519239][T14426] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5827'. [ 446.549146][T14433] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5829'. [ 446.608365][T14441] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 447.524595][T14450] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5838'. [ 447.552396][T14452] netlink: 'syz.9.5839': attribute type 4 has an invalid length. [ 447.560208][T14452] netlink: 'syz.9.5839': attribute type 7 has an invalid length. [ 447.568009][T14452] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.5839'. [ 447.577781][T14452] rust_binder: Error while translating object. [ 447.577804][T14452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 447.584076][T14452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:196 [ 447.618795][T14456] netlink: 'syz.9.5841': attribute type 11 has an invalid length. [ 447.779377][T14460] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5843'. [ 447.882498][T14466] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 447.890364][ T1139] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 448.039500][ T1139] usb 10-1: Using ep0 maxpacket: 16 [ 448.049971][ T1139] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.069878][ T1139] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.078891][ T1139] usb 10-1: too many endpoints for config 1 interface 0 altsetting 152: 98, using maximum allowed: 30 [ 448.098277][ T1139] usb 10-1: config 1 interface 0 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 448.119470][ T1139] usb 10-1: config 1 interface 0 has no altsetting 0 [ 448.133632][ T1139] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.142929][ T1139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.151227][ T1139] usb 10-1: Product: syz [ 448.155872][ T1139] usb 10-1: Manufacturer: syz [ 448.160907][ T1139] usb 10-1: SerialNumber: syz [ 448.376176][ T1139] usb 10-1: USB disconnect, device number 17 [ 448.886835][T14481] netlink: 'syz.9.5852': attribute type 28 has an invalid length. [ 449.599767][T14488] netlink: 'syz.4.5855': attribute type 4 has an invalid length. [ 450.623062][T14502] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5861'. [ 450.675839][T14508] netlink: 388 bytes leftover after parsing attributes in process `syz.9.5864'. [ 450.697643][T14510] netlink: 388 bytes leftover after parsing attributes in process `syz.9.5865'. [ 450.720606][T14512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:226 [ 451.430784][T14526] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5872'. [ 451.491226][T14533] fuseblk: Bad value for 'source' [ 451.496570][T14533] 9pnet_fd: Insufficient options for proto=fd [ 451.517619][T14539] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5876'. [ 451.548373][ T36] audit: type=1400 audit(2000000269.396:66118): avc: denied { setattr } for pid=14542 comm="syz.8.5878" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.085362][T14557] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5884'. [ 452.112477][T14559] netlink: 'syz.5.5885': attribute type 11 has an invalid length. [ 452.131188][T14561] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5886'. [ 452.707544][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5890'. [ 452.753301][T14580] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5892'. [ 452.796273][T14586] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5895'. [ 452.805307][T14586] 0ªö»ôM: renamed from gretap0 (while UP) [ 452.811764][T14586] 0ªö»ôM: entered allmulticast mode [ 452.817241][T14586] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 452.845347][ T36] audit: type=1400 audit(2000000270.696:66119): avc: denied { create } for pid=14587 comm="syz.5.5896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 452.940195][T14592] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 452.946033][T14592] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 453.259236][ T31] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 453.401750][ T36] audit: type=1326 audit(2000000271.256:66120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.5.5906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a52b8e929 code=0x0 [ 453.410369][ T31] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.434747][ T31] usb 10-1: config 0 interface 0 has no altsetting 0 [ 453.441495][ T31] usb 10-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 453.450657][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.459401][ T31] usb 10-1: config 0 descriptor?? [ 453.866490][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.873703][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.880815][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.887938][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.895041][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.902139][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.909309][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.916366][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.923438][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.930539][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.937581][ T31] sunplus 0003:04FC:05D8.0031: unknown main item tag 0x0 [ 453.945281][ T31] sunplus 0003:04FC:05D8.0031: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.9-1/input0 [ 454.069238][T14604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.069897][T14604] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 454.069897][T14604] attempt to subtract with overflow [ 454.089437][T14604] ------------[ cut here ]------------ [ 454.090991][ T36] audit: type=1400 audit(2000000271.946:66121): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 454.094922][T14604] kernel BUG at rust/helpers/bug.c:7! [ 454.095361][T14604] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 454.117121][ T36] audit: type=1400 audit(2000000271.946:66122): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.122226][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.9.5903 Not tainted 6.12.30-syzkaller-g030e00a2d78c #0 57efd5a98e1182d97bd5f975427dc401009108c9 [ 454.122263][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.129892][ T36] audit: type=1400 audit(2000000271.946:66123): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.150631][T14604] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 454.150667][T14604] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 04 38 b8 a9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 4e fc f1 25 90 90 90 90 90 90 90 90 90 [ 454.150690][T14604] RSP: 0018:ffffc90001595a90 EFLAGS: 00010246 [ 454.150714][T14604] RAX: 0000000000000061 RBX: 1ffff920002b2b54 RCX: 54e55a7489737600 [ 454.164853][ T36] audit: type=1400 audit(2000000271.946:66124): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.174315][T14604] RDX: ffffc900021c9000 RSI: 00000000000046b0 RDI: 00000000000046b1 [ 454.174339][T14604] RBP: ffffc90001595a90 R08: 0000000000000003 R09: 0000000000000004 [ 454.174356][T14604] R10: dffffc0000000000 R11: fffffbfff0e5eebc R12: 0000000000000000 [ 454.174374][T14604] R13: dffffc0000000000 R14: ffffc90001595ac0 R15: ffffc90001595af0 [ 454.174392][T14604] FS: 00007f874a6d56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 454.174414][T14604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.174430][T14604] CR2: 0000000000000000 CR3: 000000013e7b0000 CR4: 00000000003526b0 [ 454.174451][T14604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.196642][ T36] audit: type=1400 audit(2000000271.946:66125): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 454.201094][T14604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.201115][T14604] Call Trace: [ 454.201124][T14604] [ 454.201134][T14604] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 454.221334][ T36] audit: type=1400 audit(2000000271.946:66126): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 454.226824][T14604] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 454.245269][ T36] audit: type=1400 audit(2000000271.946:66127): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 454.255473][T14604] ? kernel_text_address+0xa9/0xe0 [ 454.255511][T14604] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 454.433290][T14604] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 454.439468][T14604] ? arch_stack_walk+0x10b/0x170 [ 454.444426][T14604] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 454.451638][T14604] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 454.459548][T14604] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 454.469474][T14604] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 454.480076][T14604] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 454.486716][T14604] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 454.495438][T14604] ? __se_sys_ioctl+0x132/0x1b0 [ 454.500303][T14604] ? __x64_sys_ioctl+0x7f/0xa0 [ 454.505079][T14604] ? x64_sys_call+0x1878/0x2ee0 [ 454.509943][T14604] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 454.519690][T14604] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 454.529772][T14604] ? kasan_save_alloc_info+0x40/0x50 [ 454.535069][T14604] ? __kasan_kmalloc+0x96/0xb0 [ 454.539855][T14604] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 454.546457][T14604] ? __kasan_check_write+0x18/0x20 [ 454.551596][T14604] ? _raw_spin_lock+0x8c/0x120 [ 454.556372][T14604] ? __cfi__raw_spin_lock+0x10/0x10 [ 454.561580][T14604] ? mutex_unlock+0x8b/0x240 [ 454.566179][T14604] ? __kasan_check_write+0x18/0x20 [ 454.571308][T14604] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 454.580881][T14604] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 454.590805][T14604] ? __kasan_check_read+0x15/0x20 [ 454.595842][T14604] ? resched_curr+0xaa/0x430 [ 454.600439][T14604] ? __cfi_resched_curr+0x10/0x10 [ 454.605475][T14604] ? read_tsc+0xd/0x20 [ 454.609592][T14604] ? __kasan_check_read+0x15/0x20 [ 454.614645][T14604] ? resched_curr+0xaa/0x430 [ 454.619241][T14604] ? __cfi_resched_curr+0x10/0x10 [ 454.624272][T14604] ? update_curr_dl_se+0x65a/0xb20 [ 454.629390][T14604] ? sched_clock_noinstr+0xd/0x30 [ 454.634422][T14604] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 454.640493][T14604] ? update_curr+0x649/0xc60 [ 454.645125][T14604] ? cgroup_rstat_updated+0x132/0x7f0 [ 454.650512][T14604] ? update_load_avg+0x506/0x19a0 [ 454.655544][T14604] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 454.661273][T14604] ? kvm_sched_clock_read+0x15/0x30 [ 454.666479][T14604] ? update_cfs_group+0x260/0x260 [ 454.671519][T14604] ? sched_clock+0x44/0x60 [ 454.675941][T14604] ? sched_clock_cpu+0x75/0x400 [ 454.680795][T14604] ? desc_read+0x202/0x3e0 [ 454.685219][T14604] ? __kasan_check_write+0x18/0x20 [ 454.690337][T14604] ? desc_read+0x1ab/0x3e0 [ 454.694765][T14604] ? prb_first_seq+0xfe/0x1b0 [ 454.699453][T14604] ? __cfi_prb_first_seq+0x10/0x10 [ 454.704603][T14604] ? __kasan_check_write+0x18/0x20 [ 454.709722][T14604] ? desc_read+0x1ab/0x3e0 [ 454.714147][T14604] ? __kasan_check_read+0x15/0x20 [ 454.719220][T14604] ? this_cpu_in_panic+0x56/0x90 [ 454.724183][T14604] ? _prb_read_valid+0xa08/0xa90 [ 454.729129][T14604] ? __cfi__RNvNtCs9jEwPDbx20M_4core3fmt5write+0x10/0x10 [ 454.736171][T14604] ? is_bpf_text_address+0x17b/0x1a0 [ 454.741475][T14604] ? kernel_text_address+0xa9/0xe0 [ 454.746630][T14604] ? unwind_get_return_address+0x51/0x90 [ 454.752293][T14604] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 454.758665][T14604] ? arch_stack_walk+0x10b/0x170 [ 454.763651][T14604] ? stack_depot_save_flags+0x38/0x800 [ 454.769148][T14604] ? kasan_save_alloc_info+0x40/0x50 [ 454.774439][T14604] ? kasan_save_track+0x4f/0x80 [ 454.779311][T14604] ? kasan_save_track+0x3e/0x80 [ 454.784201][T14604] ? kasan_save_alloc_info+0x40/0x50 [ 454.789493][T14604] ? __kasan_kmalloc+0x96/0xb0 [ 454.794274][T14604] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 454.800882][T14604] ? krealloc_noprof+0x8d/0x130 [ 454.805748][T14604] ? rust_helper_krealloc+0x33/0xd0 [ 454.811041][T14604] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 454.820619][T14604] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 454.831137][T14604] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 454.840450][T14604] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 454.849236][T14604] ? __se_sys_ioctl+0x132/0x1b0 [ 454.854099][T14604] ? __x64_sys_ioctl+0x7f/0xa0 [ 454.858880][T14604] ? do_syscall_64+0x58/0xf0 [ 454.863469][T14604] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 454.869551][T14604] ? cgroup_rstat_updated+0x132/0x7f0 [ 454.874930][T14604] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 454.880674][T14604] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 454.886146][T14604] ? update_cfs_group+0x260/0x260 [ 454.891181][T14604] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 454.897257][T14604] ? update_curr+0x949/0xc60 [ 454.901871][T14604] ? __kasan_check_write+0x18/0x20 [ 454.907029][T14604] ? _raw_spin_lock+0x8c/0x120 [ 454.911839][T14604] ? __cfi__raw_spin_lock+0x10/0x10 [ 454.917057][T14604] ? _raw_spin_unlock+0x45/0x60 [ 454.921921][T14604] ? rust_helper_spin_unlock+0x19/0x30 [ 454.927386][T14604] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 454.937907][T14604] ? tg_unthrottle_up+0x980/0x980 [ 454.942948][T14604] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 454.953729][T14604] ? kvm_sched_clock_read+0x15/0x30 [ 454.958943][T14604] ? sched_clock_noinstr+0xd/0x30 [ 454.963982][T14604] ? sched_clock+0x44/0x60 [ 454.968404][T14604] ? sched_clock_cpu+0x75/0x400 [ 454.973360][T14604] ? sched_balance_newidle+0x845/0xe00 [ 454.978836][T14604] ? __cfi_sched_clock_cpu+0x10/0x10 [ 454.984144][T14604] ? __kasan_check_read+0x15/0x20 [ 454.989178][T14604] ? __perf_event_task_sched_in+0x116e/0x1340 [ 454.995256][T14604] ? __perf_event_task_sched_out+0x1c1/0xb70 [ 455.001287][T14604] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 455.007556][T14604] ? __cfi___switch_to+0x10/0x10 [ 455.012503][T14604] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 455.021638][T14604] ? finish_task_switch+0x1de/0x780 [ 455.026849][T14604] ? __switch_to_asm+0x3d/0x70 [ 455.031635][T14604] ? avc_has_extended_perms+0x7c7/0xdd0 [ 455.037202][T14604] ? __asan_memcpy+0x5a/0x80 [ 455.041804][T14604] ? avc_has_extended_perms+0x921/0xdd0 [ 455.047369][T14604] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 455.057034][T14604] ? do_vfs_ioctl+0xeda/0x1e30 [ 455.061820][T14604] ? __futex_queue+0x19a/0x340 [ 455.066597][T14604] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 455.072259][T14604] ? __cfi___futex_queue+0x10/0x10 [ 455.077394][T14604] ? futex_wait_setup+0x1bc/0x260 [ 455.082433][T14604] ? __futex_wait+0x218/0x2a0 [ 455.087118][T14604] ? ioctl_has_perm+0x384/0x4d0 [ 455.091981][T14604] ? has_cap_mac_admin+0xd0/0xd0 [ 455.096948][T14604] ? futex_wake+0x63a/0x900 [ 455.101456][T14604] ? futex_setup_timer+0xb4/0xd0 [ 455.106418][T14604] ? futex_wait+0x288/0x540 [ 455.110931][T14604] ? __cfi_futex_wait+0x10/0x10 [ 455.115787][T14604] ? selinux_file_ioctl+0x6e0/0x1360 [ 455.121097][T14604] ? vfs_read+0x852/0xb60 [ 455.125438][T14604] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 455.131006][T14604] ? do_futex+0x309/0x500 [ 455.135362][T14604] ? __cfi_do_futex+0x10/0x10 [ 455.140075][T14604] ? mutex_unlock+0x8b/0x240 [ 455.144676][T14604] ? __fget_files+0x2c5/0x340 [ 455.149382][T14604] ? __fget_files+0x2c5/0x340 [ 455.154094][T14604] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 455.162627][T14604] ? __se_sys_ioctl+0x114/0x1b0 [ 455.167586][T14604] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 455.176726][T14604] __se_sys_ioctl+0x132/0x1b0 [ 455.181428][T14604] __x64_sys_ioctl+0x7f/0xa0 [ 455.186032][T14604] x64_sys_call+0x1878/0x2ee0 [ 455.190719][T14604] do_syscall_64+0x58/0xf0 [ 455.195142][T14604] ? clear_bhb_loop+0x50/0xa0 [ 455.199827][T14604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 455.205755][T14604] RIP: 0033:0x7f874978e929 [ 455.210174][T14604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.229787][T14604] RSP: 002b:00007f874a6d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.238208][T14604] RAX: ffffffffffffffda RBX: 00007f87499b5fa0 RCX: 00007f874978e929 [ 455.246189][T14604] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000007 [ 455.254164][T14604] RBP: 00007f8749810b39 R08: 0000000000000000 R09: 0000000000000000 [ 455.262143][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.270124][T14604] R13: 0000000000000000 R14: 00007f87499b5fa0 R15: 00007ffc4bd76818 [ 455.278112][T14604] [ 455.281150][T14604] Modules linked in: [ 455.285412][T14604] ---[ end trace 0000000000000000 ]--- [ 455.291420][T14604] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 455.296891][T14604] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 04 38 b8 a9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 4e fc f1 25 90 90 90 90 90 90 90 90 90 [ 455.316741][T14604] RSP: 0018:ffffc90001595a90 EFLAGS: 00010246 [ 455.322885][T14604] RAX: 0000000000000061 RBX: 1ffff920002b2b54 RCX: 54e55a7489737600 [ 455.331035][T14604] RDX: ffffc900021c9000 RSI: 00000000000046b0 RDI: 00000000000046b1 [ 455.339149][T14604] RBP: ffffc90001595a90 R08: 0000000000000003 R09: 0000000000000004 [ 455.347152][T14604] R10: dffffc0000000000 R11: fffffbfff0e5eebc R12: 0000000000000000 [ 455.355179][T14604] R13: dffffc0000000000 R14: ffffc90001595ac0 R15: ffffc90001595af0 [ 455.363450][T14604] FS: 00007f874a6d56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 455.372463][T14604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.379288][T14604] CR2: 0000000000000000 CR3: 000000013e7b0000 CR4: 00000000003526b0 [ 455.387294][T14604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.395378][T14604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 455.403402][T14604] Kernel panic - not syncing: Fatal exception [ 455.409844][T14604] Kernel Offset: disabled [ 455.414176][T14604] Rebooting in 86400 seconds..