last executing test programs: 27.124618697s ago: executing program 0 (id=79): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4824, &(0x7f0000000080)={[{@gid={'gid', 0x3d, r3}}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f00000042c0)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) getdents64(r2, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) (async) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4824, &(0x7f0000000080)={[{@gid={'gid', 0x3d, r3}}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) read$FUSE(r4, &(0x7f00000042c0)={0x2020}, 0x2020) (async) 27.052683432s ago: executing program 0 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = getuid() quotactl_fd$Q_SETINFO(r1, 0x0, r2, &(0x7f00000001c0)={0xfa, 0xfff, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010904c40102fffd018009b97ab38af5d935b6b62f049d4e91970502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0xe6683000) socket(0x5, 0x6, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x10) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@request_death, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2cbfdf89adff9ad28be6437aebb6c5e94f4fd20007e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 23.98829397s ago: executing program 0 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x92}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff6}, @CTA_SYNPROXY_ISN={0xffffffffffffffb3, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0xb4}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x9) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_pidfd_open(0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x8, 0x50) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x2f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/242, 0xf2, 0x2, 0x30}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 23.973320251s ago: executing program 0 (id=121): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5778c000) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000103810101440000102030109022d0001010d000109040008000301017c0921"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000400)=@string={0x2}}, {0x4c, &(0x7f0000000640)=@string={0x4c, 0x3, "f1f5bf07551e92c974a8e3db755ab076c8780138257f53922b58dfcd8482bbdaa65de1a4fc1960550233a75e3a22f0d20cba56abfbc45d253a3241fdb550a59644adf67c4e4d5c5b2cdb"}}]}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='q', 0x1, 0x40000, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) madvise(&(0x7f00001f7000/0x4000)=nil, 0x4000, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setresgid(0x0, 0x0, 0xee01) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 20.882824889s ago: executing program 0 (id=145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x74886000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20.736623461s ago: executing program 0 (id=146): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) (async) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3a) socket(0x1e, 0x80000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048810}, 0x4000) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048810}, 0x4000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000140), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x27, 0x803, 0x0) 20.736193341s ago: executing program 32 (id=146): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) (async) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3a) socket(0x1e, 0x80000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048810}, 0x4000) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048810}, 0x4000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000140), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x27, 0x803, 0x0) 9.088316869s ago: executing program 1 (id=183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640)) (async) 9.080726619s ago: executing program 2 (id=184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x4, 0xb, 0xfffc}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0xc, 0x6, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x6, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xa, 0xfffffffd, 0x0, 0x17, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x2001, 0xf1c, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x400, 0x6, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, 0x400000, 0x0, 0x4, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x0, 0x0, 0x40, 0xd67c, 0x2, 0x0, 0x4, 0x1000003, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x800005, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xc0ac, 0x0, 0x200000, 0x0, 0x100000]}, 0x45c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) tkill(r1, 0x13) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4000004}}], 0x1, 0x4000001) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x7) tkill(r1, 0x12) wait4(r1, 0x0, 0xa, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xb540f1e41053034d}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a6"}) 9.080248899s ago: executing program 3 (id=185): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x7, @empty, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff8105000000ffff0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 7.451849611s ago: executing program 1 (id=186): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="1400000042000501", @ANYBLOB="a136cc3b72ae16779f0bfcf5"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x8010) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) read(r2, &(0x7f0000000040)=""/32, 0x20) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x80) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 7.404628564s ago: executing program 2 (id=187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) lseek(r3, 0x3, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000140)) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0x184a, 0x2, [{0x1, 0x1}, {0x2}]}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 7.395969535s ago: executing program 3 (id=188): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) recvmsg$inet_nvme(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/108, 0x6c}], 0x2, &(0x7f0000000380)=""/210, 0xd2}, 0x10162) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 5.741671048s ago: executing program 1 (id=189): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x81, 0xfffff00c}, {0x20, 0x0, 0x0, 0xdffff010}, {0x7, 0x0, 0x0, 0xfffffffd}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) fadvise64(r2, 0xe6, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x301401, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r4, &(0x7f00000000c0)={0x5, 0xfffffffffffffff7, 0x0, 0x3}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) lseek(r5, 0x8, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000044, &(0x7f0000000240)={0xa, 0x2002, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x1c) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x80000000) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001400)=""/4096, 0x104d}], 0x1) 5.741320589s ago: executing program 2 (id=190): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x5e2b4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x4) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) futex(&(0x7f0000000000)=0x2, 0x6, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000002d00)={'veth0_macvtap\x00', {0x2, 0x4e23, @empty}}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, 0x0, &(0x7f0000000200)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.739234269s ago: executing program 3 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x1c, 0x10c, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x28, 0x0, 0x0, @u64=0x6}]}]}, 0x2c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r1, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}]}, 0x154}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x2, 0x29}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x6b, 0x30}}}], 0x0, 0x0, 0x0}) 3.927866814s ago: executing program 1 (id=192): unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x1c0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$cont(0x11, r1, 0x0, 0xffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000140)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 3.920962825s ago: executing program 2 (id=193): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000040)={0x1000, 0x208000}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r5}, 0xc) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r5}, 0xc) (async, rerun: 64) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x2, r5, 0xf, r1}, 0x10) ioctl$BLKRRPART(r2, 0x125f, 0x0) 3.920173945s ago: executing program 3 (id=194): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x20000, 0x1, 0x16}, 0x18) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r3, 0x80404518, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5f875000) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) write$UHID_INPUT(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYBLOB="9b5720c6f80e06efaad7dfda5da6a3331c97c52a8a11617af5b7056ae1c11ca696f121a2e0765614d6e6ce26be8149d5580ca7d96403fb9df014e74311d7eeef06093bde46da36f56bdac7404f318344e5a70a440a1b450c84ff9924c37008bc015046e904f7da72d6c47e720100350faedf70b860c5020c040064ea41"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x105502) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f00000011c0)={0x1, 0x100, 0x0, 0x5, 0x590f, 0x2}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d500102030109023900010000164709040000030806620009050700000000000009"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, &(0x7f0000000340)={0x0, 0x21, 0x6a, {0x6a, 0xa, "0c387fe34dff6e7d4e347728e2d8b118681ba15ea6e981253ac03d42debe65a2352f07c503af8800d65d6421ce3136ea5170c756da85d42c27dcab8f5822e401cd5df66e67316e63e91087b78bcef07016db535194f0dd48de258e3522d8f2d22e266f4ca7a531fb"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000080)={0x0, 0x22, 0x1c, {[@local=@item_012={0x2, 0x2, 0x9, "1eea"}, @global=@item_4={0x3, 0x1, 0xb, "068bf7c4"}, @global=@item_4={0x3, 0x1, 0xcfa514bfd4251285, "d2c7c7c5"}, @local=@item_4={0x3, 0x2, 0x9, 'w\x00#{'}, @main=@item_4={0x3, 0x0, 0x9, "935da26d"}, @main=@item_4={0x3, 0x0, 0xb, "bcc5611f"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x9, 0x1, {0x22, 0xb47}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x0, 0x3, 0xb, "a74add175c8397d9fb99ec"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000440)={0x20, 0x1, 0x3e, "fa34f8791ea3011441125b201838203049ff5c590ef451b1e7d14a8cec7a34b61a618e91de3dc1401272d0c6477b3891b0b8c58ad0f073521474710d5091"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x7}}) 1.968754112s ago: executing program 1 (id=195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2401, 0xcc) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000100)={0x5}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.968453192s ago: executing program 2 (id=196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x64a00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000014d564b"]) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000000c0)) syncfs(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.967852382s ago: executing program 3 (id=197): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r2, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x81, 0x80000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f296cbebcd09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000000)={0x2, 0x200, 0x5, 0x5, 0xb, 0x1bf0, 0x9, 0x46, 0x5, 0x4, 0x7, 0x2, 0x80000001}) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write(r2, &(0x7f0000000400)="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", 0x1f000) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x81, 0x80000) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f296cbebcd09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000000)={0x2, 0x200, 0x5, 0x5, 0xb, 0x1bf0, 0x9, 0x46, 0x5, 0x4, 0x7, 0x2, 0x80000001}) (async) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) (async) 2.53131ms ago: executing program 1 (id=198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000001400)=0xe) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x100000b) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$cgroup_freezer_state(r6, &(0x7f0000000140)='THAWED\x00', 0x7) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x240000c1}, 0x4048814) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="77302ed9fabf4e075e457105a7537a7a1891a819f8b505785d59a4be8665d684862544a2d0615a50af83fae9d0306a6c235d92965a05e93a142a51b35052bbfa1ebffaca99109a82d4cb1f688797c1f4c2d06cf00d16cca26d1585610f7946f63aa4e971f1cc24b0c785006a18c7e4f08f", 0x71, 0x4805, &(0x7f0000000080)={0xa, 0x4e20, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff81}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 2.09673ms ago: executing program 2 (id=199): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x6b, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x8, 0x1, {0x22, 0x312}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) (async) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffca}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002540)={0x14, 0x8011, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 3 (id=200): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0xffd7, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='(\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x7, 0x13, {0x13, 0x22, "53ba77abeb5bb9f3c97e6a8702931ae3d3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 26.367326][ T36] audit: type=1400 audit(1756268265.490:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.368814][ T281] cgroup: Unknown subsys name 'net' [ 26.389997][ T36] audit: type=1400 audit(1756268265.490:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.417687][ T36] audit: type=1400 audit(1756268265.530:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.417916][ T281] cgroup: Unknown subsys name 'devices' [ 26.597210][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.602865][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.697907][ T36] audit: type=1400 audit(1756268265.820:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.721322][ T36] audit: type=1400 audit(1756268265.820:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.746245][ T36] audit: type=1400 audit(1756268265.820:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.757456][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.778273][ T36] audit: type=1400 audit(1756268265.900:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.803922][ T36] audit: type=1400 audit(1756268265.900:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.855476][ T36] audit: type=1400 audit(1756268265.980:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.881301][ T36] audit: type=1400 audit(1756268265.980:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.881354][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.727625][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.734805][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.741920][ T290] bridge_slave_0: entered allmulticast mode [ 27.749154][ T290] bridge_slave_0: entered promiscuous mode [ 27.762843][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.770650][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.778099][ T290] bridge_slave_1: entered allmulticast mode [ 27.784536][ T290] bridge_slave_1: entered promiscuous mode [ 27.795017][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.802650][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.809999][ T288] bridge_slave_0: entered allmulticast mode [ 27.816602][ T288] bridge_slave_0: entered promiscuous mode [ 27.832374][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.840069][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.847620][ T288] bridge_slave_1: entered allmulticast mode [ 27.853948][ T288] bridge_slave_1: entered promiscuous mode [ 27.936460][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.943542][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.951103][ T289] bridge_slave_0: entered allmulticast mode [ 27.958126][ T289] bridge_slave_0: entered promiscuous mode [ 27.967966][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.975244][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.982326][ T291] bridge_slave_0: entered allmulticast mode [ 27.988781][ T291] bridge_slave_0: entered promiscuous mode [ 27.995740][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.003026][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.010346][ T291] bridge_slave_1: entered allmulticast mode [ 28.016924][ T291] bridge_slave_1: entered promiscuous mode [ 28.023238][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.030331][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.037507][ T289] bridge_slave_1: entered allmulticast mode [ 28.043930][ T289] bridge_slave_1: entered promiscuous mode [ 28.197518][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.204608][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.211907][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.218977][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.227945][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.235028][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.242348][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.249414][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.283503][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.290617][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.297970][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.305034][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.326890][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.334054][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.341395][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.348596][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.361242][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.368754][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.376221][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.383504][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.391133][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.398887][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.406354][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.413709][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.432136][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.439226][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.464757][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.471823][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.486312][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.493549][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.502111][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.509818][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.539993][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.547202][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.555185][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.562236][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.570863][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.578345][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.586124][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.593182][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.639288][ T291] veth0_vlan: entered promiscuous mode [ 28.651713][ T288] veth0_vlan: entered promiscuous mode [ 28.679083][ T289] veth0_vlan: entered promiscuous mode [ 28.691289][ T288] veth1_macvtap: entered promiscuous mode [ 28.699164][ T290] veth0_vlan: entered promiscuous mode [ 28.710233][ T291] veth1_macvtap: entered promiscuous mode [ 28.728749][ T289] veth1_macvtap: entered promiscuous mode [ 28.751512][ T290] veth1_macvtap: entered promiscuous mode [ 28.794148][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.847189][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.947998][ T352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.948033][ T352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.000656][ T364] input: syz1 as /devices/virtual/input/input4 [ 29.146135][ T373] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 29.178128][ T383] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 29.188957][ T383] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 29.218199][ T385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.218265][ T385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 29.228430][ T385] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.237873][ T385] rust_binder: Read failure Err(EFAULT) in pid:15 [ 29.394480][ T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.554435][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 29.563383][ T330] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 29.571974][ T330] usb 1-1: config 0 has no interface number 0 [ 29.578731][ T330] usb 1-1: config 0 interface 196 has no altsetting 0 [ 29.595522][ T330] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 29.614526][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.622657][ T330] usb 1-1: Product: syz [ 29.627314][ T330] usb 1-1: Manufacturer: syz [ 29.631966][ T330] usb 1-1: SerialNumber: syz [ 29.644708][ T330] usb 1-1: config 0 descriptor?? [ 29.694519][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.844431][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 29.855412][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.884459][ T10] usb 4-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 29.893670][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.915413][ T10] usb 4-1: config 0 descriptor?? [ 29.950603][ T330] ipheth 1-1:0.196: Unable to find endpoints [ 29.966151][ T330] usb 1-1: USB disconnect, device number 2 [ 30.324059][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 30.333450][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.351215][ T10] usb 4-1: USB disconnect, device number 2 [ 30.444476][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 30.594244][ T418] overlay: Unknown parameter 'volatile:/' [ 30.605654][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.617144][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.628623][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 30.628971][ T422] netlink: 'syz.0.28': attribute type 4 has an invalid length. [ 30.637978][ T45] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 30.647869][ T422] tipc: Enabling of bearer rejected, media not registered [ 30.654953][ T45] usb 2-1: Product: syz [ 30.668040][ T45] usb 2-1: Manufacturer: syz [ 30.674831][ T45] hub 2-1:4.0: USB hub found [ 30.713565][ T426] mmap: syz.0.30 (426) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.841818][ T432] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 30.841848][ T432] rust_binder: Error while translating object. [ 30.854216][ T432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.860608][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 30.876075][ T45] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 30.915168][ T45] usb 2-1: USB disconnect, device number 2 [ 31.254429][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.366757][ T445] Zero length message leads to an empty skb [ 31.403669][ T447] rust_binder: Error in use_page_slow: ESRCH [ 31.403695][ T447] rust_binder: use_range failure ESRCH [ 31.410082][ T447] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 31.416260][ T447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.424950][ T447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23 [ 31.434400][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 31.436481][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0033, bcdDevice= 0.00 [ 31.476322][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 31.493462][ T10] usb 4-1: SerialNumber: syz [ 31.514813][ T10] usb 4-1: config 0 descriptor?? [ 31.639508][ T461] rust_binder: Error while translating object. [ 31.639564][ T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.656263][ T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 31.739953][ T36] kauditd_printk_skb: 107 callbacks suppressed [ 31.739974][ T36] audit: type=1400 audit(1756268270.860:181): avc: denied { setopt } for pid=462 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.915902][ T36] audit: type=1400 audit(1756268271.040:182): avc: denied { ioctl } for pid=474 comm="syz.1.43" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 31.942224][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 31.954476][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.966148][ T10] usb 4-1: USB disconnect, device number 3 [ 32.062990][ T483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=483 comm=syz.2.46 [ 32.084425][ T36] audit: type=1400 audit(1756268271.200:183): avc: denied { wake_alarm } for pid=484 comm="syz.0.47" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.117052][ T483] syzkaller0: entered allmulticast mode [ 32.128564][ T36] audit: type=1400 audit(1756268271.250:184): avc: denied { mount } for pid=482 comm="syz.2.46" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.136359][ T483] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 32.159145][ T483] rust_binder: Write failure EINVAL in pid:37 [ 32.289948][ T490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 32.305241][ T490] erspan0: default FDB implementation only supports local addresses [ 32.348690][ T36] audit: type=1400 audit(1756268271.470:185): avc: denied { ioctl } for pid=496 comm="syz.2.50" path="socket:[4893]" dev="sockfs" ino=4893 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.380378][ T497] netlink: 'syz.2.50': attribute type 1 has an invalid length. [ 32.391217][ T497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 32.419859][ T506] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 32.483876][ T511] kvm: kvm [510]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 32.505023][ T511] kvm: kvm [510]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 32.551102][ T511] kvm: kvm [510]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc800 [ 32.562818][ T511] kvm: kvm [510]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc800 [ 32.764474][ T64] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.774565][ T31] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 32.810858][ T36] audit: type=1400 audit(1756268271.930:186): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.901724][ T524] fuse: Bad value for 'user_id' [ 32.906656][ T524] fuse: Bad value for 'user_id' [ 32.915724][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.926103][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.936078][ T64] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.945368][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.954490][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.962962][ T64] usb 2-1: SerialNumber: syz [ 32.967849][ T31] usb 4-1: config 1 has no interface number 1 [ 32.974048][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 32.988546][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 124, changing to 4 [ 32.991023][ T530] kvm: kvm [529]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 32.999765][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 33.009565][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.022707][ T31] usb 4-1: string descriptor 0 read error: -22 [ 33.034059][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.044882][ T532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 33.045239][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.069945][ T31] usb 4-1: low speed audio streaming not supported [ 33.190766][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 33.202455][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.215718][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 33.225181][ T36] audit: type=1400 audit(1756268272.350:187): avc: denied { read } for pid=533 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.225189][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.226173][ T10] usb 3-1: config 0 descriptor?? [ 33.258275][ T64] usb 2-1: 0:2 : does not exist [ 33.260004][ T522] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 33.265073][ T64] usb 2-1: unit 5: unexpected type 0x09 [ 33.281013][ T36] audit: type=1400 audit(1756268272.400:188): avc: denied { unlink } for pid=533 comm="syz.0.61" name="#1" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.281718][ T514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.308813][ T64] usb 2-1: USB disconnect, device number 3 [ 33.317441][ T514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.324807][ T36] audit: type=1400 audit(1756268272.430:189): avc: denied { mount } for pid=533 comm="syz.0.61" name="/" dev="overlay" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.334163][ T330] usb 4-1: USB disconnect, device number 4 [ 33.675619][ T10] wacom 0003:056A:0020.0001: unknown main item tag 0x0 [ 33.682747][ T10] wacom 0003:056A:0020.0001: item fetching failed at offset 3/5 [ 33.690710][ T10] wacom 0003:056A:0020.0001: parse failed [ 33.697110][ T10] wacom 0003:056A:0020.0001: probe with driver wacom failed with error -22 [ 33.864617][ T541] capability: warning: `syz.1.63' uses deprecated v2 capabilities in a way that may be insecure [ 33.901481][ T543] rust_binder: Error while translating object. [ 33.901521][ T543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.909716][ T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 33.919548][ T545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.971555][ T545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.000987][ T45] usb 3-1: USB disconnect, device number 2 [ 34.025799][ T36] audit: type=1400 audit(1756268273.150:190): avc: denied { setopt } for pid=551 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.559705][ T565] 9pnet_fd: Insufficient options for proto=fd [ 34.870346][ T330] rust_binder: 567: removing orphan mapping 0:24 [ 34.877277][ T330] rust_binder: 567: removing orphan mapping 24:96 [ 34.976797][ T579] ======================================================= [ 34.976797][ T579] WARNING: The mand mount option has been deprecated and [ 34.976797][ T579] and is ignored by this kernel. Remove the mand [ 34.976797][ T579] option from the mount to silence this warning. [ 34.976797][ T579] ======================================================= [ 35.013481][ T581] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.013506][ T581] rust_binder: Read failure Err(EFAULT) in pid:76 [ 35.015714][ T579] exFAT-fs (rnullb0): invalid boot record signature [ 35.035195][ T579] exFAT-fs (rnullb0): failed to read boot sector [ 35.041766][ T579] exFAT-fs (rnullb0): failed to recognize exfat type [ 35.259362][ T606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 35.266802][ T64] rust_binder: 599: removing orphan mapping 0:24 [ 35.318613][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.436591][ T616] rust_binder: Got transaction with invalid offset. [ 35.436654][ T616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.443458][ T616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 35.473220][ T620] syz.2.90: attempt to access beyond end of device [ 35.473220][ T620] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 35.496316][ T620] EXT4-fs (loop2): unable to read superblock [ 35.506155][ T45] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 35.514850][ T45] usb 1-1: config index 0 descriptor too short (expected 65023, got 36) [ 35.523231][ T45] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 35.531961][ T45] usb 1-1: can't read configurations, error -22 [ 35.587735][ T625] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 35.595177][ T625] rust_binder: Write failure EINVAL in pid:36 [ 35.595323][ T625] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 35.608703][ T625] rust_binder: Write failure EINVAL in pid:36 [ 35.609445][ T626] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 35.623146][ T626] rust_binder: Write failure EINVAL in pid:36 [ 35.669307][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 35.845100][ T45] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 35.854124][ T45] usb 1-1: config index 0 descriptor too short (expected 65023, got 36) [ 35.862894][ T45] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 35.871691][ T45] usb 1-1: can't read configurations, error -22 [ 35.878663][ T45] usb usb1-port1: attempt power cycle [ 36.024783][ T639] rust_binder: Write failure EFAULT in pid:50 [ 36.182138][ T642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.188323][ T642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 36.227315][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 36.241693][ T648] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.244203][ T648] rust_binder: Read failure Err(EFAULT) in pid:94 [ 36.257682][ T45] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 36.267233][ T330] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.273416][ T45] usb 1-1: config index 0 descriptor too short (expected 65023, got 36) [ 36.288511][ T45] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 36.297054][ T45] usb 1-1: can't read configurations, error -22 [ 36.311020][ T653] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.432080][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 36.442335][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 36.448673][ T330] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 36.456888][ T330] usb 4-1: config 0 has no interface number 0 [ 36.464788][ T330] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 36.465229][ T45] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 36.474766][ T330] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.484117][ T45] usb 1-1: config index 0 descriptor too short (expected 65023, got 36) [ 36.492692][ T330] usb 4-1: config 0 interface 41 has no altsetting 0 [ 36.501523][ T45] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 36.512629][ T330] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 36.516432][ T45] usb 1-1: can't read configurations, error -22 [ 36.525939][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.540387][ T45] usb usb1-port1: unable to enumerate USB device [ 36.547877][ T330] usb 4-1: Product: syz [ 36.565918][ T330] usb 4-1: Manufacturer: syz [ 36.586590][ T330] usb 4-1: SerialNumber: syz [ 36.592528][ T330] usb 4-1: config 0 descriptor?? [ 36.598276][ T639] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.605467][ T639] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.820051][ T639] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.832891][ T330] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 36.844715][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.845180][ T330] usb 4-1: USB disconnect, device number 5 [ 36.914081][ T675] raw_sendmsg: syz.3.109 forgot to set AF_INET. Fix it! [ 36.921870][ T674] rust_binder: Read failure Err(EFAULT) in pid:55 [ 36.954064][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 36.954084][ T36] audit: type=1400 audit(1756268276.017:222): avc: denied { ioctl } for pid=682 comm="syz.3.112" path="socket:[6369]" dev="sockfs" ino=6369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.020417][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.031457][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.041397][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.054462][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.063561][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.072181][ T45] usb 2-1: config 0 descriptor?? [ 37.402253][ T36] audit: type=1400 audit(1756268276.455:223): avc: denied { create } for pid=685 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 37.438733][ T689] tc_dump_action: action bad kind [ 37.493011][ T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.493536][ T45] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 37.502194][ T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.521722][ T45] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 37.550341][ T36] audit: type=1400 audit(1756268276.591:224): avc: denied { watch watch_reads } for pid=695 comm="syz.3.115" path="/23" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.574689][ T696] rust_binder: Failed copying remainder into alloc: EFAULT [ 37.574716][ T696] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 37.581990][ T696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.590572][ T696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:67 [ 37.614631][ T36] audit: type=1400 audit(1756268276.659:225): avc: denied { create } for pid=697 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.749977][ T36] audit: type=1400 audit(1756268276.795:226): avc: denied { setattr } for pid=701 comm="syz.2.117" name="NETLINK" dev="sockfs" ino=5620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.787405][ T36] audit: type=1400 audit(1756268276.824:227): avc: denied { write } for pid=706 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.088225][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.175662][ T712] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 38.219419][ T646] usb 2-1: USB disconnect, device number 4 [ 38.243516][ T716] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 38.243929][ T718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 38.252057][ T718] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 38.261293][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 38.275829][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.289409][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.290892][ T721] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 38.299688][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.317247][ T36] audit: type=1400 audit(1756268277.340:228): avc: denied { relabelto } for pid=720 comm="syz.1.123" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 38.343676][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.352580][ T45] usb 3-1: config 0 descriptor?? [ 38.358563][ T36] audit: type=1400 audit(1756268277.340:229): avc: denied { associate } for pid=720 comm="syz.1.123" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 38.386194][ T36] audit: type=1400 audit(1756268277.350:230): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.387135][ T45] hub 3-1:0.0: USB hub found [ 38.485555][ T725] netlink: 'syz.3.125': attribute type 6 has an invalid length. [ 38.547251][ T725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.547297][ T725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 38.563642][ T10] rust_binder: 724: removing orphan mapping 0:24 [ 38.581054][ T400] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 38.598170][ T36] audit: type=1400 audit(1756268277.613:231): avc: denied { name_bind } for pid=729 comm="syz.3.127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.648256][ T45] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 38.659691][ T741] fuse: Bad value for 'user_id' [ 38.664851][ T741] fuse: Bad value for 'user_id' [ 38.714449][ T646] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.756604][ T400] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.767533][ T400] usb 1-1: config 1 interface 0 has no altsetting 0 [ 38.774635][ T400] usb 1-1: language id specifier not provided by device, defaulting to English [ 38.785240][ T400] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 38.794572][ T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.802750][ T400] usb 1-1: Product: syz [ 38.807333][ T400] usb 1-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 38.820775][ T400] usb 1-1: SerialNumber: syz [ 38.868346][ T646] usb 2-1: Using ep0 maxpacket: 32 [ 38.875659][ T646] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 16 [ 38.885954][ T646] usb 2-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.899159][ T646] usb 2-1: config 1 interface 0 has no altsetting 0 [ 38.907410][ T646] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 38.916582][ T646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.924788][ T646] usb 2-1: Product: ䷉䵳俋䓞죣쌄쟡赉Ṿ틲릖롢箦媒⩇꼦钵ྛ煠ᙯᙂ駬ᚷⲄ棃帵䵖혜ᤰ톥⚫硝暖앮蜙ẳ㪚츾制瓆툝ӵ蘓 [ 38.940789][ T646] usb 2-1: Manufacturer: ᰀ [ 38.945536][ T646] usb 2-1: SerialNumber: ࠧ [ 38.953014][ T723] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 38.960510][ T723] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 39.033699][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 39.039897][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.064274][ T45] usb 3-1: USB disconnect, device number 3 [ 39.092705][ T714] netlink: 1 bytes leftover after parsing attributes in process `syz.0.121'. [ 39.586375][ T723] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.601445][ T646] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 127 proto 1 vid 0x0525 pid 0xA4A8 [ 39.613859][ T646] usb 2-1: USB disconnect, device number 5 [ 39.620777][ T646] usblp0: removed [ 39.801097][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.934415][ T31] usb 3-1: device descriptor read/64, error -71 [ 40.179976][ T31] usb 3-1: device descriptor read/64, error -71 [ 40.235723][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.236152][ T757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.243036][ T757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 40.252590][ T757] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.262031][ T757] rust_binder: Read failure Err(EFAULT) in pid:123 [ 40.425594][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.568757][ T31] usb 3-1: device descriptor read/64, error -71 [ 40.668200][ T780] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 40.735182][ T783] 9pnet_fd: Insufficient options for proto=fd [ 40.814837][ T31] usb 3-1: device descriptor read/64, error -71 [ 40.839904][ T45] rust_binder: 0: removing orphan mapping 0:112 [ 40.926946][ T31] usb usb3-port1: attempt power cycle [ 41.272605][ T400] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 41.286424][ T400] usb 1-1: USB disconnect, device number 7 [ 41.368318][ T13] bridge_slave_1: left allmulticast mode [ 41.374764][ T13] bridge_slave_1: left promiscuous mode [ 41.381415][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.389687][ T13] bridge_slave_0: left allmulticast mode [ 41.395485][ T13] bridge_slave_0: left promiscuous mode [ 41.401606][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.572498][ T13] veth1_macvtap: left promiscuous mode [ 41.578145][ T13] veth0_vlan: left promiscuous mode [ 42.384740][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 42.384759][ T36] audit: type=1400 audit(1756268282.323:287): avc: denied { execmem } for pid=805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 42.413554][ T36] audit: type=1400 audit(1756268282.333:288): avc: denied { read write } for pid=807 comm="syz.2.152" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 42.438144][ T36] audit: type=1400 audit(1756268282.333:289): avc: denied { create } for pid=807 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 42.457721][ T36] audit: type=1400 audit(1756268282.333:290): avc: denied { create } for pid=807 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 42.477346][ T36] audit: type=1400 audit(1756268282.353:292): avc: denied { write } for pid=808 comm="syz.3.153" name="wireless" dev="proc" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 42.500484][ T36] audit: type=1400 audit(1756268282.353:291): avc: denied { read } for pid=808 comm="syz.3.153" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 42.523019][ T36] audit: type=1400 audit(1756268282.353:293): avc: denied { read } for pid=806 comm="syz.1.151" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 42.545595][ T36] audit: type=1400 audit(1756268282.353:294): avc: denied { create } for pid=806 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 42.564861][ T36] audit: type=1400 audit(1756268282.353:295): avc: denied { create } for pid=806 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 42.584187][ T36] audit: type=1400 audit(1756268282.383:296): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 45.473584][ T850] netlink: 140 bytes leftover after parsing attributes in process `syz.1.163'. [ 47.595009][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 47.595028][ T36] audit: type=1400 audit(1756268287.533:376): avc: denied { execmem } for pid=864 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 47.624626][ T36] audit: type=1400 audit(1756268287.543:377): avc: denied { create } for pid=866 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 47.644325][ T36] audit: type=1400 audit(1756268287.543:378): avc: denied { read } for pid=866 comm="syz.2.170" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 47.666883][ T36] audit: type=1400 audit(1756268287.543:379): avc: denied { read } for pid=866 comm="syz.2.170" dev="nsfs" ino=4026532309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 47.687984][ T36] audit: type=1400 audit(1756268287.553:380): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.712404][ T36] audit: type=1400 audit(1756268287.563:381): avc: denied { create } for pid=871 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 47.733040][ T36] audit: type=1400 audit(1756268287.563:382): avc: denied { create } for pid=871 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 47.753909][ T36] audit: type=1400 audit(1756268287.563:383): avc: denied { read } for pid=871 comm="syz.2.172" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 47.776645][ T36] audit: type=1400 audit(1756268287.563:384): avc: denied { read write } for pid=867 comm="syz.3.171" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:boot_t:s0" [ 47.803296][ T36] audit: type=1400 audit(1756268287.573:385): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.070365][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 53.070383][ T36] audit: type=1400 audit(1756268293.013:444): avc: denied { execmem } for pid=902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 53.101973][ T36] audit: type=1400 audit(1756268293.013:445): avc: denied { read } for pid=903 comm="syz.2.184" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 53.131274][ T36] audit: type=1400 audit(1756268293.013:446): avc: denied { name_bind } for pid=904 comm="syz.3.185" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 53.154115][ T36] audit: type=1400 audit(1756268293.013:447): avc: denied { create } for pid=903 comm="syz.2.184" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 53.175684][ T36] audit: type=1400 audit(1756268293.043:448): avc: denied { execute } for pid=903 comm="syz.2.184" path="/46/freezer.state" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 53.199077][ T36] audit: type=1400 audit(1756268293.043:449): avc: denied { create } for pid=903 comm="syz.2.184" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 53.220335][ T36] audit: type=1400 audit(1756268293.043:450): avc: denied { read } for pid=905 comm="syz.1.183" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 53.243118][ T36] audit: type=1400 audit(1756268293.043:451): avc: denied { read } for pid=905 comm="syz.1.183" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 53.265501][ T36] audit: type=1400 audit(1756268293.043:452): avc: denied { read } for pid=905 comm="syz.1.183" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 53.287891][ T36] audit: type=1400 audit(1756268293.043:453): avc: denied { read } for pid=905 comm="syz.1.183" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 54.709899][ T914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=914 comm=syz.1.186 [ 54.774188][ T922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=922 comm=syz.1.186 [ 56.423666][ T927] netlink: 'syz.3.191': attribute type 40 has an invalid length. [ 58.235547][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 58.235568][ T36] audit: type=1400 audit(1756268298.173:482): avc: denied { execmem } for pid=930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 58.277973][ T36] audit: type=1400 audit(1756268298.173:483): avc: denied { read write } for pid=931 comm="syz.3.194" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:boot_t:s0" [ 58.314112][ T36] audit: type=1400 audit(1756268298.173:484): avc: denied { write } for pid=931 comm="syz.3.194" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 58.340932][ T36] audit: type=1400 audit(1756268298.173:485): avc: denied { read write } for pid=931 comm="syz.3.194" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 58.364553][ T36] audit: type=1400 audit(1756268298.173:486): avc: denied { read write } for pid=931 comm="syz.3.194" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 58.388082][ T36] audit: type=1400 audit(1756268298.213:487): avc: denied { read write } for pid=934 comm="syz.2.193" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:boot_t:s0" [ 58.414888][ T36] audit: type=1400 audit(1756268298.223:488): avc: denied { create } for pid=934 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 58.434215][ T36] audit: type=1400 audit(1756268298.253:489): avc: denied { read } for pid=932 comm="syz.1.192" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 58.456594][ T36] audit: type=1400 audit(1756268298.253:490): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.480626][ T36] audit: type=1400 audit(1756268298.253:491): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.169644][ T962] netlink: 'syz.1.198': attribute type 46 has an invalid length. [ 62.214933][ T962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.198'. [ 62.481014][ T328] bridge_slave_1: left allmulticast mode [ 62.486785][ T328] bridge_slave_1: left promiscuous mode [ 62.492508][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.500517][ T328] bridge_slave_0: left allmulticast mode [ 62.506447][ T328] bridge_slave_0: left promiscuous mode [ 62.512700][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.520897][ T328] bridge_slave_1: left allmulticast mode [ 62.527703][ T328] bridge_slave_1: left promiscuous mode [ 62.533392][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.541825][ T328] bridge_slave_0: left allmulticast mode [ 62.547615][ T328] bridge_slave_0: left promiscuous mode [ 62.553238][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.561046][ T328] bridge_slave_1: left allmulticast mode [ 62.566819][ T328] bridge_slave_1: left promiscuous mode [ 62.572731][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.580294][ T328] bridge_slave_0: left allmulticast mode [ 62.585939][ T328] bridge_slave_0: left promiscuous mode [ 62.591679][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.792249][ T328] veth1_macvtap: left promiscuous mode [ 62.797881][ T328] veth0_vlan: left promiscuous mode [ 62.803467][ T328] veth1_macvtap: left promiscuous mode [ 62.809122][ T328] veth0_vlan: left promiscuous mode [ 62.814706][ T328] veth1_macvtap: left promiscuous mode [ 62.820275][ T328] veth0_vlan: left promiscuous mode