last executing test programs: 3m54.089428074s ago: executing program 1 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) shutdown(r1, 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00']) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r6) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r7, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r6) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 3m54.014789935s ago: executing program 1 (id=281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x2010, r2, 0x100000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000001480)={'sit0\x00', &(0x7f0000001440)={@local, @rand_addr=0x64010100, 0x0, 0x20}}) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000001c0)={@empty, @loopback}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r5, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4099, 0x1003}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/154, 0x9a}, {&(0x7f00000014c0)=""/126, 0x7e}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000001680)=""/185, 0xb9}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000300)=""/48, 0x30}], 0xc}, 0x5}], 0x1, 0x2000, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9614, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r7, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{0x0}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/4096, 0x1000}, {0x0}], 0x4}, 0x390}], 0x1, 0x12040, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000840f000000000000000200000000000000000000000000000000000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r9, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff, 0x4}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000001740)=ANY=[@ANYBLOB="2e3fc3879decbcbcd0ad6b3caf026235", @ANYRES16=r10, @ANYBLOB="00082dbd70001ad426e20300000014000200fc0200000000b9257e002164f173f8f83ab4"], 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x40000, &(0x7f0000001780)=ANY=[@ANYRES8=r4]) 3m53.972480126s ago: executing program 1 (id=282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f000058e000/0x3000)=nil, 0x3000, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010015, 0x0, 0x8c2}]}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 3m53.746911109s ago: executing program 1 (id=285): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) fstatfs(r2, &(0x7f0000000000)=""/34) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x6, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x6, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40045}, 0x48000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)='.pending_reads\x00', 0xf, 0x0) close(r7) (async) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3m53.599241842s ago: executing program 1 (id=286): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) fadvise64(r0, 0x10000001003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) openat(r0, &(0x7f0000000000)='./file0\x00', 0x141901, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) (async) fadvise64(r0, 0x10000001003, 0x9, 0x5) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) (async) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x141901, 0x0) (async) 3m53.550491222s ago: executing program 1 (id=287): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0xa8002, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x19) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x368, 0x0, 0xc0}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x99b33000) 3m53.500361223s ago: executing program 32 (id=287): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0xa8002, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x19) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x368, 0x0, 0xc0}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x99b33000) 3m36.475467455s ago: executing program 2 (id=595): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x2, 0x2, 0x98, 0x1, r1}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x3, 0x3, 0xfff, r1}) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/172, 0xac}, {&(0x7f0000001200)=""/31, 0x1f}, {&(0x7f0000001240)=""/31, 0x1f}, {&(0x7f0000001280)=""/232, 0xe8}], 0x5, 0x40000000, 0x8) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x25, &(0x7f0000001400)={0x2, 0x2, 0x1, 0x1, r2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000001440)={0x0, 'veth1_vlan\x00', 0x1}, 0x18) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000015c0)={0x0, &(0x7f0000001480)=[@cpuid={0x2, 0x18, {0x9f, 0x7c}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x58, {"460fe79bf51700000fc7370f0016c4c22dbfe566b83a010f00d8450f01ca3666672e0f0f8303e49a4294b9fc0a0000b8400a0000ba000000000f3066420f1b4d2ac4e3354ae1b6"}}, @cpuid={0x2, 0x18, {0xd}}, @code={0x1, 0x47, {"660f3880aa220b000068e28a0000b95d0900000f328f29c0940bc403355e034ef4c42245aab6000000004e0fc72a450f0726650f01cf"}}, @cpuid={0x2, 0x18, {0x2, 0x3}}], 0x12f}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x1000) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000001a40)={0x82, 0x1b, &(0x7f0000001640)="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"}) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001c00)={'nat\x00', 0x0, 0x4, 0x85, [0x9, 0xfffffffffffffffe, 0x1ff, 0x1000000000, 0x6d, 0x5], 0x9, &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001b40)=""/133}, &(0x7f0000001c80)=0x78) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000001cc0)={0x112, @multicast2, 0x4e21, 0x4, 'wlc\x00', 0x0, 0x3, 0x5a}, 0x2c) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000001d00)=@arm64={0x9, 0xc, 0x7, '\x00', 0x6}) r6 = syz_open_procfs(r2, &(0x7f0000001d40)='auxv\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000001d80), 0x4) r8 = dup3(r3, r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = fcntl$getown(r6, 0x9) fcntl$lock(r9, 0x7, &(0x7f0000001dc0)={0x1, 0x4, 0x2, 0x10000, r10}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001e00)={r8, 0x1fb, 0x2ec, 0x828c}) ioctl$VT_OPENQRY(r11, 0x5600, &(0x7f0000001e40)) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000001e80)={0x0, 0xa}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r11, 0x80083313, &(0x7f0000002e80)) r12 = openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000002ec0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r12, &(0x7f0000002f00)={'vlan0', 0x32, 0x38}, 0x8) 3m36.474081825s ago: executing program 2 (id=596): ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x6d, 0x1}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0xfffffffa) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x21082, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0x53b) timer_create(0x5, &(0x7f0000000280)={0x0, 0xc, 0x2, @thr={&(0x7f0000000100)="c027900d2cfe90b85e05ab1a4b5d3e16c0310054e44fa7058f536822bf4114ee12693a7bb89a844e7bbbfd75493dc6142ee752954c021cfc2b0dd6c032557817218695313df8ddf87d61a5ea590aa0d4865795abba6fcf6300145d1183208a03ed6e95b9b8342167613c87e520d1da927337698b36f241c048f3f52767b9e7928ce5692d23d2a99f9836ab1b148cc709d75bd4e41be49226aad139ed62115d", &(0x7f00000001c0)="ac9d4e00b064f9efc7f4736d67b42fcca2a0d066eadcfd41694ebbaad4d54cbd29637725e17da8bdfd606f692f5f8de24d9604373b28fda65966e971353de996ae1004cfe6e0457908eb64534bdc78fdcbf358d08cf507551d46bf757eee2d47b7b3cc6068af3203617166706a766563e061be775d0237e7b015cd2c7fc753b6f1591222c6ec2987a393d73f8db24fa4d150dc7a0a2ff99d"}}, &(0x7f00000002c0)=0x0) timer_delete(r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x20, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000003c0)=0x1) timer_create(0x4, &(0x7f00000014c0)={0x0, 0x17, 0x1, @thr={&(0x7f0000000400)="996d0f0cb166f811980b8e164f1242efcc1c9e5f264af398d570d486c48c5bd6f02bf5ea5aa8677600cc36a25b94346df8a56e80dde9f5f6d50ec48f974f0ab1f2e45738f60eb7fe04abf0bd84ef3ff08636750679877ec866531f45011175a72bc8480c57f3fb1e2070f39666cb6ce185a129d0e4d4be4315e1fa9c85149ad20bcd33e3f4a79ffe72b051afa630caea3b0273b054a000f5bda7124aff744035be6f0451aadeb8e63d982454905c3f4d025b147e5d8f4f87b4d132eb9f08c0c9f1a2a810eaa78561d2ff84205af650bce79b746a1c033851f1bb519ce20b1ac4c40be3f596b688381b62f5023f6d74ecea8b4479532f639698b89eb57173f3de1e8e6faa7f0dd4ee7e72871088f88667f2a744d03e07de10331fa1c05448ef3b6d2dc288b830ebc71e2d057f40335bbed60589066d7a336b636e61ef5b90b59bce342c53a0aec488690d774fc68990cbf9e6da7fa0b0f5498bea141ee15699de89bce1911a054e88a0c1280361e6a49c51fd02356f6950f8b7cd0e4297162f65d14d959d3e4c89ed10b882cb0370f19713751cee8dc97cecbb9c14c9d488ae72a73863e21984ff8dd80b3d16823a9c3ddb18d5eec3df1ca27deca82823763c84c60a4679d1a96cc88580c48abc2cfdc81e0fe868856895b3a889b35180c2a683c0490ddbda877a9eb5d11d1013400e51ab7520b022167ddbee0dbb0825055a9e738e1e1bb8e1e2b33b6a087a307ba2ec7b0257029e937c90ee1b89500376a92d27f40a4fbcf13872d2c2d5ae4a60aef47348781bd2da8c1bbccc87234d268e949a2d987754160082ce9e27395eeb33880e036afd617afe4fbde4496db831502a3809f28ce599c18d5519006430244565fa271b08db0e9e24f87448ec90bcbd94c846e85cded6df51c5ed6f6ad6cc83280a3fcd728733425efcd448191a0e21e37c6bad13fc45c78197ac5a98b9137834a81d3fdd6a984d65e1f7513f28f7e1c80624252de1befe3c1270830ef49058c225f0db2a4e90ec81aa801c4a9f56fe099652f2dc0f24670864fa3959824bade28633f9627bda7d3745c81c1c845375ccc0afc7cb8fdafdbb7312624c6464535cf9870c7cab086896846d55a882f145938e241241a924f44f8f733ce447543291c89c5f2753f5422a2d245eb8b9642472ff563e0fd25a12a77db2cfc791c2127920dea7eca6b7ad993a6c5498ac51ca52177dade90a36687dc145f4d1663f9843d27cd93093c4a9f4acf7d955ac205fb293bcb0d439c6d5bd51fef38820ec7b9499514c55d7124243bf26ddcbfb8c67515d36926d214bbcab6b74240ea3abd91bc957ea4dc4f28f526bacca3bee52f201f08aae59e3b920ed2709fab225cc9433c6085a949732b7b50a21b31a2523f5290fbb8d1977d77efc3a2c4c20bb90ee127eb24080a68c1023a478c30ee130bd551be91612e67b68554383de9e57209151e4969e8aabab7c7aa71c3b86c2a1e819674000de2517d1ee1649f812d480b964a3778d97aa3fd79cd942c5bca7edd7f2dad57839aecd93f8fc4a3471f9c7b5cfe8200760254f3600b539baf4cceb6086073efa5fcd886ae80343e784144e3e46546e804c7c87c657984b95f748106cc038dccc9522cc367cb782a523b55a15d2fb0bd882aec5e2928ad92240afaf8015c232c8a16cd79411e1e75f3cb62e157555c733f4e8209a7990b4e1dd3ff4d51224bce3d0e6857fe56c6c10fb5f33b8ec290c92896781dd18616ff68b6fe2605c79ae64396b76837ca37a8b8ae6a84cff69dd2e144db9357ad18246672fdd746b7e2bc63dc66e0da8d0fe107d225a6466725ac680aa33e1494c94c2079639e997760ac47f49a9e88fea2a2b2f161b630e0a426b4e6e12997b6f33949768d3894fb696549cbc12483b96139c470854cf5e26d338f3142c05d8c01867b8c56e94767fafec963b220aaa1317861e581f47590e13bba568361fef5559eb6a765ae2cd6a67b02a7070d756cbd52fdd4b7aa1355d9704208b64f664a0153b5f88d9cd15293a1baaddc06d5f455aa0b302c228a0f4691e6f591971ce7d35800c8e81802cf302b13e2b509d5cbf8486471cd838a88ffeed7795907a2cdc46c1bc1bbfe64ba9d9e0cb503d3f2f1755f81778ea77faaec6043b4baeba43a2814586164efaa935fc4b50600965a1eef591ea1208f93dc268798a2f55c179559a3affd0145c55f120b3aa39ca2109534747e8d42a6caf9fd09e5bb2005ff2b19d4550530b4473ca975ce225ec0fd3a8bb544f2757e60702f716fa28cd36edb45a217e78c6a9ea473de51e6f7c81485c9fb7bfd856c0790d1d3a9741b89cb2c64f9d48bf4139af990ef2e1bd392536384e6bc0ea30be8644f7ff5b6a470db0999091d6ca236d7b0bd5d1b2ee1e5df2afd48634273da9b535309a41fa13c12299ff4e6d9e634830dfeec9ecf8c401751265ba945bccc7d59b734e2dc5f1a836a8557cce57889871855c940f43cb0c31ae826a76173092e257815c8f9032d0c9093996a8c6f800392c77677013dfbf9b2a02bdfcb52cc44f7169f03370fa83f556cfd2d1dfe81b1df9a5396010af3a2de565969a338801856183aa1b2c17e383784ad2b6cb3486e65e04090ad2357c026c3d272cf8a00aae50f9aca99b5b66e056ee22832d9bc26433c935dd68367606ecc5d844d9dc2c1b450ebd905250c6cedd1ea64df9c2ed3683d29d83402a4787dcf17fb464235043f2055d60f356b5946acce5d4937380751c9994bb6db283a4c336d89a2b9a81944e43c8e6def3f71e0b178c4ba3bbb4296422c6d66305bdd53a1f1ea78ce6bc56449a94312217b357cefecf30ef3e9a323c4b9ebe9e9d48740bd732c849f9bef508897c1f743930ac47e9e1f250e445bb1c722c3950fd921524aaed996aef99f5a24ae6c08985ae3dd1aa0e4c7d3658b75122a71b840e574279dc17eea91790aa1be61ccef08bdb1774a722b2591ad3aa5f424ffa596b47fbd871614ba1422f35ac623f54b88c791f84b1c43e7af34a40aa9c490cb300fc54d6e7d9358c26d984ccac54643229b0cba126c4a85835321e3cf9b8f75a73591a1524067a7865728d06222d4f839f1cf8252242d3bfa9961adb4ee7834c022a5d50be1c0d2b797b826c3293bd89a39f38fee5b45060d585c9d134613863603c53bdc2d665a16335c2479eb9088e00b78424d868dee9c6965665367b516b474eeba53abeb960adc4df2a3ba70806ab4de2059daefdecb774c9cada3b6a3dd12cdf80cd1e0930fa997bebb7b3274c11202b1572178cfcb31f79e36b36df858afac0a28b3f6918440bf32ba0506d0d2d45ff97f6ab6f7742881507aff65f9afdbd8a99de1e39e3ebfc2b2cbbd1e02c2a3550346f192744a17b5bac14d253347728a32242ad796a3e42bba99ad0ba0736f65224a8b9b81ea844d32a060c64146d57963037c0f73059bb94a2e615e40f3ef6d264e8dad1affe4cd091102d008500a289364d4e3b73c957e71388f883deb3e3804c734249a8edddae4ca10ffcf4ffaa8bfdd6298e2d8df0cbd88fc4b388292e19726410cf278f99b994e422fa32d5889476a38ccc023909885cc3976fa820dcb8b88a0e522de023e078bef714ba8a4f1118dd37da986d4bc30c93c01a5e35ef37f70d18c1c5e523fe9eb28d172d0ae65b4a341aa472b90a6414789d59f638e2c8bf71bc2ea8b277483fc95eee0a55a151d7c9bef5683538919e84cf6a99cbaa04747bd16f1d28a7199d59f421debe4059fb22088417dd971ea693d55bd8e2b5f94e308e2bafc3f694de50b654c95f796f2f3c9763cfae5260ba46d5fdf0f084cb3d53e91a1204031ad6f1e06e505639ce44c5337b14de34f832d165e68cff20273bfa8bc82ebd0a01845d94ab83db08b96825a8ce6f8271aa5ba0064226a4cb4bb2c27f81c35fab2dc491861f27e243443e78de8835991ca0dbc234a5994fceadb6b8764b759854e5d64346e472d37e2c77d49739cca9638f130b7c81b85ac34ef6cd2e98af1d371df86ecc237b9a88adf9cd72ba25faa76a9d57ba1b18e58f0b33b313036a0810709b8fca08a1452487037d2b1ddc6c91a184e6d265995737a6ee86c6aaacddfe036bdaee0c3bc5aa2ad292840169b7a492d051804133feea56cc12ae053736577b89dc725ae6d2a357858d9aa770bbb622342ebec3820e5e1066dbab0ea558c45a10b0a670faad7a1eaa5c8ccc060e2f30d5a8d20d9985a76e3e5ded771d8f3ae00d0524995eb4a34269e973f6077078b39c54189ce2792e2c6222ddc676b3559bb168051bb07d3afc8273baafdb7ff34d13d976965e1db5a72c184a8e87816aaeb009c2baa63cd804fb05f3ea15cd80686dcfc625975554ca9fb91d4027a958af312308708162e6c1251f5b5b25a0e90facbc22544ca9b4fa110a9d9a4abeb33c4fbf51edf1a07905afbf7f153d74916c3332ff73297dfddc1211cf59fdff4c0a607cfb8df0e969508426605e18f8a10b972bf54d412bfca138ea5449e68db642445e68ad4b1a59358ae6b721be429b6bf327366993c89b62c941bc425ae704f6ec931cc819235f36da24d01444dde962dedf1a403ba5b2ee997bcbaaf5ad27cd89c9cab0ccd9dfa29046e10455b4aee074e261fd7c13adf172f81423b9fd05570453a9e1fb5be95d69f985ad75c91410e28666f50b3549784f6c8dccb4df99ca3ff447c6ec97ecf96d60945f6dbb7a9c7f15ef4fb9c66414fe87cd21a720cf04c5027a4a00a00fbcef48888dc39854b35038652e154cae9883a4a11fbbd0cdada033dc493790edf273f092d233665f8fff8465eb3cc04e30be260bf5ad915a67af7a167146a8aa74b0aa4b9c02618f5f16dcfdb4e7b3375f1db2be0f7c4f15997a634e70e8cad8f66faaa579448ef8539afe7a8092da258de89dea222acfb336fbbd30d7aeb7509ee0f55e98aeec8888dcbef9b62051ca4ebca1cf7df243e0553dcdec5605e6d084811e7d35629a3ff71e0a0afdaeb62fabb53e4b193bac2f37bde63d47cf206a337f0d9f84df701f3985c2162bf05a6c503914082a06392424c089f661a38553f4d4dc3994dbe40f6e721102e14c94052a565ad8b2efa79c87a2a4af4d035c08cdfd727dd49220d36b59dd9f5dc32ecc71dfcd0fff411934051c555316ac4f48310c3e547c9eaf1ee18617c93a67ec381a0bbe7e19549d140f99c13e0c2815c54935b21021c22ef9c736769faec79a72492dceea72455b11c1821e4d7e17cd745c7e780ee3b0655fc1569cb79b1a9cc5e9000c44ef38f8cb4813ebec6c210ce0d54d68b22797bb3be668fa305955ab9462b0b04e5c97fbf6e904d74be9a089a14e751d00e875934e7880321a2d810288086fd66764c318dd845687b8561808ebba916c5f0a5cd618235ff34fd0106b8334743b50f96be3660bcda28a304e4f9047740a294d08ef9c0203dbc931065574ec70a0862f4102b199383cc1cebb2b369671385e2d679d87106a03a12c61b14d7bc6119637d29877d8bf02bf9ab9ad8c366b647b84c95529178c824b5f4bf6c8989d990a085b37795dd5ceddb6d254e5a57ba01decd5cf3a94258811f7d28c29c4d003d3b7419233bfcab1c09f4ed7576292b65bae0b9a0f61f9e84d62cac566f8012097c9b47d1300f533e6ef2c078f39d993df78569787cacc79d7282d6f3d9efb585e60b8f122eb607f6c7701ff20440cfc4c51be275b0cc5028b329dd8e8bf00332d7d388b2dc8dbcfa302f859f9f7b2154fabf2bb6c7783d0084a303e95d3587c8f89da0f0d13", &(0x7f0000001400)="cbfe87600a6429d3d4ffe6f46c43cac658ab82199e4de944871c90e944dacfef31cf18d6d9f60aeed6e8c981fad0a3433a7084ebd6ecd5bd5299da97d544f6a74b714ccbe4cd89659675a8f2d2fc9ad52daff526fdc54b748f81beed79e9a183e3eee49eea9d74d72ee5ec6aa6ec6fd8af294ad87e3c0053520c937157dd38d5d61454db5a26374ed866d815fd8c9c"}}, &(0x7f0000001500)=0x0) timer_getoverrun(r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, r5, 0xe3bf71229275743e, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) timer_delete(r3) timer_gettime(r4, &(0x7f0000001680)) timer_gettime(r4, &(0x7f00000016c0)) timer_gettime(r4, &(0x7f0000001700)) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x4c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xd000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002dc0)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x200, 0xd9, {{0x1a, 0x4, 0x1, 0x2a, 0x68, 0x65, 0x0, 0x81, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x94, 0xd, "632a269d465d2c1f52fc4f"}, @timestamp_prespec={0x44, 0x14, 0x81, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xf}, {@multicast2, 0x4}]}, @timestamp={0x44, 0x20, 0xb, 0x0, 0x4, [0x9, 0xfffffc01, 0x8, 0x1, 0xfffffff9, 0x6, 0xd]}, @end, @noop, @generic={0x7, 0x10, "b19fe20b9896d4343dfd1d6b305c"}]}}}}}) sendmsg$inet(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000018c0)="0250ffcda99d02578c66b78a7624c3bcb3c271830b22a07b0a69d6db046da57a2cbb32e2c778764b68670a3687cfd8cc5af69842b74b8297c52ef61c8de36f5b1f2b88cff93b97699994af0e3b9a6b5c18680157f57a89eb1fca60cfb761c9ee9356e9a373a7484ed11ce3684797666488dda83c95afeb150bcb97915e1c1e45546d", 0x82}, {&(0x7f0000001980)="60a6ca910e43fde5e8bfa2be7d069bc30344ffbce734292dddd945f7c552c866f8", 0x21}, {&(0x7f00000019c0)="9dd357b757905181b535be6cf63acdc01d4f964914e3d0f0e26ea72264a12a552c6e43adc7f85b517f5f78692c4a4e03ab6fe186cf432d9dd04c8892bc0bf9ee2f209c282a2ce46b6adaf9b091f091e8da181f6b3a274a6214de9f0c171fc01820fd0bf08d22d8f35a2e38a280b15633e68deed84e8b9bd1b14e0ded1aa76e9753a0067cb90a6cbbcde7e930c572295e5fda418b24", 0x95}, {&(0x7f0000001a80)="b98fb00125995efce7c9ee743a1785c7c74c14da7e3bd55c5307ff1ab6bbfa0ed1c1635722ae9b5f681973c626f376be7c3414b7f34a496006841b765e744afcd5610dcf016d8ad34ec59b8863a4c20358ed82f75d89fddba5f17f08880f04b8b4f314adac23ee1b7fa249a15d49d422d4366ddd17f104acfdb03d40e4544031e37b42a88aa80d6d9e661c089bade477f633c603bcb71a9afb94c7787576", 0x9e}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="f66255eb6f522af50d5f6e42f41b0cf14b4473ac56106299ab0ae292b2213215c5b31d6c9c4064e25150e1ec710fb6d5d5addaa160e001f12c00cacedf2a1519a83e1d7f2127423387ac643e96fb35f10fd5f606a082a8caa04068cd447cfe9f4402de329172262ffb55f423cb2ded829f7c5b5301ded461065a14dfea7219ffa857990693654da46da3b50cdcd1cebb0b215ca6ed237341d786eed60feb906f20e893bd49e6dd014aae3e588719ce48d6623405793dd696af1e19266c61f71eece31de6986d804ced64b10ba513d9b3a326abbfc8e18c0f1e3a05feccf8805b33d5", 0xe2}, {&(0x7f0000002c40)="77a3f190a1b2c02cadf8a7fc20f65309ba0a7f56c464205e7a96b0778190b33014333bb07df95bfccd79254159f17161f0de18b8261f40ad43128a06b32a7b705b729f0ca82c05d35c85acc809da7acffb752ff4d9cab0fd66d9b7ee57e88987a7052e7200790a82b34d3f00b730d4a0b61be0a40030d0b22aed5ff0a8e4c4682996b7a36c63661795d925afd157153714aa577f6693a1e90d36ebbc32d45dfb2b3f2f91a54faa19bc0651ce664d66e3f6b1866065e67f4c522159085631ecde0bce93f82a921c1bed", 0xc9}], 0x7, &(0x7f0000002ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x50}, 0x800) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000002f80)) timer_create(0x0, &(0x7f00000030c0)={0x0, 0x3e, 0x3, @thr={&(0x7f0000002fc0)="16c41f455a10ab4eac640e4cede9a84d730107a843928bfacc738df8ee94bca1d74cb11a8741bd2f614e92edf8e67e154b2e76c808cf50d48897923ee65c6dc634d52c78dd38c3275757b32fe343d60ea555884e0944b735bc81622beb4b7dab4cdf1cfc2f1c48ccee356b9c73d0de31dc9b9d586f86e0517ef97ad7c68cd954b4", &(0x7f0000003080)="d94937e9b38f01d8bcd13c5bf6d79d94c7049104e3644f6053f068ff4a21edcedfc596476acfeaee8ad3720df673a8b3470deecacb"}}, &(0x7f0000003100)=0x0) timer_delete(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000003140), r10) r11 = syz_open_procfs$namespace(r2, &(0x7f0000003180)='ns/ipc\x00') fcntl$getflags(r11, 0x401) 3m36.376898527s ago: executing program 2 (id=598): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x685, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xa8, 0x22, 0xf0, 0x10, 0xccd, 0xaa, 0xe203, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x673, 0x3, 0x8, 0x5, 0x80, 0xf4, [{{0x9, 0x4, 0x36, 0x2, 0xf, 0x54, 0x4d, 0xf2, 0x9, [], [{{0x9, 0x5, 0x4, 0xc, 0x0, 0x7, 0x3, 0x0, [@generic={0x69, 0x21, "c77cd703c3f6785f29f4c3d8d454012f94f4e433424994264941ba4d576a43c27c152e88d66c857cda6b4832e54b60bce6bfa88e34fbfcedbb3deca1018ce34b40b2b9b02f48999b9d189201f8dba8021f110d1002c75f1101455f790b92550a56c9633a046fa6"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0xd1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x4}]}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0x2, 0x80, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x8001}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xd, 0xfc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xfff3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x9}]}}, {{0x9, 0x5, 0x89, 0x0, 0x3ff, 0x2, 0x5, 0x90}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x3, 0x5, 0xc, [@generic={0x2e, 0x6, "24ac2a4cf245e2b77787bd82c7fc08a832a817b34cd28cb362f0ba902dca50a520e337132da1ff2a3a3e0dec"}, @generic={0x79, 0x5, "3538b61f8e16aee191d37df104b835816f1c9d6241fa1bc403acdbe32d99446afcc14632a8afbad00bb718ac2f195c23147212fc9cef5e35c4ffc981412c1ed84064f44a34e4ee7b90ff1d6ed76bf2384cc1426d37b164cd38201f5e064b42656bca83f7e3115d8cd71cdd2cdbd4a21174a1ebf3350162"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x2, 0xe7, 0x20}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x4, 0xff, 0x8, [@generic={0xa4, 0x1, "740687f86f4d276ad958670dbfca70c6d7933b78b05507b368cfe58485a1440054bddd485cc2c2c4bc4deb208bb99699ca92cac468b934ed762d5765e2beb8b91dca3139f7eb10cba9139d537faa3764c7660c638dd5f904e1139f8f275fd36463f8df74e0a18c9996ba6cb6563564a28007af219839f6565078aef3c7939dbbbe17f1cff6e027f6b7120cbe07c835935189a5caae17aecaf93b4119bf9c7779c2c9"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x9}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x4, 0x4, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x53, 0x6, 0x6}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x6, 0x7}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x36, 0x1c}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x3, 0x3, [@generic={0x8d, 0x6, "4d6b72abdc85d93d6b441a74af035126e7d9b5f59374fae01263ba05998ccbd98bdb9d232ddef2e76a7c0f57534050aaa323046155b84d2ee9896896efda183a23591137f945d622259a8ba06fac8c1bff32f160a8d64b580b95462b5f91714bfb1577bed2a22c0a5988c2e650af41d175bff72f09587dacec297d0f622b9cc1beb02395e10ec6c9d34d12"}, @generic={0x4a, 0x22, "59df30cd8f3ec0719565158cdc830aa4331985a257111f39fc83fe0d8017350667dd50cc60751ad8a7b3306dbd1233f336a0a92df6de67943ab747bdf930277a6a8a6da3e833f322"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x80, 0xe4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}]}}]}}, {{0x9, 0x4, 0x3a, 0xe, 0x1, 0xf5, 0xc2, 0x40, 0xc7, [], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x4, 0x9a}}]}}, {{0x9, 0x4, 0x7, 0x81, 0x8, 0xb7, 0x1c, 0x78, 0x8, [@generic={0x2f, 0xc, "27ccec2a080567cccef33745ac1108a95a204606914a23b2bfc2a6143bc3def874f0892153d3ca6f2a5d17a217"}, @hid_hid={0x9, 0x21, 0x81, 0xa0, 0x1, {0x22, 0xeed}}], [{{0x9, 0x5, 0x8, 0x8, 0x40, 0x4, 0x2b, 0x1, [@generic={0xc9, 0x8, "0385e9545bfd4ee9425d64e1811b9b8b1b39fc3d8deed620ec68e50a42987d0deeb8b6e662ab11d8cef0c44fbc82c471644f5abb6e0dad875f916ea74575bb99f39cb8927ef0c6e84066f4385c2c70a5ebb92f4180a219f616fc98b91d8d5a3b12375deb0bd922abe97f022ae4384332af3a824cf9cf6ddfbf1c8ebf5774232445dc14ae1d49560037f32cc16c8915bb6d15e3a4a6ae1bc88e9847e495558dbb5c4d120bf0a3b398c6b5e3a38bfaade51eb0292060fd9a71f0a9b54e85087710d5fdc42c75e84f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x7, 0x3, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0xfc, 0xb, [@generic={0x21, 0x11, "94eb4091d7d2fb81cb31dc4530e406c67923f46a4b068b7b4d606c8602f5c1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x5}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x9, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x73, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x18}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xf5d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x57, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x2, 0x5, 0x40}}, {{0x9, 0x5, 0x1, 0x18, 0x3ff, 0x2, 0xf, 0x5, [@generic={0xd7, 0x2, "0607950890c76b6d4103710592671a2de5416739fe59b20934406c7722f025acbfcfc75d046aa509040fc2142b97ea064b95b1202715aed5e5ed1e4a712be4c5549ee2bf3768a711a975893362dcd798a266d2c4eaeea9876214556c55164ba69955391c4cfe05d26387c31b9c7f3e4388677ccf1a3e82337a68403968e448974563e884221710190f9a6d5f24e5de39065145e5c687fbb259c95cc48f7c35d1e2f820e9f7d471e48a9e072fb568a15f12577fb5864c33d12e0c22c18d24675fcaf93ad8d87eed6b3408461e968bbe3fb7014dcd97"}, @generic={0x8a, 0x23, "ad29e585bbae0452310d6c80f0e6560ac36a732b96222e1f64f0d0a013b12fc1024ab7ebe2ac58a17ea4046fe2f58d5ae96b3598565fbcc1bcf2e1ef99c04608532a7bcb36bba8cfe6b747f574d2434a1e71f1dd9c14f8420a301f2cf9790e1ab7133867b71bb415e9a3fa12971491a57f2365aa62faaebd7bd0999ad4c43e4f1d0d607ef7a161c4"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x0, 0xa, 0xe, 0x10}, 0xf, &(0x7f0000000700)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x9, 0x0, 0x9}]}, 0x9, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x3e, &(0x7f0000000800)=@string={0x3e, 0x3, "002430c480391571d526748a4b78c1adde3921ce7b85c10aada6f0069ac2aa50babaf96348d48acc9b054196148ec9a67d19ac2c0dd788ba1205c72c"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x140a}}, {0x10, &(0x7f00000008c0)=@string={0x10, 0x3, "2b41fa0589dd658bdb08b4d3f774"}}, {0xdf, &(0x7f0000000900)=@string={0xdf, 0x3, "35dc37da0e01f058c9727808d00a8cc44aaa090fc5b3e2282930c5964a593b8dc5fb2a6d3f6b8b7628e8129c0cda57a6694af2a2e630a0ba7720dc635dcc70e25cb04700f2f7fa2ce6446c993c52e3b362ba3f47b960d19de92c8b50815794b29f497cac8dd40d6a16c4a78ac726056ca1497d237efeb67bf25f908c6a96bcf6deebe8f703b59ce4966e2cdb7e07a7c52b99607941b4f4419e5fe7c8406a810047e38c8347543c4014d15aef98b9cfc3e23a2a810a65009d6d88803ee710073de3b01b1aef647d967b91318f0dca7812f219cd51e3fe5bd7006c334eb8"}}, {0x5, &(0x7f0000000a00)=@string={0x5, 0x3, "e3a666"}}]}) r1 = syz_usb_connect(0x3, 0x28d, &(0x7f0000000b00)={{0x12, 0x1, 0x310, 0x3c, 0xd8, 0x7e, 0x40, 0x12d1, 0xd462, 0x12aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27b, 0x1, 0xc, 0x7, 0x30, 0x7, [{{0x9, 0x4, 0xb7, 0x5c, 0xa, 0xff, 0x5, 0x13, 0x3, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x2, 0x17, 0x9, [@generic={0x2d, 0x23, "544d8ee415ea3a045d057166134b6d9bc79a21f6636d76ba40e43f226412fd13d605f3dfa73c92893bb05f"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x40, 0xf, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0xff, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x6, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}, @generic={0xc4, 0xb, "2be71a8744606c6367d4d567352d3bb3c08fea6850fda8937b51ffe811d9a13f36f5fba4184b2d5554b3c9622846b98a1ed59adbe0b1461227842b9135f80c50a28809bc598a2f261983a749a8bb2da3c344d9676794597df8edc3502bf48d50b9ce045af047095fd79e4de834ad49a1056543d37de7b2991dec354b6a8c289ce505430377d50d41709f0fb745d0aae7a946969feb067a8a7ba09fc30e0073334a33b3ba714d4d6b56a6acdf6d6da4ada5659b3aec0077aeb14a3f2970c50f0879e6"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x6, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xfff}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x5, 0x36, 0x8}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x3, 0x5, 0x3, [@generic={0x63, 0x23, "734b81e5a164cb78e0da6d2ceaf16dd988bfdafdfa23fb7b5a8d72d243465d32349f0414f54c8c74f46734f4725925d8065a8c9c8a61c6423c2f1eb9dbbd6706fea763cc8baf07622fc598bfa2814030777b1bc44af8aabe39517cc38496023ca5"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x9}]}}, {{0x9, 0x5, 0x81, 0x0, 0x10, 0x3d, 0x1, 0x6}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x2, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc7, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x6, 0x1, 0x2, [@generic={0x91, 0x23, "81228ab576d66984a46a95f140bcd29ca6e3623f222373db9c7f8d34e01d78c8eb47cd292862d42cd8262a4f77af44bcb6b98ccd6532cd0f7fb65a0874119f859c2c01c2fcaee2c2b416ccb07a49ea86d7dae67e81acdf650ef72608a8f5267ff18c4cf33a0e34d26b63ceaad0490c21852a0c269c67807868f5ab9c6f99861344209f9a8f2a36b66326efce916c80"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xc}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x6, 0x4, 0x5, 0xff, 0x1}, 0x5, &(0x7f0000000e00)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x421}}, {0xcf, &(0x7f0000000e80)=@string={0xcf, 0x3, "5130e5830aeb6a96eeb93ca276f9d97281a8a0f1dd226c17fdf393cf457001ac54f549babfd183919989dff4b00964d439703d559085541cc077d7cca0ab1d96ff216bd09443be2991efe86894e5481ff27215476cce812a325aeb26a278ce5ff53d5971b03eb5d3a0f1cffa1a35bc019ee37c91f7afe514a8bd309f77f010fa0eeceb42f0b4adafba9fac633c7b07f4f7614aaf5cf28188cf94acdc7ebaccc3ce0fcf6686ca252ad77ef4c8706a58d007848c5e4138106300ba08b67ac5739685c253ed87b610cd9b9e9d33a4"}}, {0xf6, &(0x7f0000000f80)=@string={0xf6, 0x3, "e4255d3fa4411c8dcb45d27fa746592987ad35833cf0fb068cad12cc7bdad9f058c088da88ba6e37ad91abc649253d861f86e13207e0c8cb04ebba6e306544f9ed9d19c141b32a3e847f262054e2627133b352e10056d30c18235fceb7277e8babd3fb0a3591b3d41a2ded1a4cc5b3401daf4bcfebf8b99237e2b74195740210da13efaab8b2178f62c4cc9eb2150cff9b603feb3751f5e6dbf5c64bba2270538b23b4e01abd7b1f245bf4e6b4a0b768c936c1d2567a832adfba55edc77a7fb357813330717f4c61820ea25f9e7bcf93e0d8e43c0ff950badb7905a61da1efa736f9b5fe796ae78d378096d69c26e0863be766b5"}}, {0x58, &(0x7f0000001080)=@string={0x58, 0x3, "0978777356583ad91f9e01fffb54727983b1253b05fc84bb0a2d0534cbc00e1a17380d8edc18c48d555705cd4811813099d4ae33fb5341e5035cf8740ecdb3574c2c3af07fdca0ac0f54729e87c420b22c0a533e917c"}}, {0xc9, &(0x7f0000001100)=@string={0xc9, 0x3, "1836bfcd8fc3f6f5fe62a4c5ad0c32098c8a1ffd87e26294bb99863cc2d90bee9fd8c746d5bb835f6c8203ad018345ff85a07f6d5d1d49a5d6e7a5e794e5fe5a40a76c5431d9bea51134bdacf07982ac03354488b52165c8f80f18b90e4af43871b3475b13d56458baed11f5bd5abb15ef16f25bf67f667283c79bea83ebc5f25a036e34c916f4eb7e91eee5da4ca7656741533be17ef2d40612de4918e7386ad21a5bb68851b552d83a095c1832964cc9f26c1a3d5efa89718242447cc9d34bb0ba9a00d5b5fe"}}]}) syz_usb_control_io$printer(r0, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x0, 0x10, 0xdd, {0xdd, 0x22, "141f7c30a4c7054aa1032d7f3a80e0a0273b6d5c74c8d669d212a0d076422f8d34c565403a26615356bb30eab45461040565846d35c48a1361439e3c578b2b72e38f6ef98891abab9aaedd6f9489dffc4ab493a80e0f75d78082cd84a9082334e2b54ce04d6c8458178c7a0a1be09285aea6400d6be6f0d458f9128874a5f15f425a8203d7415cac14ef1def769ac48c095429ca2588628900f0b11d6e2d2fa4092aa70ea9a8293eaec0fbe785d875fd72957da47192d1f995b5a7018b908a451a38deb65d272f30a7c9acf67666696dcdc753284e3980117c3869"}}, &(0x7f0000001380)={0x0, 0x3, 0x29, @string={0x29, 0x3, "da05edc74d1d4bd5924bc103f03599c6affa45cbfd1c1d0f78159d35e9c6471e18540ba7ddbf3a"}}}, &(0x7f0000001600)={0x34, &(0x7f0000001400)={0x0, 0xb, 0x23, "1732fe86e078a0535fc1bbc707dd851c4512b0dfe24986f629b01b4f2c36c56194ac9f"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001480)={0x0, 0x8, 0x1}, &(0x7f00000014c0)={0x20, 0x0, 0xb7, {0xb5, "6ed27a541c1981c9e95cb70a09c1447f49e2d9c2d66fe2594328a176c267c204bb724d6149b532895454d4a46e1fb0636aca0b86fa88b864dabf76cc3975b4ca4df8742c3953fd914be60d22d4c93f0ea9abb676b25c9d98f8f402916b5d1e0d605c33211b2eb2e909af488e160647885397e38c6d6c5bfcccd62510c5c3aab73bc7dbbf378003c8c73c14fbe5dd50966fc1bc0e3074b4610639076fa94c5576d5f3570584612d4ff0f504b9a813ca3b04ce899edb"}}, &(0x7f0000001580)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000015c0)={0x20, 0x0, 0x1, 0x6}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_clone3(&(0x7f0000001880)={0x2000000, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)=0x0, {0x2a}, &(0x7f0000001740)=""/29, 0x1d, &(0x7f0000001780)=""/162, &(0x7f0000001840)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) fstat(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f00000039c0)='./file0\x00', 0x800, 0x2, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_clone(0x4000000, &(0x7f0000003b00)="1ccb33124b3735d475bb7021ebd212e165c2ae5ce3ebc9abc5f57098fc1821a21d3b015cb30b1957ff8f5613c3c5b04ef01a35b372ec684837638d8162734faba1576a0f83c969cb0708818539b1ddd91820b5c97c9677745b5a025df1bca7036a64e1458f4c79c2249581fb", 0x6c, &(0x7f0000003b80), &(0x7f0000003bc0), &(0x7f0000003c00)="eaa20360c2559a624f2274faed0d9e9e5165101905f8192b14a541730ecfa4b970ce578892b7cbcf438d9ffab020673f6f22575a7d9e10955c37bbf0222c05624e1ae9b4757711be5816e529b581e8bf40660875f96dafa3c094d0ab16ffa4d083e8ab918d43bd346bc7ab746d29f797e91ac3c7d26182e366f122a1e2f53c0348ee962f73ace19ad130d7e2c161b08769226c7cf3e4cde35015e4b9045404bebdf0d521804398aab635b2f61cfd6ba268b569637b33c60f939d284b17d0bb6ee1e59ca8c44359ec5fdf756d55ba62097beaa127c80ff997cc06") fstat(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000041c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r11 = syz_clone(0x80010000, &(0x7f0000004300)="233e21db23b602c7ca6b355c694c636c8745defafa924b2b8c5090d04107780ec8ccd8bc6bdaaf380ae83e80d91614e5220b35cbc8d5def71324120779a1e90ed21672aabf9a24d7aea0a3ff3dd01fa33e04348e3758dc81e647a3cd50021b370e6745e982370492bc9c38bf4678c3dce85f71a91116ad8850024a041155d568af150a122594cdac924a0e2a649d29603ce6a6145f27455c56e9679fa906d7d1d70022d004670fd63acae91bcdfc3658ea55f3b1", 0xb4, &(0x7f00000043c0), &(0x7f0000004400), &(0x7f0000004440)="f8ffed6eacafe365ec313803368cd5816cafb7b3476b818605132c8d9827461c76aafd55cf95fb74220346a2efa07d5018409b8120b8a3fb57ddfa9d7e6aa340442d6a9834242f9c39d0f5913b3f52c6628376c8c493e3a9b739cc44f4eb58b92e7723246d934e25f466d6eb272489460c0e4f22d28c491cf21a11298e2e57cd29d2ac05d64b1e78687af53c102de4f3e984398733e1ab3212b7665aa92a768fddb276a951c4667d3f42fb9881d39fcdb4133cd769cfd3b3513520c2ddbcfb408f1a77e551baa806b82a") newfstatat(0xffffffffffffff9c, &(0x7f0000004540)='./file0\x00', &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r13 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004600)='./binderfs2/binder-control\x00', 0x802, 0x0) r14 = memfd_secret(0x0) r15 = syz_open_dev$tty20(0xc, 0x4, 0x1) r16 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000004740)={&(0x7f0000001640)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004100)=[{&(0x7f0000003d00)={0x3cc, 0x1e, 0x300, 0x70bd28, 0x25dfdbfd, "", [@nested={0x4, 0xd4}, @typed={0x8, 0x122, 0x0, 0x0, @pid=r3}, @generic="948efa05c1756c93557e60e7fe8d1de947f43a564dd7f8698a500058ab378d00456e9ece8063edec19404055aea7522ba003110643dea0dae4063c4450106836e9fdb4136f1dd4025db2c41ef31a023cda420b019a1ba4c9c33b81b097c35e4acb13555792f13fb45f3756d2bd7e098bd05f8fd1334d4628f2618434286a58f6fe9eade3e7c18b37ec546114d92b1a0846c6da0b2b7beaab661fbeae15bccda43519752a4a488285babd68ef76ebd06e7332ecc2e03889a527df7e304fb4f34c1bf495d535e2599b6eab3ed234dcdf6842e49c19a4fb6a81f37ff1e44b867c7387765de9811eb764f9ff34881e28", @generic="31347d9634dbe8ff27de156a7d74a4e3e5b01a2c0d835a9ab69aaae00420bd4f293b9aeac6f164c93bb87053", @nested={0x282, 0xaa, 0x0, 0x1, [@generic="7520e9b850785f13ffadd0c6db16b03708ea7bcd17c579c8489a1327464ff277d965bc0b8d6bd3c4d2889e0ee4ac4cd658f5c1b3a67b80b664699d3df074d4ae290f4557ede81e96a19bea6ad5eab2705576fd8d62cbedef40ada25c147db2e71273073e8db5b32b6f14221a78c2cd6fd5f8f12e568c9db6e3b7b18625563fb1dd8409b830ff527ae1b84341c9eddca3d8f10a75e3dc3918570d7cfc2c64df5e9fa4e950d59da9a070e728240d86f757bf7e33b07d16824ea85ffeaf174f9278110439c1838ffea25ae3fe657e095191397324ec6fffefced268", @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@empty}, @typed={0x7f, 0x147, 0x0, 0x0, @binary="073d4bbebeefce84878f66682598bb0f3056e71067926dec85fa491bb3467bbb39eb3760ccc35bac75ed207e8d4756cf8a193864f1b39dec27fcb7d727dc6fc8f94b05932d493065dd1d6fccabdaf4413cb6eefcc857afcdf3ed3e49200b3b2954b3f5bc6882848db42aab2a9959c38117019f690ecc8f1b92a898"}, @generic="05f3a024d1ff7272d4df97b5e87112d233395826b95aac7bec08d6ed0310274f1d0e889144ba95177b979cab5aac64c26904b50f865f7f00de81608d4ab695a387fdb8846a2ba8d37c86225f2371c8c4f98a8841fd3853c51d6ec564", @typed={0x8, 0x34, 0x0, 0x0, @uid=r4}, @generic="788f0c428d336df815ed11b2437be282a1e8e9a1a559a36e6cbeebd96563b9594f7807804ab4ab152f97a6b4d091854ad1e5842fd13adb86b4e86b1fb5f7009f43ab9dcc35e80bbcfbb26fc95390fe36f886dd9662b82b", @typed={0x8, 0x39, 0x0, 0x0, @pid=r5}, @generic="5723952b25e2a42c55cf672f545390415c62a1443e4f2ec618325666a242d9f88bd0a6280c54ea71c665f6599d8056812b6d0dde33c679aeba0f8b22f8ea6b61dc841612557f3c052c1e32dfa500ec664a0d01d0aaf22434f1"]}, @typed={0x8, 0x11e, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x8, 0x0, 0x0, @pid=r7}]}, 0x3cc}], 0x1, &(0x7f0000004680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r13, r14, r15, r16, r17]}}], 0x88, 0x20000080}, 0x24008011) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000004780), 0x840, 0x0) ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f00000047c0)={'caif0\x00', 0x10}) capset(&(0x7f0000004800)={0x20080522, r3}, &(0x7f0000004840)={0xfffffffb, 0x9, 0x2b, 0x3, 0x7, 0x1ff}) r19 = syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000004880)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x3, 0xe0, 0xaf, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "2921b437adea"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x43e22c0b, 0x7, 0x6, 0x9}, [@obex={0x5, 0x24, 0x15, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf, 0x8, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x10, 0xd, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x18, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000004a80)={0xa, &(0x7f0000004900)={0xa, 0x6, 0x310, 0x9, 0xba, 0x0, 0x10, 0xc2}, 0x17, &(0x7f0000004940)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x69, 0xf4, 0xe, 0x155, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x9, 0xfff7}]}, 0x2, [{0x2b, &(0x7f0000004980)=@string={0x2b, 0x3, "1fd9728bdb14d47346b37aea738e860ff079cc8a3f53e00530c0b2aefe1dc372f948623759f1c7c966"}}, {0x84, &(0x7f00000049c0)=@string={0x84, 0x3, "d716c07e259fd90185a33936e11845480d159ebbe772994cafc4fd4956067db161f2c6a7a65887c06d7248849b5dc82b32bd1586004be8f299cfb12d05200b69ec3795d1a8db2da084d97bb917ad11156a0fc56eb567297854652e461e1396603c010f8883d2a4a8fa316843a7305b2b3bac816b3100c996c5c4f5efa2347e8f7109"}}]}) syz_usb_control_io$cdc_ecm(r19, &(0x7f0000004b40)={0x14, &(0x7f0000004ac0)={0x40, 0x23, 0x24, {0x24, 0xf, "1ea12cddd3eecaad2d49f784237040863e6ddee70203ee48a52d1888ae44f122d437"}}, &(0x7f0000004b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004d00)={0x1c, &(0x7f0000004b80)={0x20, 0x3, 0xcd, "698756d5c8537ccc3442787198392e999bdc60f058f553dee8314e0cdc8adbe47a99d003632944f56a4b210f0be6779dc799f053d3022f6085db661a2290a670d13d653f8cc9ed3eca9d9e743214171ef87671d836c96fda8107235270a97848832fa3c408bcaa3340de3c4a91da496ec4525d42d1385c0f0b75f044911db555eacef394c9e591cb30fe9f530098b02fd45d42587141c457ef32d633caa1bdb0d5206bbb63e655da1aa5fef9483132bebf7fd99ab13cd12c8bffc44b8bad70f5ea54c6e5f6bda8521d4e267594"}, &(0x7f0000004c80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000004cc0)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000004dc0)={0x14, &(0x7f0000004d40)={0x20, 0x9, 0x4, {0x4, 0x23, "d281"}}, &(0x7f0000004d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004f80)={0x1c, &(0x7f0000004e00)={0x20, 0x16, 0xeb, "42cf12bfda58f607adfbad1a58de64a716cfcaf573285379fbad98281b4353f32e3e14c0679bf31cc4b003f052e205270b0f511ae866816d4f10908ab5c55eca9798d75e4324efcbea0b44167f0e50acd19c97807f8415a6eb7274a4de300d086c8026f9c951ba0e0bb7987b035ead2b52cbd1a1cbc23b4f91b123d7691dc1ba740e070316feb82127e55b924c650fc126776ac116d6cfae5fc7fcaa78a66f357be448695da4226f6c1b7f602fabe098565feb0fd8d916463f470df9c06c8a542af708a0337141d24660b5a7eaad7228b813ac2af9e2a652736afb273b423a7415454affee3d47a4c4a114"}, &(0x7f0000004f00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004f40)={0x0, 0x8, 0x1, 0x1}}) mkdirat(r14, &(0x7f0000004fc0)='./file0\x00', 0x100) sendmsg$can_raw(r10, &(0x7f0000005080)={0x0, 0x0, &(0x7f0000005040)={&(0x7f0000005000)=@can={{0x3, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "424d334492acac45"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x41) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) 3m33.639351519s ago: executing program 4 (id=622): mkdir(0x0, 0x9) (async) chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x12) (async) recvmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000580)=""/210, 0xd2}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000780)=""/73, 0x49}], 0x2}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/95, 0x5f}], 0x1}}], 0x3, 0x40, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='gfs2\x00', 0x20000, &(0x7f00000002c0)='(:~!#@\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async, rerun: 64) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r5}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) (async, rerun: 32) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x148) (rerun: 32) sendfile(r6, r1, 0x0, 0x80000000) 3m33.531624761s ago: executing program 4 (id=623): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES16, @ANYBLOB="089c2f30b74c529876a2e3483dcf882c28035073d9092864f534621510dc190d33ee8e78f2cb60c73806a06ee1464d32e756f76df66b820fc72ca511df348b02318cfdf011a8eb1c022acafb97b3f9e7643738cca3fc253f60850232d9a503184f497ff93c26cf55", @ANYRES8=0x0], 0x32600) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r1, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 3m33.530463811s ago: executing program 4 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) write(r1, &(0x7f0000000100)="e661ba98e930ad7ecd2bb5e5d6aca6c585b7d81475e00c73966a2a6ee96e5d88511092f066204d54355abff4cf32c039207c63037cb478290c47ab5bc60a50eed42ad12a240c44d487bf9b6de912b6ae4f86387ca645359f8452fcc7de9b949de8150aa552d46524c357c847ae3209790cd053bcea5328420886351c1abb60e8cf13b4f9b99d6b7568ed4ae4b7547742d4c0e0e16c7933135bcb50fbc1707b778d6f1e8daf1a9922fa4ecf0cc38494eeb5c2d21dd5863c50fd625691928eac126728dbdfc2c58b9284667bef73d69fe785a3388cfce30817653461c45c1f7a9211c545c77bff2bc999c80c9df5741d82b30c46c73667a83c19", 0xf9) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/wake_unlock', 0x101000, 0x10) (rerun: 64) sendmsg$AUDIT_USER(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) ioctl$int_in(r0, 0x0, &(0x7f0000000340)=0x9) close_range(r2, r1, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x1, 0x3, "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"}) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000005c0)=@urb_type_interrupt={0x1, {0x0, 0x1}, 0x9, 0x41, &(0x7f00000004c0)="fd34bfd864f045153a8289cfbac13e06793b3254b1ff7ef73e08c264aec0dc2a2f84370edef03558c0044d22b473df350b5f2c77599466ac3ad604270d2f1e306c307b1be700a4a86816f8b8616d8214ee5164543b6c3c8be1cc872262e338cc396a9cdbd5a4abf2f2c28b93026f3c5301154e6945dcc44ece14d5087a31a1fa866239abdba0675133a0", 0x8a, 0xada, 0x1cde, 0x0, 0x3, 0xffffffff, &(0x7f0000000580)="6f9f9dc44e190ac61bbb67341b631f6f"}) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f0000000600), 0x164, 0x80000) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000640)={0x3, 0x7, "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"}) (async, rerun: 32) write$P9_RUNLINKAT(r2, &(0x7f0000000780)={0x7, 0x4d, 0x1}, 0x7) (rerun: 32) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000007c0)) (async) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000800)=@dstopts={0x1a, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x10) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000840)={'broute\x00', 0x0, 0x0, 0x0, [0xdea, 0x4245862d, 0x6, 0x6, 0x5, 0x850]}, &(0x7f00000008c0)=0x78) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) (async, rerun: 32) preadv(r1, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/158, 0x9e}], 0x1, 0xfffffffc, 0x4) (rerun: 32) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10000) (async, rerun: 32) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (rerun: 32) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) timer_create(0x7, &(0x7f0000000c80)={0x0, 0x2e, 0x4, @thr={&(0x7f0000000b00)="576766d55301d903c47930b6e2ad84ef13be3b11e6ada13c4e90093e96bd63e1be3332dcde4f779d5f44fdc53b1ea4fb2299ccdffefe7392a4b348de34813b70124b72c7077e560f140a22bf42", &(0x7f0000000b80)="e70c1b357da967163dc3b2f440cbee3a1f025129760f2a6f161584479c2b282fcb8c6409eda9bfb3da86f7b78e318b0897399775ec9c2c533c287303835d28039d8a1c13a1c275093bfd6b38669ba2705de36544545f6f9cf963c584ef5a2fe7660c20d6de18811f02749917e1259af23ec73159da909e4630d7d85cc17e2d41331d5d91276b3789ec5a05f17ad1c43130e408fb140d2f895f13926ea22cfd15e538b9a157dada12b5538ec6505a8c7aa3498173e78bf9e9d96dcde7e2f5a11f49112cbee9a806d4eb2c"}}, &(0x7f0000000cc0)) (async) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000d00)=0x1, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x100010, r2, 0x10000000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000d40)=@ccm_128={{0x304}, "741c888879df3950", "b9e7db2f873c13272162ba49e575b61d", "7c6aa92c", "d88cbcac8de065a4"}, 0x28) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000d80)={0x10004, 0x0, &(0x7f0000fee000/0x12000)=nil}) 3m33.506540741s ago: executing program 4 (id=626): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40341, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) gettid() sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4010}, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2809c1e, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = userfaultfd(0x80001) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=0x10, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) setresgid(0xffffffffffffffff, r1, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) syz_clone3(&(0x7f0000000040)={0x206361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 3m33.423572242s ago: executing program 4 (id=627): unshare(0x2c020400) r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec010203010902"], 0x0) pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000440)={0x2, 0xffffffff, 0x10e}) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x160e) 3m33.413274923s ago: executing program 4 (id=628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') (rerun: 32) write$binfmt_script(r1, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 3m33.355432423s ago: executing program 33 (id=628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') (rerun: 32) write$binfmt_script(r1, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 3m33.295221444s ago: executing program 2 (id=632): syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0) lseek(0xffffffffffffffff, 0x7ff, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpgrp(0x0) r2 = gettid() kcmp(r1, r2, 0x7ffffffe, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(r1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3m32.802953812s ago: executing program 2 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0x3) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc02063a0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x10, 0xa0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "629086"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1be000, 0x7ff, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x8c8f, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x218, 0xeb, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x7, 0x2}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x31, 0xfa, 0x2, 0x10, 0x52}, 0x8, &(0x7f0000000340)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0xdc, &(0x7f0000000400)=@string={0xdc, 0x3, "d6f0dfbef2eb8e365edc042fba224daf41cce9e4920b0c42387d240d21e38e5d2c61fd3ab220109fe16590ad0542029b7609ce50934cbd47765e2f3d177faef469d37e9e4101d656ec605593c423de65def0257cc27f87ccc42ba8b303b45402a6221dd1cf518203ac195c5957f747f1849152e75d28e13740fccd515a84c577bdadece23bfc6bafa8b0caf7b162ea2b88dae57487c77f20968f3bef2523b8c6af77fd34327829fb4620326163de00d62e78518d77cdb72d78b5d08f5a2eac295d14d3c349d14e0fd63e413d03bc07fab342d8398e43eb5a7299"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x404}}, {0xe0, &(0x7f00000006c0)=@string={0xe0, 0x3, "7b8a27576df4747cbb7d595dfa145d2b45f289271acedaaf4c4012ce1e522c1a012549fa6c96b76c3b80ce16ee240b1bd47098ca1bb13751376718ef75c19cf5b270ea78662190a0196895a53529b143dbee228f4728261929200996712be2c6f18ef4f55e5df0534862a8b1b9abb35be034ebc95dbd486040ed59d360bda259cf66bb5a883fe85abf65afd665200107191e0e7ad6a4dd79241abb836794c0014d48935bb2aa3518e1ef619c7ea0e1b0b6a056087dce8e2cdc68d7361cbec336fa6127ac917913e24436abfe65fb37ae4e29a0370c286d14584d46b531f8"}}, {0x55, &(0x7f0000000940)=@string={0x55, 0x3, "2a6e4f70f6a5cd6ed35e641d01b5954d4c1120753b8cd40182e3e3e6dd1997a0644216dfec5c849547a239072990eeefac4b87994b6500a4f45fa9173c0fdb82d7fdfbc417e7de002a1626ad59fba23ed6884c"}}, {0x81, &(0x7f0000000800)=@string={0x81, 0x3, "c87fcc3085c5a45f3cbeb9559e1f614c007ec646a7260cff1afe55706f79095038593acbacdf1e4a39381339a9f0e02b642d2454ac774857cecd6e9ca29559d0e2cf4ebd4375e5e1b19d462e9f0ee16782a0007852020cf102e8e958927eee7fb01de87fd0ef491e0f85bd3cb0f2dfb0efa7d7e239e6b93d8f30fbc9d66c11"}}]}) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) getpgrp(0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) write(r5, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23) recvmmsg(r5, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9050000005345204c696e7578fa8fcc9071b49bf1e8a0c49590d8c0bcc5e9f851dc5db30d13d38395f5f280dd14762d23d523008c96891214f122f6973774f53706e539695bb4b69ba06cb1c862588b6d06b768a68338c94aca7ca710a79fd2d700567b3075c1485ca3ceb88288821345592a003ba4c4e08fa2ee3ef2fc516c120e1942df22939984102589c0da"], 0x99) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYBLOB="2771dba6d2f26f37487a06112ade5ae41c966d3a561f603df2cb059feb03a71f7f77ab52c68b0161e7447feb5a27831cf6d58b9aadf36051600da00b817d366c140de76346d16ff12e3d609879f48bfa3b80ab774aec2b6f43d8a46bd34567f3b2b02cae5d0a4ca1eb40642cacc6b64bc9a386b952876ad802f11bbc95f7a799503f7b6545bbe55410f14be23ba2ac451f86c22d0de55e491f0112b3267fc6b232b11554f56aa7b70c9529b808ba30ab6a3cf9157c8e2cb8ce1cce1b1fe2e50aa877ec94c8a856ae0a5c721c43c74b35bb432558d538d38bd3c9", @ANYRES64=0x2710, @ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0300009f0c0961dc6b7e95c002000000a3bf645553fbf26c"], 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) 3m31.829850387s ago: executing program 2 (id=655): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) getpriority(0x1, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220200000025"], 0x0}, 0x0) (async) r2 = userfaultfd(0x800) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'hsr0\x00', &(0x7f0000000180)=@ethtool_rx_ntuple={0x35, {0x6, @ether_spec={@local, @multicast, 0x2}, @hdata="dcf2d87801ddc20b6ca5dfe6a083e680954429da86d5792f4a435d41891c71d7b6c0bde750cbb412fe941e2cda5d0ce674b38c9b13e9cbae715a1562628862ae40431d46d49ad71c", 0x2, 0xfac4, 0x3, 0x4, 0xfffffffffffffffe}}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000d0d000/0x2000)=nil, 0x2000}}) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x9, 0x1c00000, 0x2fc1, 0xe6, 0x3}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) socket(0x10, 0x3, 0x8000) (async) mmap(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x2000008, 0x4002010, r4, 0x87e61000) 3m16.222831537s ago: executing program 34 (id=655): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) getpriority(0x1, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220200000025"], 0x0}, 0x0) (async) r2 = userfaultfd(0x800) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'hsr0\x00', &(0x7f0000000180)=@ethtool_rx_ntuple={0x35, {0x6, @ether_spec={@local, @multicast, 0x2}, @hdata="dcf2d87801ddc20b6ca5dfe6a083e680954429da86d5792f4a435d41891c71d7b6c0bde750cbb412fe941e2cda5d0ce674b38c9b13e9cbae715a1562628862ae40431d46d49ad71c", 0x2, 0xfac4, 0x3, 0x4, 0xfffffffffffffffe}}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000d0d000/0x2000)=nil, 0x2000}}) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x9, 0x1c00000, 0x2fc1, 0xe6, 0x3}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) socket(0x10, 0x3, 0x8000) (async) mmap(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x2000008, 0x4002010, r4, 0x87e61000) 2m34.354260512s ago: executing program 3 (id=1276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "f58ce70fab0d3eaa30fc"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x7, @string={0x7, 0x3, "2c15d9714d"}}, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x200a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x0, 0x16}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}], 0x51, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) 2m34.340269762s ago: executing program 3 (id=1277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x4, 0x8, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7f, 0x8000000000000000, 0x0, 0x100000000, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x715, 0x1ff, 0xff, 0x5f1, 0x6}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) r6 = socket$inet6(0xa, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9000, 0x2, &(0x7f0000ff6000/0x9000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0) fcntl$setsig(r4, 0xa, 0x16) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000246000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = getpid() fcntl$lock(r9, 0x24, &(0x7f0000000080)={0x2, 0x4, 0x5f0c, 0x2, r10}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000001c0)=""/66) 2m31.27563389s ago: executing program 3 (id=1315): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000100), 0xf) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, &(0x7f00000000c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@getae={0x40, 0x1f, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in=@loopback, 0x4d2, 0x2, 0x46}, @in=@rand_addr=0x64010100, 0xc, 0x3506}}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0xffffffffffffffff, 0x400103}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.473271472s ago: executing program 3 (id=1318): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x80) (async) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc0, 0x0) (async) r3 = socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r5, 0x147a6000) (async) sendmsg$AUDIT_SET(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20008810) 2m30.415677213s ago: executing program 3 (id=1319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) poll(&(0x7f0000000140)=[{r0, 0x240}], 0x1, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, &(0x7f0000000380)={0x40, 0xd, 0xe9, {0xe9, 0x8, "ae7f1d156a4c34da1ecd4e62e5318dc57473fa09ac28cafbd906439af7c64c7e407609d887df47e39c1b0840f1d5aca785f448f318b5be444cbdaef5536a6f522d00aa8e9fab7bb62f5a4c9a1ba2b7d518cd24209e836bf549347d94df3bd6e1b58e3d40fbca3d19ac8a86bc92dc4ca928ac47aa202e31a4be168e011eb67ce48d76c915b7f3dde5823275b652cbe8e4280d6fc3b91b3718c3efcdc446b948a6cffe4b633fa8d0a2b5bd841d6b3be398eb28b13b01b6be2c24c8cf7229ff655a3e9e789f62eb3d7e18d2e4ee4633b60c920cb9baf6646680feadae46d1a6e2b98e538554dc470a"}}, &(0x7f0000000600)={0x0, 0x3, 0x98, @string={0x98, 0x3, "09d6b14ef2edc5bbfb14b9e1a3d3321f15344714062d608381ed8ec2eef874256feb3f667bbac8607a8b2078b2fbaf18126362675597a290a3a3a1d4b5fd4b9c68c1ca02c28484609a2e2c3f782ec13c25fa79dd1693e5194f596acfb2d2a24a7f7b3deff6459d609831f840c19ff014ed2426c79ed28987e4ba499fc63bce75ffc7aad7551da3d481086297fa1f40e3d82d6e3648aa"}}, &(0x7f0000000480)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0xb}, @global=@item_4={0x3, 0x1, 0x2, "4749ec41"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xbc4}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x20, 0x16, 0x67, "5d81d96d8b285c9eef54d6995815982786256f18e5f624cd33172b7e5e99f20179557d2f3983fdf9fb50da0a65aface973ff6e686452a191aeaea7d055e46a5d490f52f55f2e3d0b4086fc7caf95a1c6c46aa88d710a7d02cb792a7d49adb23b4b0e98bcda4e56"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000007c0)={0x20, 0x1, 0x7e, "4ab9a3a322805575c21f8f553c27c4442902df727afedad8cd3ba46bbd5cd824c0f34b876d12b44d03b01aa519eb6e145b08adcc0b160d1001d5467ae99a3a98dc36afafb523a509d5c53b4c46ea4e5ff52bb3c8ebfeb2035f32b885d4f42a909ef063d397ebad6c7c3b70f776982c078c4fe1b676cf428ae1648ff999d8"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) timer_create(0x4, &(0x7f0000000300)={0x0, 0x37, 0x2, @thr={&(0x7f00000001c0)="179db60a914cc40b6f95c85308830fc8b9bb62c41cc633d0f199f86be86e0174671597400c9759e172b65c1b9a92e99e822b676b3170be19c8d1788605b4b07870396c2609ac0959c416778a72f4c8b58dea282623526ad6a5af8ab7dd83651f5c7486be2e2e1883180ed9646e31a89070763e18d4e39ae9735fb6b34619809be52fba77c893211ada2e946737fb82766aed4296e4a6fe2fad3cc4b99dc18198123e285a", &(0x7f0000000280)="897415474f481eade04b1d7acb0068f6b3fdf3914a935829f577d56af6a88fbbeac443d7e929d19ae8db89bd6e504c50fad787252fac6fbf786fb21612ff7edf81c0c5d3f2ec7b5cc182"}}, &(0x7f0000000340)) socket$pppl2tp(0x18, 0x1, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m30.384380143s ago: executing program 3 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m30.345842044s ago: executing program 35 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.64085924s ago: executing program 6 (id=1821): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x4}}]}) 1m51.62434685s ago: executing program 6 (id=1823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xc, &(0x7f0000000180)=[@efer={0x2, 0x800}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 1m51.557799962s ago: executing program 6 (id=1824): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x60000}, 0x8) dup2(r0, r1) 1m51.503962062s ago: executing program 6 (id=1825): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204) 1m51.503809942s ago: executing program 6 (id=1826): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000840)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0}) 1m51.452002523s ago: executing program 6 (id=1827): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x3800, 0x4}) 1m51.373424114s ago: executing program 36 (id=1827): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x3800, 0x4}) 4.422938461s ago: executing program 5 (id=2839): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x44}}, 0x14) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 4.404349682s ago: executing program 5 (id=2840): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000001000)=""/4096, 0x1000) 4.398882512s ago: executing program 5 (id=2841): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0xc0c01, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getuid() getgroups(0x5, &(0x7f0000002140)=[0xee01, 0xee01, 0xee00, 0xee00, 0xee01]) lstat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000022c0)=0x0, &(0x7f0000002300), &(0x7f0000002340)=0x0) statx(0xffffffffffffffff, &(0x7f0000002380)='./file0\x00', 0x4000, 0x7fb, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000024c0)=[0xee00]) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002500)={{}, {0x1, 0x2}, [{0x2, 0x5, r1}, {0x2, 0x1, 0xee01}, {0x2, 0x0, r2}, {0x2, 0x6, r4}], {0x4, 0x5}, [{0x8, 0x2, r5}, {0x8, 0x6, r8}, {0x8, 0x0, r10}, {0x8, 0x0, r12}, {0x8, 0x2, r13}, {0x8, 0x1, r14}], {0x10, 0x1}}, 0x74, 0x0) mount_setattr(r0, &(0x7f0000002580)='./file0/file0\x00', 0x8000, &(0x7f00000025c0)={0x100083, 0x88, 0xa0000, {r0}}, 0x20) r15 = syz_clone(0x8021000, &(0x7f0000002600)="ad719bd86a458a05504bd5848179330c20171a074f5024140c708d97de60282df2ab1409f24c41418338d41d856e5ce016de280e07c65167ca58607cbf8bc28aea71bc0f548e8ab94165c97be910fdc4613b758b5756e0df90397211af59e80098a84ebcc71d069dcdc2e0780e", 0x6d, &(0x7f0000002680), &(0x7f00000026c0), &(0x7f0000002700)="3ee93350d5c7ee86baf6aa8b83aa3169b07c38fdf381ed2da0a33ad0332bebb48cae12f92bb42625f29228452e7a69c01f341fe49443534c223574ef2359d1269d9abf26ac701e0554c9a30b33d59763e947f9c355e221cc0d") llistxattr(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)=""/31, 0x1f) faccessat2(r0, &(0x7f0000002800)='./file0/file0\x00', 0x0, 0x200) setresgid(r11, r7, r14) statx(r0, &(0x7f0000002840)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r17, r10) ptrace$setregs(0xf, r3, 0x75, &(0x7f0000002980)="371b225b4decd55193f68107180d4415bcd023f2a8b912f4b0b06b291469e2db21d151c7898c265ebacdea42536de8836770c760aaa06eb048e2d00917e54386a589792499d0a816b3460c353844223e25375e54609ebd0ab8069846f9986042f359e1ac884d0418d8763bb7e120bfb7e3bdaf08a5e1c4a7c54d130dea1ed6ed988bca65d36207773af58c5039e1419afd7f0761ca0a02aa20493120c45b3f61") r18 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000002a40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xe3, 0x1, 0x3, 0x1, 0x1, 0xf2, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x2, 0x3d}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0x5, 0xfd}}]}}}]}}]}}, &(0x7f0000002bc0)={0xa, &(0x7f0000002a80)={0xa, 0x6, 0x250, 0x0, 0x20, 0x0, 0x40, 0xfb}, 0x10, &(0x7f0000002ac0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x1, 0x0, 0x2, 0x4}]}, 0x3, [{0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x46a0d33b810b60d3}}, {0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$hid(r18, &(0x7f0000002dc0)={0x24, &(0x7f0000002c00)={0x0, 0x14, 0x18, {0x18, 0x12, "4661172868fc91a80a8b0bfb74b226594624a2b288e0"}}, &(0x7f0000002c40)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "d27cc4e51e0ff484b9b37b449962d7f6b1a922ab661e1699869d6f90d5fe6746957c3c33fa125b069b05bcf3a3316762592e42a480d023bad695a2f81151fcb40643d47f8a1182d9418d9781d0812768586bbd62c0c8a466530a9bd4908f6307013c88075c18f2eab6293914a171f63584cd6743e7c23d5d147707799dcd6300e03df11eccb8cf66371b189a9316523777f8f8718dada34b8e8e745f63be598f6678f7aa065b09c0cb3b5534c68645c1da0143c7a6c2256be1195953ded76adaf03fc02a8536a98ce2171efb0ea4f46b964843478e72208a7ff6c1a290f3c13878eed2f5359682feee3f853fdfcaa793b1ca"}}, &(0x7f0000002d40)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x0, "fc6b29c9"}, @global=@item_012={0x0, 0x1, 0x8}, @main=@item_012={0x2, 0x0, 0x9, ';!'}, @global=@item_012={0x1, 0x1, 0xb, '\b'}]}}, &(0x7f0000002d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x74}}}}, &(0x7f00000030c0)={0x2c, &(0x7f0000002e00)={0x40, 0x17, 0xde, "7265034f8cd5a1957ffa382433e27138c5eb3d4eea485aa41061f2feb5294dc80f6bcfb2f7e416fbf5b2af6baa187e54b8a59a7774b6f395f253e0295e472e33c18ee2537511bf7807f102c634e8d3c387de3ea747c554e9e1eb8995577c13c5cec8027e0ee1a033383ce1b9383ac7a4bb819d60da595112bd580bd45cb691696f309c1e813590a58132722359bddb37c0069e0cda207b650e419978c14792779e0ed7af4c649dca8069f512087380815e84fba70d2447e01d1c07e3b037b4cf574382ee2b99ca408243bc2073f610dab639421f394ee19f7cb92db259a4"}, &(0x7f0000002f00)={0x0, 0xa, 0x1}, &(0x7f0000002f40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002f80)={0x20, 0x1, 0xbf, "2a4f8caa4642cfbdfbdbd81ec11525d9db081e438686936d2578216274a645c7ab478610f7e6182aa8d3f9434707da3ded94fffc0b41b0226df93dde5dc4dc37981700447ab88e7b1916fbb08192223f41a97fc5e935e1cd718712fa31f70fd3cd90af908df0d086d44634794f9c94fad886e587c9cab3be3158472e2a6e830a66d8a37c1d3a85643fd786068743d8b64ac79dcfa6f70aa5bdf24c3cc9e7921f75cdacc6ee3c98df054472edbaf939ecc12620dc18fdf7bdd893f0e19d2a5a"}, &(0x7f0000003080)={0x20, 0x3, 0x1, 0x3}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000003100), 0x121000, 0x0) r19 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r19, 0x1, 0x6, &(0x7f0000003140)=0x10000, 0x4) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000005700)={0x0, 0x0, 0x0}, &(0x7f0000005740)=0xc) r21 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000005780)='./file0\x00', &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) syz_fuse_handle_req(r0, &(0x7f0000003180)="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", 0x2000, &(0x7f0000005e80)={&(0x7f0000005180)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x80, 0xd00302b, 0x30, 0x4, 0x7, 0x4, 0x0, 0x0, 0x40, 0x5}}, &(0x7f0000005200)={0x18, 0x0, 0x8, {0x2cf}}, &(0x7f0000005240)={0x18, 0xffffffffffffffda, 0x8, {0x100000000}}, &(0x7f0000005280)={0x18, 0x0, 0xc6, {0x5}}, &(0x7f00000052c0)={0x18, 0x8000000000000004, 0x4, {0x2}}, &(0x7f0000005300)={0x28, 0xffffffffffffffda, 0x50, {{0x9, 0x69, 0x2, r15}}}, &(0x7f0000005340)={0x60, 0x0, 0x940, {{0xfffffffffffffffe, 0x3, 0x12fe, 0x6, 0x7ff, 0x4, 0xb, 0x6}}}, &(0x7f00000053c0)={0x18, 0xffffffffffffffda, 0x8, {0x6}}, &(0x7f0000005400)={0x15, 0x0, 0x6, {'*@},\x00'}}, &(0x7f0000005440)={0x20, 0xfffffffffffffffe, 0x28, {0x0, 0x1}}, &(0x7f0000005480)={0x78, 0x0, 0x7, {0x8, 0xb, 0x0, {0x0, 0x4, 0x3, 0x4, 0x9, 0x3, 0x348, 0x0, 0x2, 0xc000, 0x37e, r2, r14, 0x37, 0xaf7}}}, &(0x7f0000005500)={0x90, 0x0, 0x2, {0x6, 0x0, 0xa3bd, 0x3, 0x200, 0x5, {0x6, 0xfffffffffffffffa, 0x7, 0x2, 0x2, 0xffff, 0x5, 0x1, 0x0, 0x4000, 0xfffffffc, r16, r11, 0xbd7, 0x3}}}, &(0x7f00000055c0)={0x120, 0x0, 0x80, [{0x0, 0x65, 0x18, 0x0, 'system.posix_acl_access\x00'}, {0x5, 0x2, 0x1, 0x33fe, '&'}, {0x6, 0x7, 0x2, 0x7fffffff, '@)'}, {0x3, 0x6, 0x18, 0x8, 'system.posix_acl_access\x00'}, {0x0, 0x9, 0x3, 0x9, '}]$'}, {0x3, 0x3, 0x1, 0x9, '\\'}, {0x1, 0x3, 0x18, 0x1c, 'system.posix_acl_access\x00'}]}, &(0x7f0000005840)={0x3c8, 0x0, 0x7, [{{0x1, 0x0, 0x6, 0x1, 0x22, 0x5020, {0x2, 0x80, 0xc, 0x0, 0x2, 0x3, 0xfffffffc, 0x1, 0xe, 0xc000, 0x97, r16, r20, 0xd9, 0x1}}, {0x0, 0x0, 0x3, 0xa4, '{/['}}, {{0x6, 0x2, 0x3, 0x1793, 0x4, 0x7fffffff, {0x0, 0x9c, 0x8, 0x8a4, 0xffffffffffff8000, 0x80000001, 0x4, 0x1fe, 0xb9f, 0xe000, 0x4dcf, r9, r21, 0x9, 0x274}}, {0x0, 0xfffffffffffffff7, 0xf, 0x14, '.pending_reads\x00'}}, {{0x2, 0x1, 0xff, 0x200, 0x5b, 0xf1, {0x4, 0x7, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0xc75, 0x8, 0x8, 0x2000, 0x2, r4, 0xee00, 0x80000001, 0x8}}, {0x1, 0x4, 0x0, 0x194827fd}}, {{0x1, 0x0, 0x9, 0xbc2e, 0x1d, 0x200, {0x0, 0x8000000000000000, 0xfffffffffffffffb, 0x4, 0x1, 0x5, 0xb4f, 0x5, 0x3, 0x4000, 0x6, r16, r22, 0xffffffff, 0x10000}}, {0x4, 0x101, 0x0, 0x93b0}}, {{0x1, 0x2, 0x2, 0xfc99, 0x3, 0x5, {0x0, 0x1, 0x1, 0x8000, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0xc760, 0xa000, 0x3, r2, r14, 0x6a, 0x1ff}}, {0x2, 0x6, 0x1, 0x3, ')'}}, {{0x4, 0x2, 0x3fffffff80000, 0xe56, 0x7, 0xfffffff7, {0x0, 0xfffffffffffffffb, 0x6, 0x0, 0x5, 0xf052, 0x81, 0x6, 0x3, 0xa000, 0x1, r16, r6, 0x80, 0x400}}, {0x6, 0x80000001, 0x2, 0x0, '\'&'}}]}, &(0x7f0000005c40)={0xa0, 0xfffffffffffffffe, 0x6, {{0x3, 0x2, 0x7, 0x7, 0x5, 0xffff, {0x2, 0x900000000000000, 0xbb, 0xef, 0x8000000000000000, 0x2, 0x3, 0xffff3304, 0x6, 0x4000, 0x35, r1, r8, 0x1, 0x4}}, {0x0, 0x8}}}, &(0x7f0000005d00)={0x20, 0xfffffffffffffffe, 0xfbc1, {0x40, 0x0, 0x8, 0x4}}, &(0x7f0000005d40)={0x130, 0x0, 0x9, {0x8000000000000001, 0xfffffffc, 0x0, '\x00', {0x7ce, 0xfffffff7, 0x100, 0xb, r9, r14, 0x4000, '\x00', 0x71, 0xba0f, 0x6, 0x776, {0x81, 0x4}, {0x401, 0x1}, {0x4, 0x5}, {0x0, 0x4b82}, 0xffffff0d, 0x7, 0x7fffffff, 0xd}}}}) r23 = memfd_create(&(0x7f0000005f40)='//+\xad\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000005f80)={0x0, 0x2, [{r0, 0x0, 0xfffffffffffff000, 0x1000000}, {r23, 0x0, 0x0, 0x2000}]}) 3.429662187s ago: executing program 0 (id=2850): futex(&(0x7f0000000200)=0x1, 0xd, 0x2, &(0x7f0000000240), 0x0, 0x2) creat(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003000000106b1d010140000102030109027e000301f930040904000000010100000a24010004080201020a2407050100011383fe09040100000102000209040101010102000009050109000403010007250101040a000904020000010200000904020101010200000e24020101010702fe765b0f3e350724010f0b04000905050920"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) mkdir(0x0, 0x108) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000900000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x22020600) lseek(r2, 0x10001, 0x0) 2.752182737s ago: executing program 5 (id=2853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x20, 0x10, 0x18, {0x18, 0xc, "e79d87176bda27821022a6931281ee94f0ec9ce725b8"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000780)={0x40, 0xd, 0x2d, "870edc24d2b7840f6dba686a683a086fcc2256cf33f09b6976829e69ff8b4264183e483a63c98012b3618b260f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xa4}}) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000200)={0x20, 0x5, 0x20, {0x20, 0x23, "f35253db91b0edbcc2029aabf3f0b68e658a4e56694fc68f20385811ebf0"}}, &(0x7f0000000340)={0x0, 0x3, 0x87, @string={0x87, 0x3, "3c92402794d67cad1a761562b108c64883242d22a9f23e95bdfac4104e70cb1c1200fc93a335d5a15e344eeca8048f9cd3a17a405e4ac562a920c9f15ad16d782bb9649d40135a91827886394d69580ac5825737b86c6990d8291092d982fcc834a4594d2e0dee0776b0220816f0d91d3d79f1be6baa4c34208ec2fe7b5fcb1c87392ae0ba"}}, &(0x7f0000000440)={0x0, 0x22, 0x13, {[@local=@item_012={0x1, 0x2, 0x0, "ad"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xc, "9db3bae6"}, @main=@item_4={0x3, 0x0, 0xc, "b1b9efa3"}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0x7, "287582b6"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8d, 0x1, {0x22, 0x454}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x0, 0x18, 0x1e, "ccc2cef47b3e89e1f77249dc4bce51292d263740f03de66b256102a94627"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0x4d, "a02b013570c6e40c12e054f37ae2a3e45a5ae60247475524b6c37d716661062003d57d8757f2dcb20de3a84c7bebd75ce17ac06012be15d65d4ca228e99b9836f9c6903a03a5f9489cdc6176d1"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfb}}) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0xfffffffd}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r3, &(0x7f0000000300)="89", 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_POLL(r4, &(0x7f0000003300)={0x18, 0x0, 0x0, {0x4}}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20, &(0x7f0000000240)=ANY=[@ANYBLOB='noswap,mpol=default=relative,gid=', @ANYRESHEX=r5, @ANYBLOB="2c6f622a5f726f6c653d2c00485f0e76c2b855e4b683c4346ad95063deeea7d137406d7cfe79984c529839448c9fe32a1ccd26379ea615d5ddfcead610b2d0f0bcedb62b0e586220e5fb305c9f8ada454d5ee57fe09c11b868a92a8bb5ec78855ecd9357c2c2cdffe959c72bdcfb0e627f256da6ca8a251aa3fe6f9b521d5c940f112e171727db7a356d418624252f5089593c91cf5da142517291f11f987ce7cd"]) 2.6237439s ago: executing program 7 (id=2854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0xf, 0x4, 0x1, 0xa, 0x7, 0x47d, 0x0, 0xfffffffffffffffc, 0x40001, 0x5, 0x4, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0x2e0954}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.56341416s ago: executing program 7 (id=2855): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d9c6b440012001b3a9450102030109021b0001000000000904000001ff3d"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0xf, 0x4, 0x1, 0xa, 0x7, 0x47d, 0x0, 0xfffffffffffffffc, 0x40001, 0x5, 0x4, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0x2e0954}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0x3, 0xd5, 0x0, 0x8, 0x10, 0x8, 0x5, 0xfb, 0xd, 0x7, 0x9, 0x0, 0x0, 0x6, 0x2, 0x8, 0x6, 0x0, '\x00', 0xc, 0x8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.397502313s ago: executing program 8 (id=2859): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0xb92f03, 0x0) ptrace(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0xf1ba, 0x9, 0x3, 0x3}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x639, 0x402000) fchmod(r3, 0xa0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f00000001c0)={0x2, 0x3}) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000001200)={0x8, 0x7}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000001240), &(0x7f0000001280)=0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2000001d) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20018884}, 0x440d0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000003e40)={0x18, 0x0, 0x0, {0x5}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020, 0x0, 0x0}, 0x9c3) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000005ec0)={0x10, 0x0, r6}, 0x10) umount2(0x0, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) 2.382726853s ago: executing program 8 (id=2860): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x88080, 0xa0) syz_usb_connect(0x0, 0x54, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x45, 0xae, 0x46, 0x8, 0x17ef, 0x7203, 0xaaf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x2, 0x8f, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0xd5, 0x2, 0x2, 0xc7, 0xbc, 0x57, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x5}]}], [{{0x9, 0x5, 0x3, 0x1, 0x200, 0xc, 0x0, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x2, 0xa5}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x0, 0x1, 0x8}}]}}, {{0x9, 0x4, 0x4c, 0x7f, 0x0, 0xff, 0x1, 0x35, 0xf8}}]}}]}}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0}) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x6) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x7fffffff, 0x2, 0x401, 0x7fffffff, 0x800, 0x5}) 1.255714691s ago: executing program 7 (id=2861): syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010153000102030109028a0003010100040904000000010100000a24010300080201020924040400665f807f0904"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a0000"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.131398132s ago: executing program 8 (id=2862): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x4, &(0x7f00000002c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab602000000ee8100e2838c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0, 0x3000}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x70bd24, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "acb0127dc0757bd70fd7a5fa1cd76c95f8"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r6, 0xffffc000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) accept4$tipc(r3, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r3, 0x4d759000) 1.036483363s ago: executing program 8 (id=2863): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa) (async) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) fgetxattr(r1, &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x27) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f00000002c0), &(0x7f0000000740)=ANY=[@ANYBLOB="00fb76073b0acf3d5e4da1f524f05905dbb61f1fd13fa35f5d12db5f35b77a4997e81d6c6fa528c2336f493547646adaae25661a6457791f4a32655986b27fc241852b4d47fd9991dd71a8c1e5dec3ce239f4b6a33ae7fcc15191c322e53c24ba69fa2a558d7acf4f1c93cd9b7866c669caf2d4de4f1eb0402b2537dab1acb49768038aa4106cb1678243acfd621da3408b6db52a5d92d25fa7132c1d5272c8595fc1d2842677febe60be30bd10f9705f98068b432a00abf62bf877d1c2e4d6dfff7af7e3eca051cc5c07b8d6905e2ee3ccd0277cf58843aa1413ad1b8605330ad37ea322eaa7d73dc170a8ea023533fe86f78c6b0320b9b085e8c6595c310029b28d9e53a9246955c937102a35f1f878793657d7b2ce493d05c62664609333689e99df42aa116000000000000000008a00b187bb82029ecd5bbf21c6c001edde54af55994bfef88bdda9d8cc5214722036f0629674330f1d3676b627970fba02929fc2c23f8277c49cf761580a22bfa7e44f5ec7efb92d06903b99132d5e944ce72665983ccfeabd65d06fe84214380e37838d15efbe67f7e741641fc61e629bc4f86e3e4267b53f46fe1a3a517c756c62479c645a4dd"], 0x76, 0x2) (async) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) (async, rerun: 32) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r0) (rerun: 32) keyctl$search(0xa, r0, &(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, r4) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) (rerun: 32) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r5, 0x2b09d000) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000003c0)="bd6dd23f5d67a7a8ea5b260c42358353dd0927c70a78d5c53fc43fb4d02f85f69a3bd4c7170684ffd8043d4f75960d13144acb113524804c99d01711ef572c69742c5944a096a2dd635f7a5cd259caa1ebee00d47d3becdfca7b8422c2ec6eb245085edcf7f9e8e34992cb3be643ef89a9ab72ef257b2d046de22d50dc7029804f5823dec2095c913bf2ea7f74b449311c53f8abccabd861c32aa7fa6c610e1b7f37c1cc6f4e4e0074dd98f3b41b8edf0191e3d39a6d682f08c761a0687584313c624abc0173076318a016fa3504938a967da91671cb5dea786832d301cc176e72b25431168adf055d6f8b802d127f73f16a6a101eb88c", &(0x7f00000004c0)="41fc14d8f8b8d34608184a08e78ee953d33f20ca19ba001bfa37d42077aa4412350b47d47c19b0707b2a6b69985c4dd32abd2ffd13"}}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x1) (async, rerun: 64) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000) (rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x1e, 0x0, &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x9, 0x3}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r8, &(0x7f0000002dc0)={0x2020}, 0x2020) (async) r9 = getuid() setreuid(0x0, r9) mount$overlay(0x0, &(0x7f0000000380)='./cgroup/../file0\x00', &(0x7f0000000300), 0x90, &(0x7f0000000340)={[{@volatile}, {@xino_on}, {@uuid_null}, {@metacopy_on}]}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@enter_looper], 0x0, 0x0, 0x0}) 959.791285ms ago: executing program 8 (id=2864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0xf, 0x4, 0x1, 0xa, 0x7, 0x47d, 0x0, 0xfffffffffffffffc, 0x40001, 0x5, 0x4, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0x2e0954}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 954.952465ms ago: executing program 8 (id=2865): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000003440), 0x914f3fe38f29474c, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1f) recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000140)=@pppol2tpv3in6, 0x80, &(0x7f0000000a40)=[{&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000900)=""/99, 0x63}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000980)=""/179, 0xb3}], 0xa, &(0x7f0000000b00)=""/132, 0x84}}, {{&(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000c40)=""/25, 0x19}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/113, 0x71}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/34, 0x22}, {&(0x7f0000002d40)=""/118, 0x76}, {&(0x7f0000002dc0)=""/118, 0x76}, {&(0x7f0000002e40)=""/4, 0x4}, {&(0x7f0000002e80)=""/15, 0xf}], 0x9, &(0x7f0000002f80)=""/166, 0xa6}, 0x6}, {{&(0x7f0000003040)=@ethernet={0x0, @random}, 0x80, &(0x7f00000031c0)=[{&(0x7f00000030c0)=""/105, 0x69}, {&(0x7f0000003140)=""/5, 0x5}, {&(0x7f0000003180)=""/42, 0x2a}], 0x3, &(0x7f0000003200)=""/247, 0xf7}}], 0x3, 0x30002, &(0x7f00000033c0)) mlockall(0x1) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x480}]}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="022a637559a36900"], &(0x7f00000000c0)=""/105, 0x69) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003400)) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000088b0c610d1050210bc8b0102030709021200011c0700fe0904a2aa00ea"], 0xfffffffffffffffe) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000003480)={0x10, 0xfffffffffffffff5}, 0x10) syz_usb_connect$cdc_ncm(0xcbf0857cc3769aeb, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x4000fffffffe) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="220000001800150048bd5200ffeffffe0a00000002020000000000000000000002000000e425fa94"], 0x28}], 0x1}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xf, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r0, 0x0) 415.225734ms ago: executing program 0 (id=2866): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x1e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 353.576795ms ago: executing program 0 (id=2867): request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffb) (async) r0 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8f, 0x0, 0x3}]}) ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8) (async) ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8) keyctl$setperm(0x5, r0, 0x18000020) (async) keyctl$setperm(0x5, r0, 0x18000020) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r5, 0x0, 0x33, 0x0, &(0x7f00000008c0)=0xa4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) 214.890106ms ago: executing program 0 (id=2868): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x3d, 0x8}}], 0x18}}], 0x1, 0x20000844) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 172.914327ms ago: executing program 0 (id=2869): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0xf, 0x4, 0x1, 0xa, 0x7, 0x47d, 0x0, 0xfffffffffffffffc, 0x40001, 0x5, 0x4, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0x2e0954}) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, r4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0x3, 0xd5, 0x0, 0x8, 0x10, 0x8, 0x5, 0xfb, 0xd, 0x7, 0x9, 0x0, 0x0, 0x6, 0x2, 0x8, 0x6, 0x0, '\x00', 0xc, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 75.568419ms ago: executing program 7 (id=2870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xffffffffffffff4d, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0xc, 0xdbc, 0x2d, 0x9, 0xe, "d268b6700a688750"}) close(r0) 19.748189ms ago: executing program 7 (id=2871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 18.187299ms ago: executing program 7 (id=2872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01') r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) setresgid(0xee00, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@blksize}, {@default_permissions}]}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r7, &(0x7f0000000440)=ANY=[], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x28800, 0x40) openat$cgroup_int(r8, 0x0, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, &(0x7f0000000040)) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000055c0)={&(0x7f0000005500)=""/191, 0x1000, 0x800, 0x4, 0x1}, 0x20) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 13.9248ms ago: executing program 0 (id=2873): r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x4000080) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x7, 0x8000) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000002c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40440c4}, 0x810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xe}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20000802) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f00000007c0)={0x0, 0xbf, ""/191}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r6) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x4f, 0x20, 0x8, 0x9, {{0x35, 0x4, 0x2, 0xa, 0xd4, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x24, 0x10, 0x1, 0x7, [{@local, 0xc1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@loopback, 0x7}, {@local, 0x3e0}]}, @ssrr={0x89, 0xb, 0x69, [@multicast1, @private=0xa010100]}, @end, @cipso={0x86, 0x5d, 0x2, [{0x0, 0x7, "6a69eea30e"}, {0x7, 0xa, "f4febd5ccb95b92f"}, {0x0, 0xf, "9e228dfa73f9baeb49ed5de619"}, {0x2, 0xe, "678a1f3412ca57b07730121a"}, {0x6, 0x10, "152159812ec4074db6b290b8c855"}, {0x2, 0x11, "21034b8220dda494d980dcb5fc6bf2"}, {0x7, 0x8, "ffab6cf73e43"}]}, @timestamp_addr={0x44, 0xc, 0x78, 0x1, 0x5, [{@remote, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0xdc, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@multicast2, 0x2}]}, @generic={0x83, 0x10, "4422f239f9deaf281dfca850f1ae"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000d40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x188, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x64, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x8080) connect$bt_l2cap(r6, &(0x7f0000000d80)={0x1f, 0x3, @any, 0x8}, 0xe) write$UHID_INPUT2(r6, &(0x7f0000000dc0)={0xc, {0x88, "d1170ec1d8d26043a9522fcdc86d55f4b10d857747356533a380681bdfa799af0484843cda67e5632ea1517839b8a35d7d09d8d07e3420138661789277811efb50178401450d2fe5dd385f69ace332b3edb850c11692df883f8ad1367a54cf8bbc07f0cdc0ebda2fc9b58e150919c8b3e8354ca8e581e06eefa14d7890c5854b342c6170267cf6c4"}}, 0x8e) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r12, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r13, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000005}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40104) sendmsg$NL802154_CMD_DEL_SEC_KEY(r13, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xe8, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x94, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "86f543c61efb2cd1f68cb18e36c38113"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6f0443b5dcf60d631472ff03b6c599d5"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40810) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001300), r13) sendmsg$NLBL_UNLABEL_C_STATICADD(r13, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0xa0, r14, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x20000040) 12.35097ms ago: executing program 5 (id=2874): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0xf, 0x4, 0x1, 0xa, 0x7, 0x47d, 0x0, 0xfffffffffffffffc, 0x40001, 0x5, 0x4, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0x2e0954}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 0s ago: executing program 5 (id=2875): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x1e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 40786][ T7209] x64_sys_call+0x1ee9/0x2ee0 [ 208.040807][ T7209] do_syscall_64+0x58/0xf0 [ 208.040822][ T7209] ? clear_bhb_loop+0x50/0xa0 [ 208.040840][ T7209] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 208.040858][ T7209] RIP: 0033:0x7efe4458e929 [ 208.040871][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.040886][ T7209] RSP: 002b:00007efe45445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 208.040904][ T7209] RAX: ffffffffffffffda RBX: 00007efe447b5fa0 RCX: 00007efe4458e929 [ 208.040917][ T7209] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000007 [ 208.040929][ T7209] RBP: 00007efe44610b39 R08: 0000000000000200 R09: 0000000000000000 [ 208.040940][ T7209] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 208.040951][ T7209] R13: 0000000000000000 R14: 00007efe447b5fa0 R15: 00007ffcb3c6c108 [ 208.040965][ T7209] [ 208.320385][ T7213] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 208.321315][ T7213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 208.332326][ T7213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:609 [ 208.445988][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 208.566001][ T305] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 208.635982][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 208.642720][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 208.651484][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.661727][ T9] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 208.670792][ T6973] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 208.678628][ T9] usb 9-1: config 1 has no interface number 1 [ 208.684740][ T9] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 208.697578][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.706946][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.714961][ T9] usb 9-1: Product: syz [ 208.719451][ T9] usb 9-1: Manufacturer: syz [ 208.724063][ T9] usb 9-1: SerialNumber: syz [ 208.730473][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.743402][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.753355][ T305] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.766434][ T305] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.775513][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.788724][ T305] usb 6-1: config 0 descriptor?? [ 208.847049][ T6973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.858035][ T6973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.867907][ T6973] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.880982][ T6973] usb 8-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 208.890127][ T6973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.899239][ T6973] usb 8-1: config 0 descriptor?? [ 209.196897][ T305] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 209.204455][ T305] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 209.212139][ T305] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 209.221161][ T305] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 209.448190][ T9] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 209.457304][ T6975] usb 6-1: USB disconnect, device number 74 [ 209.476222][ T9] usb 9-1: USB disconnect, device number 20 [ 209.499222][ T826] udevd[826]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 209.642107][ T36] audit: type=1400 audit(2000000429.690:15842): avc: denied { connect } for pid=7232 comm="syz.8.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.999898][ T7237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.425957][ T9] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 210.587284][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 210.595360][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 210.603874][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 210.611969][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.621098][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.629187][ T9] usb 6-1: Product: syz [ 210.633371][ T9] usb 6-1: Manufacturer: syz [ 210.638132][ T9] usb 6-1: SerialNumber: syz [ 210.755989][ T305] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 210.844818][ T7249] binder: Unknown parameter '18446744073709551615 [ 219.000836][ T7416] __dump_stack+0x21/0x30 [ 219.000860][ T7416] dump_stack_lvl+0x10c/0x190 [ 219.000879][ T7416] ? __cfi_dump_stack_lvl+0x10/0x10 [ 219.000898][ T7416] ? __kasan_check_write+0x18/0x20 [ 219.000918][ T7416] ? copy_mm+0x2a5/0x1c20 [ 219.000935][ T7416] dump_stack+0x19/0x20 [ 219.000952][ T7416] should_fail_ex+0x3d9/0x530 [ 219.000972][ T7416] should_failslab+0xac/0x100 [ 219.000995][ T7416] kmem_cache_alloc_noprof+0x42/0x3a0 [ 219.001015][ T7416] ? alloc_pid+0xa5/0xba0 [ 219.001038][ T7416] ? __asan_memcpy+0x5a/0x80 [ 219.001076][ T7416] alloc_pid+0xa5/0xba0 [ 219.001122][ T7416] copy_process+0x13ff/0x3220 [ 219.001141][ T7416] ? __cfi_copy_process+0x10/0x10 [ 219.001157][ T7416] ? __kasan_check_write+0x18/0x20 [ 219.001176][ T7416] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 219.001203][ T7416] vhost_task_create+0x1d6/0x350 [ 219.001226][ T7416] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 219.001252][ T7416] ? __cfi_vhost_task_create+0x10/0x10 [ 219.001276][ T7416] ? __cfi_vhost_task_fn+0x10/0x10 [ 219.001298][ T7416] ? __kasan_check_write+0x18/0x20 [ 219.001317][ T7416] ? mutex_lock+0x92/0x1c0 [ 219.001336][ T7416] ? __cfi_mutex_lock+0x10/0x10 [ 219.001354][ T7416] ? kernel_text_address+0xa9/0xe0 [ 219.001372][ T7416] kvm_mmu_post_init_vm+0x1a6/0x310 [ 219.001392][ T7416] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 219.001411][ T7416] ? _parse_integer_limit+0x195/0x1e0 [ 219.001430][ T7416] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 219.001449][ T7416] ? kstrtoull+0x13b/0x1e0 [ 219.001466][ T7416] ? kstrtouint+0x78/0xf0 [ 219.001483][ T7416] ? ioctl_has_perm+0x1aa/0x4d0 [ 219.001508][ T7416] ? __asan_memcpy+0x5a/0x80 [ 219.001527][ T7416] ? ioctl_has_perm+0x3e0/0x4d0 [ 219.001552][ T7416] ? has_cap_mac_admin+0xd0/0xd0 [ 219.001576][ T7416] ? __kasan_check_write+0x18/0x20 [ 219.001595][ T7416] ? mutex_lock_killable+0x92/0x1c0 [ 219.001614][ T7416] ? __cfi_mutex_lock_killable+0x10/0x10 [ 219.001634][ T7416] ? proc_fail_nth_write+0x17e/0x210 [ 219.001653][ T7416] kvm_vcpu_ioctl+0x96f/0xee0 [ 219.001675][ T7416] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 219.001697][ T7416] ? __cfi_vfs_write+0x10/0x10 [ 219.001718][ T7416] ? __kasan_check_write+0x18/0x20 [ 219.001736][ T7416] ? mutex_unlock+0x8b/0x240 [ 219.001755][ T7416] ? __cfi_mutex_unlock+0x10/0x10 [ 219.001773][ T7416] ? __fget_files+0x2c5/0x340 [ 219.001797][ T7416] ? __fget_files+0x2c5/0x340 [ 219.001820][ T7416] ? bpf_lsm_file_ioctl+0xd/0x20 [ 219.001839][ T7416] ? security_file_ioctl+0x34/0xd0 [ 219.001863][ T7416] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 219.001884][ T7416] __se_sys_ioctl+0x132/0x1b0 [ 219.001908][ T7416] __x64_sys_ioctl+0x7f/0xa0 [ 219.001931][ T7416] x64_sys_call+0x1878/0x2ee0 [ 219.001952][ T7416] do_syscall_64+0x58/0xf0 [ 219.001966][ T7416] ? clear_bhb_loop+0x50/0xa0 [ 219.001985][ T7416] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 219.002003][ T7416] RIP: 0033:0x7efe4458e929 [ 219.002017][ T7416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.002031][ T7416] RSP: 002b:00007efe45445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.002049][ T7416] RAX: ffffffffffffffda RBX: 00007efe447b5fa0 RCX: 00007efe4458e929 [ 219.002062][ T7416] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 219.002092][ T7416] RBP: 00007efe45445090 R08: 0000000000000000 R09: 0000000000000000 [ 219.002109][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.002120][ T7416] R13: 0000000000000000 R14: 00007efe447b5fa0 R15: 00007ffcb3c6c108 [ 219.002134][ T7416] [ 219.160717][ T7421] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 219.235976][ T6973] usb 8-1: device descriptor read/64, error -71 [ 219.450534][ T36] audit: type=1326 audit(2000000439.500:15852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7422 comm="syz.5.2432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4458e929 code=0x0 [ 219.552289][ T36] audit: type=1400 audit(2000000439.600:15853): avc: denied { nlmsg_tty_audit } for pid=7424 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 219.611698][ T7435] FAULT_INJECTION: forcing a failure. [ 219.611698][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.624888][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.8.2436 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 219.624923][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.624937][ T7435] Call Trace: [ 219.624944][ T7435] [ 219.624952][ T7435] __dump_stack+0x21/0x30 [ 219.624984][ T7435] dump_stack_lvl+0x10c/0x190 [ 219.625007][ T7435] ? __cfi_dump_stack_lvl+0x10/0x10 [ 219.625033][ T7435] dump_stack+0x19/0x20 [ 219.625054][ T7435] should_fail_ex+0x3d9/0x530 [ 219.625079][ T7435] should_fail+0xf/0x20 [ 219.625100][ T7435] should_fail_usercopy+0x1e/0x30 [ 219.625124][ T7435] _copy_to_user+0x24/0xa0 [ 219.625152][ T7435] simple_read_from_buffer+0xed/0x160 [ 219.625174][ T7435] proc_fail_nth_read+0x19e/0x210 [ 219.625196][ T7435] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 219.625216][ T7435] ? bpf_lsm_file_permission+0xd/0x20 [ 219.625246][ T7435] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 219.625268][ T7435] vfs_read+0x278/0xb60 [ 219.625292][ T7435] ? do_readv+0x2d0/0x2d0 [ 219.625321][ T7435] ? __cfi_vfs_read+0x10/0x10 [ 219.625349][ T7435] ? __kasan_check_write+0x18/0x20 [ 219.625375][ T7435] ? mutex_lock+0x92/0x1c0 [ 219.625400][ T7435] ? __cfi_mutex_lock+0x10/0x10 [ 219.625426][ T7435] ? __fget_files+0x2c5/0x340 [ 219.625460][ T7435] ksys_read+0x141/0x250 [ 219.625487][ T7435] ? xfd_validate_state+0x68/0x150 [ 219.625513][ T7435] ? __cfi_ksys_read+0x10/0x10 [ 219.625542][ T7435] ? __kasan_check_write+0x18/0x20 [ 219.625570][ T7435] ? fpregs_restore_userregs+0x11d/0x260 [ 219.625595][ T7435] __x64_sys_read+0x7f/0x90 [ 219.625626][ T7435] x64_sys_call+0x2638/0x2ee0 [ 219.625658][ T7435] do_syscall_64+0x58/0xf0 [ 219.625680][ T7435] ? clear_bhb_loop+0x50/0xa0 [ 219.625708][ T7435] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 219.625735][ T7435] RIP: 0033:0x7fc4cd18d33c [ 219.625756][ T7435] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 219.625778][ T7435] RSP: 002b:00007fc4cdf47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.625805][ T7435] RAX: ffffffffffffffda RBX: 00007fc4cd3b5fa0 RCX: 00007fc4cd18d33c [ 219.625825][ T7435] RDX: 000000000000000f RSI: 00007fc4cdf470a0 RDI: 0000000000000006 [ 219.625843][ T7435] RBP: 00007fc4cdf47090 R08: 0000000000000000 R09: 0000000000000000 [ 219.625860][ T7435] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 219.625876][ T7435] R13: 0000000000000000 R14: 00007fc4cd3b5fa0 R15: 00007ffc82bda3d8 [ 219.625902][ T7435] [ 219.875282][ T6973] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 219.987258][ T7446] FAULT_INJECTION: forcing a failure. [ 219.987258][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 220.000049][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.0.2440 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 220.000088][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.000103][ T7446] Call Trace: [ 220.000112][ T7446] [ 220.000121][ T7446] __dump_stack+0x21/0x30 [ 220.000153][ T7446] dump_stack_lvl+0x10c/0x190 [ 220.000179][ T7446] ? __cfi_dump_stack_lvl+0x10/0x10 [ 220.000208][ T7446] dump_stack+0x19/0x20 [ 220.000232][ T7446] should_fail_ex+0x3d9/0x530 [ 220.000259][ T7446] should_failslab+0xac/0x100 [ 220.000293][ T7446] __kmalloc_node_noprof+0x6c/0x450 [ 220.000319][ T7446] ? __kvmalloc_node_noprof+0x11d/0x300 [ 220.000347][ T7446] __kvmalloc_node_noprof+0x11d/0x300 [ 220.000375][ T7446] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 220.000404][ T7446] ? xa_find+0x11b/0x170 [ 220.000431][ T7446] __kvm_mmu_topup_memory_cache+0x5f0/0x860 [ 220.000462][ T7446] ? kvm_vcpu_kick+0x24e/0x3f0 [ 220.000485][ T7446] ? pic_unlock+0x1fb/0x2a0 [ 220.000517][ T7446] kvm_mmu_topup_memory_cache+0x24/0x30 [ 220.000547][ T7446] kvm_mmu_load+0xa2/0x28a0 [ 220.000572][ T7446] ? kvm_pic_read_irq+0x2e3/0xc70 [ 220.000605][ T7446] ? __kasan_check_read+0x15/0x20 [ 220.000632][ T7446] ? kvm_apic_accept_pic_intr+0x91/0x140 [ 220.000659][ T7446] ? vmx_enable_irq_window+0x95/0x140 [ 220.000686][ T7446] vcpu_run+0x4bb3/0x7260 [ 220.000727][ T7446] ? signal_pending+0xc0/0xc0 [ 220.000751][ T7446] ? __kasan_check_write+0x18/0x20 [ 220.000779][ T7446] ? xfd_validate_state+0x68/0x150 [ 220.000806][ T7446] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 220.000842][ T7446] ? __kasan_check_write+0x18/0x20 [ 220.000870][ T7446] ? fpregs_mark_activate+0x69/0x160 [ 220.000906][ T7446] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 220.000954][ T7446] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 220.000991][ T7446] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 220.001021][ T7446] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 220.001049][ T7446] ? kstrtoull+0x13b/0x1e0 [ 220.001078][ T7446] ? kstrtouint+0x78/0xf0 [ 220.001104][ T7446] ? ioctl_has_perm+0x1aa/0x4d0 [ 220.001138][ T7446] ? __asan_memcpy+0x5a/0x80 [ 220.001167][ T7446] ? ioctl_has_perm+0x3e0/0x4d0 [ 220.001202][ T7446] ? has_cap_mac_admin+0xd0/0xd0 [ 220.001238][ T7446] ? __kasan_check_write+0x18/0x20 [ 220.001264][ T7446] ? mutex_lock_killable+0x92/0x1c0 [ 220.001293][ T7446] ? __cfi_mutex_lock_killable+0x10/0x10 [ 220.001322][ T7446] ? proc_fail_nth_write+0x17e/0x210 [ 220.001348][ T7446] kvm_vcpu_ioctl+0x96f/0xee0 [ 220.001380][ T7446] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 220.001412][ T7446] ? __cfi_vfs_write+0x10/0x10 [ 220.001441][ T7446] ? __kasan_check_write+0x18/0x20 [ 220.001468][ T7446] ? mutex_unlock+0x8b/0x240 [ 220.001495][ T7446] ? __cfi_mutex_unlock+0x10/0x10 [ 220.001521][ T7446] ? __fget_files+0x2c5/0x340 [ 220.001555][ T7446] ? __fget_files+0x2c5/0x340 [ 220.001587][ T7446] ? bpf_lsm_file_ioctl+0xd/0x20 [ 220.001614][ T7446] ? security_file_ioctl+0x34/0xd0 [ 220.001647][ T7446] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 220.001677][ T7446] __se_sys_ioctl+0x132/0x1b0 [ 220.001719][ T7446] __x64_sys_ioctl+0x7f/0xa0 [ 220.001752][ T7446] x64_sys_call+0x1878/0x2ee0 [ 220.001783][ T7446] do_syscall_64+0x58/0xf0 [ 220.001803][ T7446] ? clear_bhb_loop+0x50/0xa0 [ 220.001829][ T7446] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 220.001855][ T7446] RIP: 0033:0x7fe53858e929 [ 220.001875][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.001897][ T7446] RSP: 002b:00007fe5394a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.001923][ T7446] RAX: ffffffffffffffda RBX: 00007fe5387b5fa0 RCX: 00007fe53858e929 [ 220.001950][ T7446] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 220.001966][ T7446] RBP: 00007fe5394a0090 R08: 0000000000000000 R09: 0000000000000000 [ 220.001983][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.001999][ T7446] R13: 0000000000000000 R14: 00007fe5387b5fa0 R15: 00007fff15305918 [ 220.002019][ T7446] [ 220.027332][ T36] audit: type=1400 audit(2000000440.060:15854): avc: denied { map } for pid=7448 comm="syz.8.2441" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 220.029575][ T6973] usb 8-1: device descriptor read/64, error -71 [ 220.297794][ T6979] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 220.566052][ T6973] usb 8-1: device descriptor read/64, error -71 [ 220.587280][ T6979] usb 9-1: unable to get BOS descriptor or descriptor too short [ 220.595368][ T6979] usb 9-1: not running at top speed; connect to a high speed hub [ 220.603821][ T6979] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 220.614187][ T6979] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 220.627833][ T6979] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.636932][ T6979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.645558][ T6979] usb 9-1: Product: syz [ 220.650385][ T6979] usb 9-1: Manufacturer: syz [ 220.654993][ T6979] usb 9-1: SerialNumber: syz [ 220.660425][ T6979] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 220.669160][ T6979] usb 9-1: no configuration chosen from 1 choice [ 220.686107][ T6973] usb usb8-port1: attempt power cycle [ 221.025979][ T6973] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 221.423488][ T6973] usb 8-1: device descriptor read/8, error -71 [ 221.528727][ T36] audit: type=1400 audit(2000000441.580:15855): avc: denied { write } for pid=7476 comm="syz.7.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 221.549566][ T36] audit: type=1400 audit(2000000441.580:15856): avc: denied { read } for pid=7476 comm="syz.7.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 221.570833][ T6973] usb 8-1: device descriptor read/8, error -71 [ 221.864142][ T7481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=275 sclass=netlink_route_socket pid=7481 comm=syz.5.2454 [ 221.897523][ T7484] FAULT_INJECTION: forcing a failure. [ 221.897523][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 221.910333][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.5.2455 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 221.910369][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.910387][ T7484] Call Trace: [ 221.910396][ T7484] [ 221.910404][ T7484] __dump_stack+0x21/0x30 [ 221.910431][ T7484] dump_stack_lvl+0x10c/0x190 [ 221.910452][ T7484] ? __cfi_dump_stack_lvl+0x10/0x10 [ 221.910472][ T7484] ? kasan_save_alloc_info+0x40/0x50 [ 221.910491][ T7484] ? __kasan_kmalloc+0x96/0xb0 [ 221.910515][ T7484] dump_stack+0x19/0x20 [ 221.910533][ T7484] should_fail_ex+0x3d9/0x530 [ 221.910554][ T7484] should_failslab+0xac/0x100 [ 221.910577][ T7484] kmem_cache_alloc_noprof+0x42/0x3a0 [ 221.910598][ T7484] ? __kvm_mmu_topup_memory_cache+0x1eb/0x860 [ 221.910620][ T7484] ? xa_find+0x11b/0x170 [ 221.910639][ T7484] __kvm_mmu_topup_memory_cache+0x1eb/0x860 [ 221.910661][ T7484] ? pic_unlock+0x1fb/0x2a0 [ 221.910684][ T7484] kvm_mmu_topup_memory_cache+0x24/0x30 [ 221.910705][ T7484] kvm_mmu_load+0xa2/0x28a0 [ 221.910723][ T7484] ? kvm_pic_read_irq+0x2e3/0xc70 [ 221.910746][ T7484] ? __kasan_check_read+0x15/0x20 [ 221.910765][ T7484] ? kvm_apic_accept_pic_intr+0x91/0x140 [ 221.910784][ T7484] ? vmx_enable_irq_window+0x95/0x140 [ 221.910804][ T7484] vcpu_run+0x4bb3/0x7260 [ 221.910834][ T7484] ? signal_pending+0xc0/0xc0 [ 221.910851][ T7484] ? __kasan_check_write+0x18/0x20 [ 221.910878][ T7484] ? xfd_validate_state+0x68/0x150 [ 221.910898][ T7484] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 221.910924][ T7484] ? __kasan_check_write+0x18/0x20 [ 221.910943][ T7484] ? fpregs_mark_activate+0x69/0x160 [ 221.910969][ T7484] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 221.910995][ T7484] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 221.911022][ T7484] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 221.911043][ T7484] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 221.911062][ T7484] ? kstrtoull+0x13b/0x1e0 [ 221.911087][ T7484] ? kstrtouint+0x78/0xf0 [ 221.911111][ T7484] ? ioctl_has_perm+0x1aa/0x4d0 [ 221.911149][ T7484] ? __asan_memcpy+0x5a/0x80 [ 221.911169][ T7484] ? ioctl_has_perm+0x3e0/0x4d0 [ 221.911194][ T7484] ? has_cap_mac_admin+0xd0/0xd0 [ 221.911220][ T7484] ? __kasan_check_write+0x18/0x20 [ 221.911239][ T7484] ? mutex_lock_killable+0x92/0x1c0 [ 221.911260][ T7484] ? __cfi_mutex_lock_killable+0x10/0x10 [ 221.911280][ T7484] ? proc_fail_nth_write+0x17e/0x210 [ 221.911299][ T7484] kvm_vcpu_ioctl+0x96f/0xee0 [ 221.911322][ T7484] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 221.911345][ T7484] ? __cfi_vfs_write+0x10/0x10 [ 221.911366][ T7484] ? __kasan_check_write+0x18/0x20 [ 221.911386][ T7484] ? mutex_unlock+0x8b/0x240 [ 221.911404][ T7484] ? __cfi_mutex_unlock+0x10/0x10 [ 221.911424][ T7484] ? __fget_files+0x2c5/0x340 [ 221.911448][ T7484] ? __fget_files+0x2c5/0x340 [ 221.911472][ T7484] ? bpf_lsm_file_ioctl+0xd/0x20 [ 221.911491][ T7484] ? security_file_ioctl+0x34/0xd0 [ 221.911516][ T7484] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 221.911538][ T7484] __se_sys_ioctl+0x132/0x1b0 [ 221.911563][ T7484] __x64_sys_ioctl+0x7f/0xa0 [ 221.911586][ T7484] x64_sys_call+0x1878/0x2ee0 [ 221.911609][ T7484] do_syscall_64+0x58/0xf0 [ 221.911624][ T7484] ? clear_bhb_loop+0x50/0xa0 [ 221.911643][ T7484] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 221.911661][ T7484] RIP: 0033:0x7efe4458e929 [ 221.911676][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.911691][ T7484] RSP: 002b:00007efe45445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.911710][ T7484] RAX: ffffffffffffffda RBX: 00007efe447b5fa0 RCX: 00007efe4458e929 [ 221.911723][ T7484] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 221.911749][ T7484] RBP: 00007efe45445090 R08: 0000000000000000 R09: 0000000000000000 [ 221.911761][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.911772][ T7484] R13: 0000000000000000 R14: 00007efe447b5fa0 R15: 00007ffcb3c6c108 [ 221.911787][ T7484] [ 222.416963][ T7491] kvm: emulating exchange as write [ 222.460081][ T7500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.460941][ T7500] rust_binder: Error in use_page_slow: ESRCH [ 222.470099][ T7500] rust_binder: use_range failure ESRCH [ 222.476208][ T7500] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 222.481826][ T7500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 222.489723][ T7500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:675 [ 222.502778][ T7504] /dev/rnullb0: Can't open blockdev [ 222.566389][ T7511] FAULT_INJECTION: forcing a failure. [ 222.566389][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 222.579280][ T7511] CPU: 0 UID: 0 PID: 7511 Comm: syz.5.2466 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 222.579309][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.579321][ T7511] Call Trace: [ 222.579327][ T7511] [ 222.579333][ T7511] __dump_stack+0x21/0x30 [ 222.579357][ T7511] dump_stack_lvl+0x10c/0x190 [ 222.579377][ T7511] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.579398][ T7511] dump_stack+0x19/0x20 [ 222.579417][ T7511] should_fail_ex+0x3d9/0x530 [ 222.579437][ T7511] should_failslab+0xac/0x100 [ 222.579463][ T7511] kmem_cache_alloc_noprof+0x42/0x3a0 [ 222.579483][ T7511] ? __kvm_mmu_topup_memory_cache+0x1eb/0x860 [ 222.579506][ T7511] __kvm_mmu_topup_memory_cache+0x1eb/0x860 [ 222.579528][ T7511] ? pic_unlock+0x1fb/0x2a0 [ 222.579550][ T7511] kvm_mmu_topup_memory_cache+0x24/0x30 [ 222.579571][ T7511] kvm_mmu_load+0xa2/0x28a0 [ 222.579589][ T7511] ? kvm_pic_read_irq+0x2e3/0xc70 [ 222.579613][ T7511] ? __kasan_check_read+0x15/0x20 [ 222.579632][ T7511] ? kvm_apic_accept_pic_intr+0x91/0x140 [ 222.579651][ T7511] ? vmx_enable_irq_window+0x95/0x140 [ 222.579670][ T7511] vcpu_run+0x4bb3/0x7260 [ 222.579700][ T7511] ? signal_pending+0xc0/0xc0 [ 222.579719][ T7511] ? __kasan_check_write+0x18/0x20 [ 222.579740][ T7511] ? xfd_validate_state+0x68/0x150 [ 222.579760][ T7511] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 222.579786][ T7511] ? __kasan_check_write+0x18/0x20 [ 222.579806][ T7511] ? fpregs_mark_activate+0x69/0x160 [ 222.579832][ T7511] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 222.579857][ T7511] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 222.579884][ T7511] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 222.579905][ T7511] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 222.579924][ T7511] ? kstrtoull+0x13b/0x1e0 [ 222.579942][ T7511] ? kstrtouint+0x78/0xf0 [ 222.579960][ T7511] ? ioctl_has_perm+0x1aa/0x4d0 [ 222.579992][ T7511] ? __asan_memcpy+0x5a/0x80 [ 222.580012][ T7511] ? ioctl_has_perm+0x3e0/0x4d0 [ 222.580037][ T7511] ? has_cap_mac_admin+0xd0/0xd0 [ 222.580062][ T7511] ? __kasan_check_write+0x18/0x20 [ 222.580081][ T7511] ? mutex_lock_killable+0x92/0x1c0 [ 222.580102][ T7511] ? __cfi_mutex_lock_killable+0x10/0x10 [ 222.580123][ T7511] ? proc_fail_nth_write+0x17e/0x210 [ 222.580141][ T7511] kvm_vcpu_ioctl+0x96f/0xee0 [ 222.580165][ T7511] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 222.580188][ T7511] ? __cfi_vfs_write+0x10/0x10 [ 222.580210][ T7511] ? __kasan_check_write+0x18/0x20 [ 222.580229][ T7511] ? mutex_unlock+0x8b/0x240 [ 222.580248][ T7511] ? __cfi_mutex_unlock+0x10/0x10 [ 222.580267][ T7511] ? __fget_files+0x2c5/0x340 [ 222.580291][ T7511] ? __fget_files+0x2c5/0x340 [ 222.580316][ T7511] ? bpf_lsm_file_ioctl+0xd/0x20 [ 222.580335][ T7511] ? security_file_ioctl+0x34/0xd0 [ 222.580359][ T7511] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 222.580381][ T7511] __se_sys_ioctl+0x132/0x1b0 [ 222.580406][ T7511] __x64_sys_ioctl+0x7f/0xa0 [ 222.580429][ T7511] x64_sys_call+0x1878/0x2ee0 [ 222.580451][ T7511] do_syscall_64+0x58/0xf0 [ 222.580466][ T7511] ? clear_bhb_loop+0x50/0xa0 [ 222.580487][ T7511] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 222.580505][ T7511] RIP: 0033:0x7efe4458e929 [ 222.580520][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.580534][ T7511] RSP: 002b:00007efe45445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.580553][ T7511] RAX: ffffffffffffffda RBX: 00007efe447b5fa0 RCX: 00007efe4458e929 [ 222.580567][ T7511] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 222.580578][ T7511] RBP: 00007efe45445090 R08: 0000000000000000 R09: 0000000000000000 [ 222.580590][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.580601][ T7511] R13: 0000000000000000 R14: 00007efe447b5fa0 R15: 00007ffcb3c6c108 [ 222.580615][ T7511] [ 222.791429][ T36] audit: type=1400 audit(2000000442.830:15857): avc: denied { unlink } for pid=7514 comm="syz.7.2468" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 223.051439][ T7523] /dev/rnullb0: Can't open blockdev [ 223.052757][ T6973] usb 9-1: USB disconnect, device number 26 [ 223.068794][ T36] audit: type=1400 audit(2000000443.120:15858): avc: denied { lock } for pid=7522 comm="syz.7.2470" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.070610][ T7523] binder: Bad value for 'defcontext' [ 223.117683][ T36] audit: type=1400 audit(2000000443.170:15859): avc: denied { ioctl } for pid=7530 comm="syz.8.2472" path="socket:[50633]" dev="sockfs" ino=50633 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.118309][ T7532] 9pnet_fd: Insufficient options for proto=fd [ 223.255999][ T45] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 223.316448][ T7548] syz.8.2479: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 223.332414][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.8.2479 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 223.332447][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.332462][ T7548] Call Trace: [ 223.332469][ T7548] [ 223.332478][ T7548] __dump_stack+0x21/0x30 [ 223.332511][ T7548] dump_stack_lvl+0x10c/0x190 [ 223.332541][ T7548] ? __cfi_dump_stack_lvl+0x10/0x10 [ 223.332570][ T7548] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 223.332596][ T7548] dump_stack+0x19/0x20 [ 223.332634][ T7548] warn_alloc+0x1bc/0x2a0 [ 223.332661][ T7548] ? __cfi_warn_alloc+0x10/0x10 [ 223.332687][ T7548] ? __kasan_kmalloc+0x96/0xb0 [ 223.332722][ T7548] ? __kmalloc_node_noprof+0x1b1/0x450 [ 223.332753][ T7548] __vmalloc_node_range_noprof+0x10d0/0x1420 [ 223.332787][ T7548] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 223.332814][ T7548] ? kasan_save_alloc_info+0x40/0x50 [ 223.332838][ T7548] ? arch_dup_task_struct+0x5b/0xe0 [ 223.332867][ T7548] ? __asan_memcpy+0x5a/0x80 [ 223.332896][ T7548] dup_task_struct+0x5bd/0xc50 [ 223.332919][ T7548] ? copy_process+0x538/0x3220 [ 223.332943][ T7548] ? _raw_spin_lock_irq+0x8d/0x120 [ 223.332979][ T7548] ? copy_process+0x3220/0x3220 [ 223.333002][ T7548] ? __kasan_check_write+0x18/0x20 [ 223.333031][ T7548] copy_process+0x538/0x3220 [ 223.333059][ T7548] ? __cfi_copy_process+0x10/0x10 [ 223.333084][ T7548] ? __kasan_check_write+0x18/0x20 [ 223.333113][ T7548] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 223.333152][ T7548] vhost_task_create+0x1d6/0x350 [ 223.333187][ T7548] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 223.333226][ T7548] ? __cfi_vhost_task_create+0x10/0x10 [ 223.333261][ T7548] ? __cfi_vhost_task_fn+0x10/0x10 [ 223.333294][ T7548] ? __kasan_check_write+0x18/0x20 [ 223.333322][ T7548] ? mutex_lock+0x92/0x1c0 [ 223.333349][ T7548] ? __cfi_mutex_lock+0x10/0x10 [ 223.333375][ T7548] ? kernel_text_address+0xa9/0xe0 [ 223.333402][ T7548] kvm_mmu_post_init_vm+0x1a6/0x310 [ 223.333432][ T7548] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 223.333460][ T7548] ? _parse_integer_limit+0x195/0x1e0 [ 223.333488][ T7548] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 223.333516][ T7548] ? kstrtoull+0x13b/0x1e0 [ 223.333541][ T7548] ? kstrtouint+0x78/0xf0 [ 223.333567][ T7548] ? ioctl_has_perm+0x1aa/0x4d0 [ 223.333602][ T7548] ? __asan_memcpy+0x5a/0x80 [ 223.333641][ T7548] ? ioctl_has_perm+0x3e0/0x4d0 [ 223.333677][ T7548] ? has_cap_mac_admin+0xd0/0xd0 [ 223.333713][ T7548] ? __kasan_check_write+0x18/0x20 [ 223.333742][ T7548] ? mutex_lock_killable+0x92/0x1c0 [ 223.333772][ T7548] ? __cfi_mutex_lock_killable+0x10/0x10 [ 223.333802][ T7548] ? proc_fail_nth_write+0x17e/0x210 [ 223.333830][ T7548] kvm_vcpu_ioctl+0x96f/0xee0 [ 223.333863][ T7548] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 223.333897][ T7548] ? __cfi_vfs_write+0x10/0x10 [ 223.333926][ T7548] ? __kasan_check_write+0x18/0x20 [ 223.333954][ T7548] ? mutex_unlock+0x8b/0x240 [ 223.333989][ T7548] ? __cfi_mutex_unlock+0x10/0x10 [ 223.334016][ T7548] ? __fget_files+0x2c5/0x340 [ 223.334051][ T7548] ? __fget_files+0x2c5/0x340 [ 223.334086][ T7548] ? bpf_lsm_file_ioctl+0xd/0x20 [ 223.334113][ T7548] ? security_file_ioctl+0x34/0xd0 [ 223.334148][ T7548] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 223.334180][ T7548] __se_sys_ioctl+0x132/0x1b0 [ 223.334215][ T7548] __x64_sys_ioctl+0x7f/0xa0 [ 223.334249][ T7548] x64_sys_call+0x1878/0x2ee0 [ 223.334280][ T7548] do_syscall_64+0x58/0xf0 [ 223.334302][ T7548] ? clear_bhb_loop+0x50/0xa0 [ 223.334329][ T7548] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 223.334356][ T7548] RIP: 0033:0x7fc4cd18e929 [ 223.334375][ T7548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.334397][ T7548] RSP: 002b:00007fc4cdf47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.334423][ T7548] RAX: ffffffffffffffda RBX: 00007fc4cd3b5fa0 RCX: 00007fc4cd18e929 [ 223.334442][ T7548] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 223.334458][ T7548] RBP: 00007fc4cdf47090 R08: 0000000000000000 R09: 0000000000000000 [ 223.334474][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.334489][ T7548] R13: 0000000000000000 R14: 00007fc4cd3b5fa0 R15: 00007ffc82bda3d8 [ 223.334510][ T7548] [ 223.334531][ T7548] Mem-Info: [ 223.425953][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 223.431357][ T7548] active_anon:8022 inactive_anon:15 isolated_anon:0 [ 223.431357][ T7548] active_file:11110 inactive_file:13622 isolated_file:0 [ 223.431357][ T7548] unevictable:0 dirty:110 writeback:0 [ 223.431357][ T7548] slab_reclaimable:7187 slab_unreclaimable:71396 [ 223.431357][ T7548] mapped:24949 shmem:164 pagetables:1114 [ 223.431357][ T7548] sec_pagetables:0 bounce:0 [ 223.431357][ T7548] kernel_misc_reclaimable:0 [ 223.431357][ T7548] free:1516711 free_pcp:3257 free_cma:0 [ 223.438267][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 223.440829][ T7548] Node 0 active_anon:32088kB inactive_anon:60kB active_file:44440kB inactive_file:54488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:440kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5696kB pagetables:4456kB sec_pagetables:0kB all_unreclaimable? no [ 223.446679][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.457989][ T7548] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:68kB free_cma:0kB [ 223.461331][ T45] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.465475][ T7548] lowmem_reserve[]: [ 223.470773][ T45] usb 6-1: config 1 has no interface number 1 [ 223.478176][ T7548] 0 [ 223.483874][ T45] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 223.487431][ T7548] 3921 [ 223.496884][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.501344][ T7548] 3921 [ 223.505455][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.524143][ T7548] [ 223.527851][ T45] usb 6-1: Product: syz [ 223.535188][ T7548] Normal free:3106208kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29868kB inactive_anon:60kB active_file:44440kB inactive_file:54488kB unevictable:0kB writepending:440kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:9880kB local_pcp:9440kB free_cma:0kB [ 223.536218][ T45] usb 6-1: Manufacturer: syz [ 223.551879][ T7548] lowmem_reserve[]: [ 223.558260][ T45] usb 6-1: SerialNumber: syz [ 223.560811][ T7548] 0 0 0 [ 223.997989][ T7548] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 224.015425][ T7548] Normal: 3585*4kB (UME) 2696*8kB (UME) 1853*16kB (UME) 1255*32kB (UM) 566*64kB (UM) 29*128kB (UME) 34*256kB (UME) 31*512kB (ME) 17*1024kB (UME) 10*2048kB (UME) 707*4096kB (UM) = 3103988kB [ 224.034562][ T7548] 24908 total pagecache pages [ 224.039382][ T7548] 15 pages in swap cache [ 224.043770][ T7548] Free swap = 124444kB [ 224.048227][ T7548] Total swap = 124996kB [ 224.052437][ T7548] 2097051 pages RAM [ 224.056335][ T7548] 0 pages HighMem/MovableOnly [ 224.061198][ T7548] 351517 pages reserved [ 224.065499][ T7548] 0 pages cma reserved [ 224.072127][ T7548] Memory allocations: [ 224.076417][ T7548] 0 B 0 init/main.c:1370 func:do_initcalls [ 224.094349][ T7548] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 224.104096][ T7548] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 224.112147][ T7548] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 224.120207][ T7548] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 224.128185][ T7548] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 224.136935][ T7548] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 224.144921][ T7548] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 224.152899][ T7548] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 224.160884][ T7548] 0 B 0 init/initramfs.c:101 func:find_link [ 224.304195][ T45] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 224.327229][ T45] usb 6-1: USB disconnect, device number 79 [ 224.339608][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 224.396927][ T7575] netlink: 'syz.7.2488': attribute type 4 has an invalid length. [ 224.399440][ T7577] incfs: Options parsing error. -22 [ 224.405376][ T7575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.410090][ T7577] incfs: mount failed -22 [ 224.462519][ T7578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:708 [ 224.515961][ T6981] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 224.685953][ T6981] usb 9-1: Using ep0 maxpacket: 16 [ 224.692422][ T6981] usb 9-1: config 0 has no interfaces? [ 224.699872][ T6981] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.709334][ T6981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.717646][ T6981] usb 9-1: Product: syz [ 224.722020][ T6981] usb 9-1: Manufacturer: syz [ 224.727026][ T6981] usb 9-1: SerialNumber: syz [ 224.734208][ T6981] usb 9-1: config 0 descriptor?? [ 225.133083][ T7580] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2490'. [ 225.221672][ T7587] 9pnet_fd: Insufficient options for proto=fd [ 225.238392][ T7587] 9pnet_fd: Insufficient options for proto=fd [ 225.276835][ T6975] usb 9-1: USB disconnect, device number 27 [ 225.546005][ T6979] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 225.697483][ T6979] usb 8-1: unable to get BOS descriptor or descriptor too short [ 225.705509][ T6979] usb 8-1: not running at top speed; connect to a high speed hub [ 225.714047][ T6979] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.725590][ T6979] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 225.734721][ T6979] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 225.742966][ T6979] usb 8-1: Product: syz [ 225.747168][ T6979] usb 8-1: Manufacturer: syz [ 225.751960][ T6979] usb 8-1: SerialNumber: syz [ 225.757287][ T6979] usb 8-1: config 0 descriptor?? [ 225.966666][ T6979] usb 8-1: USB disconnect, device number 46 [ 226.166016][ T6975] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 226.307188][ T6975] usb 9-1: device descriptor read/64, error -71 [ 226.546007][ T6975] usb 9-1: device descriptor read/64, error -71 [ 226.657273][ T7627] netlink: 'syz.5.2508': attribute type 46 has an invalid length. [ 226.665221][ T7627] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2508'. [ 226.677559][ T7627] can0: slcan on ptm1. [ 226.786037][ T6975] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 226.846030][ T6973] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 226.916012][ T6981] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 226.916012][ T6975] usb 9-1: device descriptor read/64, error -71 [ 227.007132][ T6973] usb 8-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 227.017351][ T6973] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.030303][ T6973] usb 8-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 227.039445][ T6973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.048795][ T6973] usb 8-1: config 0 descriptor?? [ 227.054875][ T6973] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 227.077292][ T6981] usb 6-1: config 0 has no interfaces? [ 227.084326][ T6981] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 227.093496][ T6981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.101542][ T6981] usb 6-1: Product: syz [ 227.105777][ T6981] usb 6-1: Manufacturer: syz [ 227.110422][ T6981] usb 6-1: SerialNumber: syz [ 227.115657][ T6981] usb 6-1: config 0 descriptor?? [ 227.185984][ T6975] usb 9-1: device descriptor read/64, error -71 [ 227.296060][ T6975] usb usb9-port1: attempt power cycle [ 227.322030][ T6981] usb 6-1: USB disconnect, device number 80 [ 227.346772][ T7627] can0 (unregistered): slcan off ptm1. [ 227.646006][ T6975] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 227.667015][ T6975] usb 9-1: device descriptor read/8, error -71 [ 227.807286][ T6975] usb 9-1: device descriptor read/8, error -71 [ 227.959032][ T332] tipc: Subscription rejected, illegal request [ 227.988571][ T7696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.046023][ T6975] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 228.067017][ T6975] usb 9-1: device descriptor read/8, error -71 [ 228.196982][ T6975] usb 9-1: device descriptor read/8, error -71 [ 228.306071][ T6975] usb usb9-port1: unable to enumerate USB device [ 228.875983][ T6973] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 229.027066][ T6973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.038290][ T6973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.048220][ T6973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.061322][ T6973] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.072746][ T7708] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 229.074791][ T6973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.095883][ T7710] netlink: 'syz.8.2520': attribute type 58 has an invalid length. [ 229.096363][ T6973] usb 6-1: config 0 descriptor?? [ 229.513844][ T6973] plantronics 0003:047F:FFFF.0024: unknown main item tag 0xd [ 229.522576][ T6973] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 229.531653][ T6973] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 229.616092][ T6981] usb 8-1: USB disconnect, device number 47 [ 229.664089][ T7719] 9p: Unknown uid 00000000004294967295 [ 229.709240][ T7719] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 229.766344][ T7704] FAULT_INJECTION: forcing a failure. [ 229.766344][ T7704] name failslab, interval 1, probability 0, space 0, times 0 [ 229.779348][ T7704] CPU: 0 UID: 0 PID: 7704 Comm: syz.5.2517 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 229.779389][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.779405][ T7704] Call Trace: [ 229.779412][ T7704] [ 229.779421][ T7704] __dump_stack+0x21/0x30 [ 229.779455][ T7704] dump_stack_lvl+0x10c/0x190 [ 229.779483][ T7704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.779509][ T7704] dump_stack+0x19/0x20 [ 229.779528][ T7704] should_fail_ex+0x3d9/0x530 [ 229.779549][ T7704] should_failslab+0xac/0x100 [ 229.779574][ T7704] __kmalloc_cache_noprof+0x41/0x3c0 [ 229.779595][ T7704] ? proc_fail_nth_write+0x17e/0x210 [ 229.779613][ T7704] ? hiddev_ioctl_usage+0x87/0x1b50 [ 229.779636][ T7704] hiddev_ioctl_usage+0x87/0x1b50 [ 229.779657][ T7704] ? mutex_lock+0x92/0x1c0 [ 229.779676][ T7704] ? __cfi_mutex_lock+0x10/0x10 [ 229.779696][ T7704] ? usbhid_init_reports+0x151/0x2d0 [ 229.779714][ T7704] hiddev_ioctl+0x892/0x15f0 [ 229.779734][ T7704] ? __cfi_vfs_write+0x10/0x10 [ 229.779755][ T7704] ? __cfi_hiddev_ioctl+0x10/0x10 [ 229.779775][ T7704] ? mutex_unlock+0x8b/0x240 [ 229.779794][ T7704] ? __cfi_mutex_unlock+0x10/0x10 [ 229.779814][ T7704] ? __fget_files+0x2c5/0x340 [ 229.779839][ T7704] ? __fget_files+0x2c5/0x340 [ 229.779863][ T7704] ? bpf_lsm_file_ioctl+0xd/0x20 [ 229.779882][ T7704] ? security_file_ioctl+0x34/0xd0 [ 229.779907][ T7704] ? __cfi_hiddev_ioctl+0x10/0x10 [ 229.779927][ T7704] __se_sys_ioctl+0x132/0x1b0 [ 229.779952][ T7704] __x64_sys_ioctl+0x7f/0xa0 [ 229.779976][ T7704] x64_sys_call+0x1878/0x2ee0 [ 229.779998][ T7704] do_syscall_64+0x58/0xf0 [ 229.780013][ T7704] ? clear_bhb_loop+0x50/0xa0 [ 229.780032][ T7704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.780051][ T7704] RIP: 0033:0x7efe4458e929 [ 229.780066][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.780080][ T7704] RSP: 002b:00007efe45445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.780107][ T7704] RAX: ffffffffffffffda RBX: 00007efe447b5fa0 RCX: 00007efe4458e929 [ 229.780121][ T7704] RDX: 0000200000000000 RSI: 00000000d01c4813 RDI: 0000000000000004 [ 229.780133][ T7704] RBP: 00007efe45445090 R08: 0000000000000000 R09: 0000000000000000 [ 229.780145][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.780155][ T7704] R13: 0000000000000000 R14: 00007efe447b5fa0 R15: 00007ffcb3c6c108 [ 229.780169][ T7704] [ 229.780878][ T6973] usb 6-1: USB disconnect, device number 81 [ 230.295957][ T6975] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 230.374104][ T7742] overlayfs: failed to clone upperpath [ 230.398419][ T7748] SELinux: policydb magic number 0x366d6970 does not match expected magic number 0xf97cff8c [ 230.408748][ T7748] SELinux: failed to load policy [ 230.437161][ T7758] netlink: 'syz.5.2535': attribute type 1 has an invalid length. [ 230.445971][ T6975] usb 9-1: Using ep0 maxpacket: 16 [ 230.452650][ T6975] usb 9-1: config 1 has an invalid interface number: 4 but max is 2 [ 230.460906][ T6975] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.471555][ T6975] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.480774][ T36] audit: type=1400 audit(2000000450.530:15860): avc: denied { create } for pid=7757 comm="syz.5.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 230.483513][ T6975] usb 9-1: config 1 has no interface number 1 [ 230.506753][ T6975] usb 9-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 230.517941][ T6975] usb 9-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 230.537434][ T6975] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 230.550409][ T6975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.559018][ T6975] usb 9-1: Product: syz [ 230.563343][ T6975] usb 9-1: Manufacturer: syz [ 230.568030][ T6975] usb 9-1: SerialNumber: syz [ 230.779298][ T6975] usb 9-1: 0:2 : does not exist [ 230.787907][ T6975] usb 9-1: USB disconnect, device number 32 [ 230.795458][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 230.815971][ T6979] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 230.877417][ T7776] kvm: pic: non byte write [ 230.967100][ T6979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.978090][ T6979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.987882][ T6979] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.001130][ T6979] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.010258][ T6979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.022436][ T6979] usb 8-1: config 0 descriptor?? [ 231.255975][ T6975] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 231.407419][ T6975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.418806][ T36] audit: type=1400 audit(2000000451.470:15861): avc: denied { attach_queue } for pid=7793 comm="syz.8.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 231.418804][ T6975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.418843][ T6975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.440216][ T7794] binder: Bad value for 'max' [ 231.449086][ T6975] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.463221][ T6979] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 231.466609][ T6975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.481941][ T6979] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 231.487575][ T6975] usb 6-1: config 0 descriptor?? [ 231.492975][ T6979] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 231.726284][ T7763] FAULT_INJECTION: forcing a failure. [ 231.726284][ T7763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.739502][ T7763] CPU: 0 UID: 0 PID: 7763 Comm: syz.7.2537 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 231.739543][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.739560][ T7763] Call Trace: [ 231.739566][ T7763] [ 231.739574][ T7763] __dump_stack+0x21/0x30 [ 231.739598][ T7763] dump_stack_lvl+0x10c/0x190 [ 231.739621][ T7763] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.739643][ T7763] dump_stack+0x19/0x20 [ 231.739661][ T7763] should_fail_ex+0x3d9/0x530 [ 231.739682][ T7763] should_fail+0xf/0x20 [ 231.739700][ T7763] should_fail_usercopy+0x1e/0x30 [ 231.739720][ T7763] _copy_from_user+0x22/0xb0 [ 231.739745][ T7763] hiddev_ioctl_usage+0xd1/0x1b50 [ 231.739767][ T7763] ? mutex_lock+0x92/0x1c0 [ 231.739786][ T7763] ? __cfi_mutex_lock+0x10/0x10 [ 231.739806][ T7763] ? usbhid_init_reports+0x151/0x2d0 [ 231.739833][ T7763] hiddev_ioctl+0x892/0x15f0 [ 231.739853][ T7763] ? __cfi_vfs_write+0x10/0x10 [ 231.739875][ T7763] ? __cfi_hiddev_ioctl+0x10/0x10 [ 231.739894][ T7763] ? mutex_unlock+0x8b/0x240 [ 231.739913][ T7763] ? __cfi_mutex_unlock+0x10/0x10 [ 231.739932][ T7763] ? __fget_files+0x2c5/0x340 [ 231.739957][ T7763] ? __fget_files+0x2c5/0x340 [ 231.739981][ T7763] ? bpf_lsm_file_ioctl+0xd/0x20 [ 231.740000][ T7763] ? security_file_ioctl+0x34/0xd0 [ 231.740025][ T7763] ? __cfi_hiddev_ioctl+0x10/0x10 [ 231.740044][ T7763] __se_sys_ioctl+0x132/0x1b0 [ 231.740070][ T7763] __x64_sys_ioctl+0x7f/0xa0 [ 231.740093][ T7763] x64_sys_call+0x1878/0x2ee0 [ 231.740115][ T7763] do_syscall_64+0x58/0xf0 [ 231.740130][ T7763] ? clear_bhb_loop+0x50/0xa0 [ 231.740149][ T7763] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.740168][ T7763] RIP: 0033:0x7f64e258e929 [ 231.740182][ T7763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.740197][ T7763] RSP: 002b:00007f64e3492038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.740217][ T7763] RAX: ffffffffffffffda RBX: 00007f64e27b5fa0 RCX: 00007f64e258e929 [ 231.740230][ T7763] RDX: 0000200000000000 RSI: 00000000d01c4813 RDI: 0000000000000004 [ 231.740242][ T7763] RBP: 00007f64e3492090 R08: 0000000000000000 R09: 0000000000000000 [ 231.740254][ T7763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.740265][ T7763] R13: 0000000000000000 R14: 00007f64e27b5fa0 R15: 00007ffc0cfcad68 [ 231.740279][ T7763] [ 231.741229][ T6979] usb 8-1: USB disconnect, device number 48 [ 231.931786][ T6975] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 231.996144][ T6975] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 232.005140][ T6975] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 232.132561][ T7802] binder: Bad value for 'stats' [ 232.137879][ T7802] binder: Bad value for 'stats' [ 232.186601][ T6975] usb 6-1: USB disconnect, device number 82 [ 232.299269][ T36] audit: type=1400 audit(2000000453.355:15862): avc: denied { setcheckreqprot } for pid=7817 comm="syz.8.2557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 232.343395][ T7820] __vm_enough_memory: pid: 7820, comm: syz.8.2558, bytes: 4398314950656 not enough memory for the allocation [ 232.356259][ T7820] __vm_enough_memory: pid: 7820, comm: syz.8.2558, bytes: 4398314950656 not enough memory for the allocation [ 232.387901][ T36] audit: type=1326 audit(2000000453.445:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.8.2559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4cd18e929 code=0x0 [ 232.495961][ T6973] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 232.645968][ T6973] usb 8-1: Using ep0 maxpacket: 16 [ 232.652150][ T6973] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 232.660197][ T6973] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.670319][ T6973] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.679316][ T6973] usb 8-1: config 1 has no interface number 1 [ 232.685423][ T6973] usb 8-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 232.696271][ T6973] usb 8-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 232.714115][ T6973] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 232.723297][ T6973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.731398][ T6973] usb 8-1: Product: syz [ 232.735697][ T6973] usb 8-1: Manufacturer: syz [ 232.740386][ T6973] usb 8-1: SerialNumber: syz [ 232.905929][ T36] audit: type=1326 audit(2000000453.955:15864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.2561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4458e929 code=0x0 [ 232.951794][ T6973] usb 8-1: 0:2 : does not exist [ 232.959919][ T6973] usb 8-1: USB disconnect, device number 49 [ 233.296101][ T6979] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 233.445963][ T6979] usb 6-1: Using ep0 maxpacket: 32 [ 233.452263][ T6979] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 233.460664][ T6979] usb 6-1: config 0 has no interface number 0 [ 233.467015][ T6979] usb 6-1: config 0 interface 184 has no altsetting 0 [ 233.475293][ T6979] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 233.484416][ T6979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.492468][ T6979] usb 6-1: Product: syz [ 233.496669][ T6979] usb 6-1: Manufacturer: syz [ 233.501283][ T6979] usb 6-1: SerialNumber: syz [ 233.506574][ T6979] usb 6-1: config 0 descriptor?? [ 233.512355][ T6979] smsc75xx v1.0.0 [ 233.705999][ T6973] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 233.714452][ T36] audit: type=1400 audit(2000000454.765:15865): avc: denied { ioctl } for pid=7832 comm="syz.5.2561" path="socket:[52933]" dev="sockfs" ino=52933 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.855958][ T6973] usb 8-1: Using ep0 maxpacket: 8 [ 233.862588][ T6973] usb 8-1: config 1 interface 0 altsetting 186 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 233.873954][ T6973] usb 8-1: config 1 interface 0 altsetting 186 bulk endpoint 0x82 has invalid maxpacket 64 [ 233.884922][ T6973] usb 8-1: config 1 interface 0 altsetting 186 endpoint 0x3 has invalid maxpacket 1536, setting to 1024 [ 233.896181][ T6973] usb 8-1: config 1 interface 0 altsetting 186 bulk endpoint 0x3 has invalid maxpacket 1024 [ 233.906329][ T6973] usb 8-1: config 1 interface 0 has no altsetting 0 [ 233.914449][ T6973] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.923642][ T6973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.932081][ T6973] usb 8-1: Product: ᐉ [ 233.936362][ T6973] usb 8-1: Manufacturer: 돑劇꘷凝좷Ǎ瘴蚼✆感颪◼투 [ 233.944056][ T6973] usb 8-1: SerialNumber: ᰉ [ 233.949903][ T7850] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 233.957385][ T7850] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 234.116387][ T6979] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 234.127265][ T6979] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 234.368355][ T6973] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 234.378891][ T6973] usb 8-1: USB disconnect, device number 50 [ 234.896839][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2570'. [ 234.908680][ T7854] tipc: Enabled bearer , priority 0 [ 234.916879][ T7854] tipc: Disabling bearer [ 235.125973][ T9] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 235.196027][ T6973] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 235.277176][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.288246][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.298048][ T9] usb 9-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 235.307128][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.315988][ T9] usb 9-1: config 0 descriptor?? [ 235.347372][ T6973] usb 8-1: not running at top speed; connect to a high speed hub [ 235.355940][ T6973] usb 8-1: config 8 has an invalid interface number: 190 but max is 1 [ 235.364152][ T6973] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 235.372907][ T6973] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 235.383044][ T6973] usb 8-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 235.391956][ T6973] usb 8-1: config 8 has no interface number 0 [ 235.398105][ T6973] usb 8-1: config 8 interface 190 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.411191][ T6973] usb 8-1: config 8 interface 190 has no altsetting 0 [ 235.419576][ T6973] usb 8-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=4d.c4 [ 235.428697][ T6973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.436732][ T6973] usb 8-1: Product: з [ 235.440843][ T6973] usb 8-1: Manufacturer: 㾗ꏂ硿욮燌洀됰㪄졝串ꢞᖕ녍ꂅ꬘셓ꉍ૯鹎佫⎕䃠닊贎哳嫥削群䣾盵㧟Ⰱ竒版淅욨ရ㨵綘⑐ꒁ秊䮗⑺핏퍙躵㏲吻Dꪭᢌ詘뮶啸᫰⟏Ⴠ횮ⓒ먴㥄ᡦ覆凒ᑵᆪ钐紝늩畋혗꣬᜽蘜 [ 235.466883][ T6973] usb 8-1: SerialNumber: В [ 235.674800][ T6973] usbhid 8-1:8.190: couldn't find an input interrupt endpoint [ 235.723023][ T9] ntrig 0003:1B96:000C.0027: unknown main item tag 0x0 [ 235.731014][ T9] ntrig 0003:1B96:000C.0027: hidraw0: USB HID v0.00 Device [HID 1b96:000c] on usb-dummy_hcd.8-1/input0 [ 235.882923][ T6973] usb 8-1: USB disconnect, device number 51 [ 235.922569][ T9] ntrig 0003:1B96:000C.0027: Firmware version: 0.0.0.0.0 (0000 0000) [ 236.645954][ T45] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 236.796992][ T45] usb 8-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.808214][ T45] usb 8-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.818188][ T45] usb 8-1: config 0 interface 0 has no altsetting 0 [ 236.824832][ T45] usb 8-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 236.833910][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.842659][ T45] usb 8-1: config 0 descriptor?? [ 237.057864][ T45] usbhid 8-1:0.0: can't add hid device: -71 [ 237.064700][ T45] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 237.070993][ T36] audit: type=1400 audit(2000000458.115:15866): avc: denied { map } for pid=7872 comm="syz.7.2575" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 237.095755][ T45] usb 8-1: USB disconnect, device number 52 [ 237.901932][ T9] usb 9-1: USB disconnect, device number 33 [ 237.916621][ T7887] input: syz1 as /devices/virtual/input/input54 [ 239.596368][ T6979] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -110 [ 239.607480][ T6979] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -110 [ 239.617204][ T6979] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 239.626763][ T6979] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -110 [ 239.701590][ T9] usb 6-1: USB disconnect, device number 83 [ 239.888658][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'. [ 239.900235][ T7899] tipc: Enabled bearer , priority 0 [ 239.911225][ T7901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.917112][ T7899] tipc: Disabling bearer [ 240.183691][ T7934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.185986][ T6979] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 240.285986][ T9] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 240.314885][ T36] audit: type=1400 audit(2000000461.365:15867): avc: denied { listen } for pid=7939 comm="syz.0.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 240.357300][ T6979] usb 6-1: not running at top speed; connect to a high speed hub [ 240.366274][ T6979] usb 6-1: config 8 has an invalid interface number: 190 but max is 1 [ 240.374571][ T6979] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 240.384636][ T6979] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 240.394897][ T6979] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 240.403884][ T6979] usb 6-1: config 8 has no interface number 0 [ 240.410088][ T6979] usb 6-1: config 8 interface 190 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.423252][ T6979] usb 6-1: config 8 interface 190 has no altsetting 0 [ 240.431909][ T6979] usb 6-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=4d.c4 [ 240.441131][ T6979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.449191][ T6979] usb 6-1: Product: з [ 240.453341][ T6979] usb 6-1: Manufacturer: 㾗ꏂ硿욮燌洀됰㪄졝串ꢞᖕ녍ꂅ꬘셓ꉍ૯鹎佫⎕䃠닊贎哳嫥削群䣾盵㧟Ⰱ竒版淅욨ရ㨵綘⑐ꒁ秊䮗⑺핏퍙躵㏲吻Dꪭᢌ詘뮶啸᫰⟏Ⴠ횮ⓒ먴㥄ᡦ覆凒ᑵᆪ钐紝늩畋혗꣬᜽蘜 [ 240.455952][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 240.485966][ T6979] usb 6-1: SerialNumber: В [ 240.491729][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 240.500483][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 240.509277][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 240.518407][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.528152][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.537871][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.551025][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 240.560137][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.569159][ T9] usb 9-1: config 0 descriptor?? [ 240.693943][ T6979] usbhid 6-1:8.190: couldn't find an input interrupt endpoint [ 240.775827][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.901354][ T6979] usb 6-1: USB disconnect, device number 84 [ 240.979062][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.987659][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.996030][ C0] usblp0: nonzero read bulk status received: -71 [ 241.002543][ T6973] usb 9-1: USB disconnect, device number 34 [ 241.160891][ T7965] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 241.176938][ T7967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 241.203749][ T7915] usblp0: removed [ 242.556130][ T350] Bluetooth: hci0: command 0x1003 tx timeout [ 242.556171][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 259.323590][ T7984] can0: slcan on ptm0. [ 259.508965][ T8006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.518118][ T8010] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2618'. [ 259.527400][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2618'. [ 259.536399][ T1680] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 259.536642][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2618'. [ 259.554591][ T8010] exFAT-fs (rnullb0): invalid boot record signature [ 259.561216][ T8010] exFAT-fs (rnullb0): failed to read boot sector [ 259.567624][ T8010] exFAT-fs (rnullb0): failed to recognize exfat type [ 259.574740][ T8010] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2618'. [ 259.660656][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'. [ 259.686364][ T8014] sit0: entered promiscuous mode [ 259.693323][ T8014] netlink: 'syz.5.2619': attribute type 1 has an invalid length. [ 259.695979][ T1680] usb 8-1: Using ep0 maxpacket: 16 [ 259.701883][ T8014] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2619'. [ 259.718550][ T1680] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 259.729703][ T1680] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.740019][ T1680] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 259.750949][ T1680] usb 8-1: config 1 has no interface number 1 [ 259.757218][ T1680] usb 8-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 259.768881][ T1680] usb 8-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 259.788534][ T1680] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 259.797870][ T1680] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.806178][ T1680] usb 8-1: Product: syz [ 259.810564][ T1680] usb 8-1: Manufacturer: syz [ 259.815600][ T1680] usb 8-1: SerialNumber: syz [ 260.028949][ T1680] usb 8-1: 0:2 : does not exist [ 260.037554][ T1680] usb 8-1: USB disconnect, device number 53 [ 260.047883][ T7982] udevd[7982]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.065975][ T6973] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 260.215975][ T6973] usb 9-1: Using ep0 maxpacket: 16 [ 260.222618][ T6973] usb 9-1: unable to get BOS descriptor or descriptor too short [ 260.231045][ T6973] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.241179][ T6973] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.250150][ T6973] usb 9-1: config 1 has no interface number 1 [ 260.256278][ T6973] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 260.268604][ T6973] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.277713][ T6973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.285710][ T6973] usb 9-1: Product: syz [ 260.289916][ T6973] usb 9-1: Manufacturer: syz [ 260.294532][ T6973] usb 9-1: SerialNumber: syz [ 260.706996][ T8046] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 260.707026][ T8046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 260.715016][ T8046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:835 [ 260.775946][ T45] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 260.935929][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 260.942221][ T45] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 260.950281][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.960404][ T45] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.969430][ T45] usb 6-1: config 1 has no interface number 1 [ 260.975530][ T45] usb 6-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 260.986332][ T45] usb 6-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 261.000818][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 261.009919][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.017970][ T45] usb 6-1: Product: syz [ 261.022163][ T45] usb 6-1: Manufacturer: syz [ 261.027028][ T6973] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 261.027338][ T45] usb 6-1: SerialNumber: syz [ 261.048328][ T6973] usb 9-1: USB disconnect, device number 35 [ 261.257964][ T45] usb 6-1: 0:2 : does not exist [ 261.265606][ T45] usb 6-1: USB disconnect, device number 85 [ 261.276002][ T7982] udevd[7982]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.445929][ T6973] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 261.516537][ T8056] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 261.524508][ T8056] overlay: filesystem on ./bus not supported as upperdir [ 261.566106][ T8061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.578233][ T8063] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.596089][ T6973] usb 9-1: Using ep0 maxpacket: 32 [ 261.602503][ T6973] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.615078][ T6973] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.624587][ T6973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.632804][ T6973] usb 9-1: Product: syz [ 261.637231][ T6973] usb 9-1: Manufacturer: syz [ 261.641900][ T6973] usb 9-1: SerialNumber: syz [ 261.692154][ T4017] syzkaller0: tun_net_xmit 76 [ 261.697028][ T4017] syzkaller0: tun_net_xmit 48 [ 262.015961][ T1680] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 262.045936][ T9] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 262.145945][ T1680] usb 6-1: device descriptor read/64, error -71 [ 262.195926][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 262.202423][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 262.210893][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.221054][ T9] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 262.230065][ T9] usb 8-1: config 1 has no interface number 1 [ 262.236210][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 262.248497][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.257668][ T6973] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 262.263705][ T6973] cdc_ncm 9-1:1.0: bind() failure [ 262.268816][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.276885][ T9] usb 8-1: Product: syz [ 262.281086][ T9] usb 8-1: Manufacturer: syz [ 262.286809][ T6973] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 262.293613][ T6973] cdc_ncm 9-1:1.1: bind() failure [ 262.298805][ T9] usb 8-1: SerialNumber: syz [ 262.367528][ T7983] can0 (unregistered): slcan off ptm0. [ 262.425975][ T1680] usb 6-1: device descriptor read/64, error -71 [ 262.538864][ T8089] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 262.615864][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.625070][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.664876][ T8115] rust_binder: Failed copying remainder into alloc: EFAULT [ 262.664903][ T8115] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 262.670917][ T1680] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 262.672531][ T8115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.688097][ T8115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:215 [ 262.783157][ T4017] tipc: Subscription rejected, illegal request [ 262.806106][ T1680] usb 6-1: device descriptor read/64, error -71 [ 262.991453][ T6979] usb 9-1: USB disconnect, device number 36 [ 263.007182][ T8133] mmap: syz.8.2649 (8133): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 263.042933][ T9] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 263.054373][ T1680] usb 6-1: device descriptor read/64, error -71 [ 263.063926][ T8138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.068633][ T9] usb 8-1: USB disconnect, device number 54 [ 263.077390][ T8138] netlink: 'syz.7.2652': attribute type 29 has an invalid length. [ 263.092324][ T8138] netlink: 'syz.7.2652': attribute type 4 has an invalid length. [ 263.102137][ T8138] netlink: 'syz.7.2652': attribute type 4 has an invalid length. [ 263.105519][ T8036] udevd[8036]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.111575][ T8138] rust_binder: Error in use_page_slow: ESRCH [ 263.125789][ T8138] rust_binder: use_range failure ESRCH [ 263.134828][ T8138] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 263.140540][ T8138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 263.152262][ T8138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:855 [ 263.152750][ T8141] fuseblk: Bad value for 'user_id' [ 263.176076][ T8141] fuseblk: Bad value for 'user_id' [ 263.176126][ T1680] usb usb6-port1: attempt power cycle [ 263.535941][ T1680] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 263.557050][ T1680] usb 6-1: device descriptor read/8, error -71 [ 263.686939][ T1680] usb 6-1: device descriptor read/8, error -71 [ 263.926002][ T1680] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 263.947124][ T1680] usb 6-1: device descriptor read/8, error -71 [ 264.087694][ T1680] usb 6-1: device descriptor read/8, error -71 [ 264.185953][ T6979] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 264.196053][ T1680] usb usb6-port1: unable to enumerate USB device [ 264.215607][ T8166] rust_binder: Error while translating object. [ 264.215639][ T8166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.221864][ T8166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 264.345935][ T6979] usb 8-1: Using ep0 maxpacket: 16 [ 264.361828][ T6979] usb 8-1: unable to get BOS descriptor or descriptor too short [ 264.370959][ T6979] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.387920][ T6979] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.397181][ T6979] usb 8-1: config 1 has no interface number 1 [ 264.403296][ T6979] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 264.416061][ T6979] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.425237][ T6979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.433557][ T6979] usb 8-1: Product: syz [ 264.438044][ T6979] usb 8-1: Manufacturer: syz [ 264.442710][ T6979] usb 8-1: SerialNumber: syz [ 264.485370][ T8171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 264.485413][ T8171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:525 [ 264.494936][ T8171] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 264.504104][ T8171] rust_binder: Read failure Err(EFAULT) in pid:525 [ 265.175962][ T6979] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 265.195813][ T8204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.202268][ T6979] usb 8-1: USB disconnect, device number 55 [ 265.225837][ T8051] udevd[8051]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 265.805993][ T6979] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 265.885940][ T1680] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 265.938717][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 265.957152][ T6979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.968210][ T6979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.978136][ T6979] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.993228][ T6979] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.004207][ T6979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.016902][ T6979] usb 8-1: config 0 descriptor?? [ 266.047493][ T1680] usb 9-1: unable to get BOS descriptor or descriptor too short [ 266.055660][ T1680] usb 9-1: not running at top speed; connect to a high speed hub [ 266.064567][ T1680] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.074829][ T1680] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 266.093930][ T1680] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.103137][ T1680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.113378][ T1680] usb 9-1: Product: syz [ 266.117632][ T1680] usb 9-1: Manufacturer: syz [ 266.122256][ T1680] usb 9-1: SerialNumber: syz [ 266.145990][ T6973] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 266.291755][ T8252] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 266.296017][ T6973] usb 6-1: Using ep0 maxpacket: 16 [ 266.312307][ T6973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 266.326270][ T6973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.345928][ T6973] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.355100][ T6973] usb 6-1: config 1 has no interface number 1 [ 266.364340][ T6973] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 266.387419][ T6973] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.398131][ T1680] usb 9-1: unit 2 not found! [ 266.406304][ T1680] usb 9-1: unknown interface protocol 0x1, assuming v1 [ 266.413436][ T6973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.421891][ T1680] usb 9-1: cannot find UAC_HEADER [ 266.427093][ T6973] usb 6-1: Product: syz [ 266.431310][ T6973] usb 6-1: Manufacturer: syz [ 266.437968][ T1680] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 266.447589][ T6973] usb 6-1: SerialNumber: syz [ 266.448282][ T6979] plantronics 0003:047F:FFFF.0028: unknown main item tag 0xd [ 266.455360][ T1680] usb 9-1: USB disconnect, device number 37 [ 266.480876][ T6979] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 266.504239][ T6979] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 266.600758][ T8265] FAULT_INJECTION: forcing a failure. [ 266.600758][ T8265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.613896][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.0.2696 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 266.613924][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.613936][ T8265] Call Trace: [ 266.613944][ T8265] [ 266.613951][ T8265] __dump_stack+0x21/0x30 [ 266.613977][ T8265] dump_stack_lvl+0x10c/0x190 [ 266.613997][ T8265] ? __cfi_dump_stack_lvl+0x10/0x10 [ 266.614023][ T8265] dump_stack+0x19/0x20 [ 266.614042][ T8265] should_fail_ex+0x3d9/0x530 [ 266.614062][ T8265] should_fail+0xf/0x20 [ 266.614080][ T8265] should_fail_usercopy+0x1e/0x30 [ 266.614100][ T8265] _copy_to_user+0x24/0xa0 [ 266.614125][ T8265] simple_read_from_buffer+0xed/0x160 [ 266.614142][ T8265] proc_fail_nth_read+0x19e/0x210 [ 266.614160][ T8265] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 266.614178][ T8265] ? bpf_lsm_file_permission+0xd/0x20 [ 266.614197][ T8265] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 266.614214][ T8265] vfs_read+0x278/0xb60 [ 266.614234][ T8265] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 266.614257][ T8265] ? __cfi_vfs_read+0x10/0x10 [ 266.614277][ T8265] ? __kasan_check_write+0x18/0x20 [ 266.614298][ T8265] ? mutex_lock+0x92/0x1c0 [ 266.614317][ T8265] ? __cfi_mutex_lock+0x10/0x10 [ 266.614336][ T8265] ? __fget_files+0x2c5/0x340 [ 266.614362][ T8265] ksys_read+0x141/0x250 [ 266.614383][ T8265] ? __cfi_ksys_read+0x10/0x10 [ 266.614404][ T8265] ? __kasan_check_read+0x15/0x20 [ 266.614425][ T8265] __x64_sys_read+0x7f/0x90 [ 266.614446][ T8265] x64_sys_call+0x2638/0x2ee0 [ 266.614468][ T8265] do_syscall_64+0x58/0xf0 [ 266.614483][ T8265] ? clear_bhb_loop+0x50/0xa0 [ 266.614502][ T8265] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.614521][ T8265] RIP: 0033:0x7fe53858d33c [ 266.614536][ T8265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.614550][ T8265] RSP: 002b:00007fe5394a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.614569][ T8265] RAX: ffffffffffffffda RBX: 00007fe5387b5fa0 RCX: 00007fe53858d33c [ 266.614582][ T8265] RDX: 000000000000000f RSI: 00007fe5394a00a0 RDI: 0000000000000006 [ 266.614593][ T8265] RBP: 00007fe5394a0090 R08: 0000000000000000 R09: 0000000000000000 [ 266.614605][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.614616][ T8265] R13: 0000000000000000 R14: 00007fe5387b5fa0 R15: 00007fff15305918 [ 266.614630][ T8265] [ 266.686785][ T305] usb 8-1: USB disconnect, device number 56 [ 267.197791][ T6973] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 267.214771][ T6973] usb 6-1: USB disconnect, device number 90 [ 267.236614][ T8036] udevd[8036]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 267.329366][ T8290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.275952][ T6981] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 268.427073][ T6981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.438032][ T6981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.447852][ T6981] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 268.456936][ T6981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.465618][ T6981] usb 9-1: config 0 descriptor?? [ 268.872780][ T6981] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 268.879650][ T6981] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 268.887256][ T6981] isku 0003:1E7D:319C.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 269.273828][ T6981] usb 9-1: USB disconnect, device number 38 [ 270.552102][ T36] audit: type=1326 audit(2000000491.605:15868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.7.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f64e258e929 code=0x7fc00000 [ 270.628907][ T8381] __vm_enough_memory: pid: 8381, comm: syz.7.2739, bytes: 70373039144960 not enough memory for the allocation [ 270.657906][ T8384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.733741][ T8392] rust_binder: Write failure EFAULT in pid:580 [ 270.861607][ T8401] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 270.875508][ T8401] rust_binder: Write failure EINVAL in pid:585 [ 271.044801][ T8414] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.059072][ T8414] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 271.068031][ T8414] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.076165][ T8414] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 271.105129][ T8424] tmpfs: Bad value for 'uid' [ 271.110569][ T8424] tmpfs: Bad value for 'uid' [ 271.136744][ T36] audit: type=1326 audit(2000000492.195:15869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.5.2757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4458e929 code=0x0 [ 271.465950][ T6973] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 271.617757][ T6973] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 271.627737][ T6973] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 271.637497][ T6973] usb 8-1: config 1 interface 0 has no altsetting 0 [ 271.645538][ T6973] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 271.654667][ T6973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.663955][ T6973] usb 8-1: Product: Ѕ [ 271.668053][ T6973] usb 8-1: Manufacturer: Ы [ 271.673590][ T8437] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 271.680881][ T8437] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 271.745271][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2759'. [ 271.890322][ T8442] SELinux: failed to load policy [ 271.891985][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.895577][ T8443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8443 comm=syz.7.2758 [ 271.913533][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.916479][ T8442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8442 comm=syz.7.2758 [ 271.953505][ T6973] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8 [ 271.968904][ T6973] usb 8-1: USB disconnect, device number 57 [ 271.990648][ T6973] usblp0: removed [ 272.175482][ T8461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.185948][ T305] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 272.335919][ T305] usb 9-1: Using ep0 maxpacket: 16 [ 272.342356][ T305] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 272.355940][ T305] usb 9-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.377138][ T305] usb 9-1: config 1 interface 0 has no altsetting 0 [ 272.384579][ T305] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.395024][ T305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.411354][ T305] usb 9-1: SerialNumber: syz [ 272.417193][ T8445] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 272.629840][ T8445] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 272.645797][ T8474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.647967][ T8474] rust_binder: Error in use_page_slow: ESRCH [ 272.654543][ T8474] rust_binder: use_range failure ESRCH [ 272.660774][ T8474] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 272.666578][ T8474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 272.674641][ T8474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:942 [ 272.846226][ T305] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 273.019696][ T8490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.064570][ T6973] usb 9-1: USB disconnect, device number 39 [ 273.110135][ T8493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.165300][ T8496] /dev/rnullb0: Can't open blockdev [ 273.191655][ T8498] kvm_intel: kvm [8497]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 273.206225][ T8498] tipc: Enabled bearer , priority 0 [ 273.214333][ T8498] tipc: Disabling bearer [ 273.455930][ T305] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 273.527950][ T8515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.605945][ T305] usb 6-1: Using ep0 maxpacket: 32 [ 273.619382][ T305] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.627915][ T305] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.644166][ T305] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.654001][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.665119][ T305] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.682557][ T305] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.704591][ T305] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 273.729191][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.741241][ T305] usb 6-1: config 0 descriptor?? [ 273.816711][ T36] audit: type=1400 audit(2000000494.875:15870): avc: denied { setattr } for pid=8540 comm="syz.8.2797" name="PINGv6" dev="sockfs" ino=60017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 273.864899][ T8544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.916017][ T8547] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2799'. [ 273.941438][ T36] audit: type=1400 audit(2000000494.995:15871): avc: denied { create } for pid=8548 comm="syz.8.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 273.957511][ T305] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 91 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 274.046180][ T6981] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 274.175934][ T45] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 274.184236][ C0] usblp0: nonzero read bulk status received: -71 [ 274.190809][ T6973] usb 6-1: USB disconnect, device number 91 [ 274.195936][ T6981] usb 8-1: Using ep0 maxpacket: 16 [ 274.203840][ T6981] usb 8-1: unable to get BOS descriptor or descriptor too short [ 274.212441][ T6981] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.222612][ T6981] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 274.231616][ T6981] usb 8-1: config 1 has no interface number 1 [ 274.237797][ T6981] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 274.250263][ T6981] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.259346][ T6981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.267369][ T6981] usb 8-1: Product: syz [ 274.271523][ T6981] usb 8-1: Manufacturer: syz [ 274.276150][ T6981] usb 8-1: SerialNumber: syz [ 274.305940][ T45] usb 9-1: device descriptor read/64, error -71 [ 274.392358][ T8500] usblp0: removed [ 274.545924][ T45] usb 9-1: device descriptor read/64, error -71 [ 274.785939][ T45] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 274.912525][ T8551] netlink: 'syz.5.2801': attribute type 63 has an invalid length. [ 274.920466][ T8551] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2801'. [ 274.920552][ T45] usb 9-1: device descriptor read/64, error -71 [ 274.935817][ T8551] gretap0: entered allmulticast mode [ 274.941401][ T8551] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.969962][ T8551] cgroup: Name too long [ 274.995245][ T6981] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 275.017338][ T6981] usb 8-1: USB disconnect, device number 58 [ 275.171524][ T36] audit: type=1400 audit(2000000496.225:15872): avc: denied { setattr } for pid=8569 comm="syz.7.2807" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 275.180475][ T45] usb 9-1: device descriptor read/64, error -71 [ 275.225532][ T8572] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.336050][ T45] usb usb9-port1: attempt power cycle [ 275.517799][ T8594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.535944][ T6981] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 275.648633][ T8600] Invalid ELF header len 16 [ 275.675969][ T45] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 275.685930][ T6981] usb 8-1: Using ep0 maxpacket: 16 [ 275.695585][ T6981] usb 8-1: unable to get BOS descriptor or descriptor too short [ 275.704242][ T6981] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.714576][ T45] usb 9-1: device descriptor read/8, error -71 [ 275.720852][ T6981] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 275.730888][ T6981] usb 8-1: config 1 has no interface number 1 [ 275.737050][ T6981] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 275.749478][ T6981] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.758648][ T6981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.766715][ T6981] usb 8-1: Product: syz [ 275.775913][ T6981] usb 8-1: Manufacturer: syz [ 275.780539][ T6981] usb 8-1: SerialNumber: syz [ 275.856966][ T45] usb 9-1: device descriptor read/8, error -71 [ 275.998919][ T8621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.096119][ T45] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 276.117049][ T45] usb 9-1: device descriptor read/8, error -71 [ 276.257569][ T45] usb 9-1: device descriptor read/8, error -71 [ 276.339290][ T8656] batadv_slave_0: entered promiscuous mode [ 276.346281][ T8655] batadv_slave_0: left promiscuous mode [ 276.366198][ T45] usb usb9-port1: unable to enumerate USB device [ 276.509003][ T6981] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 276.521302][ T6981] usb 8-1: USB disconnect, device number 59 [ 276.540504][ T8051] udevd[8051]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 276.655976][ T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 276.800538][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.808416][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.816270][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.824167][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.832001][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.839901][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.847757][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.855544][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.863437][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.871255][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.879128][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.886922][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.894738][ T9] usb 6-1: config 1 interface 0 altsetting 227 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.908972][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.915944][ T6981] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 276.916735][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 276.930941][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.938735][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.946572][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.954399][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.962301][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.970167][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.978228][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.986340][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 276.994163][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 277.003322][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.010999][ T8680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.011332][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.027940][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.035687][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.043483][ T9] usb 6-1: Product: О [ 277.047618][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.055379][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.063251][ T9] usb 6-1: Manufacturer: Т [ 277.067841][ T9] usb 6-1: SerialNumber: syz [ 277.072782][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.080886][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.088768][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.095929][ T6981] usb 8-1: Using ep0 maxpacket: 16 [ 277.096702][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.103075][ T6981] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 277.109438][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.118037][ T6981] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.125315][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.140530][ T6981] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 277.143106][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.152123][ T6981] usb 8-1: config 1 has no interface number 1 [ 277.165947][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.166098][ T6981] usb 8-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 277.177850][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.192501][ T6981] usb 8-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 277.198854][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.208150][ T6981] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 277.213907][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.222465][ T6981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.230606][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.239811][ T6981] usb 8-1: Product: syz [ 277.246408][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.254616][ T6981] usb 8-1: Manufacturer: syz [ 277.258432][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.265968][ T6981] usb 8-1: SerialNumber: syz [ 277.275794][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.287831][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.295756][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 277.305580][ T1680] hid-generic 0000:007F:FFFFFFFE.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.328245][ T8686] fido_id[8686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.337560][ T8688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:285 [ 277.496268][ T6981] usb 8-1: 0:2 : does not exist [ 277.513909][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 277.523261][ T6981] usb 8-1: USB disconnect, device number 60 [ 277.526102][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 277.542991][ T9] usb 6-1: USB disconnect, device number 92 [ 278.016414][ T36] audit: type=1326 audit(2000000499.075:15873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.7.2852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64e258e929 code=0x0 [ 278.146062][ T8704] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.296017][ T6981] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 278.447139][ T6981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.458201][ T6981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.467975][ T6981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.480937][ T6981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.490067][ T6981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.498701][ T6981] usb 6-1: config 0 descriptor?? [ 278.506017][ T9] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 278.655976][ T45] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 278.657159][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.673845][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.688425][ T9] usb 8-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 278.697537][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.705559][ T9] usb 8-1: Product: syz [ 278.709778][ T9] usb 8-1: Manufacturer: syz [ 278.714387][ T9] usb 8-1: SerialNumber: syz [ 278.721919][ T9] r8152-cfgselector 8-1: Unknown version 0x0000 [ 278.728274][ T9] r8152-cfgselector 8-1: config 0 descriptor?? [ 278.735281][ T9] r8152 8-1:0.0: Expected endpoints are not found [ 278.805917][ T45] usb 9-1: Using ep0 maxpacket: 8 [ 278.812313][ T45] usb 9-1: unable to get BOS descriptor or descriptor too short [ 278.820724][ T45] usb 9-1: config 143 has an invalid interface number: 213 but max is 1 [ 278.829122][ T45] usb 9-1: config 143 has an invalid interface number: 2 but max is 1 [ 278.837335][ T45] usb 9-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 278.847721][ T45] usb 9-1: config 143 has no interface number 0 [ 278.853978][ T45] usb 9-1: config 143 has no interface number 1 [ 278.860266][ T45] usb 9-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.873546][ T45] usb 9-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 278.886610][ T45] usb 9-1: config 143 interface 213 has no altsetting 0 [ 278.893590][ T45] usb 9-1: config 143 interface 2 has no altsetting 0 [ 278.901983][ T45] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 278.911107][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.919268][ T45] usb 9-1: Product: syz [ 278.923444][ T45] usb 9-1: Manufacturer: syz [ 278.929016][ T6981] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xd [ 278.938500][ T9] r8152-cfgselector 8-1: USB disconnect, device number 61 [ 278.939683][ T6981] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 278.953465][ T45] usb 9-1: SerialNumber: syz [ 278.960613][ T6981] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 279.121968][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.130555][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.162968][ T45] asix 9-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 279.173321][ T45] asix 9-1:143.213: probe with driver asix failed with error -71 [ 279.181918][ T45] asix 9-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 279.192199][ T45] asix 9-1:143.2: probe with driver asix failed with error -71 [ 279.201769][ T45] usb 9-1: USB disconnect, device number 44 [ 279.734736][ T36] audit: type=1400 audit(2000000500.785:15874): avc: denied { map } for pid=8728 comm="syz.8.2862" path="socket:[61981]" dev="sockfs" ino=61981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.758019][ T45] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 279.775600][ T8733] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 279.784817][ T8733] overlayfs: missing 'lowerdir' [ 279.807589][ T8737] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.915921][ T45] usb 8-1: Using ep0 maxpacket: 16 [ 279.922335][ T45] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 279.930429][ T45] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.940683][ T45] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 279.949719][ T45] usb 8-1: config 1 has no interface number 1 [ 279.955957][ T45] usb 8-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 279.966895][ T45] usb 8-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 279.981704][ T45] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 279.990945][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.999003][ T45] usb 8-1: Product: syz [ 280.003300][ T45] usb 8-1: Manufacturer: syz [ 280.007988][ T45] usb 8-1: SerialNumber: syz [ 280.218744][ T45] usb 8-1: 0:2 : does not exist [ 280.226343][ T45] usb 8-1: USB disconnect, device number 62 [ 280.245929][ T9] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 280.395931][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 280.402264][ T9] usb 9-1: config 28 has an invalid interface number: 162 but max is 0 [ 280.410595][ T9] usb 9-1: config 28 has no interface number 0 [ 280.416893][ T9] usb 9-1: config 28 interface 162 has no altsetting 0 [ 280.424392][ T9] usb 9-1: config 28 has an invalid interface number: 162 but max is 0 [ 280.432886][ T9] usb 9-1: config 28 has no interface number 0 [ 280.439128][ T9] usb 9-1: config 28 interface 162 has no altsetting 0 [ 280.447025][ T9] usb 9-1: config 28 has an invalid interface number: 162 but max is 0 [ 280.455377][ T9] usb 9-1: config 28 has no interface number 0 [ 280.461630][ T9] usb 9-1: config 28 interface 162 has no altsetting 0 [ 280.469312][ T9] usb 9-1: config 28 has an invalid interface number: 162 but max is 0 [ 280.477666][ T9] usb 9-1: config 28 has no interface number 0 [ 280.483989][ T9] usb 9-1: config 28 interface 162 has no altsetting 0 [ 280.491661][ T9] usb 9-1: config 28 has an invalid interface number: 162 but max is 0 [ 280.499965][ T9] usb 9-1: config 28 has no interface number 0 [ 280.506172][ T9] usb 9-1: config 28 interface 162 has no altsetting 0 [ 280.513743][ T9] usb 9-1: config 28 has an invalid interface number: 162 but max is 0 [ 280.522058][ T9] usb 9-1: config 28 has no interface number 0 [ 280.528317][ T9] usb 9-1: config 28 interface 162 has no altsetting 0 [ 280.536054][ T9] usb 9-1: config 28 has an invalid interface number: 162 but max is 0 [ 280.544337][ T9] usb 9-1: config 28 has no interface number 0 [ 280.545025][ T36] audit: type=1400 audit(2000000501.595:15875): avc: denied { shutdown } for pid=8749 comm="syz.0.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 280.550630][ T9] usb 9-1: config 28 interface 162 has no altsetting 0 [ 280.572358][ T8751] exFAT-fs (rnullb0): invalid boot record signature [ 280.579428][ T8740] __vm_enough_memory: pid: 8740, comm: syz.8.2865, bytes: 70373039144960 not enough memory for the allocation [ 280.585225][ T8751] exFAT-fs (rnullb0): failed to read boot sector [ 280.598695][ T8740] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2865'. [ 280.603160][ T8751] exFAT-fs (rnullb0): failed to recognize exfat type [ 280.612152][ T8740] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.630495][ T9] usb 9-1: string descriptor 0 read error: -71 [ 280.644104][ T9] usb 9-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=8b.bc [ 280.653387][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.663485][ T9] usb 9-1: rejected 7 configurations due to insufficient available bus power [ 280.672445][ T9] usb 9-1: no configuration chosen from 7 choices [ 280.680406][ T9] usb 9-1: USB disconnect, device number 45 [ 280.729521][ T8756] rust_binder: Write failure EINVAL in pid:1034 [ 280.738966][ T8758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.818242][ T64] ================================================================== [ 280.832863][ T64] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 280.839670][ T64] Write of size 8 at addr 0000000000000098 by task kworker/0:2/64 [ 280.847517][ T64] [ 280.849870][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/0:2 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 280.849943][ T64] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.849960][ T64] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 280.850031][ T64] Call Trace: [ 280.850041][ T64] [ 280.850052][ T64] __dump_stack+0x21/0x30 [ 280.850084][ T64] dump_stack_lvl+0x10c/0x190 [ 280.850113][ T64] ? __cfi_dump_stack_lvl+0x10/0x10 [ 280.850140][ T64] ? __switch_to+0xc7b/0x1310 [ 280.850172][ T64] print_report+0x3d/0x70 [ 280.850193][ T64] kasan_report+0x163/0x1a0 [ 280.850226][ T64] ? down_write+0x83/0x2a0 [ 280.850346][ T64] ? down_write+0x83/0x2a0 [ 280.850382][ T64] kasan_check_range+0x299/0x2a0 [ 280.850417][ T64] __kasan_check_write+0x18/0x20 [ 280.850445][ T64] down_write+0x83/0x2a0 [ 280.850474][ T64] ? __cfi_down_write+0x10/0x10 [ 280.850501][ T64] ? _raw_spin_lock+0x8c/0x120 [ 280.850536][ T64] ? __cfi__raw_spin_lock+0x10/0x10 [ 280.850570][ T64] ? mutex_unlock+0x8b/0x240 [ 280.850597][ T64] ? __cfi_mutex_unlock+0x10/0x10 [ 280.850625][ T64] rust_binderfs_remove_file+0x6c/0x110 [ 280.850656][ T64] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 280.850702][ T64] ? unwind_next_frame+0x3c2/0x750 [ 280.850726][ T64] ? __kernel_text_address+0x11/0x40 [ 280.850751][ T64] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 280.850781][ T64] ? arch_stack_walk+0x139/0x170 [ 280.850814][ T64] ? ret_from_fork_asm+0x1a/0x30 [ 280.850847][ T64] ? stack_trace_save+0x9d/0xe0 [ 280.850875][ T64] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 280.850920][ T64] ? stack_depot_save_flags+0x38/0x800 [ 280.850950][ T64] ? update_load_avg+0x506/0x19a0 [ 280.850974][ T64] ? detach_entity_load_avg+0x7b0/0x7b0 [ 280.851007][ T64] ? kasan_save_stack+0x4d/0x60 [ 280.851034][ T64] ? kasan_save_stack+0x3e/0x60 [ 280.851061][ T64] ? __kasan_record_aux_stack+0xb2/0xd0 [ 280.851085][ T64] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 280.851110][ T64] ? __call_rcu_common+0xcc/0x6f0 [ 280.851139][ T64] ? call_rcu+0x14/0x20 [ 280.851167][ T64] ? __kasan_check_write+0x18/0x20 [ 280.851192][ T64] ? _raw_spin_trylock+0xaf/0x130 [ 280.851224][ T64] ? __cfi__raw_spin_trylock+0x10/0x10 [ 280.851267][ T64] ? _raw_spin_unlock+0x45/0x60 [ 280.851288][ T64] ? call_rcu_nocb+0x6bd/0xc10 [ 280.851313][ T64] ? swake_up_one_online_ipi+0x30/0x30 [ 280.851338][ T64] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 280.851365][ T64] ? __call_rcu_common+0x40b/0x6f0 [ 280.851395][ T64] ? call_rcu_hurry+0x30/0x30 [ 280.851424][ T64] ? task_dead_fair+0x110/0x190 [ 280.851454][ T64] ? __cfi_task_dead_fair+0x10/0x10 [ 280.851485][ T64] ? call_rcu+0x14/0x20 [ 280.851515][ T64] ? put_task_struct_rcu_user+0x66/0xb0 [ 280.851541][ T64] ? __switch_to_asm+0x3d/0x70 [ 280.851572][ T64] ? __schedule+0x1463/0x1f10 [ 280.851597][ T64] ? kick_pool+0xad/0x550 [ 280.851620][ T64] process_scheduled_works+0x7d2/0x1020 [ 280.851657][ T64] worker_thread+0xc58/0x1250 [ 280.851693][ T64] kthread+0x2ca/0x370 [ 280.851728][ T64] ? __cfi_worker_thread+0x10/0x10 [ 280.851760][ T64] ? __cfi_kthread+0x10/0x10 [ 280.851794][ T64] ret_from_fork+0x64/0xa0 [ 280.851822][ T64] ? __cfi_kthread+0x10/0x10 [ 280.851857][ T64] ret_from_fork_asm+0x1a/0x30 [ 280.851891][ T64] [ 280.851901][ T64] ================================================================== [ 281.210532][ T64] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 281.216999][ T64] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 281.223668][ T36] audit: type=1400 audit(2000000502.275:15876): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[542]" dev="pipefs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 281.224831][ T64] #PF: supervisor write access in kernel mode [ 281.253814][ T64] #PF: error_code(0x0002) - not-present page [ 281.259805][ T64] PGD 8000000109370067 P4D 8000000109370067 PUD 0 [ 281.266349][ T64] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 281.272446][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/0:2 Tainted: G B 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 281.287331][ T64] Tainted: [B]=BAD_PAGE [ 281.291499][ T64] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.301578][ T64] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 281.318398][ T64] RIP: 0010:down_write+0x9a/0x2a0 [ 281.323475][ T64] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 281.343124][ T64] RSP: 0018:ffffc90000d4f500 EFLAGS: 00010256 [ 281.349229][ T64] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 281.350552][ T36] audit: type=1400 audit(2000000502.405:15877): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 281.357218][ T64] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000d4f520 [ 281.357234][ T64] RBP: ffffc90000d4f598 R08: ffffc90000d4f527 R09: 1ffff920001a9ea4 [ 281.357250][ T64] R10: dffffc0000000000 R11: fffff520001a9ea5 R12: dffffc0000000000 [ 281.357268][ T64] R13: 1ffff920001a9ea0 R14: ffffc90000d4f520 R15: 0000000000000000 [ 281.357285][ T64] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 281.357305][ T64] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.357321][ T64] CR2: 0000000000000098 CR3: 000000013823a000 CR4: 00000000003526b0 [ 281.434535][ T64] Call Trace: [ 281.437818][ T64] [ 281.440755][ T64] ? __cfi_down_write+0x10/0x10 [ 281.445621][ T64] ? _raw_spin_lock+0x8c/0x120 [ 281.450401][ T64] ? __cfi__raw_spin_lock+0x10/0x10 [ 281.455612][ T64] ? mutex_unlock+0x8b/0x240 [ 281.460235][ T64] ? __cfi_mutex_unlock+0x10/0x10 [ 281.465265][ T64] rust_binderfs_remove_file+0x6c/0x110 [ 281.470820][ T64] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 281.483597][ T64] ? unwind_next_frame+0x3c2/0x750 [ 281.488723][ T64] ? __kernel_text_address+0x11/0x40 [ 281.494019][ T64] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 281.500180][ T64] ? arch_stack_walk+0x139/0x170 [ 281.505128][ T64] ? ret_from_fork_asm+0x1a/0x30 [ 281.510078][ T64] ? stack_trace_save+0x9d/0xe0 [ 281.515372][ T64] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 281.528582][ T64] ? stack_depot_save_flags+0x38/0x800 [ 281.534048][ T64] ? update_load_avg+0x506/0x19a0 [ 281.539076][ T64] ? detach_entity_load_avg+0x7b0/0x7b0 [ 281.544634][ T64] ? kasan_save_stack+0x4d/0x60 [ 281.549494][ T64] ? kasan_save_stack+0x3e/0x60 [ 281.554445][ T64] ? __kasan_record_aux_stack+0xb2/0xd0 [ 281.559996][ T64] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 281.565981][ T64] ? __call_rcu_common+0xcc/0x6f0 [ 281.571017][ T64] ? call_rcu+0x14/0x20 [ 281.575183][ T64] ? __kasan_check_write+0x18/0x20 [ 281.580303][ T64] ? _raw_spin_trylock+0xaf/0x130 [ 281.585340][ T64] ? __cfi__raw_spin_trylock+0x10/0x10 [ 281.590811][ T64] ? _raw_spin_unlock+0x45/0x60 [ 281.595665][ T64] ? call_rcu_nocb+0x6bd/0xc10 [ 281.600443][ T64] ? swake_up_one_online_ipi+0x30/0x30 [ 281.605907][ T64] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 281.611893][ T64] ? __call_rcu_common+0x40b/0x6f0 [ 281.617020][ T64] ? call_rcu_hurry+0x30/0x30 [ 281.621708][ T64] ? task_dead_fair+0x110/0x190 [ 281.626598][ T64] ? __cfi_task_dead_fair+0x10/0x10 [ 281.631809][ T64] ? call_rcu+0x14/0x20 [ 281.635974][ T64] ? put_task_struct_rcu_user+0x66/0xb0 [ 281.641526][ T64] ? __switch_to_asm+0x3d/0x70 [ 281.646300][ T64] ? __schedule+0x1463/0x1f10 [ 281.650983][ T64] ? kick_pool+0xad/0x550 [ 281.655325][ T64] process_scheduled_works+0x7d2/0x1020 [ 281.660887][ T64] worker_thread+0xc58/0x1250 [ 281.665582][ T64] kthread+0x2ca/0x370 [ 281.669667][ T64] ? __cfi_worker_thread+0x10/0x10 [ 281.674787][ T64] ? __cfi_kthread+0x10/0x10 [ 281.679389][ T64] ret_from_fork+0x64/0xa0 [ 281.683818][ T64] ? __cfi_kthread+0x10/0x10 [ 281.688422][ T64] ret_from_fork_asm+0x1a/0x30 [ 281.693215][ T64] [ 281.696237][ T64] Modules linked in: [ 281.700145][ T64] CR2: 0000000000000098 [ 281.704304][ T64] ---[ end trace 0000000000000000 ]--- [ 281.709757][ T64] RIP: 0010:down_write+0x9a/0x2a0 [ 281.714796][ T64] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 281.734432][ T64] RSP: 0018:ffffc90000d4f500 EFLAGS: 00010256 [ 281.740507][ T64] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 281.748657][ T64] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000d4f520 [ 281.756631][ T64] RBP: ffffc90000d4f598 R08: ffffc90000d4f527 R09: 1ffff920001a9ea4 [ 281.764609][ T64] R10: dffffc0000000000 R11: fffff520001a9ea5 R12: dffffc0000000000 [ 281.772587][ T64] R13: 1ffff920001a9ea0 R14: ffffc90000d4f520 R15: 0000000000000000 [ 281.780569][ T64] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 281.789507][ T64] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.796105][ T64] CR2: 0000000000000098 CR3: 000000013823a000 CR4: 00000000003526b0 [ 281.804142][ T64] Kernel panic - not syncing: Fatal exception [ 281.810506][ T64] Kernel Offset: disabled [ 281.814829][ T64] Rebooting in 86400 seconds..