last executing test programs: 3m7.270457682s ago: executing program 32 (id=305): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2m53.271010277s ago: executing program 33 (id=287): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000780)={0x24, @long={0x3, 0xdd62caddc2505f72, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "ff7f04081dcd00", "9d160384587590fd5e1356120afe4414", "e22e4456", "750ec45817fefef0"}, 0x28) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x50082) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) mmap(&(0x7f00001ab000/0x2000)=nil, 0x2000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x48080) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000100)={0xe0000004}) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000200), 0x4) process_mrelease(r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000100)={{r10, 0x5, 0x40, 0x3, 0x0, 0x3, 0x4, 0x9, 0x8, 0x400, 0xa, 0x5, 0x3, 0x10, 0x5}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x88, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x5, 0x1, 0x3f}, @fda={0x66646185, 0x3, 0x2, 0x1f}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/89, 0x59, 0x0, 0x2e}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @release={0x40046306, 0x3}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0xffffffff}, @acquire_done, @request_death, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = epoll_create1(0x0) r13 = ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) ioctl$EXT4_IOC_MIGRATE(r13, 0x6609) ioctl$FS_IOC_SETFLAGS(r12, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000400)={0x80002005}) ioctl$EVIOCGEFFECTS(r11, 0x80044584, &(0x7f00000006c0)=""/128) 2m45.325122613s ago: executing program 34 (id=459): getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000080)) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x2, 0x3, 0x31, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x10, 0x8, 0xffff}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r4, r4, 0x0, 0x7a680000) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r6, 0x8ee42000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x88) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$khugepaged_scan(r10, &(0x7f0000000040), 0x8) io_setup(0x5, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2m36.498214426s ago: executing program 35 (id=389): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x10010, r0, 0x8be7d000) read(r0, 0x0, 0x0) 2m35.934755207s ago: executing program 36 (id=530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0xd}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.862003611s ago: executing program 37 (id=757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x58, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @free_buffer={0x40086303, r1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x30, 0x30, 0x30}}}], 0x81, 0x0, &(0x7f0000000900)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c"}) (rerun: 32) 2m3.569583753s ago: executing program 38 (id=712): sync() (async) sync() sync() sync() (async) sync() (async) sync() (async) sync() sync() (async) sync() sync() (async) sync() (async) sync() (async) sync() sync() sync() sync() sync() (async) sync() sync() (async) sync() sync() (async) sync() (async) sync() (async) sync() (async) sync() sync() sync() (async) sync() sync() 1m54.674403127s ago: executing program 39 (id=790): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 1m52.608470258s ago: executing program 40 (id=941): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) r4 = socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x409, &(0x7f0000000300)=ANY=[@ANYBLOB='tra,@\x00\x00\x00o=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=none,audit,mand,audit,\x00']) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x802, 0x5, 0x0, 0x3}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3dadcabc548c0bef86c149a0d2f9a596df9ec69c6ba794b8a953892c3b01dda7c0a4d5c8c43cc6522bf91a88b22c1b07a5e9375ae915bd00d632455a3f18", @ANYRESHEX=r3, @ANYBLOB=',afid=0x0000000000000000,nodevmap,access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x2020) 1m50.199782165s ago: executing program 41 (id=851): sync() (async) sync() sync() (async) sync() sync() sync() (async) sync() sync() sync() (async) sync() (async) sync() (async) sync() (async) sync() (async) sync() (async) sync() (async) sync() sync() sync() (async) sync() (async) sync() sync() sync() (async) sync() (async) sync() (async) sync() (async) sync() (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sync() 1m39.224214271s ago: executing program 3 (id=1067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000000800010002"], 0x1c}}, 0x814) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="66baf80cb8f8183385ef66bafc0cb800000000efc44111e9ef0f019c3c0a00000066bad00466b8ad3266ef460f01df0f01c466b834010f00d02ef3430f01a99429000066f3ddeb66baf80cb81cfb6881ef66bafc0c66b8ae5b66ef", 0x5b}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "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", "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.113884433s ago: executing program 3 (id=1068): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x6}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2280, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000180)=0x1) setpriority(0x1, 0x0, 0xb0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r9, &(0x7f0000000280)={0xb, 0x75, 0x2}, 0xb) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r10, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r9, &(0x7f00000001c0)='m', 0xfffffdfc}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="bc5e32fcd59b15b02cac2b8f1b02ff7cf494acd2c945f0a3021c8a83b4caae701b8ad0cef05b224cce2602c4976e855dc8b4e7b7652e4507ee331027fb54d8740129462474fcefdc6142431ea73cd6a1"}) 1m38.2201788s ago: executing program 3 (id=1069): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000af4000004000000140001"], 0x44}}, 0x40800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x7) getsockopt$sock_cred(r6, 0x1, 0x4d, 0x0, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x3d, 0x0, 0x0) close_range(r3, r3, 0x2) 1m38.136699022s ago: executing program 3 (id=1070): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) ioctl$KVM_RUN(r0, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d2e2be057ab55b90c20393393c9ca38be5c99696194e3fa7aec30523d29df817148bdab51085764365ebe6f25e6f133553fc54a532e9a984c6e8fdb37bb1cb3040052f99a1784c8c302356e1bba10d14f890f0f84261bef6bfd75ac1bf423b7c640bdfb585f69ce81c1a67888bfaa66ca19f53f84c3d3fb8ae799f63ca203", @ANYRESHEX, @ANYBLOB=',directio,\x00']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 1m38.073704433s ago: executing program 3 (id=1071): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x7, 0x7}) close(r0) r1 = dup(r0) r2 = openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x101000, 0x134) r3 = accept$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) mkdir(&(0x7f0000000180)='./file0\x00', 0x83) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x2}, {r4, 0x340a}, {r1, 0x600}, {r5, 0x4}, {r0, 0x110}, {r0, 0x4}, {r0, 0x4502}, {r0, 0x180}, {r3, 0x8500}, {r1, 0x1100}], 0xa, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x1]}, 0x8) mount$incfs(&(0x7f0000000340)='./file0\x00', 0xfffffffffffffffd, &(0x7f0000000380), 0x8000, &(0x7f00000003c0)={[{@readahead={'readahead', 0x3d, 0x1a5}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x51}}, {@no_bf_cache}, {@readahead={'readahead', 0x3d, 0x3}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_hash}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x66, 0x64, 0x62, 0x35, 0x66, 0x33, 0x63], 0x2d, [0x37, 0x39, 0x39, 0x61], 0x2d, [0x36, 0x33, 0x54, 0x33], 0x2d, [0x30, 0x31, 0x62, 0x62], 0x2d, [0x33, 0x33, 0x62, 0x38, 0x63, 0x0, 0x37, 0x35]}}}, {@measure}]}) read$FUSE(r5, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat2(0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x10102, 0x0, 0x18}, 0x18) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000002580)='net/mcfilter6\x00') ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000025c0)={@remote, 0xe, 0x3, 0x2, 0x5, 0x1, 0xffff}, 0x20) readv(r9, &(0x7f0000002900)=[{&(0x7f0000002600)=""/212, 0xd4}, {&(0x7f0000002700)=""/177, 0xb1}, {&(0x7f00000027c0)=""/249, 0xf9}, {&(0x7f00000028c0)=""/19, 0x13}], 0x4) read$FUSE(r7, &(0x7f0000002940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$trusted_overlay_opaque(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0), &(0x7f0000004a00), 0x2, 0x1) accept4$tipc(r7, &(0x7f0000004a40)=@name, &(0x7f0000004a80)=0x10, 0x80800) socket$can_bcm(0x1d, 0x2, 0x2) truncate(&(0x7f0000004ac0)='./file0\x00', 0x8) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000004b00)={0x1fe, 0x3, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r11 = fsopen(&(0x7f0000004b40)='affs\x00', 0x1) kcmp$KCMP_EPOLL_TFD(r6, r10, 0x7, r4, &(0x7f0000004b80)={0xffffffffffffffff, r11}) inotify_add_watch(r1, &(0x7f0000004bc0)='./file0\x00', 0xc0000d9e) syz_genetlink_get_family_id$smc(&(0x7f0000004c00), 0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000004c80)={0x4, 0x38, '\x00', 0x0, &(0x7f0000004c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1m37.165942571s ago: executing program 3 (id=1077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x528, &(0x7f0000000200)=""/108, 0x6c, 0x2, 0x37}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xb0}}, 0x0}}], 0x0, 0x0, 0x0}) 1m28.723760677s ago: executing program 42 (id=1124): unshare(0x22020600) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x40000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private1, 0x56}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) (async) socket(0x80000000000000a, 0x2, 0x0) (async) close_range(0xffffffffffffffff, r4, 0x0) (async) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) (async) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x7, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/181, 0xb5}], 0x3, &(0x7f00000004c0)=""/115, 0x73}, 0x2}], 0x1, 0x10042, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x7ffffffe, r6, &(0x7f00000001c0)={0x30000000}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="20000000110001000000000300000000100000e60baceb1c5c521945d0af0726aec262f2d3e5a18128a861ccd69248b95939031cdc379adfb92e812d896d013b8dee33079b5d2a5871d4b00d44877b919a190c7b94e0fd0cb7c59b787f601ced8d40f5e3d004b54e98c3cf021f5062a3cbeaf89bbc490c035d8a31d9c355cb8b516838f49d9a1ccb54"], 0x20}], 0x1, 0x0, 0x0, 0x10}, 0x2c008880) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1m27.267284446s ago: executing program 0 (id=1132): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0xc0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m27.146676128s ago: executing program 0 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}], [{@subj_user={'subj_user', 0x3d, 'mountinfo\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@seclabel}, {@permit_directio}]}) (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1m27.085863079s ago: executing program 0 (id=1134): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) syz_clone(0x9000500, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)="d3e0606f1e0437d6d6936ce7696b787e391a2fa69cf876f3a5f1ec30ac692d611e5d1625426157a15bd7ec43b00344c735936e74574924b6d3d0906c510b3605efcbfa54ef95fa03b88805") openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000001100)="26650f01d1f20faef2ba200066edf367f3d9faf0838000000066b80c0000000f23c00f21f86635030006000f23f866b9d10200000f32f20f79cd64f16764360f38cc5606", 0x44}], 0x1, 0x5c, 0x0, 0x0) 1m27.0324318s ago: executing program 0 (id=1135): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0xc0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x8100) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}}, {{@in=@multicast1, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="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"], 0x21c}}, 0x0) mlock(&(0x7f0000470000/0x4000)=nil, 0x4000) r2 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r3, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x9, 0x1, 0x1, 0xced6, 0x5, "89f12c7c388ccc60"}) ioctl$TCSETS(r4, 0x40045431, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x9, 0x5, 0xfffffffe, 0xfff, 0xe, "a2c53e107a1d7ee608181ca66b88c90a27c5e7"}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x8, 0x3}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r3], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x4040004) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8"}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b08000340"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 1m27.005029711s ago: executing program 0 (id=1136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000002080)={0x0, 0x12c, @ioapic={0x80a0000, 0xffffff75, 0x0, 0x6, 0x0, [{0x40, 0x7, 0x9, '\x00', 0x7}, {0x1, 0x6, 0x1, '\x00', 0x2}, {0xdc, 0x10, 0x6, '\x00', 0xb}, {0xf, 0x3, 0x1, '\x00', 0xc}, {0xa7, 0x40, 0x28, '\x00', 0xfe}, {0xd0, 0x5, 0x5b, '\x00', 0x9}, {0x3, 0x0, 0x9, '\x00', 0x6}, {0x9, 0x8, 0x34, '\x00', 0x8}, {0x2, 0x0, 0x3, '\x00', 0x1}, {0xa, 0x1, 0x0, '\x00', 0x2}, {0xa, 0x1, 0x32, '\x00', 0xf}, {0x3, 0x4, 0xfc, '\x00', 0x7}, {0xce, 0x0, 0x6, '\x00', 0x3}, {0x3, 0xf2, 0x3, '\x00', 0x43}, {0x7, 0x29, 0x4, '\x00', 0x80}, {0x2, 0xfb, 0x8, '\x00', 0x94}, {0x9, 0x1e, 0x8, '\x00', 0x9}, {0x10, 0xa, 0xf, '\x00', 0x1}, {0x6, 0x2, 0x7d}, {0xb8, 0x17, 0x81, '\x00', 0x2}, {0x5, 0x5, 0x4, '\x00', 0x6}, {0x40, 0x3, 0xf8, '\x00', 0x1a}, {0x9, 0x6, 0x7, '\x00', 0x80}, {0x43, 0x7, 0x1, '\x00', 0x1}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100400, 0x0) read(r5, &(0x7f00000001c0)=""/219, 0xdb) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000dc0)=0x7) r6 = socket(0x10, 0x3, 0x4) r7 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)={0x14, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="27000203"]}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000580)={0x0, 0x3, 0x2, "11e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x82, 0x2, "8370"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x84, 0x2, "3db6"}, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x3, 0x43, "519cca252e0654a35d5cc9ff250d61b1a99cb2ba319f8aa628e2adc025899a5ea9dcb72c0cd6eba6393c5fb3818f76e8085f20331888db32daecb6c0ece616db0e30c1"}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x200, 0x20}}, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x4}, 0x0}) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd706a83c66f5c5bb7d9000500d2000f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000022c0), &(0x7f0000002300)=0x14) 1m26.997939201s ago: executing program 43 (id=1047): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() prctl$PR_SET_KEEPCAPS(0x8, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) times(&(0x7f0000002280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m26.922626493s ago: executing program 0 (id=1138): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0xfc937e2fe0fdebf6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x4, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x1, 0x8, 0x41e, &(0x7f0000000540)="d7"}, {0x0, 0x748, 0x2, &(0x7f0000000580)="6d4ae06a7cdd02955af497f53e653460ea64a2588122f2dbd4d66a25934991a1f08c1a82795422456c41a612b8057922d8592639a1cea1f11d8cca49c5259727787e084fe50858291bdcc74a223c71dcfb9120a91bc950c5fe7e001103ca1a4151da68a273482acd74b37fdaae9df52334403f09ea0b3586a60fc4904701a42006846a3438a95ad0f609144f888fecf3644de50d45638d9122191ccdbd61bddc509c3510df14774831f86eecd8d8c3aba179589c4351f91cd532dd38b28ecf705eed28edd185df6bd29b35c6b050ebc34cb53ce26c8e27561d62aed79c8fc68f56e010166a478548ee"}, {0x3, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x100007, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000200)={0x20, 0x15, 0x43, "7f70924a5eb0"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES16=r5, @ANYBLOB="22961fb158e0374721f5d8b52935c1cb05d9e44ffbfce7ae687c4ca427d12fe96213b0e761b3f913cbe862bb69cdd943bde9ee9b9bd73809fdf277421a69d7f96d982c823b3a9a640b550839685dfa5da1b3abef4e5d9113d8f1792fec4b4d22acb3ab5408b6baf9cb4e3398c0ae5e3691613c76878e3700bf19ce18f0b4e37010f05cf2fd3004a11bbdf7410aa9abed82b242657f31a6d4"], 0x20}}, 0x4000009) (async) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000110300010005010101000144050009058103ff030c0000ee614c2c20eb2824c17390bfdb306e040cdf202cfa50a499510d33bf7c5c5da1745cf8c73b8d226bbfd4c1dd672adc134a3c0961f8ff54b9b7be8506"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) 1m26.833368094s ago: executing program 44 (id=1138): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0xfc937e2fe0fdebf6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x4, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x1, 0x8, 0x41e, &(0x7f0000000540)="d7"}, {0x0, 0x748, 0x2, &(0x7f0000000580)="6d4ae06a7cdd02955af497f53e653460ea64a2588122f2dbd4d66a25934991a1f08c1a82795422456c41a612b8057922d8592639a1cea1f11d8cca49c5259727787e084fe50858291bdcc74a223c71dcfb9120a91bc950c5fe7e001103ca1a4151da68a273482acd74b37fdaae9df52334403f09ea0b3586a60fc4904701a42006846a3438a95ad0f609144f888fecf3644de50d45638d9122191ccdbd61bddc509c3510df14774831f86eecd8d8c3aba179589c4351f91cd532dd38b28ecf705eed28edd185df6bd29b35c6b050ebc34cb53ce26c8e27561d62aed79c8fc68f56e010166a478548ee"}, {0x3, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x100007, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000200)={0x20, 0x15, 0x43, "7f70924a5eb0"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES16=r5, @ANYBLOB="22961fb158e0374721f5d8b52935c1cb05d9e44ffbfce7ae687c4ca427d12fe96213b0e761b3f913cbe862bb69cdd943bde9ee9b9bd73809fdf277421a69d7f96d982c823b3a9a640b550839685dfa5da1b3abef4e5d9113d8f1792fec4b4d22acb3ab5408b6baf9cb4e3398c0ae5e3691613c76878e3700bf19ce18f0b4e37010f05cf2fd3004a11bbdf7410aa9abed82b242657f31a6d4"], 0x20}}, 0x4000009) (async) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000110300010005010101000144050009058103ff030c0000ee614c2c20eb2824c17390bfdb306e040cdf202cfa50a499510d33bf7c5c5da1745cf8c73b8d226bbfd4c1dd672adc134a3c0961f8ff54b9b7be8506"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) 1m20.92148094s ago: executing program 45 (id=1077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x528, &(0x7f0000000200)=""/108, 0x6c, 0x2, 0x37}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xb0}}, 0x0}}], 0x0, 0x0, 0x0}) 1m19.517974468s ago: executing program 6 (id=1204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x1}) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) 1m19.507288318s ago: executing program 6 (id=1205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private1, 0x56}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_usb_connect$uac1(0x6, 0xff, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x1, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0x3}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x2, "444434154f"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x2, 0x6, [0x6, 0x6, 0xa, 0x4, 0x2, 0x8], 0xd}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x6, "40e70b32e4db"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x1, 0x7, "fd86"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x3, "9285"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x2, 0xf7, 0x2, "6cb9709733"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x76c, 0x6, "e6c596"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x3, 0x5, {0x7, 0x25, 0x1, 0x0, 0xf, 0x6d16}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x9, 0x3, "d4b89934ea"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x59, 0x2, "4772de309e94bf"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x4, 0x5, 0x7, "7e83"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x40, 0x8, "b6a3ba", "80"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x2, 0xfc, 0x4, '<'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x7f, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xf, 0x19, 0xff, 0xff, 0x9}, 0x25, &(0x7f0000000500)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "709a1311f07cb7380e9027cecc680751"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x1, 0x7, 0x8}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x843}}]}) (async) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40040, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) (async) socket(0x80000000000000a, 0x2, 0x0) (async) close_range(0xffffffffffffffff, r3, 0x0) (async) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) (async) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x7, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x7ffffffe, r5, &(0x7f00000001c0)={0x30000000}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.449794929s ago: executing program 6 (id=1206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000000700)="0379aec9900ecd9fcebed12d6d44", 0xe}], 0x2, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) close(r3) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m19.306834592s ago: executing program 6 (id=1211): process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0xfffffffffffffc53) write$binfmt_script(r0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0xfffffffffffffc53) (async) write$binfmt_script(r0, 0x0, 0x0) (async) 1m19.303694432s ago: executing program 6 (id=1212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@msize={'msize', 0x3d, 0x3}}, {@cache_mmap}, {@cache_none}, {@posixacl}, {@noextend}, {@noxattr}, {@access_any}, {@cachetag}, {@debug}], [{@subj_role={'subj_role', 0x3d, './.'}}, {@fowner_lt={'fowner<', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x65, 0x39, 0x33, 0x35, 0x34, 0x66, 0x64], 0x2d, [0x32, 0x37, 0x32, 0x38], 0x2d, [0x61, 0x38, 0x33, 0x64], 0x2d, [0x36, 0x64, 0x35, 0x34], 0x2d, [0x64, 0x0, 0x61, 0x63, 0x36, 0x61, 0x39]}}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '%'}}]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) getdents64(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.214295934s ago: executing program 6 (id=1214): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b98d0400000f32b880018ee067660f350f01d166b9940a000066b80048000066ba000000000f3066b8640000000f23c00f21f8663503000a000f23f866b9040100c00f320f5429660f73fc95670f234f", 0x51}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_gettime(r3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) read(r0, &(0x7f0000000040)=""/63, 0x3f) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r6 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) waitid(0x1, r6, 0x0, 0x4, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x2, r6}) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x800000}, 0x18) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m19.146836085s ago: executing program 46 (id=1214): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b98d0400000f32b880018ee067660f350f01d166b9940a000066b80048000066ba000000000f3066b8640000000f23c00f21f8663503000a000f23f866b9040100c00f320f5429660f73fc95670f234f", 0x51}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_gettime(r3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) read(r0, &(0x7f0000000040)=""/63, 0x3f) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r6 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) waitid(0x1, r6, 0x0, 0x4, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x2, r6}) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x800000}, 0x18) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m3.926380764s ago: executing program 2 (id=1405): unshare(0x62040200) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) unshare(0x62040200) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) (async) 1m3.834289036s ago: executing program 2 (id=1406): clock_gettime(0x0, &(0x7f0000000680)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x0, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)='\x00'}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x46, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x6, 0x0}]}) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x5) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf2501000000086dc5f041c1e0f396da21a7ede41d31d3f961307fd75de722c366dcf8786ce095af4002b5500ccf614b9fcaffe9319aaa445be1228306ced2fae7703b1cfba3f6664e37a4e60d06adcb1bef2944d95e19efc144b0b72075a4fbf7dee6f42e16b528e603177189703cb0e6a08871b0cbdca93d7b6d"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc880) getpeername$packet(r5, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001340)=0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0xf, 0xa, 0x7}]}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r5) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) listen(0xffffffffffffffff, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.713672678s ago: executing program 2 (id=1407): openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESDEC=r1], 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000080)='.\x00', 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x51f, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x40, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES64=r6, @ANYRES64=r8], 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x0) getdents64(r8, 0x0, 0x0) 1m3.673106379s ago: executing program 2 (id=1408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x25dfdbfc, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804) prctl$PR_GET_IO_FLUSHER(0x3a) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2ffdfff, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000030000000000000800040001000000", 0x24) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, &(0x7f0000001140)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x2000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfde, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m3.62860108s ago: executing program 2 (id=1409): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x9, {{0x2, 0x4e21, @private=0xa010102}}}, 0x88) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000180)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x4008000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x16}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10a) mkdir(0x0, 0x100) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m3.389604255s ago: executing program 5 (id=1412): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000006c0)={0x12, 0x0, 0x3}) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000480)={0x7, 0x5, 0x3}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r7 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) (rerun: 32) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004002}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000006240)={0x0, 0x0, &(0x7f0000006200)={&(0x7f0000005040)={0x14, 0x1b, 0x1, 0x70bd28, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0xc0) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) (async) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r9, 0x70505) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r9) (async) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f0000000140)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f0000001a80)={@my=0x1}) (async) recvmmsg$unix(r7, &(0x7f0000000b80)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000400)=""/117, 0x75}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f0000000740)=""/31, 0x1f}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000000d00)=""/108, 0x6c}, {&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/59, 0x3b}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/44, 0x2c}, {&(0x7f0000000a00)=""/162, 0xa2}], 0xa}}], 0x3, 0x40012001, &(0x7f0000000c40)={0x0, 0x989680}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m3.319946566s ago: executing program 5 (id=1413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r3, 0x9) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7f, 0x0, 0x3, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 1m3.319612216s ago: executing program 5 (id=1414): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000002c0)={0x3f}) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) (async, rerun: 64) write$uinput_user_dev(r3, &(0x7f0000000300)={'syz1\x00', {0x8381, 0x3, 0xff1e, 0x401}, 0x16, [0x8, 0x80000001, 0x81, 0x4, 0x10, 0x9c71, 0xe, 0xc, 0xfffffffc, 0x0, 0x8, 0x46e, 0x7fffffff, 0x7, 0xc, 0x0, 0x0, 0xac, 0x4, 0x3, 0x0, 0x2e8, 0x8, 0x41, 0x2, 0x80, 0x2, 0x1, 0x8, 0x0, 0x229b, 0x8, 0x6, 0x4, 0x80, 0x6a5f, 0x5, 0x81, 0x5, 0x7dbf, 0x8, 0x81, 0x6, 0x8, 0x8, 0x8001, 0x6, 0x3, 0x2, 0xfffffeff, 0xd0, 0x5, 0x9, 0x0, 0x90f, 0x8, 0x4507, 0x7, 0x2, 0x7, 0x4, 0x7f, 0xe, 0x4], [0x4, 0x0, 0x8, 0x3, 0xd, 0x4, 0x4, 0xfffff923, 0x4, 0x7f, 0x80004, 0x4096, 0x9, 0x0, 0x9, 0x81, 0x80, 0xf7, 0x8, 0x7, 0x2, 0xc440, 0x7f, 0x9, 0x5, 0x6, 0x3ff, 0x10, 0x80, 0x1, 0x7, 0xffffffff, 0x80000001, 0x5, 0x2, 0xc, 0xfffffc00, 0x65b2, 0x4, 0x7, 0xfff, 0x3, 0x5, 0x7, 0x7, 0x0, 0xf72, 0x7fffffff, 0x8001, 0x9, 0x3, 0x22e, 0x6, 0x90000000, 0x4, 0xd91b, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x1, 0xfffffff7], [0x400, 0x2, 0xdcf, 0x9, 0x95, 0x7d, 0x9, 0x2, 0x7, 0x80000000, 0x5, 0x7c, 0x6, 0x6, 0x3, 0x457, 0x983f, 0xff, 0x0, 0x7, 0x4, 0x4, 0x1, 0x8, 0x8, 0xfff, 0x5, 0x0, 0xf7b, 0x6, 0x3, 0x6, 0x7, 0x5, 0x8, 0x101, 0x0, 0x6, 0x4, 0xb33, 0xfae0, 0xfffffffb, 0x8, 0x68a2, 0x8, 0x35bd, 0x9b, 0x4, 0x9, 0x2, 0x802, 0x20005, 0x7, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x6, 0x401, 0x2, 0x1, 0xfffffffc], [0x4, 0x6, 0x4, 0x8, 0x6, 0x4f83, 0x3ff, 0x7, 0x0, 0x9, 0x6, 0xffff, 0x1, 0x5, 0x6, 0x1, 0x108, 0x4, 0x7, 0x3, 0xa07, 0x2, 0xa, 0xeb13, 0x3ff, 0x7fff, 0x468, 0x6, 0x2, 0x2b0, 0x4, 0x3ff, 0x7f, 0x6c, 0x80000001, 0xd, 0x0, 0xc, 0xfffffc00, 0x3, 0x6, 0x7fff, 0x3, 0x2, 0x5, 0xff000000, 0x0, 0x3, 0x0, 0x4, 0x67, 0x6, 0x10001, 0x5, 0x9, 0x8, 0x10, 0x1, 0x7, 0x7, 0x8000, 0x10, 0x1000, 0xcfe0]}, 0x45c) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.317908996s ago: executing program 5 (id=1415): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pidfd_send_signal(r0, 0x3e, &(0x7f0000000040)={0x1, 0x47, 0x48000000}, 0x0) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f00000000c0)={{0x1000, 0x80a0000, 0x8, 0xf7, 0xf9, 0x9, 0x1, 0xe4, 0x9, 0x1, 0x3, 0xb}, {0x4000, 0xeeee8000, 0x9, 0x26, 0xe, 0x8, 0x6, 0x5, 0x3, 0x80, 0x3, 0x8}, {0x100000, 0x100000, 0xc, 0x7f, 0xff, 0x81, 0x6, 0x6, 0x5e, 0x10, 0xc7, 0x2c}, {0x1000, 0xd5d51000, 0x0, 0x4e, 0x4, 0x0, 0x6, 0xff, 0x10, 0x2, 0x7, 0x6}, {0x8000000, 0x10000, 0xb, 0x6, 0x0, 0x5, 0x7c, 0x9, 0x1, 0x2, 0x57, 0x5}, {0x0, 0x100000, 0xc, 0x3, 0x9, 0xd, 0x2, 0x9, 0x2, 0x6, 0x9, 0x8}, {0x80a0000, 0x1000, 0xa, 0x1a, 0x6, 0x1, 0x4, 0x5, 0x6, 0xfd, 0x9, 0x7}, {0xeeee8000, 0xeeee0000, 0xb, 0x6, 0x80, 0x10, 0x6, 0x1, 0xe, 0x0, 0x4, 0x9f}, {0xeeef0000, 0x9}, {0x10000, 0x8}, 0x60000000, 0x0, 0xdddd0000, 0x420040, 0x0, 0x2801, 0xf000, 0x1, [0xf, 0x2, 0x1, 0x2]}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0xf40, 0x80000000, 0x7f, 0xd4, 0xeb3, 0x7f, 0xffffffffffff8000, 0x101, 0x9, 0x8, 0x9, 0x8001, 0x5], 0x10000, 0x90040}) close_range(r0, r0, 0x0) fcntl$setpipe(r0, 0x407, 0x80000001) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200a00, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000380)={{r1}, 0x0, 0x6, @inherit={0x58, &(0x7f0000000300)={0x0, 0x2, 0x1000, 0x8, {0x3a, 0x4, 0x3c, 0x9db, 0x1}, [0x10000, 0x1]}}, @subvolid}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) fsync(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000013c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001440)=r3) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000001480)={0x1, 0x0, [{0x40000000, 0x9, 0x2, 0x2, 0x9, 0xd7, 0x7}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001500)={0xa3, 0x0, &(0x7f00000014c0)}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001580)={'syzkaller1\x00', {0x2, 0x1000, @private=0xa010101}}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl(r4, 0x3b, &(0x7f0000001600)="f4ff433e32ef22dfaee586fe") ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000001640)=0x7) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000001680)={0x6, 0x7f, 0x8f3}) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000016c0), &(0x7f0000001700)=0xc) ioctl$TCXONC(r2, 0x540a, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x488040, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r7, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9d}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xfffff69c}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000018c0)={{0x3, 0x1}, 0x100, './file0\x00'}) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000001a00)="47229adf7566c492cca814fd15385b326eb65115a2ea1ba7fe47dc64322848f610db882061d693117c6b36ef506eadc5fe53c0cf0407aeeec017005915533a39cfe1f9e14a01679570b4c85239fef1ac6f54028f316a32e9c140efaffbba5bd06506fa54644b0ebc9917dbb71b1d09e121dc1f6a0b8036625126acc3bdc12431a061e681afd57a96620c8d791e562ebdf5107c8b43bd3286df45b5c2407363eb548f0793f571a46968b84512eb664f92e5752f03d3aeca453f07ac3caa7b0d56d9c8d7c4cbfbc46da1d4d29ed1a2d8") getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001b00)={@private, @multicast2}, &(0x7f0000001b40)=0xc) 1m3.317684976s ago: executing program 5 (id=1416): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r3, 0x1000006, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0xaaaac09, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4) setreuid(0xee01, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001}) (async) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001}) setpriority(0x1, 0x0, 0x80000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r8, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000000540)=0x4, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) 1m2.929900383s ago: executing program 2 (id=1417): sync() sync() sync() (async, rerun: 32) sync() (async, rerun: 32) sync() sync() sync() (async) sync() sync() (async) sync() (async) sync() (async) sync() (async) sync() sync() (async, rerun: 64) sync() (rerun: 64) sync() (async) sync() (async, rerun: 32) sync() (async, rerun: 32) sync() (async) sync() (async) sync() sync() (async, rerun: 64) r0 = socket$inet(0x2, 0xa, 0x3) (rerun: 64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async) sync() (async) sync() sync() (async, rerun: 64) sync() (async, rerun: 64) sync() sync() 1m2.657854369s ago: executing program 5 (id=1421): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sync() sync() sync() sync() sync() syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022010000009003ef5a2566c87a475f5a170dd37511ae1759f54c4fed645c6e016d1dc07956a97de56722ef461d10818d65a96aeb3e3d85badcdef4843e4d631e6d7c10ceeffa81a8d032c8f1be827c159540a86c230f80739cc986d87957f6ab"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x5, 0xffffffffffff0000, 0x0, 0x0, 0x1b, 0xd, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc00180cc4dae42614623061b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f00000001c0)) ioctl$LOOP_CLR_FD(r3, 0x4c01) 46.29391406s ago: executing program 47 (id=1421): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sync() sync() sync() sync() sync() syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022010000009003ef5a2566c87a475f5a170dd37511ae1759f54c4fed645c6e016d1dc07956a97de56722ef461d10818d65a96aeb3e3d85badcdef4843e4d631e6d7c10ceeffa81a8d032c8f1be827c159540a86c230f80739cc986d87957f6ab"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x5, 0xffffffffffff0000, 0x0, 0x0, 0x1b, 0xd, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc00180cc4dae42614623061b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f00000001c0)) ioctl$LOOP_CLR_FD(r3, 0x4c01) 46.278272201s ago: executing program 48 (id=1417): sync() sync() sync() (async, rerun: 32) sync() (async, rerun: 32) sync() sync() sync() (async) sync() sync() (async) sync() (async) sync() (async) sync() (async) sync() sync() (async, rerun: 64) sync() (rerun: 64) sync() (async) sync() (async, rerun: 32) sync() (async, rerun: 32) sync() (async) sync() (async) sync() sync() (async, rerun: 64) r0 = socket$inet(0x2, 0xa, 0x3) (rerun: 64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async) sync() (async) sync() sync() (async, rerun: 64) sync() (async, rerun: 64) sync() sync() 43.092124553s ago: executing program 4 (id=1513): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(r2, 0x406, r0) utimensat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000680)=@req3={0xff, 0x7, 0x81000, 0x6, 0x806, 0x7}, 0x1c) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 43.085183953s ago: executing program 4 (id=1514): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x2a438b2070df2ad5, 0x10) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000400)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) syz_open_procfs(0x0, 0x0) r4 = syz_usb_connect(0x0, 0x287, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xe0, 0x9a, 0x85, 0x20, 0x1b3d, 0x174, 0xd8d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x275, 0x1, 0x0, 0xf8, 0x50, 0x0, [{{0x9, 0x4, 0x55, 0x0, 0x8, 0x9a, 0x91, 0xe1, 0x0, [], [{{0x9, 0x5, 0x8, 0x12, 0x20, 0x7f, 0x6, 0x80}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x8, 0x6a, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0xf4, 0x80}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0xa, 0x3, 0x3}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xe, 0xd1, 0x9, [@generic={0xec, 0xe, "89106db00f235100733dab1e89e6df945e747d33f6377aad898a1c0e23df517240059565783b1aa76bb38071b761f5f5a26cc4a2d5b782c10bef654e44f8df238e4f1ef9e6014e2d921aedfd3b142f3a7db4781e0b7eee19725c4bf044a2681877081e2049c43eb848834962f56a07f44fec681ed28d01c83c28ac7c8393b84b350e6b38b3c36027046de117707eb3d2721b2fcc906503a36c2d345e73e2a4726af1d4cc9898faa90d42fe5f69485bd3b6f559ff642253dda0b1929eab06ec41c5591bbdd70d72d60998473af785fb846ab82c37cc01b3607abb8f12d9bb0c27a4f6c42ce157409ef9af"}, @generic={0xf6, 0xc, "30e12264e39f22da59f81cbf04d85cc6f2c578cf4e333d5e8c67703b1f1dc08c872b37ad18385c8c7b0c9f6d8b2093198991e817065d4f7a0ce4c824576bc2828b084f3dfb93ae339b824c6ca65eeba12802fdc665286e95f49c771ae70c9494a49b5f8332063a2b35b2bc3ae889761b4ccfc9f6e8278244106724c222d35a69cca9e2e55cc4262f2dd14a3b38a66c420696774dd9a1e44d6c8a397dc94d1770c9c44d1e18f881c749769f8f82f86090b13ed30ecb5af3c0e568b3c121f1e7d697d647e1485d0b765d135a3f5e6250aefb62da408b826cba57eacd3abaf79a746ab31587b646f212d5101bc4897a7800d9e4ceca"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x3, 0x6, 0x8}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x3, 0x7f, 0x0, [@generic={0x32, 0xa, "c58a89a1cdd1075e4bdde85c5160ae35831ad51e887f0595ca665444e5df9102557875ec14d7ae9884d0f45ac20f2532"}, @generic={0x7, 0x30, "711d0245b4"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3277309c079e3a9a, 0x2, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x40, 0x30, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'macvlan0\x00', 0x400}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x20, 0x22, 0x69, {0x69, 0x22, "a7cd6a49d26d28b6fb5f64445261bb44a8dbbe4730ff80c47936930352148d347cea20f1f520b6c229300fb9fe345a4f837280a78c36b4664f9dbbf80ea1362227f07c77651ea481199b7a88dd2e0341a2153ea8a04d2f320812714386d68d8e9636664ac33024"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000300)={0x40, 0x18, 0x51, "bfbcfda52d7d61d6e9e031bff2e92c23bc625f8684375a0da1f3ecbe831b589ee1f7e564f81e82e0903afb1329ec51da9e1b7c3b33e2a1b3227e7b85e613cb6a2535ed40d1c834f8a286d5482181c07357"}, &(0x7f0000000c40)={0xa1, 0x1, 0x400, "78b3a5e8a982c7a7d4ec2df03302c6afd9c6f749c1c10e27238fb608a0f05550441cc97ded1517a3705847d39c5fcfcbfa3d8e6e3082fd49c9d511c7f78c46e6a078142c61e89b63132565444991dc7e22a0908e0bf6228c91d362b4653c30dfc5607c788c701a13fe4973f5cfceba3687085ed229c63b5fb97f81881a37fc0bbe4633ede6a4737c4969da30021267514b931c23c7065cc409b31ac6f9784a65d7a960d3c8b7938580fd69d1eeaaf55dd3333d2b60d3b37e8bd80135ba75ad1bdf3b8b9c7369d38cc4f08b6f9a4bbcd8e5e69090bcc80a460221ee68474b294ad7af853509b0e827019be95e6f10d6fd4307d444a08fc57f91b6c7db433732f58f78b79ee66c1f06ba1d8fb955336b3cafbc57169a48d5faee4a2090c923d10a94d552bfc26861f45a63bf911bd1d6309f3e2baf0e37b1c82689f99f6fd2c87f91978938819f4882d4979f1273d03b03a3629f53e3a199c56e2ffefd3e4f88bc18a83a216f60cf750af4070f031e09fecfa2694423a5a7f59184ce62fbd67bd8adfdb71986fcf082ee88177d1dc204665591b45ba4e104d7c19bcb9574abed25987b929ce8403df0c75cc8a7fa75636b56ccc91696f2e8a33e7e31c320711c7504606af191af716e769a793858e2662992445a2f1d8d054d15a21f8eb13d60fa808633c0c3c4db7c8989f77bf7de828f949ae0a965db1df1fcdc21deaa33c9a990a0604434ab0880b45d7584d9e865b057666198d0a55f0833dedaf219dcb8a396bc5d4a0358cbf0538c2b18752e1cf08d75658dbbd5924e463502db0e5704b9d25260a92b941dc59391af2f8cb0a391b389390f0ec9c0ca4247efdf2e6c78b3b6484a49d5aa486eb29b1f32ff04ff618310f2fce27d87f205c1fda700586e4e1a992057593a48174dd8576bc2caa175163c6ce89b8446b95700500e0964a8a5de69be1544404517fd26df1427502910c528099d930acdcec329102de32b5429ccd2445587b006e6edb1740192daa8a47e633393b8cc0f2aeef823946f55ee246fc53240d490094eb7efd322a0188eab8d9da9fbc62088e530a34ff0f441435939f46ea961f9609dee65ae10889f909ddccdccc017e8299458b6932ffa860444ebe202d502a33123f9be4d753dd6b49d8a274d19130d9fce1241f473649e78f4a012ab6e3da4fc93e9309472ebe55547c0a6970139f013af7b5b6df267bfa533096b271f7c2dd07ae8d20145129aa827700d5fe491aba536b9d32ce956d10f9437d5d0b4644472e256c4531979d7890d8c46482e8e0a026ea14778c63d8b4a320c9f74ed88e4061b51f613c4df45674c077ebda1b7dd06b346fc241d63b00d42b8004a78fd6380d7c3ca39144bed2923cb351668fa2ea6976abc1470d70db356a2367cba90a94efeb30576415774bb43b62320d622d868caea828547cd8e3e26"}, &(0x7f0000000200)={0x21, 0x0, 0x2, "3c04"}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x2a438b2070df2ad5, 0x10) (async) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000400)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) (async) syz_open_procfs(0x0, 0x0) (async) syz_usb_connect(0x0, 0x287, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xe0, 0x9a, 0x85, 0x20, 0x1b3d, 0x174, 0xd8d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x275, 0x1, 0x0, 0xf8, 0x50, 0x0, [{{0x9, 0x4, 0x55, 0x0, 0x8, 0x9a, 0x91, 0xe1, 0x0, [], [{{0x9, 0x5, 0x8, 0x12, 0x20, 0x7f, 0x6, 0x80}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x8, 0x6a, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0xf4, 0x80}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0xa, 0x3, 0x3}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xe, 0xd1, 0x9, [@generic={0xec, 0xe, "89106db00f235100733dab1e89e6df945e747d33f6377aad898a1c0e23df517240059565783b1aa76bb38071b761f5f5a26cc4a2d5b782c10bef654e44f8df238e4f1ef9e6014e2d921aedfd3b142f3a7db4781e0b7eee19725c4bf044a2681877081e2049c43eb848834962f56a07f44fec681ed28d01c83c28ac7c8393b84b350e6b38b3c36027046de117707eb3d2721b2fcc906503a36c2d345e73e2a4726af1d4cc9898faa90d42fe5f69485bd3b6f559ff642253dda0b1929eab06ec41c5591bbdd70d72d60998473af785fb846ab82c37cc01b3607abb8f12d9bb0c27a4f6c42ce157409ef9af"}, @generic={0xf6, 0xc, "30e12264e39f22da59f81cbf04d85cc6f2c578cf4e333d5e8c67703b1f1dc08c872b37ad18385c8c7b0c9f6d8b2093198991e817065d4f7a0ce4c824576bc2828b084f3dfb93ae339b824c6ca65eeba12802fdc665286e95f49c771ae70c9494a49b5f8332063a2b35b2bc3ae889761b4ccfc9f6e8278244106724c222d35a69cca9e2e55cc4262f2dd14a3b38a66c420696774dd9a1e44d6c8a397dc94d1770c9c44d1e18f881c749769f8f82f86090b13ed30ecb5af3c0e568b3c121f1e7d697d647e1485d0b765d135a3f5e6250aefb62da408b826cba57eacd3abaf79a746ab31587b646f212d5101bc4897a7800d9e4ceca"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x3, 0x6, 0x8}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x3, 0x7f, 0x0, [@generic={0x32, 0xa, "c58a89a1cdd1075e4bdde85c5160ae35831ad51e887f0595ca665444e5df9102557875ec14d7ae9884d0f45ac20f2532"}, @generic={0x7, 0x30, "711d0245b4"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3277309c079e3a9a, 0x2, 0x3, 0x3}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x40, 0x30, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'macvlan0\x00', 0x400}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io$sierra_net(r4, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x20, 0x22, 0x69, {0x69, 0x22, "a7cd6a49d26d28b6fb5f64445261bb44a8dbbe4730ff80c47936930352148d347cea20f1f520b6c229300fb9fe345a4f837280a78c36b4664f9dbbf80ea1362227f07c77651ea481199b7a88dd2e0341a2153ea8a04d2f320812714386d68d8e9636664ac33024"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000300)={0x40, 0x18, 0x51, "bfbcfda52d7d61d6e9e031bff2e92c23bc625f8684375a0da1f3ecbe831b589ee1f7e564f81e82e0903afb1329ec51da9e1b7c3b33e2a1b3227e7b85e613cb6a2535ed40d1c834f8a286d5482181c07357"}, &(0x7f0000000c40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000200)={0x21, 0x0, 0x2, "3c04"}}) (async) 42.181601561s ago: executing program 4 (id=1520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5190}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x532}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c080) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40080800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x28}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000014) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000001580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000000600)={0xeec, r3, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2d, 0x48}}}}, [@NL80211_ATTR_BEACON_HEAD={0x204, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3fe0}, @device_a, @device_b, @from_mac, {0x2, 0xc7c}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x6, @random=0x8, 0x2024, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0x36, 0x1}, {0x6c}, {0x16}, {0xb}, {0x48, 0x1}, {0xc, 0x1}]}, @val={0x3, 0x1, 0xa1}, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x1, 0xab, 0x2}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x78, 0x9}}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x1, 0x0, {0xfffffffffffff766, 0xd, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x800, 0xf7, 0x95}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x9}}, @void, [{0xdd, 0xcd, "d4d303eaba3d80ae2ed8f17d0a281ee86a4447d073ff2616e4251f38d01cdee3a4fbc6aca29c60b957d701ba466e1328a4c3e31a657f9a371978917dc40b40da7631fa3b76adb63f802534fb9edb1e50ebc96077cd59589e8d17ce0a7de550a4be59d7888381eb870b9080043d197444b2ff44a10c75b1def4aae91b6294be321d35363b394d7cd70006b6547d1e58ed932462219c52e9e490b7c229732a3fc428e5c0fed1294b51d1662cfd1aefc7d57f6f5b6ac4e76a4df6dd133570404cd81ad2b794786a65092b5c8e0a85"}, {0xdd, 0x67, "fa921595442a9c71f8b0630848743e5ef9ce3f75740cba6a606dcfce16a68b6d6f8ac671df0748f12e16f23476f492a308ff4325d03db2a6261484f42e3fa162bc121c22c7f1a5e7ac6ab885628d3bdc223d42688a4ec7183e6d68ea647c97d8f4d8c4e1c535eb"}, {0xdd, 0x4f, "b087b5b0750f83cfcb2278d0d9f9b4de889bbce5132a1f8103c73ced9f7f36d40d36b0ebd8d863a05289f09b754dd864e7b27efcf6a41edf34b4d3ed3a506eecd6e2dbacae9aa74c9744253e8f8cc8"}]}}, @NL80211_ATTR_BEACON_HEAD={0xee, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @initial, {0x7, 0xb}}, 0x0, @random=0x3, 0x4000, @val={0x0, 0x1d, @random="0bf5d98acacc097479b980fc32881b2d3baf94ce8dd6e0556112d88d2c"}, @val={0x1, 0x1, [{0xc}]}, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x63, {0x4, 0xa4, 0x7, "34fa55c4dccc6a18944487da9cb00ad029025a1fce011646db3585be4372f189e9db0f854af631673e4f905029a03d6d513bce577b93952ec2ce87295dd797b9f4a30690e7f8814d24cfe8fd226bbd05bc9bce572752175fcfd3431daa71c689"}}, @val={0x25, 0x3, {0x0, 0x0, 0x7}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x24, 0x4}}, @val={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x8, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x400, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x40}}, @void}}, @NL80211_ATTR_PROBE_RESP={0x17b, 0x91, "b53d25b252e6515bd9a93e19f031f4346d9afa0b83d7498b84392f54fdb8e6fe44543c7c54180dd7f2abbf1b179a8045b64369e54ab00989c165d6876d83a8d46b9ac91a14db27c0ef878cfa1a4432aeaba4483810adb5a59babf6805f13fb14512ff0c6dce201346735d47264c6520c3ccdf370d9f75bcdc6fd582128acdfcc9db929888df5577a9fdeb17823662d18e2fa4da52609433ce5e54606b1e052a14f503bb474f650f83dbe850f5ccbd9337e3e51021d63ba5ea1ab72aa8eafd518ad3c202918caf15114b8ccac7495cb1a12e92f17b519cb2ac62992122a70a2426bbf6c2fc3511175e477a4bbbd9f7a23023bbac5c0e8ceb0b52ae2cbc5eaeb09e16a32f7af125cf869a57b1c3ab383f66eb270aecd802200f0a73715fa4592070dfbc6194ccd41eaa09a56a84acbf24f172936718c7085f3157a9141e7f8fb06e350438578997ee2bf1fed4c4cf0d4dccec05ea5e67ff4bb04766128ab25155bb106c3173a27f390db216a39f3519ce5f060b43abd0d49"}, @NL80211_ATTR_PROBE_RESP={0x890, 0x91, "33a4470a246e046e261d9b4e27b5f9bf65d46fa34a10800e427b4987dcd3e3e06ceab4b15175f73e6812102802f17877696853a8c433502cc6acd8d75e6a9b331c0eda1066c1a93ab3a832f408fc118a73958d574179c4ac55a5e30cd86c9d9fd74631e30301aa0626d80d2b89e974314aa5a5bb4bb001bf982bdc139ebbc104e4680619823ba472dbe07b13214d7b9f099b61eeb37c7649a6262060657b237c757987f0b4598b65ccb69d1899270d77eddcfe7540b5620041ea4fde95321f12c2760a017544a3b67bb9b0d272d32e77c1c7d978c957d57c2899930f512c5689de8a1af472b18c38dacd654390525a9f5a83f5ab1147ee84b278ca0a7567f2da4fe03a2cdd0952cae53bea43139d9792e7e9e7b1f06e1e0ef7e78371d59439a294d16e39be5eeca7cf3102d682f618158f178efcea6222ace303bd06a86204748bbb97436fa01551602de2ac4ac330ed3f58dbcd813fb8040779a68a1631a9f157104fb6dfcf6f1b26f5839484fbd2cab8ba407f882a0aed420bbe54323ac9c7d299f6e170bfa751b7d5e96123fa869b3763a7571c9f9f5ed07d8bedbdaffc50b8b7d88118cb46679bbbdeed0dd910ef978862b6086973569093e0302ac497b0b9589c6ba5030773762661f49953d29a36c5b1c5c6352c726731e4929e38be1981a2310c6f786a3275923e0e2b8bdfda804d3c8ba24031ae39cb759c598b98eca6677ebcc55e14306e521220b3bf33e42a660a709e6a7ad7befab57c84fa969399cb3a2b3669089df1b70771bd21850d7f6391cddfa5dee163d4a864fe2d1c2e71401e52132489163dbe24273f9cb3a1597b1b4c7e2cae5e91e42568a95c6564928763ff3b86aede22a2c7cd4010f00fc5c7b499c760ddb197707c5f6868dc3fb46c6b92f5806873005333c145aab2332f2642bb15c0ec6dfd8fad48ccbe2ea3a911740d18c5d95207027193eace3a70e6450e1afbdc789c0c7fc7b759ab79e835c96b66b7b26f992f9ebf69199ff5e1565f14e71ba6c29f9e523a00af5b57b7023dde33016ba80852e34405df19d8c7b5e291e488e6c2105896f2a3894e085553073df1e42ea5fe65d6e30ec3660286c9a5ddbe72275e551bbe30a852d2d2f65a34677fb54121f5906ecd284fb271575a724303830ce6303684c6589d14ab63979957047f6cddb9afc81839b758cd76b167ec2f9902a93c8e07c99a8f3276028193a8f956d1f7939a7c27380541ef4d4e7a38546e5a95a5c5a6149d6279b285e0340072f8b408ade39946ff56807e6c56436955f4172d4b77bd59dc234a1e3deec76ab25c2b124c9be03cf70bfcac6dfb84dff54dd1cae0ccad8d88c494c0918035fceee96af89e9190134cb22c7631a37649f490c2a0b2a4eef3f1a4e266c87b4c4184a7c3f7797588b45dfb36f68f1aa995fbd3a0c97886ddd102b5dc69907e8e64a9afcf4d5ecc3783007d9a3e9fddb6bd455a5885369145060ed35a16bcdf651083c1799ad47c7db2cafb256c09bb0cf92eb5e2b4882775016b610eccf2fa8b7eb37ced3e5bc27592f1e37def2cb1d425fa44b11b1784246471c44f4574de3023b18dad33178ea1277c59c316a0698b044663d0a9b58d50f8ac329bd4881889a66fbd76f8865dcc17d2bee78731e87201e017d6956b818cfe452c73afefad75957c7a7e2e6a099ce59978d6eb78b90a14e8de0a8aa331c048e55471613ef55e841b7cfbafed83947bcd98b5a3855835cfc44ec71c8f0e0eef7cb58f6b2b9e0e083e74f836a006d8af389c561696eebd0857459331f50922d1801b29d9a0a08eb7aec1acf3d17bf771bbd1ef4c4fd58da85f86276b5add94eeddacf7837369491c75f8caf1b4d550af20adc83c6c1bf34d2c2984183927b67d622553dc6f469a40fa9a5dea066c6c7ae08539d581d58b6f07993ffe96f1b5191b40ecd24234eec50928eab080ed673328d7c6d50e19bcef96d8ec034ed6bf4a7a4f2cb971d4d00bb98884c63a245b78485ea4f32efb5b8d297ba3a72e0a2325b4e76a4a1fcb4077814df59045339ac6b59efae9615699a42e7f23babd72d23675ccefd96d0c62046bbad69d241f59f94e2643beb0b92eb2f37511a175949831dd474a3b84b959a7c87856740029550d46fc33fbc26e0764fd55a244ad5e5fb4d383bb94045e5870648257e0ccd6451add7dc897d4258084057f8b8dbf7e097f364f9180cd85d17b91c97ec6fdeaf1e0a009222826e9b23dad38987d96a2c84253021490b7b95d78f4ef21fd8ec2dc1379981ce2f618dc96139b63d670e43d6e30bdeeca541039341fd6e79dcace75b697b67e8cb0f9f1342062ae2141c6f4750683ee83b573293fb10f73c17fcc8989459fbb36757dceffc19c3c0dedaf25c7da562a97edb9790e0a16b9ff6aa49d150832d697fbf3f03bbc32680c1469980b8b05e36ec8917a4b32dbb33b495f994f9039e28f42f810a9673b638b2b7518052beafaccd6395f9d70696d97fe42ab6af0c4ce7c23f6bb3abf9e0ec1f68c279a3ab9ac23a8370384df7c840d4e4a44f92daa6e334e0f73414f6e0cfb128d1e2b6e4edf078d33aa9b00002f791154f9d618ecf316d9025595c959e50dd50bda6d9530754dc635f2f0b2a66e39836e5201deaa19ab7f75c1b4bd88201707b0935c2fa371bd8385d08a57c08e35526856f8401f093e9fe1b898bb4742417a5fbc52628e39f2f5fa16672ceb5363f692761423cebf5a9fa8c155683528ade93549ebaf987c2b7d10bdc9991e8743795929064c132cac6c782981a7491550f020beb955f50518cbeab8fa63a7e2e8fa7b9dc1e251dbf187848110241fdf011108a9139ebcf353641304ca31ec019daf87ee6064d0dd29c732c7881814119ca2226760515b0fee47646e3c87b42f53f59053dd3834a30d7a42dc31030336417f2180b9c51c83db3fb013defb250c311b6b866c51b20d8fc0bbe69d1011a2a50daa86d71e622777cf32aa1d0e1fcde5362a19206ac92b37bbcd9af04655eb1c97e3232584993e1e0ad8e525371569eced4cca70daf73a46e30309d50ae34e4eb45be88d48d19fd7c4715c4a62390d3f2b6c3f5d5c"}, @NL80211_ATTR_IE_PROBE_RESP={0x1c9, 0x7f, [@fast_bss_trans={0x37, 0x61, {0x81, 0x1, "17385f7714fc20b6458a33b66fc548c3", "734459a6d164fdf5f728b6c759c33bdd80bca6ad49578fe6df1e66d6556fd481", "1ed85c12c824afeff1a344d1d59065b1c3322098e05ecd9b92eeb35af368d132", [{0x4, 0xd, "e34140d19ed2137b413f377092"}]}}, @peer_mgmt={0x75, 0x14, {0x0, 0x4, @void, @void, @val="0db63e80a0187010f2a8acc6d450597b"}}, @measure_req={0x26, 0xac, {0x8, 0x5, 0x80, "a1e8b914769bedde4b6e8b6c69bc1de1c3725ec453d916ecd46fbf51796cca623966dbdd51cff2cd8c2d7d1a349444107b7a0c7739bfb9fec77a8d9e09d63a5c60a3ad3200793be879da190726a44847e24a06d9d58dd2d27d95ce98ea6a0efeec5958c0b37430e4dfedd5b1de3e65a23a6703217766f689fdf814e3fd91f33248607eaf0879cd797d62753f689099d0613edbb939e3a9c676b028244bc3b075bfb625031572042b74"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @supported_rates={0x1, 0x8, [{0x2}, {0xa0f34ee4562a79ad}, {0x36}, {0x48}, {0x16}, {0x18, 0x1}, {0x24, 0x1}, {0x1b, 0x1}]}, @perr={0x84, 0x82, {0x2, 0x8, [{{0x0, 0x1}, @device_b, 0x3df, @value, 0x8}, {{}, @broadcast, 0x401, @void, 0x22}, {{}, @device_b, 0x200, @void, 0x23}, {{}, @device_b, 0xe, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x23}, {{0x0, 0x1}, @device_b, 0xffffffff, @value=@broadcast, 0x7}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x13}, {{}, @device_a, 0xd2, @void, 0x2d}]}}]}]}, 0xeec}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, r3, 0x1bac00357f6ec7a6, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000016c0)=[{}, {}, {}, {}], &(0x7f0000001700)=0x20) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8080001}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xfc, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x40, 0x2}], "a754c6e890189e71"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x2}, {0x2, 0x3}], "ad1cf154dd224658"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x7}, {0x0, 0x1}, {0x97, 0x4}, {0x6c}, {0xff, 0x5}, {0xfd, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0xe, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x81, 0x7}, {0x5, 0x5}, {0x9, 0x3}, {0x4, 0x6}, {0x80, 0x7}, {0x2, 0x5}], "c4c69064d2f26310"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x8, 0x4}, {0xe, 0x7}, {0xc, 0x2}, {0xc8, 0x1}, {0x27, 0x7}, {0xac, 0x1}, {0xde, 0x3}, {0x8, 0x7}, {0x2, 0x6}, {0x6, 0x3}, {0xdb, 0x1}], "0dd2667a0a37e56c"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x9, 0x3}, {0xa, 0x5}, {0x2, 0x2}, {0x2}, {0x8, 0x1}, {0xea, 0x4}, {0x8b}, {0x8, 0x6}], "e905b4f590e51c69"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x9, 0x1}, {0xd}, {0x40, 0x3}, {0x8, 0x4}, {0xa7, 0x7}, {0x1, 0x3}, {0x3}, {0xfd, 0x6}, {0x4, 0x1}, {0x8, 0x5}, {0x8, 0x3}, {0x62, 0x7}], "9e59a69038fde27f"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x4}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x2}, {0xf0}, {0x7, 0x3}, {0x5, 0x2}, {0xfc, 0x5}, {0x80, 0x6}, {0x40}, {0x9}, {0x6, 0x6}, {0x3e, 0x1}, {0x1, 0x7}, {0x3}, {0x0, 0x1}], "4cc0f9c54c5e5709"}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x20008003) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001900), 0x26000, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000019c0)={@empty, 0x0}, &(0x7f0000001a00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b80)={'syztnl1\x00', &(0x7f0000001b00)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x7, 0x9, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x20, 0x10, 0x4f4, 0x1e30a2ba}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001c00)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000001dc0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x120, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x4044) getsockopt(r4, 0x4, 0x8, &(0x7f0000001e00)=""/189, &(0x7f0000001ec0)=0xbd) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000009, 0x810, r6, 0x98f47000) r13 = accept4$unix(r6, &(0x7f0000001f00), &(0x7f0000001f80)=0x6e, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f0000001fc0)={0x0, 0x4, 0x259f, 0x2}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000030c0)={&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4096, 0x1000, 0x0, &(0x7f0000003000)=""/189, 0xbd}, &(0x7f0000003100)=0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000003300)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000032c0)={&(0x7f0000003180)={0x10c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000001}, @NFTA_SET_USERDATA={0xe3, 0xd, 0x1, 0x0, "a3db9f9e9cc6a6a8e7d206a098979a685162341b75c8eafa0af9dde6c2b7d070fff0537bfc708eac3e135c77b1fd4e3c3fbf9d924fb47a3b03c556862f7b9faaa3ab6c87126a26ae4d93921c8eed07f26483f4dbb6540f0f282ea6e343bdca1c49359714af7bb916488ed3fd03cc8781cee895b559c7d542f8e1c4a2acb1d242f0a0c1d448acbc8f9c37d7944f556e716c94615e03217b60192a0805c308cda3b8ee885a4fe09141e72d12ca136723569a9bf6bfea021fef8acdfacd1007b1c419b216a346e04185adacd0467e50ed846d7e1ecd3772bfecdb07f588671e11"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004810) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 42.180673281s ago: executing program 4 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) (rerun: 64) read$FUSE(r0, &(0x7f0000001540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x4, 0x0, @local, @broadcast}}}}) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x24, 0x2e, 0x31f, 0x0, 0x0, "", [@typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x19, 0x0, 0x0, @pid=r1}]}, 0x24}], 0x1, 0x0, 0x0, 0x24004004}, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (rerun: 64) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 42.176070771s ago: executing program 4 (id=1522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b330000000001dcdf250500800008000300", @ANYRES32=r2], 0x38}}, 0x44000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000001c0)=[@enter_looper, @decrefs={0x40046307, 0x1}, @register_looper, @register_looper], 0x0, 0x0, 0x0}) 42.125092882s ago: executing program 4 (id=1523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f0000003540), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 42.096096823s ago: executing program 49 (id=1523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f0000003540), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 5.337796385s ago: executing program 1 (id=1802): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000140)={0xdc, 0x0, 0x33f2}) 5.305149585s ago: executing program 1 (id=1803): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000500)={0x0, 0x8, 0x4, "172e361c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(0x0, 0x7e, 0x0) syz_clone3(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.354115994s ago: executing program 1 (id=1810): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) 3.353974754s ago: executing program 1 (id=1811): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 2.275639075s ago: executing program 8 (id=1818): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 2.209965556s ago: executing program 8 (id=1819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000014d564b"]) 2.145481437s ago: executing program 8 (id=1821): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000434000/0x400000)=nil) 2.132600168s ago: executing program 8 (id=1822): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0xffff, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x2, 0x10, 0xfb, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xa, 0x21, 0x5, 0x80, 0x2, 0x0, 0x0, 0x55, 0xb, 0x1, 0x0, 0x8080}], 0x3fd}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00000003000000000000040500060000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 2.073971349s ago: executing program 8 (id=1823): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 2.062447019s ago: executing program 9 (id=1825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2.02940862s ago: executing program 9 (id=1826): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x5381b25) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000600)="002100bc221cc5b71418660300000000000000000000f4760b55790700bc", 0x1e}], 0x1, 0x73a, 0x1) 1.862021433s ago: executing program 9 (id=1827): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)={0x1}) 1.861903763s ago: executing program 9 (id=1828): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 1.849679253s ago: executing program 9 (id=1829): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x800) pread64(r1, 0x0, 0x0, 0x9) 1.819153864s ago: executing program 8 (id=1830): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303d20422c02124070e702030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x0, 0x1, "b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.620890528s ago: executing program 1 (id=1833): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000240)) 1.417447641s ago: executing program 7 (id=1835): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.417290832s ago: executing program 7 (id=1836): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)="262b2c3cc46fd62e9a8aa67d7f1e5a1cc96a5e6215349bb3f17c9a519e4fd7109fb402468653f3cb77b8", 0x2a}], 0x1, 0x3, 0x80) 1.330950874s ago: executing program 7 (id=1837): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.197970766s ago: executing program 7 (id=1838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="360f01f0baf80c66b8fae78b8566efbafc0ced66b94a0300000f320fc7b9c68a3e64660f38827300673ee48b3e0f01cf0f01c56c0f01c5", 0x37}], 0x1, 0x8, &(0x7f0000000300)=[@cr0={0x0, 0xe001002c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.038015629s ago: executing program 7 (id=1839): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='syscall\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 972.608141ms ago: executing program 7 (id=1840): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010f204361200000000000109022400010000e0200904005b010300c80009210000400122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x811) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) 696.392816ms ago: executing program 1 (id=1841): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 0s ago: executing program 9 (id=1842): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80c4000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b01, 0x0) kernel console output (not intermixed with test programs): ED_REPLY { source: EFAULT } [ 158.087338][ T4008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 158.107621][ T4010] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1144'. [ 158.138538][ T36] audit: type=1400 audit(1757276246.743:778): avc: denied { mounton } for pid=4014 comm="syz.2.1145" path="/3/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 158.162939][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 158.174000][ T46] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 158.184228][ T36] audit: type=1400 audit(1757276246.790:779): avc: denied { unmount } for pid=3975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 158.185154][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.213422][ T4017] binder: Unknown parameter 'fscontext?}' [ 158.220344][ T46] usb 7-1: config 0 descriptor?? [ 158.225709][ T4006] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 158.256621][ T4025] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1148'. [ 158.581587][ T4030] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 158.664127][ T46] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 158.672626][ T46] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 158.680556][ T46] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 158.688926][ T46] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 158.696872][ T46] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 158.706387][ T46] hid-generic 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 158.756244][ T36] audit: type=1400 audit(1757276247.323:780): avc: denied { read } for pid=4035 comm="syz.5.1152" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.781872][ T36] audit: type=1400 audit(1757276247.351:781): avc: denied { ioctl } for pid=4035 comm="syz.5.1152" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.877446][ T3556] usb 7-1: USB disconnect, device number 5 [ 158.953801][ T4050] raw_sendmsg: syz.6.1155 forgot to set AF_INET. Fix it! [ 158.993109][ T4057] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 158.993139][ T4057] rust_binder: Error while translating object. [ 159.003158][ T4057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.009588][ T4057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 159.660980][ T36] audit: type=1400 audit(1757276248.164:782): avc: denied { setattr } for pid=4064 comm="syz.5.1158" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 159.665564][ T4065] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1158'. [ 159.700833][ T4067] rust_binder: Failed copying into alloc: EFAULT [ 159.702557][ T4067] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 159.709298][ T4067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 159.717716][ T4067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:29 [ 159.960658][ T353] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 160.131819][ T353] usb 6-1: Using ep0 maxpacket: 8 [ 160.138656][ T353] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 160.147732][ T353] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 160.158154][ T353] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.169446][ T353] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.178794][ T353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.188609][ T353] usb 6-1: Product: Đ [ 160.193017][ T353] usb 6-1: Manufacturer: ㏾ [ 160.197686][ T353] usb 6-1: SerialNumber: syz [ 160.421080][ T353] usb 6-1: 0:2 : does not exist [ 160.428465][ T353] usb 6-1: USB disconnect, device number 24 [ 160.442390][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 160.603562][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.614767][ T10] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x2C, changing to 0xC [ 160.626634][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0xC has an invalid bInterval 99, changing to 10 [ 160.638277][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0xC has invalid maxpacket 24941, setting to 1024 [ 160.651378][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.660511][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.668576][ T10] usb 7-1: Product: syz [ 160.672766][ T10] usb 7-1: Manufacturer: syz [ 160.677444][ T10] usb 7-1: SerialNumber: syz [ 160.689954][ T4085] syzkaller0: entered promiscuous mode [ 160.695487][ T4085] syzkaller0: entered allmulticast mode [ 160.975066][ T4091] rust_binder: Error while translating object. [ 160.975102][ T4091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 160.981502][ T4091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 161.006495][ T36] audit: type=1400 audit(1757276249.426:783): avc: denied { map } for pid=4095 comm="syz.2.1169" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 161.065944][ T4101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1 sclass=netlink_tcpdiag_socket pid=4101 comm=syz.2.1171 [ 161.073427][ T4102] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 161.118150][ T4106] syzkaller0: entered promiscuous mode [ 161.125756][ T10] cdc_ncm 7-1:1.0: bind() failure [ 161.130872][ T4106] syzkaller0: entered allmulticast mode [ 161.138581][ T10] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 161.146991][ T10] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 161.158929][ T10] usb 7-1: USB disconnect, device number 6 [ 161.479636][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 161.630296][ T4124] netlink: 'syz.5.1177': attribute type 46 has an invalid length. [ 161.640780][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 161.648639][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.659363][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.667425][ T10] usb 7-1: Product: syz [ 161.671723][ T10] usb 7-1: Manufacturer: syz [ 161.676445][ T10] usb 7-1: SerialNumber: syz [ 161.683294][ T10] r8152-cfgselector 7-1: Unknown version 0x0000 [ 161.689612][ T10] r8152-cfgselector 7-1: config 0 descriptor?? [ 161.896497][ T3556] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 162.058034][ T3556] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.069615][ T3556] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 162.079857][ T3556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.088060][ T3556] usb 6-1: Product: syz [ 162.092303][ T3556] usb 6-1: Manufacturer: syz [ 162.096916][ T3556] usb 6-1: SerialNumber: syz [ 162.102257][ T3556] usb 6-1: config 0 descriptor?? [ 162.197512][ T10] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 162.231352][ T36] audit: type=1400 audit(1757276250.577:784): avc: denied { setopt } for pid=4127 comm="syz.6.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.282587][ T4132] rust_binder: Write failure EFAULT in pid:60 [ 162.315218][ T4137] rust_binder: Error while translating object. [ 162.321548][ T4137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 162.322565][ T4124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 162.328158][ T4137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 162.343837][ T3556] usb 6-1: bad CDC descriptors [ 162.366067][ T3556] usb 6-1: unsupported MDLM descriptors [ 162.373212][ T3556] usb 6-1: USB disconnect, device number 25 [ 163.031260][ T4147] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.038365][ T4147] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.045831][ T4147] bridge_slave_0: entered allmulticast mode [ 163.052257][ T4147] bridge_slave_0: entered promiscuous mode [ 163.058755][ T4147] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.065922][ T4147] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.073297][ T4147] bridge_slave_1: entered allmulticast mode [ 163.079762][ T4147] bridge_slave_1: entered promiscuous mode [ 163.166242][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.175878][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.179957][ T3556] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 163.188553][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.198911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.227373][ T4147] veth0_vlan: entered promiscuous mode [ 163.239607][ T4147] veth1_macvtap: entered promiscuous mode [ 163.361733][ T3556] usb 6-1: Using ep0 maxpacket: 8 [ 163.373734][ T3556] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.387463][ T3556] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 163.398759][ T3556] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 163.414021][ T4165] rust_binder: Write failure EFAULT in pid:73 [ 163.415776][ T3556] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 163.431609][ T3556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.439937][ T3556] usb 6-1: Product: syz [ 163.444236][ T3556] usb 6-1: Manufacturer: syz [ 163.450026][ T3556] usb 6-1: SerialNumber: syz [ 163.456993][ T3556] usb 6-1: config 0 descriptor?? [ 163.465359][ T3556] cdc_acm 6-1:0.0: skipping garbage [ 163.565167][ T4181] rust_binder: Write failure EFAULT in pid:22 [ 163.590037][ T36] audit: type=1400 audit(1757276251.848:785): avc: denied { accept } for pid=4185 comm="syz.7.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.680902][ T468] usb 6-1: USB disconnect, device number 26 [ 164.168993][ T4201] netlink: 'syz.7.1197': attribute type 58 has an invalid length. [ 164.177253][ T4201] rust_binder: Write failure EFAULT in pid:42 [ 164.202126][ T4204] rust_binder: Error in use_page_slow: ESRCH [ 164.202156][ T4204] rust_binder: use_range failure ESRCH [ 164.208805][ T4204] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 164.214454][ T4204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.223177][ T4204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 164.346465][ T4230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 164.413168][ T4230] pim6reg1: entered promiscuous mode [ 164.429816][ T4230] pim6reg1: entered allmulticast mode [ 164.438145][ T4230] rust_binder: Read failure Err(EFAULT) in pid:90 [ 164.457742][ T4235] binder: Bad value for 'defcontext' [ 164.492639][ T4238] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 164.492666][ T4238] rust_binder: Read failure Err(EFAULT) in pid:54 [ 164.509048][ T36] audit: type=1400 audit(2000000000.046:786): avc: denied { map } for pid=4236 comm="syz.2.1210" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 164.539702][ T36] audit: type=1400 audit(2000000000.046:787): avc: denied { execute } for pid=4236 comm="syz.2.1210" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 164.620236][ T44] bridge_slave_1: left allmulticast mode [ 164.626051][ T44] bridge_slave_1: left promiscuous mode [ 164.631771][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.646422][ T44] bridge_slave_0: left allmulticast mode [ 164.652212][ T44] bridge_slave_0: left promiscuous mode [ 164.662582][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.698616][ T36] audit: type=1400 audit(2000000000.224:788): avc: denied { setattr } for pid=4251 comm="syz.2.1216" name="NETLINK" dev="sockfs" ino=34110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.779510][ T44] veth1_macvtap: left promiscuous mode [ 164.789669][ T44] veth0_vlan: left promiscuous mode [ 164.893949][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.901116][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.908487][ T4256] bridge_slave_0: entered allmulticast mode [ 164.914891][ T4256] bridge_slave_0: entered promiscuous mode [ 164.921515][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.929382][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.937085][ T4256] bridge_slave_1: entered allmulticast mode [ 164.943826][ T4256] bridge_slave_1: entered promiscuous mode [ 165.014325][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.021444][ T4256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.028765][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.035932][ T4256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.060746][ T787] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.068259][ T787] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.079595][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.086816][ T2797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.097253][ T2797] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.104453][ T2797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.135726][ T4256] veth0_vlan: entered promiscuous mode [ 165.148738][ T4256] veth1_macvtap: entered promiscuous mode [ 165.182498][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 165.307188][ T4283] rust_binder: Write failure EFAULT in pid:12 [ 165.308076][ T4283] rust_binder: Write failure EFAULT in pid:12 [ 165.429343][ T4294] SELinux: security_context_str_to_sid (sytem_uÝGĐą ‰:˙ß) failed with errno=-22 [ 165.480130][ T4298] rust_binder: Got transaction with invalid offset. [ 165.480166][ T4298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.487094][ T4298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 165.538352][ T4302] rust_binder: 25: no such ref 3 [ 165.556938][ T4304] /dev/rnullb0: Can't open blockdev [ 165.560299][ T4302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 165.581505][ T4308] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 165.590804][ T4308] rust_binder: Error in use_page_slow: EBUSY [ 165.601547][ T4308] rust_binder: use_range failure EBUSY [ 165.608104][ T4308] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 165.613642][ T4308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 165.621679][ T4308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:68 [ 165.644449][ T9] rust_binder: 4301: removing orphan mapping 0:96 [ 165.709755][ T4321] rust_binder: Error while translating object. [ 165.709803][ T4321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.716661][ T4321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 165.811388][ T4327] netlink: 'syz.1.1237': attribute type 13 has an invalid length. [ 165.971409][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 166.078345][ T468] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 166.131771][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 166.138050][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 166.146373][ T9] usb 6-1: config 0 has no interface number 0 [ 166.152513][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 166.160992][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 166.170233][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.178310][ T9] usb 6-1: Product: syz [ 166.182506][ T9] usb 6-1: Manufacturer: syz [ 166.187294][ T9] usb 6-1: SerialNumber: syz [ 166.193018][ T9] usb 6-1: config 0 descriptor?? [ 166.198855][ T9] smsc75xx v1.0.0 [ 166.239724][ T468] usb 2-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 166.248901][ T468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.262317][ T468] usb 2-1: config 0 descriptor?? [ 166.698407][ T468] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 166.708546][ T468] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 166.719909][ T468] asix 2-1:0.0: probe with driver asix failed with error -71 [ 166.730818][ T468] usb 2-1: USB disconnect, device number 21 [ 167.359689][ T4348] overlayfs: failed to resolve './file1': -2 [ 167.366856][ T36] audit: type=1326 audit(2000000002.720:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4347 comm="syz.1.1244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f56a5d8ebe9 code=0x0 [ 167.485078][ T36] audit: type=1400 audit(2000000002.833:790): avc: denied { append } for pid=4317 comm="syz.5.1233" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.485776][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 167.519730][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 167.529282][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 167.540757][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 167.550475][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 167.561148][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 167.570880][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 167.580851][ T9] usb 6-1: USB disconnect, device number 28 [ 168.157263][ T4358] rust_binder: Write failure EFAULT in pid:49 [ 168.157932][ T36] audit: type=1400 audit(2000000003.459:791): avc: denied { create } for pid=4357 comm="syz.5.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.208104][ T4362] binder: Unknown parameter 'fscontext?}' [ 168.311174][ T4378] incfs: Options parsing error. -22 [ 168.316575][ T4378] incfs: mount failed -22 [ 168.570288][ T46] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 168.591963][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 168.730717][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 168.730740][ T9] usb 6-1: device descriptor read/64, error -71 [ 168.738570][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.755772][ T46] usb 2-1: config 14 has an invalid interface number: 32 but max is 0 [ 168.764671][ T46] usb 2-1: config 14 has no interface number 0 [ 168.772328][ T46] usb 2-1: config 14 interface 32 has no altsetting 0 [ 168.781866][ T46] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 168.792112][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.800308][ T46] usb 2-1: Product: syz [ 168.804766][ T46] usb 2-1: Manufacturer: syz [ 168.809565][ T46] usb 2-1: SerialNumber: syz [ 168.998092][ T9] usb 6-1: device descriptor read/64, error -71 [ 169.089422][ T354] rust_binder: 4334: removing orphan mapping 0:24 [ 169.105758][ T4384] incfs: Options parsing error. -22 [ 169.111216][ T4384] incfs: mount failed -22 [ 169.140912][ T46] ums-usbat 2-1:14.32: USB Mass Storage device detected [ 169.162283][ T46] ums-usbat 2-1:14.32: Quirks match for vid 0781 pid 0005: 1 [ 169.163263][ T4387] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1257'. [ 169.179774][ T46] ums-usbat 2-1:14.32: This device (0781,0005,0005 S 39 P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 169.179774][ T46] Please send a copy of this message to and [ 169.219926][ T4391] serio: Serial port ptm0 [ 169.255126][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 169.278684][ T46] usb 2-1: USB disconnect, device number 22 [ 169.293795][ T4387] rust_binder: Error while translating object. [ 169.293825][ T4387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 169.304052][ T4387] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 169.314286][ T4387] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:47 [ 169.393930][ T9] usb 6-1: device descriptor read/64, error -71 [ 169.400364][ T4396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 169.419623][ T4396] rust_binder: Read failure Err(EFAULT) in pid:88 [ 169.427046][ T3556] rust_binder: 4386: removing orphan mapping 0:24 [ 169.469147][ T4402] rust_binder: Read failure Err(EAGAIN) in pid:52 [ 169.650645][ T9] usb 6-1: device descriptor read/64, error -71 [ 169.779314][ T9] usb usb6-port1: attempt power cycle [ 170.131013][ T4423] binder: Unknown parameter 'diŘi«Ă“\J[É Äp–¶Frsync' [ 170.142634][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 170.161381][ T4427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 170.179949][ T4434] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 170.199313][ T4434] overlayfs: missing 'lowerdir' [ 170.204963][ T9] usb 6-1: device descriptor read/8, error -71 [ 170.205696][ T4434] rust_binder: Write failure EFAULT in pid:107 [ 170.212923][ T4432] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 170.237263][ T4439] rust_binder: Write failure EFAULT in pid:112 [ 170.346821][ T9] usb 6-1: device descriptor read/8, error -71 [ 170.459396][ T4455] rust_binder: Error while translating object. [ 170.459431][ T4455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 170.466144][ T4455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 170.473290][ T4456] rust_binder: Error while translating object. [ 170.485202][ T4456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 170.492453][ T4456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 170.543985][ T4466] rust_binder: 4458 RLIMIT_NICE not set [ 170.556218][ T4458] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 170.569499][ T4458] rust_binder: Error while translating object. [ 170.569544][ T4458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.576115][ T4458] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 170.586257][ T4458] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:60 [ 170.605072][ T46] rust_binder: 4457: removing orphan mapping 0:4248 [ 170.645893][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 170.675982][ T4475] PM: Enabling pm_trace changes system date and time during resume. [ 170.675982][ T4475] PM: Correct system time has to be restored manually after resume. [ 170.680123][ T9] usb 6-1: device descriptor read/8, error -71 [ 170.693147][ T36] audit: type=1400 audit(2000000000.233:792): avc: denied { getopt } for pid=4474 comm="syz.7.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.762590][ T4482] SELinux: security_context_str_to_sid () failed with errno=-22 [ 170.793900][ T4487] binder: Unknown parameter '™±Ł' [ 170.822969][ T4480] syzkaller0: entered promiscuous mode [ 170.828109][ T9] usb 6-1: device descriptor read/8, error -71 [ 170.829368][ T4480] syzkaller0: entered allmulticast mode [ 170.850391][ T4489] loop4: detected capacity change from 0 to 8388608 [ 170.857193][ T36] audit: type=1400 audit(2000000000.374:793): avc: denied { shutdown } for pid=4488 comm="syz.7.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.944754][ T9] usb usb6-port1: unable to enumerate USB device [ 170.986455][ T4495] rust_binder: Write failure EFAULT in pid:131 [ 171.010897][ T4498] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 237) [ 171.030177][ T4498] rust_binder: Error while translating object. [ 171.048176][ T4498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.062591][ T4498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 171.120844][ T4500] rust_binder: Error while translating object. [ 171.148182][ T4500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.165336][ T4500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 171.582146][ T4510] overlay: Unknown parameter 'appraise' [ 171.606778][ T4510] tipc: Can't bind to reserved service type 0 [ 171.621346][ T36] audit: type=1400 audit(2000000001.093:794): avc: denied { create } for pid=4509 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 171.788439][ T4524] rust_binder: Error while translating object. [ 171.788492][ T4524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.794905][ C0] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 171.807954][ T4524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 171.870113][ T36] audit: type=1400 audit(2000000001.327:795): avc: denied { accept } for pid=4526 comm="syz.5.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.950551][ T4539] /dev/rnullb0: Can't open blockdev [ 172.053736][ T36] audit: type=1400 audit(2000000001.496:796): avc: denied { checkpoint_restore } for pid=4553 comm="syz.5.1309" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.054834][ T4555] random: crng reseeded on system resumption [ 172.103881][ T4559] netlink: 679 bytes leftover after parsing attributes in process `syz.1.1308'. [ 172.117668][ T4559] netlink: 679 bytes leftover after parsing attributes in process `syz.1.1308'. [ 172.128467][ T36] audit: type=1326 audit(2000000001.570:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.1308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a5d8ebe9 code=0x0 [ 172.158798][ T4562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.167991][ T4562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.357506][ T4572] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 172.578328][ T4586] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 172.585810][ T4586] rust_binder: Write failure EINVAL in pid:119 [ 172.956387][ T36] audit: type=1400 audit(2000000002.346:798): avc: denied { create } for pid=4600 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 173.244125][ T354] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 173.404487][ T354] usb 2-1: Using ep0 maxpacket: 32 [ 173.411167][ T354] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 173.422447][ T354] usb 2-1: config 1 interface 0 has no altsetting 0 [ 173.430673][ T354] usb 2-1: New USB device found, idVendor=0b8c, idProduct=0092, bcdDevice= 0.40 [ 173.440010][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.448253][ T354] usb 2-1: Product: 仨旍ಂ홣ᾂ衂ě›ęš—痗襙儮ࠜ읿ྞ䰝䉖゜ꎾ荗ﳧ櫙撹⻪ᰏᅏ몧蛓北쾄â‡ďšľčľŽć•źë­ć§·ęş“î—氺ᧂⵂ쇻謆甩á´ďą»ě˝ä®Źäş«ášťč®…ꝗ衺ⱟ⡒尛肳᧕â¬ć‡Ő”í’ç é‰•ä©¨ćŁ´ [ 173.470824][ T354] usb 2-1: Manufacturer: ěší“·ă˝“磌ě–凇뵢湊藄겢拭çťďŻżě˘Łéž„㬱ꡀ锲⥪睭ꄄ룆⚼ë±ŐĄĺ°‹â™­é›©ćżÇ¸č€‚⿳᝴謠奱룲Ԕ㩯ě¬ăĽŽé»®ď©żŢĽî€ŽçŤç‹˘ä…˛çĽ‘풩咷᥉䣤㮮é·ě¶Ťí‹č¤ťăŁ­ď­Şâ“Šć§†ĺ·źî†“簻䎨角অᲶ蔄ଶ鹛걻䅮⒟缙콺 [ 173.498240][ T354] usb 2-1: SerialNumber: syz [ 173.552955][ T4605] rust_binder: Error in use_page_slow: ESRCH [ 173.552975][ T4605] rust_binder: use_range failure ESRCH [ 173.559245][ T4605] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 173.565113][ T4605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 173.573755][ T4605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:134 [ 173.618061][ T4609] SELinux: failed to load policy [ 173.634341][ T4607] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1735060478 (27760967648 ns) > initial count (27267544304 ns). Using initial count to start timer. [ 173.708240][ T4612] rust_binder: Write failure EFAULT in pid:120 [ 173.750445][ T3556] rust_binder: 4608: removing orphan mapping 0:96 [ 173.766747][ T3556] rust_binder: 0: removing orphan mapping 96:24 [ 173.937794][ T4603] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 173.937837][ T4603] rust_binder: Error in use_page_slow: EBUSY [ 173.948641][ T4603] rust_binder: use_range failure EBUSY [ 173.955809][ T4603] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 173.961790][ T4603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 173.979345][ T4603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:91 [ 174.001679][ T354] usbhid 2-1:1.0: can't add hid device: -71 [ 174.018186][ T354] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 174.031183][ T354] usb 2-1: USB disconnect, device number 23 [ 174.238726][ T3556] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 174.400623][ T3556] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 174.409985][ T3556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.424024][ T3556] usb 6-1: config 0 descriptor?? [ 174.563534][ T36] audit: type=1400 audit(2000000003.842:799): avc: denied { write } for pid=4623 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 174.668386][ T4651] rust_binder: 4651 RLIMIT_NICE not set [ 174.675327][ T10] rust_binder: 4649: removing orphan mapping 0:144 [ 174.721282][ T4633] cgroup: fork rejected by pids controller in /syz2 [ 174.725161][ T4667] rust_binder: 101: no such ref 3 [ 175.051579][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 175.223911][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.235210][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 175.246014][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.260186][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.269327][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.277360][ T10] usb 2-1: SerialNumber: syz [ 175.283083][ T4676] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 175.291176][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 175.298079][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 175.426892][ T4712] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false [ 175.426952][ T4712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 175.437435][ T4712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:201 [ 175.505312][ T4676] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 175.726288][ T36] audit: type=1400 audit(2000000004.936:800): avc: denied { setattr } for pid=4715 comm="syz.7.1343" name="IEEE-802.15.4-RAW" dev="sockfs" ino=36989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.727399][ T3556] usb 6-1: Cannot set autoneg [ 175.756839][ T3556] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 175.773381][ T3556] usb 6-1: USB disconnect, device number 34 [ 175.783001][ T4720] rust_binder: Error while translating object. [ 175.783080][ T4720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 175.789405][ T4720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:156 [ 175.799727][ T4720] rust_binder: 156: no such ref 1 [ 175.814060][ T4720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:156 [ 175.848030][ T4724] __vm_enough_memory: pid: 4724, comm: syz.7.1346, bytes: 18014402804453376 not enough memory for the allocation [ 175.974031][ T10] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 176.057976][ T4739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 176.078434][ T4743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.088590][ T4743] rust_binder: Error while translating object. [ 176.095973][ T4743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 176.104601][ T4743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:169 [ 176.402479][ T4676] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 176.420389][ T4676] rust_binder: Write failure EINVAL in pid:101 [ 177.980503][ T354] usb 2-1: USB disconnect, device number 24 [ 177.993935][ T354] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 178.559567][ T354] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 178.611139][ T36] audit: type=1400 audit(2000000007.629:801): avc: denied { watch watch_reads } for pid=4837 comm="syz.5.1367" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 178.648342][ T36] audit: type=1326 audit(2000000007.667:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4841 comm="syz.5.1368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d5cf8ebe9 code=0x0 [ 178.731818][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.749350][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.759908][ T354] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 178.774336][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.783480][ T354] usb 2-1: config 0 descriptor?? [ 178.813213][ T4858] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 178.824135][ T4858] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 178.907356][ T4869] SELinux: security_context_str_to_sid (sytem_uÝGĐą) failed with errno=-22 [ 179.051888][ T4875] rust_binder: 4875 RLIMIT_NICE not set [ 179.058261][ T752] rust_binder: 4874: removing orphan mapping 0:1192 [ 179.083675][ T4880] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 179.092802][ T4880] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 179.222911][ T354] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 179.301396][ T4886] bridge0: port 3(veth1_macvtap) entered blocking state [ 179.308541][ T4886] bridge0: port 3(veth1_macvtap) entered disabled state [ 179.315656][ T4886] veth1_macvtap: entered allmulticast mode [ 179.322261][ T4886] veth1_macvtap: left allmulticast mode [ 179.450953][ T4894] /dev/sr0: Can't lookup blockdev [ 179.457882][ T36] audit: type=1326 audit(2000000008.415:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.463734][ T4894] overlayfs: failed to resolve './file1': -2 [ 179.482478][ T36] audit: type=1326 audit(2000000008.424:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.511399][ T36] audit: type=1326 audit(2000000008.424:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.535184][ T36] audit: type=1326 audit(2000000008.424:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.575015][ T36] audit: type=1326 audit(2000000008.424:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.601204][ T36] audit: type=1326 audit(2000000008.424:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.625487][ T36] audit: type=1326 audit(2000000008.424:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.649058][ T36] audit: type=1326 audit(2000000008.424:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 179.698090][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 179.707837][ T4913] syz.2.1392: attempt to access beyond end of device [ 179.707837][ T4913] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 179.721731][ T4913] FAT-fs (loop2): unable to read boot sector [ 179.758049][ T4924] binder: Bad value for 'max' [ 179.805152][ T4934] 9pnet_fd: Insufficient options for proto=fd [ 179.927660][ T4941] netlink: 'syz.2.1405': attribute type 4 has an invalid length. [ 179.935621][ T4941] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1405'. [ 179.944874][ T4941] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 179.952703][ T4941] netlink: 'syz.2.1405': attribute type 2 has an invalid length. [ 179.961218][ T4941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 179.961238][ T4941] rust_binder: Read failure Err(EFAULT) in pid:271 [ 179.970126][ T4943] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 179.985210][ T4943] netlink: 'syz.2.1405': attribute type 2 has an invalid length. [ 180.140403][ T4949] fuse: Bad value for 'fd' [ 180.178682][ T4951] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 180.178710][ T4951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 180.187047][ T4951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:281 [ 180.322559][ T4826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.340447][ T4826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.350098][ T4826] devpts: called with bogus options [ 180.356401][ T354] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 180.363820][ T354] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 180.371262][ T354] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 180.381899][ T354] usb 2-1: USB disconnect, device number 25 [ 180.990155][ T4995] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 181.244094][ T354] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 181.416388][ T354] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.427825][ T354] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 181.440068][ T354] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.449206][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.457386][ T354] usb 2-1: Product: syz [ 181.461615][ T354] usb 2-1: Manufacturer: syz [ 181.466501][ T354] usb 2-1: SerialNumber: syz [ 181.472899][ T354] cdc_mbim 2-1:1.0: skipping garbage [ 181.689889][ T4995] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.341436][ T4995] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.349486][ T354] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 182.356675][ T354] wwan wwan0: port wwan0mbim0 attached [ 182.363781][ T354] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, a2:d4:19:cf:27:15 [ 182.495852][ T148] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 182.919549][ T5019] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1422'. [ 182.936774][ T5019] netlink: 'syz.7.1422': attribute type 12 has an invalid length. [ 182.944989][ T5019] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1422'. [ 184.160722][ T354] usb 2-1: USB disconnect, device number 26 [ 184.168181][ T354] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 184.229752][ T354] wwan wwan0: port wwan0mbim0 disconnected [ 184.548989][ T354] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 184.687976][ T354] usb 2-1: device descriptor read/64, error -71 [ 184.944663][ T354] usb 2-1: device descriptor read/64, error -71 [ 185.201326][ T354] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 185.340340][ T354] usb 2-1: device descriptor read/64, error -71 [ 185.597101][ T354] usb 2-1: device descriptor read/64, error -71 [ 185.714771][ T354] usb usb2-port1: attempt power cycle [ 186.078367][ T354] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 186.100980][ T354] usb 2-1: device descriptor read/8, error -71 [ 186.240000][ T354] usb 2-1: device descriptor read/8, error -71 [ 186.495422][ T354] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 186.517809][ T354] usb 2-1: device descriptor read/8, error -71 [ 186.638940][ T5078] rust_binder: Error while translating object. [ 186.639007][ T5078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 186.645770][ T5078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 186.660774][ T354] usb 2-1: device descriptor read/8, error -71 [ 186.805824][ T354] usb usb2-port1: unable to enumerate USB device [ 187.426262][ T5086] SELinux: security_context_str_to_sid () failed with errno=-22 [ 188.396361][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 188.396381][ T36] audit: type=1400 audit(2000000016.773:864): avc: denied { create } for pid=5097 comm="syz.1.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 188.436031][ T36] audit: type=1400 audit(2000000016.820:865): avc: denied { read } for pid=93 comm="acpid" name="event3" dev="devtmpfs" ino=628 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 188.457695][ T36] audit: type=1400 audit(2000000016.820:866): avc: denied { open } for pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=628 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 188.480278][ T36] audit: type=1400 audit(2000000016.820:867): avc: denied { ioctl } for pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=628 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 189.338600][ T5107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 189.360258][ T36] audit: type=1400 audit(2000000017.680:868): avc: denied { unmount } for pid=4256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 189.629365][ T328] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 189.789535][ T328] usb 2-1: Using ep0 maxpacket: 32 [ 189.797053][ T328] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 189.807426][ T328] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1640, setting to 1024 [ 189.818529][ T328] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 189.831826][ T328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.841229][ T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.849269][ T328] usb 2-1: Product: Đś [ 189.853376][ T328] usb 2-1: Manufacturer: 拉㢟輀풕ᙠ[ 189.859150][ T328] usb 2-1: SerialNumber: 달ăŹě«·éş©ć“쬺㑏ㆭ [ 190.298337][ T328] cdc_ncm 2-1:1.0: bind() failure [ 190.304380][ T328] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 190.311206][ T328] cdc_ncm 2-1:1.1: bind() failure [ 190.317446][ T328] usb 2-1: USB disconnect, device number 31 [ 191.135438][ T5148] rtc_cmos 00:00: Alarms can be up to one day in the future [ 191.490106][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 191.650495][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 191.657021][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 191.668330][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.681209][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 191.690508][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.699460][ T9] usb 2-1: config 0 descriptor?? [ 192.089438][ T3556] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.097137][ T3556] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.104916][ T3556] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.113611][ T3556] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.121068][ T3556] rtc rtc0: __rtc_set_alarm: err=-22 [ 192.136083][ T9] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 192.347962][ T9] playstation 0003:054C:0DF2.000B: Invalid reportID received, expected 9 got 53 [ 192.357258][ T9] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22 [ 192.366529][ T9] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 192.375576][ T9] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 192.384168][ T9] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 192.565128][ T9] usb 2-1: USB disconnect, device number 32 [ 193.114059][ T5163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185 [ 193.187706][ T5168] can0: slcan on ttyS3. [ 193.245222][ T5168] can0 (unregistered): slcan off ttyS3. [ 193.368175][ T5198] netlink: 'syz.1.1464': attribute type 28 has an invalid length. [ 193.926315][ T44] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.212236][ T5228] binder: Bad value for 'stats' [ 195.231713][ T5230] netlink: 'syz.1.1472': attribute type 4 has an invalid length. [ 195.253418][ T5230] netlink: 'syz.1.1472': attribute type 4 has an invalid length. [ 195.301554][ T5234] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 196.131786][ T409] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.132045][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 196.160808][ T5241] netlink: 'syz.7.1477': attribute type 4 has an invalid length. [ 196.198097][ T5245] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 196.205487][ T5245] rust_binder: Write failure EINVAL in pid:234 [ 196.467564][ T5259] SELinux: security_context_str_to_sid (syste_uÝGĐą ‰:˙ß) failed with errno=-22 [ 196.741401][ T3556] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 196.901845][ T3556] usb 2-1: Using ep0 maxpacket: 32 [ 196.908219][ T3556] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 196.916538][ T3556] usb 2-1: config 0 has no interface number 0 [ 196.922715][ T3556] usb 2-1: config 0 interface 184 has no altsetting 0 [ 196.931962][ T3556] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 196.941180][ T3556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.949232][ T3556] usb 2-1: Product: syz [ 196.953423][ T3556] usb 2-1: Manufacturer: syz [ 196.958074][ T3556] usb 2-1: SerialNumber: syz [ 196.963341][ T3556] usb 2-1: config 0 descriptor?? [ 196.969141][ T3556] smsc75xx v1.0.0 [ 197.731318][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.738460][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.745608][ T5262] bridge_slave_0: entered allmulticast mode [ 197.752360][ T5262] bridge_slave_0: entered promiscuous mode [ 197.760983][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.768416][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.775886][ T5262] bridge_slave_1: entered allmulticast mode [ 197.782363][ T5262] bridge_slave_1: entered promiscuous mode [ 197.835897][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.843376][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.850505][ T5263] bridge_slave_0: entered allmulticast mode [ 197.857145][ T5263] bridge_slave_0: entered promiscuous mode [ 197.865468][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.872694][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.879960][ T5263] bridge_slave_1: entered allmulticast mode [ 197.886577][ T5263] bridge_slave_1: entered promiscuous mode [ 197.990486][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.998339][ T5262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.005696][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.012949][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.035236][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.042390][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.049741][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.056928][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.066546][ T3556] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 198.080336][ T3556] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 198.090588][ T3556] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 198.102483][ T3556] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 198.112938][ T3556] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 198.123816][ T3556] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 198.133616][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.133723][ T3556] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 198.151514][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.153561][ T3556] usb 2-1: USB disconnect, device number 33 [ 198.184358][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.195088][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.219678][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.227647][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.242779][ T5262] veth0_vlan: entered promiscuous mode [ 198.264143][ T5263] veth0_vlan: entered promiscuous mode [ 198.272129][ T5262] veth1_macvtap: entered promiscuous mode [ 198.294084][ T5263] veth1_macvtap: entered promiscuous mode [ 198.381938][ T36] audit: type=1400 audit(2000000026.114:869): avc: denied { setopt } for pid=5282 comm="syz.9.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.622844][ T36] audit: type=1400 audit(2000000026.338:870): avc: denied { setopt } for pid=5289 comm="syz.1.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.998606][ T5308] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false [ 198.998657][ T5308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 199.009622][ T5308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:261 [ 199.035699][ T36] audit: type=1400 audit(2000000026.731:871): avc: denied { getopt } for pid=5309 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.161537][ T5316] tmpfs: Bad value for 'nr_blocks' [ 199.223695][ T5317] rust_binder: 5316 RLIMIT_NICE not set [ 199.244055][ T328] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 199.255619][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1496'. [ 199.323822][ T5320] rust_binder: Error while translating object. [ 199.323853][ T5320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 199.330206][ T5320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:5 [ 199.416307][ T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 199.436382][ T328] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 199.446232][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.455808][ T328] usb 5-1: config 0 descriptor?? [ 199.461677][ T5307] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.562609][ T5328] usb usb8: selecting invalid altsetting 6 [ 199.623732][ T36] audit: type=1326 audit(2000000027.273:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.7.1501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x0 [ 199.899810][ T328] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0 [ 199.907840][ T328] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0 [ 199.915499][ T328] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0 [ 199.923093][ T328] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0 [ 199.930939][ T328] hid-generic 0003:04F3:0755.000C: unknown main item tag 0x0 [ 199.940048][ T328] hid-generic 0003:04F3:0755.000C: hidraw0: USB HID v1.0f Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 200.074101][ T5339] overlay: Unknown parameter 'obj_role' [ 200.114468][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.123280][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.133768][ T354] usb 5-1: USB disconnect, device number 15 [ 200.210416][ T36] audit: type=1400 audit(2000000027.825:873): avc: denied { execute } for pid=5345 comm="syz.1.1505" name="file0" dev="ramfs" ino=40803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 200.232995][ T36] audit: type=1400 audit(2000000027.825:874): avc: denied { execute_no_trans } for pid=5345 comm="syz.1.1505" path="/file0" dev="ramfs" ino=40803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 200.261192][ T36] audit: type=1400 audit(2000000027.825:875): avc: denied { create } for pid=5345 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.360784][ T5352] veth0_to_team: entered promiscuous mode [ 200.366758][ T5352] veth0_to_team: entered allmulticast mode [ 200.431227][ T3556] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 200.591673][ T3556] usb 10-1: Using ep0 maxpacket: 32 [ 200.598587][ T3556] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 200.607472][ T3556] usb 10-1: config 0 has no interface number 0 [ 200.614376][ T3556] usb 10-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 200.624688][ T3556] usb 10-1: config 0 interface 214 has no altsetting 0 [ 200.633621][ T3556] usb 10-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 200.642860][ T3556] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.651349][ T3556] usb 10-1: Product: syz [ 200.655630][ T3556] usb 10-1: Manufacturer: syz [ 200.660584][ T3556] usb 10-1: SerialNumber: syz [ 200.666188][ T3556] usb 10-1: config 0 descriptor?? [ 200.672320][ T5342] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 200.704871][ T36] audit: type=1400 audit(2000000028.283:876): avc: denied { shutdown } for pid=5364 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.754832][ T5372] 2N: renamed from vcan0 (while UP) [ 200.895419][ T5342] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 201.008959][ T752] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 201.169197][ T752] usb 5-1: Using ep0 maxpacket: 32 [ 201.175922][ T752] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 201.184273][ T752] usb 5-1: config 0 has no interface number 0 [ 201.190453][ T752] usb 5-1: config 0 interface 85 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 201.200846][ T752] usb 5-1: config 0 interface 85 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 201.212026][ T752] usb 5-1: config 0 interface 85 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 201.222871][ T752] usb 5-1: config 0 interface 85 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 201.233563][ T752] usb 5-1: config 0 interface 85 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 201.244997][ T752] usb 5-1: config 0 interface 85 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 201.257541][ T752] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0174, bcdDevice=d8.d8 [ 201.267217][ T752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.275433][ T752] usb 5-1: Product: syz [ 201.279863][ T752] usb 5-1: Manufacturer: syz [ 201.287646][ T752] usb 5-1: SerialNumber: syz [ 201.306261][ T752] usb 5-1: config 0 descriptor?? [ 201.311699][ T5372] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.524722][ T5385] fuse: Bad value for 'fd' [ 201.524722][ T5384] fuse: Bad value for 'fd' [ 201.533904][ T36] audit: type=1400 audit(2000000029.059:877): avc: denied { ioctl } for pid=5383 comm="syz.7.1518" path="socket:[40939]" dev="sockfs" ino=40939 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.589210][ T752] ftdi_sio 5-1:0.85: FTDI USB Serial Device converter detected [ 201.597391][ T752] ftdi_sio ttyUSB0: unknown device type: 0xd8d8 [ 201.611668][ T752] usb 5-1: USB disconnect, device number 16 [ 201.619726][ T752] ftdi_sio 5-1:0.85: device disconnected [ 201.844536][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.851788][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.859317][ T5400] bridge_slave_0: entered allmulticast mode [ 201.866241][ T5400] bridge_slave_0: entered promiscuous mode [ 201.873460][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.880620][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.887921][ T5400] bridge_slave_1: entered allmulticast mode [ 201.894378][ T5400] bridge_slave_1: entered promiscuous mode [ 201.955772][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.962990][ T5400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.970317][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.978481][ T5400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.004211][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.011682][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.022238][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.029387][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.039352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.046489][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.077345][ T5400] veth0_vlan: entered promiscuous mode [ 202.090648][ T5400] veth1_macvtap: entered promiscuous mode [ 202.110805][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 202.124497][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 202.169586][ T5416] SELinux: security_context_str_to_sid (sytem_uÝGĐą ‰:˙ß) failed with errno=-22 [ 202.340446][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 202.355534][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 202.367315][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.379090][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.393861][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.405379][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.417523][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 202.430519][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.443181][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 202.455608][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 202.467227][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 202.485335][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 202.497679][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 202.509872][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 202.521699][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 202.533046][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.545289][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 202.557355][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.570710][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 202.583198][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.595177][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 202.602384][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 202.607393][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 202.626781][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 202.640956][ T3556] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 202.660306][ T3556] ax88179_178a 10-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 9a:4c:18:5b:fa:d7 [ 202.686768][ T3556] usb 10-1: USB disconnect, device number 4 [ 202.698573][ T3556] ax88179_178a 10-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 202.698794][ T752] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 202.784150][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 202.790582][ T9] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 202.799896][ T9] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 202.811048][ T9] usb 2-1: config 0 has no interface number 0 [ 202.818789][ T9] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 202.842936][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.853708][ T9] usb 2-1: Product: syz [ 202.861932][ T9] usb 2-1: Manufacturer: syz [ 202.872721][ T9] usb 2-1: SerialNumber: syz [ 202.874255][ T36] audit: type=1400 audit(2000000030.322:878): avc: denied { nlmsg_tty_audit } for pid=5464 comm="syz.7.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 202.881559][ T752] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.919609][ T9] usb 2-1: config 0 descriptor?? [ 202.927464][ T752] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.939339][ T9] usb 2-1: unsupported MDLM descriptors [ 202.946838][ T752] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.956941][ T752] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.970146][ T752] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.980290][ T752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.990148][ T752] usb 9-1: config 0 descriptor?? [ 203.141861][ T12] bridge_slave_1: left allmulticast mode [ 203.147842][ T12] bridge_slave_1: left promiscuous mode [ 203.153788][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.162632][ T12] bridge_slave_0: left allmulticast mode [ 203.168323][ T12] bridge_slave_0: left promiscuous mode [ 203.174358][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.256271][ T3556] usb 2-1: USB disconnect, device number 34 [ 203.286857][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 203.302637][ T12] veth1_macvtap: left promiscuous mode [ 203.308382][ T12] veth0_vlan: left promiscuous mode [ 203.426645][ T752] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 203.441731][ T752] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 203.449650][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 203.456836][ T9] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 203.465621][ T752] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 203.478567][ T9] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 203.488940][ T5489] 9pnet_fd: Insufficient options for proto=fd [ 203.498027][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 203.508409][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.518542][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.528711][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.541987][ T9] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 203.551253][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.562915][ T9] usb 10-1: config 0 descriptor?? [ 203.660038][ T5492] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 203.668543][ T5492] rust_binder: Write failure EINVAL in pid:302 [ 203.759156][ T5497] binder: Unknown parameter 'maŇ“v”0000/0000017+ĎŤŠqçfŔß' [ 203.785150][ T9] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 203.798699][ T9] usb 10-1: USB disconnect, device number 5 [ 203.805848][ T9] usblp0: removed [ 203.950005][ T468] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 204.110622][ T468] usb 2-1: Using ep0 maxpacket: 8 [ 204.116934][ T468] usb 2-1: config 254 has an invalid interface number: 10 but max is 0 [ 204.125353][ T468] usb 2-1: config 254 has an invalid descriptor of length 49, skipping remainder of the config [ 204.135766][ T468] usb 2-1: config 254 has no interface number 0 [ 204.142061][ T468] usb 2-1: too many endpoints for config 254 interface 10 altsetting 78: 58, using maximum allowed: 30 [ 204.153259][ T468] usb 2-1: config 254 interface 10 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 204.166812][ T468] usb 2-1: config 254 interface 10 has no altsetting 0 [ 204.173704][ T468] usb 2-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 204.183384][ T468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.249406][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 204.409848][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 204.416368][ T9] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.424986][ T9] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 204.433937][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 204.443373][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.453648][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.463559][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.476712][ T9] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 204.485903][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.494950][ T9] usb 10-1: config 0 descriptor?? [ 204.929448][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.938298][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.953949][ T9] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 204.965697][ T468] usb 2-1: string descriptor 0 read error: -71 [ 204.974859][ T9] usb 10-1: USB disconnect, device number 6 [ 204.981655][ T468] ftdi_sio 2-1:254.10: FTDI USB Serial Device converter detected [ 204.990797][ T9] usblp0: removed [ 204.995776][ T468] ftdi_sio ttyUSB0: unknown device type: 0xebe0 [ 205.004909][ T468] usb 2-1: USB disconnect, device number 35 [ 205.012420][ T468] ftdi_sio 2-1:254.10: device disconnected [ 205.170927][ T5504] SELinux: security_context_str_to_sid () failed with errno=-22 [ 205.367667][ T5523] binder: Bad value for 'defcontext' [ 205.498729][ T5537] 2N: renamed from vcan0 (while UP) [ 205.629067][ T5555] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 205.638168][ T36] audit: type=1400 audit(2000000032.893:879): avc: denied { relabelto } for pid=5552 comm="syz.8.1560" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 205.665190][ T36] audit: type=1400 audit(2000000032.893:880): avc: denied { associate } for pid=5552 comm="syz.8.1560" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 205.693854][ T10] usb 9-1: USB disconnect, device number 2 [ 205.725617][ T353] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 205.804188][ T5570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.804866][ T5569] incfs: Can't find or create .incomplete dir in ./file0 [ 205.806793][ T5570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.811596][ T5569] incfs: mount failed -17 [ 205.820291][ T5570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 205.886865][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.906934][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.916781][ T353] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.930368][ T353] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.939606][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.948954][ T353] usb 2-1: config 0 descriptor?? [ 206.285549][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.291487][ T5576] incfs: Options parsing error. -22 [ 206.297403][ T5576] incfs: mount failed -22 [ 206.384997][ T353] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 206.394010][ T353] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 206.545508][ T36] audit: type=1400 audit(2000000033.744:881): avc: denied { read write } for pid=5578 comm="syz.8.1568" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 206.546083][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1568'. [ 206.574407][ T36] audit: type=1400 audit(2000000033.744:882): avc: denied { open } for pid=5578 comm="syz.8.1568" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 206.646204][ T36] audit: type=1400 audit(2000000033.847:883): avc: denied { create } for pid=5583 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 206.666313][ T36] audit: type=1400 audit(2000000033.847:884): avc: denied { sys_admin } for pid=5583 comm="syz.8.1570" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 206.863193][ T9] usb 2-1: USB disconnect, device number 36 [ 206.900751][ T36] audit: type=1400 audit(2000000034.080:885): avc: denied { map } for pid=5599 comm="syz.9.1575" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 206.927797][ T36] audit: type=1400 audit(2000000034.080:886): avc: denied { execute } for pid=5599 comm="syz.9.1575" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 206.966172][ T5502] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 207.127866][ T5502] usb 9-1: unable to get BOS descriptor or descriptor too short [ 207.136493][ T5502] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 207.146683][ T5502] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 207.160129][ T5502] usb 9-1: string descriptor 0 read error: -22 [ 207.166598][ T5502] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.176066][ T5502] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.185322][ T5586] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 207.192648][ T5586] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 207.420378][ T5586] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 207.420406][ T5586] rust_binder: Read failure Err(EFAULT) in pid:44 [ 207.429737][ T353] usb 9-1: USB disconnect, device number 3 [ 208.452690][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 208.452846][ T409] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 216.032640][ T5607] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1577'. [ 216.040368][ T5609] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false [ 216.041803][ T5609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 216.060517][ T5609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:297 [ 216.174721][ T5621] 9pnet_fd: Insufficient options for proto=fd [ 216.253880][ T5629] rust_binder: Error while translating object. [ 216.253925][ T5629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.260576][ T5629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 216.363725][ T36] audit: type=1400 audit(2000000042.925:887): avc: denied { read } for pid=5636 comm="syz.7.1589" name="/" dev="configfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.430574][ T36] audit: type=1400 audit(2000000042.925:888): avc: denied { open } for pid=5636 comm="syz.7.1589" path="/" dev="configfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.432279][ T5637] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 216.609260][ T36] audit: type=1400 audit(2000000043.159:889): avc: denied { ioctl } for pid=5638 comm="syz.7.1590" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 217.162754][ T5667] random: crng reseeded on system resumption [ 217.197853][ T36] audit: type=1400 audit(2000000043.711:890): avc: denied { ioctl } for pid=5666 comm="syz.8.1598" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.206317][ T5667] Restarting kernel threads ... done. [ 217.235113][ T5667] binder: Unknown parameter 'seclab“' [ 217.307812][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.307844][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.324237][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.332484][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.339652][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.346375][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.352934][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.359489][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.383132][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.395915][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.399711][ T5694] rust_binder: Error while translating object. [ 217.402447][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.409443][ T5694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 217.421991][ T5694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70 [ 217.426138][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.455528][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.462474][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.469285][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.475938][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.482597][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.493354][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.500125][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.507079][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.513877][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.550306][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.564978][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.582016][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.601290][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.608296][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.616982][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.624809][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.633290][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.640038][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.646793][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.653950][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.660817][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.667617][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.674372][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.680936][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.688031][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.695167][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.701831][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.708627][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.715368][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.722004][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.728837][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.735829][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.742667][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.752478][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.759346][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.765890][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.772717][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.780346][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.786999][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.794519][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.801272][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.807831][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.814711][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.821389][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.828802][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.835581][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.842139][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.849487][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.856451][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.863169][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.870142][ T5689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.953859][ T36] audit: type=1400 audit(2000000044.421:891): avc: denied { map } for pid=5705 comm="syz.1.1610" path="socket:[41947]" dev="sockfs" ino=41947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.056008][ T5714] netlink: 'syz.9.1613': attribute type 4 has an invalid length. [ 218.118487][ T5714] netlink: 'syz.9.1613': attribute type 4 has an invalid length. [ 218.207058][ T5717] rust_binder: 5716 RLIMIT_NICE not set [ 218.233690][ T353] rust_binder: 5715: removing orphan mapping 0:4224 [ 218.266045][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1615'. [ 218.762787][ T353] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 218.924808][ T353] usb 10-1: unable to get BOS descriptor or descriptor too short [ 218.933757][ T353] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.944595][ T353] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 218.954148][ T353] usb 10-1: config 1 has no interface number 1 [ 218.960726][ T353] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 218.976344][ T353] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.986148][ T353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.994583][ T353] usb 10-1: Product: syz [ 218.999251][ T353] usb 10-1: Manufacturer: syz [ 219.004153][ T353] usb 10-1: SerialNumber: syz [ 219.149575][ T5770] kvm: user requested TSC rate below hardware speed [ 219.230402][ T5742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 219.271212][ T353] usb 10-1: USB disconnect, device number 7 [ 219.296857][ T5703] udevd[5703]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.364150][ T468] rust_binder: 5733: removing orphan mapping 0:24 [ 219.605822][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.952560][ T36] audit: type=1400 audit(2000000046.291:892): avc: denied { watch } for pid=5789 comm="syz.9.1638" path="/34/file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.993844][ T5793] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1639'. [ 220.126400][ T5806] rust_binder: Write failure EFAULT in pid:125 [ 220.140039][ T5808] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 220.291970][ T5819] overlay: filesystem on ./file1 not supported as upperdir [ 220.567729][ T36] audit: type=1400 audit(2000000046.852:893): avc: denied { setopt } for pid=5831 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.606168][ T5835] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 220.606202][ T5835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 220.614474][ T5835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:410 [ 220.816414][ T353] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 220.982435][ T5849] binder: Unknown parameter 'defcontext01777777777777777777777' [ 221.001745][ T353] usb 10-1: unable to get BOS descriptor or descriptor too short [ 221.012112][ T5853] rust_binder: Error while translating object. [ 221.012196][ T5853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.015997][ T353] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 221.024960][ T5853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 221.028564][ T353] usb 10-1: can't read configurations, error -71 [ 221.084721][ T5863] x_tables: duplicate underflow at hook 2 [ 221.091590][ T5863] !@˙: renamed from xfrm0 (while UP) [ 221.800225][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 221.800241][ T409] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.939266][ T353] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 222.089134][ T329] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 222.110354][ T353] usb 10-1: Using ep0 maxpacket: 8 [ 222.118168][ T353] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 222.127455][ T353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.139189][ T353] usb 10-1: Product: syz [ 222.144395][ T353] usb 10-1: Manufacturer: syz [ 222.149126][ T353] usb 10-1: SerialNumber: syz [ 222.153240][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 222.156344][ T353] usb 10-1: config 0 descriptor?? [ 222.250444][ T329] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.261076][ T329] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.271326][ T329] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.280865][ T329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.288971][ T329] usb 9-1: SerialNumber: syz [ 222.336330][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.344467][ T10] usb 2-1: config 0 has no interface number 0 [ 222.351148][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.362460][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.372276][ T10] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.385210][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 222.394323][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.403285][ T10] usb 2-1: config 0 descriptor?? [ 222.510337][ T329] usb 9-1: 0:2 : does not exist [ 222.517209][ T329] usb 9-1: USB disconnect, device number 4 [ 222.526704][ T5703] udevd[5703]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 223.054660][ T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.000F/input/input14 [ 223.079112][ T10] uclogic 0003:28BD:0042.000F: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 223.094147][ T10] usb 2-1: USB disconnect, device number 37 [ 223.318964][ T329] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 223.479362][ T329] usb 9-1: Using ep0 maxpacket: 32 [ 223.485892][ T329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.497113][ T329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.506923][ T329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.519842][ T329] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 223.529356][ T329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.538240][ T329] usb 9-1: config 0 descriptor?? [ 223.983837][ T329] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0010/input/input15 [ 223.996971][ T329] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0010/input/input16 [ 224.010619][ T36] audit: type=1400 audit(2000000050.078:894): avc: denied { read } for pid=93 comm="acpid" name="event4" dev="devtmpfs" ino=686 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.025327][ T329] kye 0003:0458:5011.0010: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 224.033389][ T36] audit: type=1400 audit(2000000050.078:895): avc: denied { open } for pid=93 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=686 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.069011][ T36] audit: type=1400 audit(2000000050.134:896): avc: denied { ioctl } for pid=93 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=686 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.190564][ T9] usb 9-1: USB disconnect, device number 5 [ 224.549982][ T329] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 224.558747][ T329] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.841791][ T10] usb 10-1: USB disconnect, device number 9 [ 225.035129][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 225.202500][ T9] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 225.211070][ T9] usb 2-1: config 0 has no interface number 0 [ 225.219195][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 225.228560][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.236906][ T9] usb 2-1: Product: syz [ 225.241101][ T9] usb 2-1: Manufacturer: syz [ 225.245741][ T9] usb 2-1: SerialNumber: syz [ 225.251117][ T9] usb 2-1: config 0 descriptor?? [ 225.276153][ T468] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 225.321503][ T36] audit: type=1326 audit(2000000051.303:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 225.347020][ T36] audit: type=1326 audit(2000000051.303:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 225.370811][ T36] audit: type=1326 audit(2000000051.303:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 225.394486][ T36] audit: type=1326 audit(2000000051.303:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 225.417964][ T36] audit: type=1326 audit(2000000051.303:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 225.441744][ T36] audit: type=1326 audit(2000000051.303:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 225.465350][ T36] audit: type=1326 audit(2000000051.303:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.7.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f88feb8ebe9 code=0x7ffc0000 [ 225.491095][ T468] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.502278][ T468] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.519669][ T468] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.529192][ T468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.537422][ T468] usb 9-1: SerialNumber: syz [ 225.707830][ T5943] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4256666564 (8513333128 ns) > initial count (5988996366 ns). Using initial count to start timer. [ 225.758893][ T468] usb 9-1: 0:2 : does not exist [ 225.771393][ T468] usb 9-1: USB disconnect, device number 6 [ 225.792072][ T5703] udevd[5703]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.879712][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.887544][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.895315][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.902956][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.910558][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.918234][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.925803][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.933287][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.940953][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.948452][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.955966][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.963476][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.971114][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.978848][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.986383][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 225.994158][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 226.002565][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 226.010054][ T329] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 226.145740][ T329] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 226.190368][ T5967] fido_id[5967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.369562][ T5979] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1705'. [ 226.976768][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 227.245875][ T9] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 227.255971][ T9] usb 9-1: config 0 has no interface number 1 [ 227.262214][ T9] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 227.277640][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.289892][ T9] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 227.328825][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.337174][ T9] usb 9-1: SerialNumber: syz [ 227.342660][ T9] usb 9-1: config 0 descriptor?? [ 227.348651][ T9] usb 9-1: Found UVC 0.00 device (0002:0000) [ 227.355594][ T9] usb 9-1: No valid video chain found. [ 227.533140][ T468] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 227.564038][ T329] usb 9-1: USB disconnect, device number 7 [ 227.693239][ T468] usb 10-1: Using ep0 maxpacket: 32 [ 227.699712][ T468] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.709907][ T468] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.720019][ T468] usb 10-1: config 0 interface 0 has no altsetting 0 [ 227.728440][ T468] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 227.737694][ T468] usb 10-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 227.746012][ T468] usb 10-1: Product: syz [ 227.750432][ T468] usb 10-1: Manufacturer: syz [ 227.755176][ T468] usb 10-1: SerialNumber: syz [ 227.760764][ T468] usb 10-1: config 0 descriptor?? [ 228.004899][ T329] usb 2-1: USB disconnect, device number 38 [ 228.367165][ T9] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 228.528570][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 228.537475][ T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 228.550315][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.559606][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.568211][ T9] usb 9-1: Product: syz [ 228.572494][ T9] usb 9-1: Manufacturer: syz [ 228.577182][ T9] usb 9-1: SerialNumber: syz [ 228.801066][ T9] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 228.808227][ T9] usb 9-1: unit 0 not found! [ 228.815433][ T9] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 228.825194][ T9] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 228.836822][ T9] usb 9-1: USB disconnect, device number 8 [ 228.849535][ T5703] udevd[5703]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.440666][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 229.440686][ T36] audit: type=1400 audit(2000000055.155:912): avc: denied { mounton } for pid=6060 comm="syz.8.1739" path="/49/file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 229.808824][ T36] audit: type=1326 audit(2000000055.501:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f458ebe9 code=0x7ffc0000 [ 229.832608][ T36] audit: type=1326 audit(2000000055.501:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f458ebe9 code=0x7ffc0000 [ 229.856525][ T36] audit: type=1326 audit(2000000055.501:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f86f458ebe9 code=0x7ffc0000 [ 229.880512][ T36] audit: type=1326 audit(2000000055.529:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f458ebe9 code=0x7ffc0000 [ 229.904309][ T36] audit: type=1326 audit(2000000055.529:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f458ebe9 code=0x7ffc0000 [ 230.101055][ T46] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 230.261283][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 230.272280][ T46] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.285222][ T46] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 230.294337][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.303410][ T46] usb 9-1: config 0 descriptor?? [ 230.308760][ T6067] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 230.530399][ T6076] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.530427][ T6076] rust_binder: Read failure Err(EFAULT) in pid:414 [ 230.540241][ T6076] rust_binder: Error while translating object. [ 230.546866][ T6076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 230.553615][ T6076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:414 [ 230.757260][ T46] playstation 0003:054C:0BA0.0013: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.8-1/input0 [ 230.939565][ T36] audit: type=1400 audit(2000000056.558:918): avc: denied { write } for pid=6087 comm="syz.7.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.962368][ T46] playstation 0003:054C:0BA0.0013: Failed to retrieve feature with reportID 18: -71 [ 230.972256][ T46] playstation 0003:054C:0BA0.0013: Failed to retrieve DualShock4 pairing info: -71 [ 230.982245][ T46] playstation 0003:054C:0BA0.0013: Failed to get MAC address from DualShock4 [ 230.991183][ T46] playstation 0003:054C:0BA0.0013: Failed to create dualshock4. [ 231.000246][ T353] usb 10-1: USB disconnect, device number 10 [ 231.007589][ T46] playstation 0003:054C:0BA0.0013: probe with driver playstation failed with error -71 [ 231.023451][ T46] usb 9-1: USB disconnect, device number 9 [ 231.179874][ T329] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 231.341459][ T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.351656][ T329] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.360752][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.369673][ T329] usb 2-1: config 0 descriptor?? [ 231.677268][ T6100] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 231.718733][ T6106] random: crng reseeded on system resumption [ 231.718733][ T36] audit: type=1400 audit(2000000057.287:919): avc: denied { append } for pid=6105 comm="syz.8.1757" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 231.912506][ T36] audit: type=1400 audit(2000000057.465:920): avc: denied { open } for pid=6119 comm="syz.7.1764" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 232.046177][ T5502] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 232.208439][ T5502] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.219835][ T5502] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.230060][ T5502] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.243869][ T5502] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.253279][ T5502] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.265181][ T5502] usb 9-1: config 0 descriptor?? [ 232.473136][ T36] audit: type=1326 audit(2000000057.988:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.9.1766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24fbb8ebe9 code=0x0 [ 232.714531][ T5502] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 232.726652][ T5502] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 233.560748][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 233.569031][ T9] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz1] on syz0 [ 233.632113][ T329] usb 9-1: USB disconnect, device number 10 [ 234.150445][ T329] usb 2-1: USB disconnect, device number 39 [ 234.452610][ T46] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 234.623715][ T46] usb 9-1: Using ep0 maxpacket: 16 [ 234.630587][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.642455][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.657295][ T46] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 234.666572][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 234.670240][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.683725][ T46] usb 9-1: config 0 descriptor?? [ 234.860174][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 234.868444][ T9] usb 2-1: config 0 has no interface number 0 [ 234.879299][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 234.888695][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.903669][ T9] usb 2-1: Product: syz [ 234.908391][ T9] usb 2-1: Manufacturer: syz [ 234.913646][ T9] usb 2-1: SerialNumber: syz [ 234.920812][ T9] usb 2-1: config 0 descriptor?? [ 235.122057][ T46] hid-generic 0003:1B1C:1B02.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 235.158515][ T329] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 235.319010][ T329] usb 10-1: Using ep0 maxpacket: 8 [ 235.326325][ T329] usb 10-1: unable to get BOS descriptor or descriptor too short [ 235.335412][ T329] usb 10-1: config 43 has an invalid interface number: 127 but max is 0 [ 235.344006][ T329] usb 10-1: config 43 has no interface number 0 [ 235.347370][ T5502] usb 9-1: USB disconnect, device number 11 [ 235.351344][ T329] usb 10-1: config 43 interface 127 has no altsetting 0 [ 235.367183][ T329] usb 10-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=67.f4 [ 235.376744][ T329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.385073][ T329] usb 10-1: Product: syz [ 235.389773][ T329] usb 10-1: Manufacturer: syz [ 235.394756][ T329] usb 10-1: SerialNumber: syz [ 235.628262][ T329] usb 10-1: USB disconnect, device number 11 [ 236.004273][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.014597][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 236.026808][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.037070][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.049204][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.059578][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.069906][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.081532][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.091993][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.102464][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.114027][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.124448][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.134774][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.146294][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.156834][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.167348][ T5502] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 236.174993][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.189240][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.200022][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.210594][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.226772][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.238758][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.249822][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.263474][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.274400][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.287684][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.300274][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.315114][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.325829][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.337510][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.348235][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.358538][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.370390][ T5502] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 236.379228][ T5502] usb 9-1: config 0 has no interface number 0 [ 236.386816][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.398592][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.412074][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.424836][ T5502] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 236.434540][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.445114][ T5502] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.454260][ T5502] usb 9-1: Product: syz [ 236.458979][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.469446][ T5502] usb 9-1: Manufacturer: syz [ 236.474344][ T5502] usb 9-1: SerialNumber: syz [ 236.479303][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.502235][ T5502] usb 9-1: config 0 descriptor?? [ 236.509135][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.528032][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.538556][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.550451][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.561107][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.571566][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.583858][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.594758][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.605357][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.617186][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.628474][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.639100][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.651199][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.662236][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.673145][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.685213][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.696480][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.707062][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.719072][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.730270][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.740897][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.753028][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.763808][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.774344][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.786246][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.797648][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.808667][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.820625][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.831470][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.841860][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.853796][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.865156][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.875738][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.888018][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.898925][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.909535][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.921926][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.932825][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.944030][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.956510][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 236.967346][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.978972][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 236.991388][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 237.002305][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.012977][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 237.024993][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 237.036151][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.046903][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 237.058782][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 237.070562][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.081034][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 237.092841][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 237.103523][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.113937][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 237.247777][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 237.260134][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 237.269842][ T9] asix 2-1:0.251: probe with driver asix failed with error -5 [ 237.281792][ T9] usb 2-1: USB disconnect, device number 40 [ 237.554212][ T10] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 237.715778][ T10] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 237.725325][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.734165][ T10] usb 10-1: config 0 descriptor?? [ 237.955281][ T10] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 238.784148][ T353] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 238.944687][ T353] usb 2-1: Using ep0 maxpacket: 8 [ 238.951234][ T353] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 238.960464][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.969750][ T353] usb 2-1: config 0 descriptor?? [ 239.131463][ T9] usb 9-1: USB disconnect, device number 12 [ 239.166124][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 239.166143][ T36] audit: type=1400 audit(2000000064.243:928): avc: denied { setcurrent } for pid=6236 comm="syz.8.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 239.193473][ T36] audit: type=1401 audit(2000000064.243:929): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 239.211172][ T353] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 239.879836][ T353] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 239.890145][ T353] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 239.917875][ T353] asix 2-1:0.0: probe with driver asix failed with error -71 [ 239.927399][ T353] usb 2-1: USB disconnect, device number 41 [ 240.106007][ T10] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 240.116547][ T10] asix 10-1:0.0: probe with driver asix failed with error -71 [ 240.125594][ T10] usb 10-1: USB disconnect, device number 12 [ 240.476682][ T6248] loop7: detected capacity change from 0 to 7 [ 240.709318][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 240.880739][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 240.888454][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.900796][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.911863][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.925812][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.936035][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.991442][ T10] usb 2-1: config 0 descriptor?? [ 241.441803][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 241.451174][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0017/input/input18 [ 241.463941][ T10] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 241.659623][ T46] usb 2-1: USB disconnect, device number 42 [ 241.943168][ T36] audit: type=1400 audit(2000000066.843:930): avc: denied { create } for pid=6284 comm="syz.9.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 242.238708][ T46] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 242.270781][ T752] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 242.400189][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.411942][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.422359][ T46] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.435824][ T46] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.441912][ T752] usb 9-1: Using ep0 maxpacket: 32 [ 242.445808][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.463328][ T36] audit: type=1400 audit(2000000067.329:931): avc: denied { read write } for pid=6307 comm="syz.7.1836" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 242.489957][ T752] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 242.490236][ T36] audit: type=1400 audit(2000000067.329:932): avc: denied { open } for pid=6307 comm="syz.7.1836" path="/170/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 242.504212][ T752] usb 9-1: config 0 has no interface number 0 [ 242.521730][ T46] usb 10-1: config 0 descriptor?? [ 242.556302][ T752] usb 9-1: config 0 interface 12 has no altsetting 0 [ 242.569872][ T752] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 242.581626][ T752] usb 9-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 242.590035][ T752] usb 9-1: Product: syz [ 242.599542][ T752] usb 9-1: Manufacturer: syz [ 242.605215][ T752] usb 9-1: SerialNumber: syz [ 242.617135][ T752] usb 9-1: config 0 descriptor?? [ 242.965365][ T46] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 242.974591][ T46] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 243.244806][ T752] usb 10-1: USB disconnect, device number 13 [ 243.789646][ T37] INFO: task syz.5.712:2649 blocked for more than 122 seconds. [ 243.797734][ T37] Not tainted syzkaller #0 [ 243.803391][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.812317][ T37] task:syz.5.712 state:D stack:0 pid:2649 tgid:2648 ppid:1639 flags:0x00004004 [ 243.822684][ T37] Call Trace: [ 243.826087][ T37] [ 243.829211][ T37] __schedule+0x1322/0x1df0 [ 243.834065][ T37] ? __sched_text_start+0x10/0x10 [ 243.839368][ T37] ? __kasan_check_write+0x18/0x20 [ 243.845075][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 243.850267][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 243.856072][ T37] schedule+0xc6/0x240 [ 243.861995][ T37] schedule_preempt_disabled+0x14/0x30 [ 243.867557][ T37] rwsem_down_read_slowpath+0x6d1/0x1460 [ 243.873272][ T37] ? down_write_killable+0x2d0/0x2d0 [ 243.878662][ T37] ? bdi_split_work_to_wbs+0x936/0xa70 [ 243.884274][ T37] ? __kasan_check_write+0x18/0x20 [ 243.889533][ T37] ? sync_inodes_sb+0x700/0x700 [ 243.894434][ T37] ? downgrade_write+0x430/0x440 [ 243.899529][ T37] ? mutex_unlock+0xdc/0x240 [ 243.904229][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 243.909559][ T37] down_read+0x8f/0xe0 [ 243.913678][ T37] ? __cfi_down_read+0x10/0x10 [ 243.918549][ T37] ? sync_inodes_sb+0x354/0x700 [ 243.923449][ T37] super_lock+0x231/0x300 [ 243.927864][ T37] ? user_get_super+0x350/0x350 [ 243.932880][ T37] ? __kasan_check_write+0x18/0x20 [ 243.938146][ T37] ? _raw_spin_lock+0x8c/0x120 [ 243.942981][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 243.948409][ T37] ? __kasan_check_write+0x18/0x20 [ 243.953689][ T37] iterate_supers+0x8a/0x560 [ 243.958435][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 243.964105][ T37] ksys_sync+0x95/0x160 [ 243.968357][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 243.973184][ T37] ? __kasan_check_read+0x15/0x20 [ 243.978288][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 243.984514][ T37] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 243.990643][ T37] __ia32_sys_sync+0x12/0x20 [ 243.995385][ T37] x64_sys_call+0x2a58/0x2ee0 [ 244.000122][ T37] do_syscall_64+0x58/0xf0 [ 244.004620][ T37] ? clear_bhb_loop+0x50/0xa0 [ 244.009359][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.015342][ T37] RIP: 0033:0x7f0e5a18ebe9 [ 244.019974][ T37] RSP: 002b:00007f0e5b087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 244.028549][ T37] RAX: ffffffffffffffda RBX: 00007f0e5a3c5fa0 RCX: 00007f0e5a18ebe9 [ 244.036763][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.044967][ T37] RBP: 00007f0e5a3c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 244.053447][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.061596][ T37] R13: 00007f0e5a3c6038 R14: 00007f0e5a3c5fa0 R15: 00007ffcad7fa208 [ 244.067586][ T752] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 244.069651][ T37] [ 244.080514][ T37] INFO: task syz.5.712:2650 blocked for more than 123 seconds. [ 244.088092][ T37] Not tainted syzkaller #0 [ 244.093097][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.102019][ T37] task:syz.5.712 state:D stack:0 pid:2650 tgid:2648 ppid:1639 flags:0x00004004 [ 244.112507][ T37] Call Trace: [ 244.115901][ T37] [ 244.118852][ T37] __schedule+0x1322/0x1df0 [ 244.125090][ T37] ? __sched_text_start+0x10/0x10 [ 244.130264][ T37] ? __kasan_check_write+0x18/0x20 [ 244.135919][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 244.141798][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 244.147481][ T37] schedule+0xc6/0x240 [ 244.151603][ T37] schedule_preempt_disabled+0x14/0x30 [ 244.157117][ T37] rwsem_down_read_slowpath+0x6d1/0x1460 [ 244.162803][ T37] ? down_write_killable+0x2d0/0x2d0 [ 244.168174][ T37] ? __kasan_check_write+0x18/0x20 [ 244.173347][ T37] ? downgrade_write+0x430/0x440 [ 244.178391][ T37] ? mutex_unlock+0xdc/0x240 [ 244.183127][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 244.188581][ T37] down_read+0x8f/0xe0 [ 244.192832][ T37] ? __cfi_down_read+0x10/0x10 [ 244.197689][ T37] ? sync_inodes_sb+0x354/0x700 [ 244.203103][ T37] super_lock+0x231/0x300 [ 244.207851][ T37] ? user_get_super+0x350/0x350 [ 244.213026][ T37] ? __kasan_check_write+0x18/0x20 [ 244.218362][ T37] ? _raw_spin_lock+0x8c/0x120 [ 244.223252][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 244.228532][ T37] ? __kasan_check_write+0x18/0x20 [ 244.233695][ T37] iterate_supers+0x8a/0x560 [ 244.238332][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 244.238682][ T752] usb 10-1: Using ep0 maxpacket: 8 [ 244.243954][ T37] ksys_sync+0x95/0x160 [ 244.250853][ T752] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.253293][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 244.264224][ T752] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.268051][ T37] ? __kasan_check_read+0x15/0x20 [ 244.268101][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 244.278907][ T752] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.283513][ T37] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 244.290514][ T752] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.300039][ T37] __ia32_sys_sync+0x12/0x20 [ 244.307256][ T752] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.320049][ T37] x64_sys_call+0x2a58/0x2ee0 [ 244.324746][ T752] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.333765][ T37] do_syscall_64+0x58/0xf0 [ 244.351021][ T37] ? clear_bhb_loop+0x50/0xa0 [ 244.355784][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.361862][ T37] RIP: 0033:0x7f0e5a18ebe9 [ 244.366427][ T37] RSP: 002b:00007f0e5b066038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 244.374994][ T37] RAX: ffffffffffffffda RBX: 00007f0e5a3c6090 RCX: 00007f0e5a18ebe9 [ 244.383040][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.391299][ T37] RBP: 00007f0e5a3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.399911][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.408341][ T37] R13: 00007f0e5a3c6128 R14: 00007f0e5a3c6090 R15: 00007ffcad7fa208 [ 244.416506][ T37] [ 244.419678][ T37] INFO: task syz.5.712:2651 blocked for more than 123 seconds. [ 244.427390][ T37] Not tainted syzkaller #0 [ 244.432761][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.442203][ T37] task:syz.5.712 state:D stack:0 pid:2651 tgid:2648 ppid:1639 flags:0x00004004 [ 244.452413][ T37] Call Trace: [ 244.455764][ T37] [ 244.458810][ T37] __schedule+0x1322/0x1df0 [ 244.463372][ T37] ? __sched_text_start+0x10/0x10 [ 244.468441][ T37] ? __kasan_check_write+0x18/0x20 [ 244.473606][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 244.479997][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 244.485785][ T37] schedule+0xc6/0x240 [ 244.489919][ T37] schedule_preempt_disabled+0x14/0x30 [ 244.495474][ T37] rwsem_down_read_slowpath+0x6d1/0x1460 [ 244.501238][ T37] ? down_write_killable+0x2d0/0x2d0 [ 244.507000][ T37] ? bdi_split_work_to_wbs+0x936/0xa70 [ 244.512619][ T37] ? __kasan_check_write+0x18/0x20 [ 244.517807][ T37] ? sync_inodes_sb+0x700/0x700 [ 244.522704][ T37] ? downgrade_write+0x430/0x440 [ 244.527712][ T37] ? __kasan_check_write+0x18/0x20 [ 244.532889][ T37] ? mutex_unlock+0x8b/0x240 [ 244.537520][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 244.542593][ T37] down_read+0x8f/0xe0 [ 244.546724][ T37] ? __cfi_down_read+0x10/0x10 [ 244.551566][ T37] ? sync_inodes_sb+0x354/0x700 [ 244.556452][ T37] super_lock+0x231/0x300 [ 244.561327][ T37] ? user_get_super+0x350/0x350 [ 244.566348][ T37] ? __kasan_check_write+0x18/0x20 [ 244.571572][ T37] ? _raw_spin_lock+0x8c/0x120 [ 244.576392][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 244.581687][ T37] ? __kasan_check_write+0x18/0x20 [ 244.586847][ T37] iterate_supers+0x8a/0x560 [ 244.591494][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 244.597126][ T37] ksys_sync+0x95/0x160 [ 244.601349][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 244.606171][ T37] ? __kasan_check_read+0x15/0x20 [ 244.611255][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 244.617514][ T37] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 244.624390][ T37] __ia32_sys_sync+0x12/0x20 [ 244.629053][ T37] x64_sys_call+0x2a58/0x2ee0 [ 244.633771][ T37] do_syscall_64+0x58/0xf0 [ 244.638259][ T37] ? clear_bhb_loop+0x50/0xa0 [ 244.642983][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.649002][ T37] RIP: 0033:0x7f0e5a18ebe9 [ 244.653439][ T37] RSP: 002b:00007f0e5b045038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 244.662344][ T37] RAX: ffffffffffffffda RBX: 00007f0e5a3c6180 RCX: 00007f0e5a18ebe9 [ 244.670407][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.678687][ T37] RBP: 00007f0e5a3c6180 R08: 0000000000000000 R09: 0000000000000000 [ 244.686902][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.694954][ T37] R13: 00007f0e5a3c6218 R14: 00007f0e5a3c6180 R15: 00007ffcad7fa208 [ 244.703109][ T37] [ 244.706362][ T37] NMI backtrace for cpu 1 [ 244.706376][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 244.706398][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.706408][ T37] Call Trace: [ 244.706415][ T37] [ 244.706423][ T37] __dump_stack+0x21/0x30 [ 244.706459][ T37] dump_stack_lvl+0x10c/0x190 [ 244.706488][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 244.706512][ T37] dump_stack+0x19/0x20 [ 244.706532][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 244.706556][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 244.706577][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 244.706599][ T37] ? sched_show_task+0x379/0x560 [ 244.706620][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 244.706639][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 244.706660][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 244.706682][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 244.706708][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 244.706728][ T37] watchdog+0xd8f/0xed0 [ 244.706751][ T37] ? __cfi_watchdog+0x10/0x10 [ 244.706771][ T37] ? __kasan_check_read+0x15/0x20 [ 244.706795][ T37] ? __kthread_parkme+0x138/0x180 [ 244.706811][ T37] ? schedule+0xc6/0x240 [ 244.706826][ T37] kthread+0x2c7/0x370 [ 244.706842][ T37] ? __cfi_watchdog+0x10/0x10 [ 244.706863][ T37] ? __cfi_kthread+0x10/0x10 [ 244.706884][ T37] ret_from_fork+0x64/0xa0 [ 244.706906][ T37] ? __cfi_kthread+0x10/0x10 [ 244.706922][ T37] ret_from_fork_asm+0x1a/0x30 [ 244.706947][ T37] [ 244.706953][ T37] Sending NMI from CPU 1 to CPUs 0: [ 244.869338][ C0] NMI backtrace for cpu 0 [ 244.869354][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 244.869380][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.869392][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 244.869420][ C0] Code: cc cc cc b8 80 f4 60 2a 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 01 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 244.869435][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6 [ 244.869451][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858c50ae [ 244.869465][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000579654 [ 244.869476][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 244.869489][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 244.869501][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cb0b28 [ 244.869513][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 244.869528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.869539][ C0] CR2: 00007f56a5f94198 CR3: 00000001056ca000 CR4: 00000000003526b0 [ 244.869556][ C0] Call Trace: [ 244.869563][ C0] [ 244.869571][ C0] default_idle+0x17/0x30 [ 244.869594][ C0] arch_cpu_idle+0xd/0x20 [ 244.869618][ C0] default_idle_call+0x3f/0x80 [ 244.869643][ C0] do_idle+0x1a0/0x470 [ 244.869663][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 244.869684][ C0] cpu_startup_entry+0x48/0x70 [ 244.869700][ C0] rest_init+0x10b/0x130 [ 244.869723][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 244.869740][ C0] start_kernel+0x46a/0x4bb [ 244.869762][ C0] x86_64_start_reservations+0x2e/0x30 [ 244.869787][ C0] x86_64_start_kernel+0x6a/0x7b [ 244.869811][ C0] common_startup_64+0x13b/0x157 [ 244.869843][ C0] [ 245.237272][ T46] usb 9-1: USB disconnect, device number 13 [ 247.008190][ T3556] usb 10-1: USB disconnect, device number 14