last executing test programs: 2m17.972712772s ago: executing program 3 (id=4471): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800, 0x37) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) dup3(r0, r1, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="f30fc7340366baf80cb84bbee38aef66bafc0cec3ef30fc770d966baf80cb8a04aa989ef66bafc0cedc4c125fa2166b8e6008ec8c4e3055ca4aaf00f000000c4c2f9aa0766baf80cb808da688aef66bafc0cb8d254e399ef0f004103", 0x5c}], 0x1, 0x10, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000680)=""/201, 0xc9}) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/119, 0x0}) prctl$PR_MCE_KILL_GET(0x3d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x48) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x17) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000100)=0x20004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000003c0)=0x4021, 0x4) 2m17.949979682s ago: executing program 3 (id=4473): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0x4, 0x12}]}, 0x14}], 0x1}, 0x0) 2m17.452238419s ago: executing program 3 (id=4475): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001b00010a000004000000080001"], 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000040)) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.40811472s ago: executing program 3 (id=4477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8117, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x13c4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) write$cgroup_devices(r1, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}, @decrefs, @exit_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}], 0xfd, 0x0, &(0x7f0000000340)="54e42d650e78fc8731fedb8308f3bb09a2d00f8ae07df8fa983a6c87cdb0dfb7a6c12a6cef682db693fa3350e1295b56c582677288565c1a9bd3f87101edf598707f02462227baff38531b92efe04d91bd54ef49567b71471e16cb7c561b0ba17a5c2e1e77fb99f72644ed6bcac574698aff3cc23362f73f87db1ae3e15e55f4f67bb1ec2ea61017c9b4da019c2beb09aedcb3fe15161a583b3fc0734511b3101130e303e4fc2f01790c0de2bdf1837af82cce6a36db09eaf5d5352feb34f7ccf09d9f962367726b8274391da6511dd09349a4fcaffd0fd064f2de285a55ef7b8e68d50f8d8201c17ef9a38a1bf6af2cfedcdab74c29602d42a7cb688b"}) 2m17.40723786s ago: executing program 3 (id=4479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000240)=0xe9, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000010c0)='~[\x1d\xe81\xc7 /)\x1d\x00\x9f\xf7\xc5\\R\xe6\x05/n\x1c\xf3B\x83\xf8p\xaa\xa9\x11P\xb1\xf9\xd4I\xc0\xf0\x15\xb0\xe7', 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 2m17.40460684s ago: executing program 3 (id=4481): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000040)={0x2}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4600000000ff7f00000000000002003e00eefffbff94020000000000004000000000000000cf000000000000000f0000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e600000000000000ffffffffffffffff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025e02dccf5b146644755a40ccf00"/389], 0x178) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x80, &(0x7f0000000140)={0x3c, 0x4, 0x5}) rmdir(&(0x7f0000000180)='./file0\x00') write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b0", @ANYRES32=r2], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}]}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local}, 0xc) lseek(r7, 0x10001, 0x0) 2m13.619687858s ago: executing program 2 (id=4521): setresgid(0x0, 0x0, 0xee01) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000017c0)=@filter={'filter\x00', 0xe, 0x5, 0x90, [0x0, 0x200000000080, 0x20000000097e, 0x2000000014a2], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x108) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003090000000203"], 0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 2m12.086457942s ago: executing program 2 (id=4568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000940)="c9", 0x1, 0x4004850, &(0x7f0000000480)={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00', 0x8}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x46) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x7) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/250, 0xfa, 0x1, &(0x7f0000000980)=""/4096, 0x1000}, &(0x7f0000000240)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x17a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0xfffb, @none, 0x3, 0x1}, 0xe) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'syztnl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x3, 0x4e1d, 0x0, 0xa, 0x60, 0x80, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x1}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9, 0x4, 0x6, 0x80000000}, {{@in=@remote, 0x0, 0x32}, 0x2, @in6=@remote, 0x3500, 0x3}]}]}, 0x13c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', r7, 0x1, 0x20, 0x70, 0x7, {{0x3c, 0x4, 0x2, 0x26, 0xf0, 0x68, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}, {[@timestamp_prespec={0x44, 0x2c, 0x4e, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x2}, {@local, 0x3}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x3}, {@rand_addr=0x64010100, 0x1000}]}, @ssrr={0x89, 0x17, 0x6b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}, @ssrr={0x89, 0xb, 0x5a, [@rand_addr=0x64010101, @remote]}, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x1, 0xd, "a46d95482d1617f2d734ef"}, {0x0, 0x7, "223bd32b47"}, {0x1, 0x7, "32c607a2a5"}, {0x5, 0x7, "20d968fef1"}, {0x6, 0x7, "f5d4ef0bd4"}, {0x2, 0xa, "18b76898a62f0ac7"}, {0x7, 0x12, "5392440803360e141866f6e5cb8be6ef"}, {0x5, 0xc, "2d5c1c467b84b808d6bc"}]}, @generic={0x82, 0xc, "3a5c67caf55d37c65c3a"}, @noop, @lsrr={0x83, 0xb, 0x81, [@rand_addr=0x5, @loopback]}, @timestamp={0x44, 0x18, 0x54, 0x0, 0xe, [0x0, 0x9, 0x7, 0x5, 0x6]}, @rr={0x7, 0x7, 0x30, [@remote]}]}}}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f00000021c0)=[@dead_binder_done, @acquire={0x40046305, 0x3}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x1003, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002140)={@fd, @fda={0x66646185, 0x8, 0x0, 0x33}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f00000020c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 2m12.006234243s ago: executing program 2 (id=4569): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107}) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e00010100000000000000000c0012800800d200", @ANYRES32=0x0, @ANYBLOB="1505ca8d943f59eca3eb69c669198dd030e6cca70469b764bcb467c0e943353acdb711611cb3031f9bdea0754baef73157751ce769cd2390d3aa4e1871f6b550f2f7a0e8c0600217e865ae265dda10405b72a76f2b18c7198454239da15264f2"], 0x1c}], 0x1}, 0x0) 2m11.935144324s ago: executing program 2 (id=4572): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, 0x0, 0x0) 2m11.928618744s ago: executing program 2 (id=4573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, 0x0, 0x60) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1f) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x8a, "321faf41f882a9d31ab6219a64880f84e5ac93d3a0bd27f4d826a6da976ff48c2ecbbad3a536e030e84ce2bca0b32856f56b520f3d4b454d5bd90af661b2d9c9a40b307baeb2eb1cf346bc1cdf29d987bc566517aa8501add2b1040c6cfabbd5fce0924b65595ee4b598b8e242a1e1097ba2bb4a5f91ee82b4be541a62572e84701726b5ed5a16118a77"}, &(0x7f0000000000)=0xae) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20000000029}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m11.798532936s ago: executing program 2 (id=4583): syz_open_dev$rtc(0x0, 0x0, 0x60c240) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000073c2b403b1b5129ee9e01020301090246000100000002090419cd010e0100000624060000a105240405000d24"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x1c, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x44000) 2m9.781171037s ago: executing program 0 (id=4588): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x18, 0x0, 0x101}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) 2m9.723124478s ago: executing program 0 (id=4589): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private0, 0x63, r1}) recvfrom$inet6(r0, &(0x7f00000000c0)=""/44, 0x2c, 0x10041, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = accept4$inet6(r0, 0x0, &(0x7f0000000140), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) mount$cgroup2(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={[{@memory_recursiveprot}, {}, {@subsystem='io'}, {@subsystem='devices'}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '@!/*&{/\',$'}}]}) getsockname$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x1c) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e22, 0x7, @mcast1, 0x80}, {0xa, 0x4e21, 0x2, @private2, 0x1}, 0xffffffffffffffff, {[0x6, 0xb, 0x7, 0xbe8, 0x980, 0xcace, 0xb, 0x1]}}, 0x5c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000500)={0x0, 0x1, 0x4, 0x380000}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000540)={0x9, 0x40}) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000580)=""/223, &(0x7f0000000680)=0xdf) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl2\x00', r1, 0x29, 0xb, 0x18, 0xe, 0x51, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x7, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1ac, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000080}, 0x40040d4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r9, &(0x7f0000002d40)=[{{&(0x7f0000000a80)={0xa, 0x4e23, 0xffff68eb, @mcast1, 0x1}, 0x1c, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x67, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xa7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14}}, @tclass={{0x14}}, @dstopts={{0x30, 0x29, 0x37, {0x73, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1000}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000c00)="ad1d75cd9343dcd54f", 0x9}, {&(0x7f0000000c40)="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", 0x1000}], 0x2, &(0x7f0000001c80)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x1, 0x9e, 0x0, [@remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffbb0}}], 0x88}}, {{&(0x7f0000001d40)={0xa, 0x4e20, 0x6, @private2, 0x100}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001d80)="fc537cefeadb45c64e440bc6185bdd2da391b83639fa2f5dc3fd54de00681439b8a125801fc44ffa1a1568f728c1a57b03f17a15544d81290f4a69c4fbaefe9da3c5068b429a4a6654cebb248ac3fe45df982c9f68256725a3a8c653161b6e7f2a583e179dd2ecc752ae24bcce7a0f8d71850ac7f897174ab165bcc7b247766c2e634a2811f15005191c77c5fa3e3137d6009b3de490428f6d3e6ebf15096f62810443ec54c9e3", 0xa7}, {&(0x7f0000001e40)="133eb1f91cb3b6cf6d8d88a6e9bb2d53e107", 0x12}], 0x2, &(0x7f0000001ec0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x89, 0x8, 0x1, 0xa, 0x0, [@mcast2, @private1, @remote, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x0, 0xf8, 0x0, [@empty, @private0, @mcast1, @remote, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x401}}], 0x120}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002000)="2a6b7806930034525b1087175a458546e555d1ab924097bc8564cd21d47afcf5f8b7a87071375b1186c4347f4b68c8995d3d6858ff4afe528783866db372b091048ec1d4fec6d3088f4051830dd48e0ab598a764a732cfe127a5fe8b1f094b39a34d20932385f5a5475eadab101a698bf8aa83bd3abcc7476c6a896094f46e05a61b820c8a957d5363d0bfdfc91f173b67451da9", 0x94}, {&(0x7f00000020c0)="54362fb5f6d2c8c2be38e5997d", 0xd}, {&(0x7f0000002100)="0551c19dca11db93e8c96bb1201ddad8b80c928e83074083401c432b40f92013ed2a6ae7a31be06ab23556c936ce4ea141e5c037dcdec8", 0x37}], 0x3, &(0x7f0000002180)=[@dstopts_2292={{0xd0, 0x29, 0x4, {0x87, 0x17, '\x00', [@generic={0x3, 0xa4, "fa6cd8570c44e9017c2d8893013ae3ead59c798cec71ecba98184040b751976f0de870d6297e25ff9d8d9bae984c74d7b2c88d09b4c885c95de7f89172a5a1e0f212ef60c204b452f84658a16ff545161a405991e447ea264318d6c79134cccd8ebfa8207a0b38c10366533da5620e3da3446d39cde5c7f71edc41ba678347caf0b5a63e9aa977d377cf56a9176f0bc867299b7089487d5711aec13844851fb86c4a85b4"}, @hao={0xc9, 0x10, @loopback}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x48dbeee8}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1, 0xa, 0xef5d3fc1cf2a4c78, 0x8, 0x0, [@mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @local, @loopback]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x178}}, {{&(0x7f0000002300)={0xa, 0x4e20, 0x31d1, @local, 0x101}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000002340)="36d24b1b8fc12ea83073f0744d9fdbb5162d2be578aaff90fc3b4f2c686795c44e3844586529af7aae5f454df1db421d2b8cc870014fea395bd0279a0e2595d3ba3bbf814e58bb2a86d5ef6700c519f109dddd93653df194", 0x58}, {&(0x7f00000023c0)="e9d8384e05a137622450898a9d4a8ce7990b49640d19863935ba61f7fa37aeb37a3f8a1c14ed6a97ebe75522f81518cc0e7d847c83aa638fe1803dc2a85e16b0d20488593b03d6f47f37a426a5", 0x4d}, {&(0x7f0000002440)="d446cfdf95342eecb636b0bcfa0c5ab2757ffc4a25ca8a865bc1eaef1e62f7458e912bb19f1b14fde3fedae61f6b3e8d293ac416adfdae3775fb501bb5d8b40ab910773893478643fab60725d1fafecf5bfb3113263c7772757a6b511f336008c430774eb40e2da514dd4efa1341ad99", 0x70}], 0x3, &(0x7f0000002500)=[@rthdr={{0x48, 0x29, 0x39, {0x3e, 0x6, 0x0, 0xf9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @remote]}}}], 0x48}}, {{&(0x7f0000002580)={0xa, 0x4e23, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000002780)=[{&(0x7f00000025c0)="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", 0xfa}, {&(0x7f00000026c0)="c28ec0a8412957b2aa4ac2eb02d29ee1e78734b0c42068cd2c5a37f1a6053bf90a9e8119b310defbd86fbea0d4636f84efae96c18d321740d8208f01a537f8fb3bfe10b0d3f3810706647ec4a484f031e117f1cc7552f1b06f6db407100f560af39d730270e940961cc321ef2f0b1d1047a45f98023c96fb1d1a7bbfa813cf02a47553964f08fa5ad4eaba5d4575243e59910232b257e96418817097eda30ed8eb8d56ed97434b9355e764080cab95364357f0b75a", 0xb5}], 0x2, &(0x7f00000027c0)=[@tclass={{0x14, 0x29, 0x43, 0xfffeffff}}, @dstopts={{0x78, 0x29, 0x37, {0x8, 0xb, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0xa3, 0x1000, [0x7, 0x401, 0xa41, 0xfffffffffffffff7, 0x6]}}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x81}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0xd5b6}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2a, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x62, 0x7, '\x00', [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x81ef, [0x6, 0x1, 0xffffffffffffffff, 0xcd]}}]}}}, @hopopts={{0xf0, 0x29, 0x36, {0x0, 0x1a, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x9, 0xfff8, [0x3, 0x600000, 0x10000]}}, @enc_lim={0x4, 0x1, 0xa}, @generic={0x9, 0x8b, "d122a00ebe73fee85c07cb0a0e842aa8cce43e83e7f031cd40a513218b71c70783d439e66b2355ab20ff69e492bbb5d06dfc77b9b710a46387f4233283d578cfafca2d0cca110bdf1179ffb3c23e62d0cefb5ff01dcc089726268cb42c7b05f49cd5e8c1e0c9df4913447d59c11c80ae69c8918dbff92310ceb3089e4f13c24093ea5412a125bd87dc6d95"}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x160c}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x100}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x268}}, {{&(0x7f0000002a40)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10001}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000002a80)="63e3bd8889eaf8a0f9ac9437fe13ec872fe7091a88047ca78c3161fedaddc56b9b32acee5040398d070072ca387fcf87da92e232f718b21172eaccf10ba12b474b97fbf05c932f94906642e1aa1ca98c43c62be708e81099a8427007643e66a6702db2719cf711a2a795394b0c969c57e9669d6d3ce5b69f62cca8bc4a471826c7d8daa7f5276023f84e814e44f76f8e7512fbdb21e00987415087eaa4772c591fcdf3a395ac727824da7e9e99692f33001099cd6022cea3c9307c1191d785b7dd04d25a21699de786ec33cc97176fdc91cbb423f07b985c167bc06963f23bf436a5547d14e8d2d2d96cebb95e7eaeb09a3261e91d", 0xf5}, {&(0x7f0000002b80)="d991913065e071c1c9c1f481e293d7e83e1fce3cabdce4b2a9152a80455fd0c6553d73f110bd2f792dffec40f1f63a08b0f3edcb0ce5770fa278a5bd0d29cb15", 0x40}, {&(0x7f0000002bc0)="cfd1d9679f9e5986c0", 0x9}], 0x3, &(0x7f0000002c40)=[@tclass={{0x14, 0x29, 0x43, 0xa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9b}}, @hopopts={{0x30, 0x29, 0x36, {0x21, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3, [0x3]}}, @pad1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0x8, 0x0, [@empty, @empty, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0xc8}}], 0x7, 0x20000000) r10 = socket$packet(0x11, 0x2, 0x300) connect$packet(r10, &(0x7f0000002f00)={0x11, 0x1c, r1, 0x1, 0x4, 0x6, @local}, 0x14) r11 = socket$netlink(0x10, 0x3, 0xe) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002f40)=0x62, &(0x7f0000002f80)=0x2) r12 = accept4$inet(0xffffffffffffffff, &(0x7f0000002fc0)={0x2, 0x0, @remote}, &(0x7f0000003000)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000003040)={'veth0_to_bridge\x00', 0x0}) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000003080)={r13, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x48, 0x0, 0xe06, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 2m9.720412748s ago: executing program 0 (id=4590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800, 0x37) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) dup3(r0, r1, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="f30fc7340366baf80cb84bbee38aef66bafc0cec3ef30fc770d966baf80cb8a04aa989ef66bafc0cedc4c125fa2166b8e6008ec8c4e3055ca4aaf00f000000c4c2f9aa0766baf80cb808da688aef66bafc0cb8d254e399ef0f004103", 0x5c}], 0x1, 0x10, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000680)=""/201, 0xc9}) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000100)=0x20004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000003c0)=0x4021, 0x4) 2m9.705258308s ago: executing program 0 (id=4591): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, 0x0, 0x0) 2m9.694231678s ago: executing program 0 (id=4592): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x1c, 0x1e, 0x101, 0xfff4, 0x0, "", [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) 2m9.63999399s ago: executing program 0 (id=4593): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x110b, 0x20000000000002}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) r3 = accept4(r1, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000000)=0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@delsa={0xd4, 0x11, 0x408, 0x70bd2b, 0x25dfdbfe, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2, 0xcc}, [@policy={0xac, 0x7, {{@in=@private=0xa010102, @in6=@local, 0x4e24, 0x2, 0x4e24, 0x9, 0x2, 0x0, 0x80, 0x28facc583744adb3, r2, r4}, {0x8, 0x0, 0xffffffff8f64cc86, 0x484c, 0x5, 0x4, 0x8, 0x1}, {0x0, 0x5, 0x1, 0x1}, 0x9, 0x6e6bb2, 0x2, 0x0, 0x2, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}], 0x1}, 0x2004c880) mount$9p_virtio(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000), 0x800, &(0x7f0000000040)={'trans=virtio,', {[{@version_9p2000}, {@noextend}]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 2m1.496816034s ago: executing program 32 (id=4481): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000040)={0x2}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4600000000ff7f00000000000002003e00eefffbff94020000000000004000000000000000cf000000000000000f0000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e600000000000000ffffffffffffffff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025e02dccf5b146644755a40ccf00"/389], 0x178) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x80, &(0x7f0000000140)={0x3c, 0x4, 0x5}) rmdir(&(0x7f0000000180)='./file0\x00') write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b0", @ANYRES32=r2], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}]}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local}, 0xc) lseek(r7, 0x10001, 0x0) 1m56.170721526s ago: executing program 33 (id=4583): syz_open_dev$rtc(0x0, 0x0, 0x60c240) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000073c2b403b1b5129ee9e01020301090246000100000002090419cd010e0100000624060000a105240405000d24"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x1c, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x44000) 1m54.6463671s ago: executing program 34 (id=4593): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x110b, 0x20000000000002}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) r3 = accept4(r1, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000000)=0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@delsa={0xd4, 0x11, 0x408, 0x70bd2b, 0x25dfdbfe, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2, 0xcc}, [@policy={0xac, 0x7, {{@in=@private=0xa010102, @in6=@local, 0x4e24, 0x2, 0x4e24, 0x9, 0x2, 0x0, 0x80, 0x28facc583744adb3, r2, r4}, {0x8, 0x0, 0xffffffff8f64cc86, 0x484c, 0x5, 0x4, 0x8, 0x1}, {0x0, 0x5, 0x1, 0x1}, 0x9, 0x6e6bb2, 0x2, 0x0, 0x2, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}], 0x1}, 0x2004c880) mount$9p_virtio(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000), 0x800, &(0x7f0000000040)={'trans=virtio,', {[{@version_9p2000}, {@noextend}]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 1m24.412855464s ago: executing program 6 (id=5064): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800, 0x37) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) dup3(r0, r1, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="f30fc7340366baf80cb84bbee38aef66bafc0cec3ef30fc770d966baf80cb8a04aa989ef66bafc0cedc4c125fa2166b8e6008ec8c4e3055ca4aaf00f000000c4c2f9aa0766baf80cb808da688aef66bafc0cb8d254e399ef0f004103", 0x5c}], 0x1, 0x10, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000680)=""/201, 0xc9}) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000100)=0x20004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000003c0)=0x4021, 0x4) 1m24.410872534s ago: executing program 6 (id=5065): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x300044, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='adfs\x00', 0x2018001, &(0x7f0000000180)='\x00') 1m24.360107455s ago: executing program 6 (id=5066): setresgid(0x0, 0x0, 0xee01) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000017c0)=@filter={'filter\x00', 0xe, 0x5, 0x90, [0x0, 0x200000000080, 0x20000000097e, 0x2000000014a2], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x108) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) clock_settime(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003090000000203"], 0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 1m23.885536562s ago: executing program 6 (id=5070): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioprio_set$uid(0x3, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x1, 0x2, 0x5, 0xfffffffffffffff8}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setns(0xffffffffffffffff, 0x2000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x14d142, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 1m23.877268942s ago: executing program 6 (id=5071): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000000), 0x84880) sendfile(r0, r0, 0x0, 0x7ffff000) ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) pipe2(&(0x7f0000000000), 0x84880) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 1m23.823894223s ago: executing program 6 (id=5072): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000024"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0x0, 0x0) sync() r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x10, 0x3, 0x0) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 1m8.266111212s ago: executing program 35 (id=5072): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000024"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0x0, 0x0) sync() r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x10, 0x3, 0x0) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 29.33423317s ago: executing program 5 (id=5865): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x8, 0x401}, {0x4, 0x7}], 0xffffffffffffffff}, 0x18, 0x1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4080, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) mkdir(0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0xac, 0x0, 0x1, 0x0, "113200"}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5412, &(0x7f00000001c0)=0x11) 28.823330697s ago: executing program 5 (id=5872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x6, 0x2, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x88, 0x4) ptrace$peeksig(0x4209, r1, &(0x7f00000000c0)={0x8, 0x1}, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x7, 0x0, 0x7}, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 28.811244397s ago: executing program 5 (id=5873): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0xff8c, 0x3) 28.797062438s ago: executing program 5 (id=5874): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x400200, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS2(r1, 0x802c542a, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xa, 0x2, 0xa}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 28.744079339s ago: executing program 5 (id=5875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xc}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)='./binderfs/binder0\x00', r1) 28.742717439s ago: executing program 5 (id=5876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000240)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000540)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b35, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) listen(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/protocols\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) sync() close(r0) read$FUSE(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000000)="3001", 0x2, r4) accept4(r2, &(0x7f0000002100)=@nfc, &(0x7f00000020c0)=0xfffffffffffffe86, 0x1800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002080)=0x1) 13.03814215s ago: executing program 36 (id=5876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000240)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000540)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b35, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) listen(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/protocols\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) sync() close(r0) read$FUSE(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000000)="3001", 0x2, r4) accept4(r2, &(0x7f0000002100)=@nfc, &(0x7f00000020c0)=0xfffffffffffffe86, 0x1800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002080)=0x1) 8.350292772s ago: executing program 8 (id=5984): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000309000000"], 0x0, 0x0, 0x0}, 0x0) 6.950136884s ago: executing program 8 (id=6009): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600), 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) creat(&(0x7f0000000000)='./file0\x00', 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="5a54d25935f1e281303beec4db878cfdf3943c9dc0c2369e44056212de6f08b36502b6779757238b99394d932b3747d9c3071a020db08bba55339aa6e1cd86701df74991c3b7f695fb5cecbccb32924feda8003f7cb7055d9341beb82db8040cfc0ff699242c7838cb47de01a46e37fc12da784062a5697bcc3529fbd12abc0dbaa83d046eb50590a326e1f7aca1e4", 0x8f}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="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", 0x4c5}, {0x0}, {&(0x7f0000000a00)="e6c0e3b937", 0x5}], 0x5}}], 0x1, 0x80040c4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 6.063788177s ago: executing program 8 (id=6022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x80000, 0xd) shutdown(r1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, r2) r3 = fsopen(&(0x7f00000000c0)='binder\x00', 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b01"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r8, &(0x7f0000008e40)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xa75, @remote, 0x9}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000000140)="2c39380dc2b55d1db3a569f28d5f2781b7db585a9e892c035c9b9f51a822344e0c325e9bb994fc33b13ad4e33042bc117846a7de815e531521a5bde6fb83ddc46e4c50a33eb3", 0x46}, {&(0x7f00000001c0)="1ad7e092f0bfa94fe411d8b9", 0xc}, {&(0x7f0000000200)="6e9e651ad5c8947952582e67581f4637c5fb372cf4625ee6ff46dd58edebd13b2c952dbd304d868edce141102e87111f94bd288650ebd3b69fa5fa9bfc9360cdf4f56ec161f0406b09eee020f26c9441777bfb878c73601f37e0a8517e731e67f673567d99b2aa49b4f54bcd093556e158e4668dd87c241089dc2e5c6dd8c8624e0f41bdfaaf602b5c13e190db43d0dbce33a7577f23f3a50df928466f55f8da19f9bb7273c577d9d46e7fde665b7985db200cadfba665176a5172c5ef4169f11f98468c3a85ed708b570f9fb11d92ef4cf96445124cf06759e7f165b4e87e23ba867ba50de03ed9b591139bcf9d", 0xee}, {&(0x7f0000000740)="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", 0x43d}], 0x4}}, {{&(0x7f0000002940)={0xa, 0x4e24, 0x80, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000003ac0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x18}}], 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, &(0x7f0000000000)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) 5.823022301s ago: executing program 8 (id=6029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x18, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 5.695478913s ago: executing program 8 (id=6033): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r5, r4, 0x0, 0x578410e9) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000240)=0x84, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d298cdc18000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket(0x1d, 0x800, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000001180)={0x5, {{0x2, 0x4e23, @multicast2}}}, 0x88) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r7, &(0x7f0000000280)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={0x0}, 0x8, 0x0, 0x0, 0x20008010}, 0x7289ab82f998c9e) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000400)={0x0, 0x0}) 5.694270973s ago: executing program 8 (id=6034): sync() (async) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r3, 0x4758f000) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000006, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30) (async, rerun: 32) listen(r1, 0x0) (async, rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async, rerun: 32) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f", 0xb7}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae8", 0xd2}, {&(0x7f0000001300)="a6795793ef4fdd011e2423cb1c6c3ae908557b86a0d84278530ed500f0b821857557aafda7412d96167cba5f07624f1102c0e9677e76e45fde1b32fc2705bfc749aa6a5e221a42ab6c8a331f7fcc9eac179a005cfd235d8d8fc78bb66c0e98b85f302f35de2af34ee94fbf733d4e827d34edf58af2ec8181b50858ab7fcc4c08888e33a03685624726235ed882de9b868b8c9b518ce7d3a0e9", 0x99}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x30040040) close(r5) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) 4.663085178s ago: executing program 7 (id=6042): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mlockall(0x1) mlockall(0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x8000000000000001, 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x7], 0xeeee0000, 0x28bc0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x7}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) lseek(r4, 0x10001, 0x0) 4.436063972s ago: executing program 7 (id=6043): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x10000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listen(0xffffffffffffffff, 0x0) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x40000100, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 4.433823232s ago: executing program 7 (id=6044): stat(0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) stat(0x0, 0x0) (async) getpid() (async) setns(0xffffffffffffffff, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) (async) umount2(&(0x7f0000000040)='./file0\x00', 0x2) (async) 4.433348592s ago: executing program 7 (id=6045): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (rerun: 64) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7", @ANYRES16=r1, @ANYRES16=r0], 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0xe000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000100)={0x4, {0x2, 0x3ff, 0x10000, 0x81, 0x100}}) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) (async, rerun: 32) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 64) 1.419872148s ago: executing program 7 (id=6058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x80000, 0xd) shutdown(r1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, r2) r3 = fsopen(&(0x7f00000000c0)='binder\x00', 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b01"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r8, &(0x7f0000008e40)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xa75, @remote, 0x9}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000000140)="2c39380dc2b55d1db3a569f28d5f2781b7db585a9e892c035c9b9f51a822344e0c325e9bb994fc33b13ad4e33042bc117846a7de815e531521a5bde6fb83ddc46e4c50a33eb3", 0x46}, {&(0x7f00000001c0)="1ad7e092f0bfa94fe411d8b9", 0xc}, {&(0x7f0000000200)="6e9e651ad5c8947952582e67581f4637c5fb372cf4625ee6ff46dd58edebd13b2c952dbd304d868edce141102e87111f94bd288650ebd3b69fa5fa9bfc9360cdf4f56ec161f0406b09eee020f26c9441777bfb878c73601f37e0a8517e731e67f673567d99b2aa49b4f54bcd093556e158e4668dd87c241089dc2e5c6dd8c8624e0f41bdfaaf602b5c13e190db43d0dbce33a7577f23f3a50df928466f55f8da19f9bb7273c577d9d46e7fde665b7985db200cadfba665176a5172c5ef4169f11f98468c3a85ed708b570f9fb11d92ef4cf96445124cf06759e7f165b4e87e23ba867ba50de03ed9b591139bcf9d", 0xee}, {&(0x7f0000000740)="66e6950b43ecd0d72d2ccaf8512a173a4c6cf50f09466a13e7fd0db396cdd3a22208efe4f021a4e435fa5271a8488850ef4fabd0fca09e25cc40dbbbea61b0d339457887731f1eafcd4edda3d626b4b4bbac9e087f1b8c506cebc25f8c3b5eb0e5c759c658a9050563de3464e39301cd13656dfc6c6e47dae6b31705376688b1f7c9c0b1750fae43cea68c79a03e35179c9706a3891c83f9eb96b0370f9d3a51cf385f254e5209a8bfc29af06daa1873d33af96dc87b74cdec18424fc19faad9939f9592613fc77f315b547ed277b6f7e99e1169881c1cb86e1a58e50b20c9a42699bb83eedcc6e760f54319c86e1395b20a026516dd0107398abfa8b32a036ba4f5775c0221d53b04e0df87674f60fa74078f07b28918090f3aee80566eddbca43ff954378bfe456c429b96df99296f4274b112183e2ed642d1b4e76edcf9c225d280ee8d0d18e5cdabc13a0f008255911f40fc64388e6b00708d91f6f232ce8b9c3f8ec8286a716245a4072e7aaafc16ff9c225ad2fc5e33cb3654aa1a59fc054059cf5a526d8db83ea003d773921ddfb5fa0e3704eb9085ded5138bbfd3f34022e8f17640bb29f486924398dc9130c0919a5066ba5bf789dfb40784af22936f5ac76ccde8b354753d97b56d29961d2f1138473daaf3bdcafe6589d5b3d09a5d77778e8e98a5f9e6cb8730ae6d6fd8e6e3936ae31a39d9c8f1d087eaa33c463d0a892558bceafa3080fa15a08d43fd2617683cd4dbf644bbe3473b01ed2b81062103366dc9f46a7bd52a2fea478d760330797e41a71656550cf3b929cee623d38786fe027f9716c7a7859c659296803ecadf602d67c3a9f9697a5e5c7e22e93b262a84e83410bb97ca69debb0d2d7f3a81ab48d5323c526e6ff83bd5021ccc0506e48c43ffb63158863ddf9c336a484cb110556ff9783acd93fa8b648747cb63583d6d2e56b3b8df6282ab3a3f748e9fde2a670c03912714b6e51e7ff68d77f71a57f2f96bbfbfd6be44979b857c36f8dd5633da15c399078d43ce1bf5da8ee7f0c2ae56ebeec264567805c80acb6c32631a00aa1292908f960296cee9bf3f104509e2bdecc2f89c63e13d3102171081367752a1cc89d71372cfbbb54b67d79cbca9c97b9c5b279f0f6219b2b7e4141f188a8b5289826285d3bb3550b3ebb30fbeb3675b088e774b9926bc273c64982dd6ec9cdc0387d1a0874f39c668fe3b75b527e28102a3c88ad9f1e2aebd7896f0cb2edc0d013e1ff6854bbf4d99cad1be33d5e2d3d478a9940a06d7d5fe715f40b618fdcb72d5f8030c6dabbb96f68f1acca09e6388df45e58fce0a8be7dcd8eaa454a1a6bcc1b4296cf4789e6d0d002bdf6df3907774f36cb9be149929f2a477933cb2c5f6c9f38b0d12efb1f482827652acb18548a27bd7a8901a42ae12ba44e1fffab2427b73a03a6a03c59bfe0b8e1a559041653b861721da9a73601980d0aa956f9c19e44cd7516a65ed5396876b48a2453a5421ff15aa273ce44b6996e8d403e7746f5a2526059937cc", 0x43d}], 0x4}}, {{&(0x7f0000002940)={0xa, 0x4e24, 0x80, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000003ac0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x18}}], 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, &(0x7f0000000000)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) 1.167647762s ago: executing program 4 (id=6061): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0xf9285000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) pwritev2(r5, &(0x7f0000000200)=[{&(0x7f0000000140)="306ca3ac", 0x4}], 0x1, 0x3c, 0x7fff, 0x1d) (async) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x118000, 0x800}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/150, 0x1008000, 0x1000, 0x9, 0x2}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) (async) r7 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r7, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x20400e8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0x10001, 0x0) 1.128876723s ago: executing program 4 (id=6062): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'xfrm0\x00', 0x1000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f0000000000)='/dev/net/tun\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008815}, 0x24040005) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xe4, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x30, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x9}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x8, {0x0, 0xd1, @val=0x6, @val=0x27, @void}}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x102d}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x46}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x150}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) close(r4) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x0, {0xa, 0x4e24, 0x3, @private0, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000380)={0x10200, 0x7, 0x5000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000005906000000"], 0x18}}], 0x1, 0x40000) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000440)={@local, @dev={0xac, 0x14, 0x14, 0x25}, 0x1, 0x3, [@remote, @empty, @multicast1]}, 0x1c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 1.078411154s ago: executing program 4 (id=6063): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030900000002"], 0x0, 0x0, 0x0}, 0x0) 1.075879124s ago: executing program 7 (id=6064): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) (async) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x2, 0xffffffffffffffff, &(0x7f0000010180)=0x60) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r4 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r4, 0x0, 0x0) (async) getpeername$packet(r4, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r5], 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x22003, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000240)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x3, &(0x7f0000000000)=0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r10 = eventfd(0x0) io_submit(r8, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, r9, 0x0, 0x0, 0x10001, 0x0, 0x1, r10}]) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x0, 0x8}}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) (async) r11 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan1\x00') preadv(r12, &(0x7f0000000100)=[{&(0x7f0000000880)=""/141, 0x8d}], 0x1, 0xa3, 0x0) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e22, 0x800, 0x4e23, 0x8, 0x2, 0x20, 0x80, 0x89, 0x0, 0xffffffffffffffff}, {0x9, 0x8000, 0x2, 0x8000, 0x2, 0x100000001, 0xe, 0x1}, {0x0, 0xfffffffffffffff7, 0x4, 0x323}, 0x800, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@local, 0x3504, 0x2, 0x0, 0x4, 0x6, 0x2, 0xff}}, 0xe8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000021c0)=[@dead_binder_done, @dead_binder_done, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd, @fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x6, 0x2, 0xc}}, &(0x7f00000020c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 856.820737ms ago: executing program 1 (id=6066): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0x5) write$cgroup_int(r0, &(0x7f0000000340)=0x1ff, 0x12) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000003aca7de92cda070772000000000300000000000000"]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x5, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x8d], 0x10000, 0x2071c0}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48a343, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) (async) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) (async) syz_pidfd_open(r5, 0x0) (async) sched_setscheduler(r5, 0x6, &(0x7f0000000100)=0x5) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) (async) socket$pptp(0x18, 0x1, 0x2) (async) read(r4, &(0x7f0000000080)=""/93, 0xffffff6c) 856.450877ms ago: executing program 1 (id=6067): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5bc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) madvise(&(0x7f00009bc000/0x3000)=nil, 0x3000, 0x4) 856.065727ms ago: executing program 1 (id=6068): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) futex_waitv(&(0x7f0000000ec0)=[{0x0, &(0x7f0000000040), 0x2}, {0x40, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x3fb, 0x2, 0x70bd29, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000040}, 0x11) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="765e1bcc382fd0686bf0781cb3491219788d993120ce2553d7126bde6a1487378dcc7e5f8623ab7a175cbb996258ab083605509aad0a33181ea076c612779c679004cd6e815a06e25cc8a88c964cd6f44d83d53e8b17f6b6d1aa195841b63c9603d00158d5d6ee", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000006c0)='bridge_slave_0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) 568.152372ms ago: executing program 4 (id=6069): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xffffffffffff99f1) 567.735661ms ago: executing program 4 (id=6070): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/196, 0xc4, 0x1, &(0x7f0000000500)=""/203, 0xcb}, &(0x7f0000000380)=0x40) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r2, 0x8, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x200000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d04"]) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000ac0)='w', 0x1}, {0x0}], 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="20022abd4c65700006dbdf25300000000840", @ANYRES32=0x0, @ANYBLOB="06003600110000000600360006000000060036002c000000060036000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8105}, 0x40c4) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) 322.160525ms ago: executing program 1 (id=6071): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) r1 = syz_clone(0x44800000, &(0x7f0000000100)="2ef61c87d06858cdaa64d0ae6627166059da3db160fb6be7deee7f240cc687c9171641375e4df4654f0975536bcb179573f0cdcb7c6418ac14831c2bc6a0811827534a0f67433a5e51c034e3f60b90350b7859e226f55b2f3552d8545faaef1a608524cd38c21523d254434de430c62a7003396538061935b2d3eb3d07e25d5054f1187ffacf47122dfb45c84044bab189c1edcd4d6e59be2f5bd48075dfbff49207d79d0b499d55691aaac9bee6fc5aa0bb4fbe3c589b2ba6c3feb0425d55552ff5d8ae2db77ea83ead27235380c758e2b4b9d5cbeecf8401e67c0cf83039a3d2d636f0264c358b", 0xe8, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) sched_setscheduler(r1, 0x0, &(0x7f0000000280)=0x6) 291.696476ms ago: executing program 1 (id=6072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x96, 0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x48c1, &(0x7f0000b63fe4)={0xa, 0x4e1e, 0x0, @local, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB='mode=000000000Z00000000000005,\x00']) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 231.970557ms ago: executing program 1 (id=6073): setresgid(0x0, 0x0, 0xee01) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000017c0)=@filter={'filter\x00', 0xe, 0x5, 0x90, [0x0, 0x200000000080, 0x20000000097e, 0x2000000014a2], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000010000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff00000000"]}, 0x108) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 0s ago: executing program 4 (id=6074): stat(0x0, &(0x7f0000000300)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) kernel console output (not intermixed with test programs): .4941" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.057165][ T36] audit: type=1400 audit(2000000000.530:788): avc: denied { unlink } for pid=14585 comm="syz.5.4941" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 283.080127][ T36] audit: type=1400 audit(2000000000.530:789): avc: denied { write } for pid=14585 comm="syz.5.4941" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 283.143196][T14593] tmpfs: Unsupported parameter 'mpol' [ 283.148878][T14593] rust_binder: Write failure EFAULT in pid:223 [ 283.216869][ T36] audit: type=1400 audit(2000000000.740:790): avc: denied { add_name } for pid=14594 comm="syz.5.4944" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.234473][T14601] Invalid ELF header len 16 [ 283.243899][ T36] audit: type=1400 audit(2000000000.740:791): avc: denied { create } for pid=14594 comm="syz.5.4944" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 283.268718][ T36] audit: type=1400 audit(2000000000.740:792): avc: denied { associate } for pid=14594 comm="syz.5.4944" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 283.290489][ T36] audit: type=1400 audit(2000000000.750:793): avc: denied { module_load } for pid=14598 comm="syz.6.4946" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 283.371468][ T1327] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 283.377972][ T1327] usb 5-1: No valid video chain found. [ 283.385898][ T1327] usb 5-1: USB disconnect, device number 15 [ 283.440448][T14605] cgroup: fork rejected by pids controller in /syz1 [ 283.669370][T14672] rust_binder: Error while translating object. [ 283.669399][T14672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 283.675678][T14672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 283.906222][T14674] wg2: left promiscuous mode [ 283.919984][T14674] wg2: left allmulticast mode [ 283.927371][T14674] wg2: entered promiscuous mode [ 283.932323][T14674] wg2: entered allmulticast mode [ 283.963276][ T36] audit: type=1326 audit(2000000001.480:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.1.4950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x0 [ 284.195072][ T64] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 284.285079][ T1327] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 284.346039][ T64] usb 5-1: config index 0 descriptor too short (expected 5668, got 36) [ 284.354392][ T64] usb 5-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 284.363113][ T64] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 284.372131][ T64] usb 5-1: config 3 has no interface number 0 [ 284.378238][ T64] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 284.389113][ T64] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.400386][ T64] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 284.409441][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.417530][ T64] usb 5-1: Product: syz [ 284.421685][ T64] usb 5-1: Manufacturer: syz [ 284.426290][ T64] usb 5-1: SerialNumber: syz [ 284.431747][T14681] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.446143][ T1327] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 284.454300][ T1327] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 284.464545][ T1327] usb 6-1: config 0 has no interface number 0 [ 284.472027][ T1327] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 284.481136][ T1327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.489149][ T1327] usb 6-1: Product: syz [ 284.493318][ T1327] usb 6-1: Manufacturer: syz [ 284.497931][ T1327] usb 6-1: SerialNumber: syz [ 284.503115][ T1327] usb 6-1: config 0 descriptor?? [ 284.567339][T14705] netlink: 'syz.6.4958': attribute type 4 has an invalid length. [ 284.575257][T14705] netlink: 'syz.6.4958': attribute type 27 has an invalid length. [ 284.583135][T14705] netlink: 3609 bytes leftover after parsing attributes in process `syz.6.4958'. [ 284.613334][T14709] wg2: left promiscuous mode [ 284.618016][T14709] wg2: left allmulticast mode [ 284.624156][T14709] wg2: entered promiscuous mode [ 284.629176][T14709] wg2: entered allmulticast mode [ 284.639466][T14680] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 284.648539][T14680] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 284.724463][ T64] usb-storage 5-1:3.20: USB Mass Storage device detected [ 284.747439][ T64] usb-storage 5-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 284.764255][ T64] scsi host1: usb-storage 5-1:3.20 [ 284.778644][ T64] usb 5-1: USB disconnect, device number 16 [ 284.925536][ T36] audit: type=1326 audit(2000000000.870:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.6.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55a78e929 code=0x7ffc0000 [ 284.926721][T14734] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4968'. [ 284.951154][ T1327] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 284.958483][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4968'. [ 284.966548][ T1327] usb 6-1: No valid video chain found. [ 284.981905][ T1327] usb 6-1: USB disconnect, device number 12 [ 285.011975][T14742] wg2: left promiscuous mode [ 285.016694][T14742] wg2: left allmulticast mode [ 285.027933][T14742] wg2: entered promiscuous mode [ 285.032966][T14742] wg2: entered allmulticast mode [ 285.060482][T14746] overlayfs: failed to clone upperpath [ 285.072105][T14746] overlayfs: failed to clone upperpath [ 285.165037][ T64] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 285.316040][ T64] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 285.324153][ T64] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 285.334355][ T64] usb 5-1: config 0 has no interface number 0 [ 285.341795][ T64] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 285.350875][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.358984][ T64] usb 5-1: Product: syz [ 285.363137][ T64] usb 5-1: Manufacturer: syz [ 285.367736][ T64] usb 5-1: SerialNumber: syz [ 285.372934][ T64] usb 5-1: config 0 descriptor?? [ 285.472328][T14760] fuse: Bad value for 'user_id' [ 285.477263][T14760] fuse: Bad value for 'user_id' [ 285.492598][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.498823][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.504966][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.511168][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.517343][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.523498][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.529719][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.535896][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.542034][T14759] 9pnet_fd: Insufficient options for proto=fd [ 285.562114][T14763] binder: Unknown parameter '' [ 285.620540][T14769] wg2: left promiscuous mode [ 285.625230][T14769] wg2: left allmulticast mode [ 285.631191][T14769] wg2: entered promiscuous mode [ 285.636518][T14769] wg2: entered allmulticast mode [ 285.653691][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4982'. [ 285.681493][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4984'. [ 285.781003][ T64] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 285.787449][ T64] usb 5-1: No valid video chain found. [ 285.793749][ T64] usb 5-1: USB disconnect, device number 17 [ 285.825031][ T1327] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 285.957298][T14786] rust_binder: Error in use_page_slow: ESRCH [ 285.957312][T14786] rust_binder: use_range failure ESRCH [ 285.963477][T14786] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 285.969043][T14786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 285.976966][T14786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:349 [ 285.978366][ T1327] usb 6-1: not running at top speed; connect to a high speed hub [ 286.004161][ T1327] usb 6-1: config 84 has an invalid interface number: 68 but max is 1 [ 286.012573][ T1327] usb 6-1: config 84 contains an unexpected descriptor of type 0x2, skipping [ 286.021390][ T1327] usb 6-1: config 84 has an invalid interface number: 174 but max is 1 [ 286.029724][ T1327] usb 6-1: config 84 has an invalid interface number: 4 but max is 1 [ 286.037845][ T1327] usb 6-1: config 84 has 3 interfaces, different from the descriptor's value: 2 [ 286.046889][ T1327] usb 6-1: config 84 has no interface number 0 [ 286.053029][ T1327] usb 6-1: config 84 has no interface number 1 [ 286.059267][ T1327] usb 6-1: config 84 has no interface number 2 [ 286.065475][ T1327] usb 6-1: config 84 interface 68 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 286.076341][ T1327] usb 6-1: config 84 interface 68 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 286.087207][ T1327] usb 6-1: config 84 interface 68 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 286.098074][ T1327] usb 6-1: config 84 interface 68 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 286.109029][ T1327] usb 6-1: config 84 interface 68 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 286.119901][ T1327] usb 6-1: config 84 interface 174 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 286.133313][ T1327] usb 6-1: config 84 interface 4 altsetting 53 has an invalid descriptor for endpoint zero, skipping [ 286.144182][ T1327] usb 6-1: config 84 interface 4 altsetting 53 has a duplicate endpoint with address 0x4, skipping [ 286.154897][ T1327] usb 6-1: config 84 interface 4 altsetting 53 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 286.165776][ T1327] usb 6-1: config 84 interface 4 altsetting 53 endpoint 0x9 has invalid wMaxPacketSize 0 [ 286.175621][ T1327] usb 6-1: config 84 interface 4 altsetting 53 has a duplicate endpoint with address 0x4, skipping [ 286.186419][ T1327] usb 6-1: config 84 interface 4 altsetting 53 has a duplicate endpoint with address 0xB, skipping [ 286.197189][ T1327] usb 6-1: config 84 interface 4 altsetting 53 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 286.208178][ T1327] usb 6-1: config 84 interface 4 altsetting 53 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 286.221264][ T1327] usb 6-1: config 84 interface 68 has no altsetting 0 [ 286.228279][ T1327] usb 6-1: config 84 interface 174 has no altsetting 0 [ 286.235396][ T1327] usb 6-1: config 84 interface 4 has no altsetting 0 [ 286.244766][ T1327] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01d6, bcdDevice=f1.3c [ 286.245154][ T9] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 286.253889][ T1327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.270062][ T1327] usb 6-1: Product: à ¬ [ 286.274242][ T1327] usb 6-1: Manufacturer: 씆â¸×¾î·Šé³ãž¼æŽŸì龡粤嚞ࡣ夭呇é¤ë¸ºä«¸ç¤¤ä¬²ê „ಊ쨷葈㌃蔺ë‰ì°žî ¥ï’¿î©¿ï¬¨ë‡¼ã¿€æ»˜å†®ëŠ¢ë‡»î˜´ë–‚뒑㥲㌸놷ꛈ겲ꕟ탞伥ꌉꗯ拷ຌ늀鉶堘퟊둶밑骙ì…锿ì¼äƒºç¸—â‰è®¦á½¹ì·†êˆ¯â‘¾àª­â¦‚뭗迬襚 [ 286.298915][ T1327] usb 6-1: SerialNumber: Ñ„ [ 286.303826][T14794] wg2: left promiscuous mode [ 286.310364][T14794] wg2: left allmulticast mode [ 286.317090][T14794] wg2: entered promiscuous mode [ 286.322065][T14794] wg2: entered allmulticast mode [ 286.341720][T14798] overlayfs: failed to clone lowerpath [ 286.350081][T14796] cgroup2: Unknown parameter 'obj_user' [ 286.361751][T14800] netlink: 'syz.6.4994': attribute type 1 has an invalid length. [ 286.369939][T14800] netlink: 'syz.6.4994': attribute type 4 has an invalid length. [ 286.407565][T14803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 286.416752][ T9] usb 2-1: config 10 has an invalid interface number: 169 but max is 0 [ 286.434266][ T9] usb 2-1: config 10 has no interface number 0 [ 286.440505][ T9] usb 2-1: config 10 interface 169 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0 [ 286.450444][ T9] usb 2-1: config 10 interface 169 has no altsetting 0 [ 286.714535][T14767] can: request_module (can-proto-0) failed. [ 286.721258][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.729908][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.735083][ T314] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 286.746099][ T1327] ftdi_sio 6-1:84.68: FTDI USB Serial Device converter detected [ 286.754177][ T1327] ftdi_sio ttyUSB0: unknown device type: 0xf13c [ 286.762166][ T1327] ftdi_sio 6-1:84.174: FTDI USB Serial Device converter detected [ 286.770349][ T1327] ftdi_sio ttyUSB1: unknown device type: 0xf13c [ 286.777688][ T1327] ftdi_sio 6-1:84.4: FTDI USB Serial Device converter detected [ 286.785777][ T1327] ftdi_sio ttyUSB2: unknown device type: 0xf13c [ 286.796792][ T1327] usb 6-1: USB disconnect, device number 13 [ 286.806206][ T1327] ftdi_sio 6-1:84.68: device disconnected [ 286.812755][ T1327] ftdi_sio 6-1:84.174: device disconnected [ 286.819853][ T1327] ftdi_sio 6-1:84.4: device disconnected [ 286.897196][ T314] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 286.905375][ T314] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 286.915766][ T314] usb 5-1: config 0 has no interface number 0 [ 286.925365][ T314] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 286.934445][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.942702][ T314] usb 5-1: Product: syz [ 286.947077][ T314] usb 5-1: Manufacturer: syz [ 286.951694][ T314] usb 5-1: SerialNumber: syz [ 286.960991][ T314] usb 5-1: config 0 descriptor?? [ 287.277322][T14818] wg2: left promiscuous mode [ 287.282002][T14818] wg2: left allmulticast mode [ 287.288226][T14818] wg2: entered promiscuous mode [ 287.293173][T14818] wg2: entered allmulticast mode [ 287.374169][ T314] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 287.380901][ T314] usb 5-1: No valid video chain found. [ 287.387706][ T314] usb 5-1: USB disconnect, device number 18 [ 287.416132][ T64] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 287.425356][ T64] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.532883][T14842] can: request_module (can-proto-0) failed. [ 287.897180][T14862] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 287.897207][T14862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 287.905452][T14862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:260 [ 288.114410][T14871] fuse: Bad value for 'user_id' [ 288.129263][T14871] fuse: Bad value for 'user_id' [ 288.685004][ T64] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 288.791054][T14893] rust_binder: Error while translating object. [ 288.791121][T14893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 288.797977][T14893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 288.799081][T14895] rust_binder: Error while translating object. [ 288.817345][T14895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 288.823558][T14895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 288.834260][T14893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 288.865748][ T64] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 288.883842][ T64] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 288.888106][T14904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=14904 comm=syz.6.5033 [ 288.894475][ T64] usb 6-1: config 0 has no interface number 0 [ 288.914256][ T64] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 288.929698][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.938753][ T64] usb 6-1: Product: syz [ 288.943008][ T64] usb 6-1: Manufacturer: syz [ 288.951436][ T64] usb 6-1: SerialNumber: syz [ 288.958450][ T64] usb 6-1: config 0 descriptor?? [ 289.004089][ T9] usb 2-1: string descriptor 0 read error: -71 [ 289.010487][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice=96.5e [ 289.019879][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.031724][ T9] usb 2-1: can't set config #10, error -71 [ 289.038909][ T9] usb 2-1: USB disconnect, device number 20 [ 289.042104][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 289.042120][ T36] audit: type=1400 audit(2000000000.060:841): avc: denied { nlmsg_read } for pid=14917 comm="syz.1.5040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 289.125796][T14919] rust_binder: Error while translating object. [ 289.125887][T14919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.132234][T14919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 289.195057][ T1519] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 289.335001][ T1519] usb 5-1: device descriptor read/64, error -71 [ 289.366752][ T64] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 289.373743][ T64] usb 6-1: No valid video chain found. [ 289.382530][ T64] usb 6-1: USB disconnect, device number 14 [ 289.586718][ T36] audit: type=1400 audit(2000000000.610:842): avc: denied { ioctl } for pid=14938 comm="syz.1.5048" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.695269][ T1519] usb 5-1: device descriptor read/64, error -71 [ 289.824990][ T1327] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 289.891142][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 289.893707][ T36] audit: type=1400 audit(2000000000.260:843): avc: denied { getopt } for pid=14945 comm="syz.5.5051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 289.918841][ T64] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 289.939006][ T1519] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 289.944533][T14947] fido_id[14947]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 289.974816][T14949] syzkaller0: entered promiscuous mode [ 289.980389][T14949] syzkaller0: entered allmulticast mode [ 289.995020][ T1327] usb 2-1: Using ep0 maxpacket: 32 [ 290.001304][ T1327] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 290.009779][ T1327] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 290.018410][ T1327] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 290.027577][ T1327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 290.037260][ T1327] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 290.047127][ T1327] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.060133][ T1327] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 290.069442][ T1327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.081849][ T1327] usb 2-1: config 0 descriptor?? [ 290.087074][ T1519] usb 5-1: device descriptor read/64, error -71 [ 290.272890][T14971] can: request_module (can-proto-0) failed. [ 290.297693][ T1327] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 290.324999][ T1519] usb 5-1: device descriptor read/64, error -71 [ 290.435093][ T1519] usb usb5-port1: attempt power cycle [ 290.497237][T14939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.505018][ T45] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 290.506215][T14939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.523283][ T9] usb 2-1: USB disconnect, device number 21 [ 290.529742][ T9] usblp0: removed [ 290.656006][ T45] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 290.664114][ T45] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 290.674340][ T45] usb 6-1: config 0 has no interface number 0 [ 290.681749][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 290.690850][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.698857][ T45] usb 6-1: Product: syz [ 290.702995][ T45] usb 6-1: Manufacturer: syz [ 290.707590][ T45] usb 6-1: SerialNumber: syz [ 290.712658][ T45] usb 6-1: config 0 descriptor?? [ 290.774986][ T1519] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 290.795917][ T1519] usb 5-1: device descriptor read/8, error -71 [ 290.926007][ T1519] usb 5-1: device descriptor read/8, error -71 [ 291.071779][ T36] audit: type=1400 audit(2000000001.440:844): avc: denied { ioctl } for pid=14988 comm="syz.1.5068" path="socket:[52845]" dev="sockfs" ino=52845 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 291.097160][ T36] audit: type=1400 audit(2000000001.450:845): avc: denied { execute } for pid=14988 comm="syz.1.5068" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.121164][ T45] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 291.127644][ T45] usb 6-1: No valid video chain found. [ 291.135071][ T45] usb 6-1: USB disconnect, device number 15 [ 291.175035][ T1519] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 291.196027][ T1519] usb 5-1: device descriptor read/8, error -71 [ 291.326028][ T1519] usb 5-1: device descriptor read/8, error -71 [ 291.355026][ T9] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 291.378006][ T36] audit: type=1326 audit(2000000001.750:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15002 comm="syz.6.5072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb55a78e929 code=0x0 [ 291.435174][ T1519] usb usb5-port1: unable to enumerate USB device [ 291.485014][ T9] usb 2-1: device descriptor read/64, error -71 [ 291.724973][ T9] usb 2-1: device descriptor read/64, error -71 [ 291.963733][T15010] wg2: left promiscuous mode [ 291.968413][ T9] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 291.969359][T15010] wg2: left allmulticast mode [ 291.996428][T15013] fuse: Unknown parameter '&d' [ 292.105027][ T9] usb 2-1: device descriptor read/64, error -71 [ 292.344975][ T9] usb 2-1: device descriptor read/64, error -71 [ 292.385026][ T314] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 292.455144][ T9] usb usb2-port1: attempt power cycle [ 292.536487][ T314] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 292.544605][ T314] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 292.554808][ T314] usb 5-1: config 0 has no interface number 0 [ 292.562288][ T314] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 292.571384][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.579413][ T314] usb 5-1: Product: syz [ 292.583570][ T314] usb 5-1: Manufacturer: syz [ 292.588176][ T314] usb 5-1: SerialNumber: syz [ 292.593257][ T314] usb 5-1: config 0 descriptor?? [ 292.774968][ T1519] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 292.794952][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 292.815880][ T9] usb 2-1: device descriptor read/8, error -71 [ 292.926401][ T1519] usb 6-1: unable to get BOS descriptor or descriptor too short [ 292.934451][ T1519] usb 6-1: not running at top speed; connect to a high speed hub [ 292.942978][ T1519] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.945988][ T9] usb 2-1: device descriptor read/8, error -71 [ 292.953203][ T1519] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.969643][ T1519] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.978746][ T1519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.986771][ T1519] usb 6-1: Product: syz [ 292.990932][ T1519] usb 6-1: Manufacturer: syz [ 292.995553][ T1519] usb 6-1: SerialNumber: syz [ 293.007785][ T314] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 293.014245][ T314] usb 5-1: No valid video chain found. [ 293.020713][ T314] usb 5-1: USB disconnect, device number 23 [ 293.194953][ T9] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 293.210865][ T1519] usb 6-1: unknown interface protocol 0xfc, assuming v1 [ 293.216244][ T9] usb 2-1: device descriptor read/8, error -71 [ 293.217996][ T1519] usb 6-1: 0:2 : does not exist [ 293.231110][ T1519] usb 6-1: USB disconnect, device number 16 [ 293.345958][ T9] usb 2-1: device descriptor read/8, error -71 [ 293.455202][ T9] usb usb2-port1: unable to enumerate USB device [ 293.722254][T15031] wg2: left promiscuous mode [ 293.726918][T15031] wg2: left allmulticast mode [ 293.871740][T15052] tipc: Enabling of bearer rejected, failed to enable media [ 294.037363][T15057] binder: Unknown parameter 'defcontext01777777777777777777777' [ 294.053859][T15059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.054212][T15059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 294.060728][T15059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 294.335014][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 294.494989][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 294.501274][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 294.511133][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 294.520999][ T1519] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 294.528603][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 294.537717][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.546361][ T45] usb 5-1: config 0 descriptor?? [ 294.551556][T15064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 294.558743][T15064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 294.694948][ T1519] usb 2-1: Using ep0 maxpacket: 32 [ 294.701108][ T1519] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.712691][ T1519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 294.723858][ T1519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.735037][ T1519] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 294.744078][ T1519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.752671][ T1519] usb 2-1: config 0 descriptor?? [ 294.757910][T15078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 294.765751][ T1519] hub 2-1:0.0: USB hub found [ 294.772925][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 294.785379][ T45] usb 5-1: USB disconnect, device number 24 [ 294.792929][ T45] usblp0: removed [ 294.975573][ T1519] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 294.986498][ T1519] usbhid 2-1:0.0: can't add hid device: -71 [ 294.992737][ T1519] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 295.175482][ T1519] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 295.183623][ T1519] usb 2-1: device reset changed ep0 maxpacket size! [ 295.190434][ T1519] usb 2-1: USB disconnect, device number 26 [ 295.338305][ T36] audit: type=1326 audit(2000000000.330:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.5110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x0 [ 295.484939][ T1519] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 295.565082][ T36] audit: type=1326 audit(2000000000.560:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.5.5117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc254d8e929 code=0x0 [ 295.592719][T15126] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5118'. [ 295.636012][ T1519] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 295.644255][ T1519] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 295.654456][ T1519] usb 2-1: config 0 has no interface number 0 [ 295.661938][ T1519] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 295.671016][ T1519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.679021][ T1519] usb 2-1: Product: syz [ 295.683163][ T1519] usb 2-1: Manufacturer: syz [ 295.687757][ T1519] usb 2-1: SerialNumber: syz [ 295.693222][ T1519] usb 2-1: config 0 descriptor?? [ 296.109393][ T1519] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 296.115900][ T1519] usb 2-1: No valid video chain found. [ 296.123172][ T1519] usb 2-1: USB disconnect, device number 27 [ 296.137403][T15131] sit0: entered promiscuous mode [ 296.143320][T15131] netlink: 'syz.5.5120': attribute type 1 has an invalid length. [ 296.151139][T15131] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5120'. [ 296.167982][T15133] 9pnet_fd: Insufficient options for proto=fd [ 296.174941][ T36] audit: type=1326 audit(2000000001.160:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.5.5121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc254d8e929 code=0x0 [ 296.604963][ T314] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 296.633096][T15156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.642173][T15156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.703108][T15158] input: syz1 as /devices/virtual/input/input18 [ 296.711565][T15158] overlayfs: missing 'lowerdir' [ 296.717652][T15158] rust_binder: 15156 RLIMIT_NICE not set [ 296.749221][T15160] 9pnet_fd: Insufficient options for proto=fd [ 296.762053][ T314] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 296.771047][ T314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.782399][ T314] usb 5-1: config 0 has no interface number 0 [ 296.782592][T15164] wg2: entered promiscuous mode [ 296.793880][T15164] wg2: entered allmulticast mode [ 296.796291][ T314] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 296.819395][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.829249][ T314] usb 5-1: Product: syz [ 296.833439][ T314] usb 5-1: Manufacturer: syz [ 296.838299][ T314] usb 5-1: SerialNumber: syz [ 296.843586][ T314] usb 5-1: config 0 descriptor?? [ 296.849844][ T314] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 296.856212][ T314] usb 5-1: No valid video chain found. [ 297.468681][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5139'. [ 297.494285][T15186] overlayfs: failed to clone upperpath [ 297.502819][T15186] 9pnet_fd: Insufficient options for proto=fd [ 297.648396][T15188] netlink: 57 bytes leftover after parsing attributes in process `syz.5.5142'. [ 297.684482][T15191] wg2: left promiscuous mode [ 297.689132][T15191] wg2: left allmulticast mode [ 297.695081][T15191] wg2: entered promiscuous mode [ 297.700021][T15191] wg2: entered allmulticast mode [ 297.731221][T15198] overlayfs: failed to clone upperpath [ 297.994989][ T314] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 298.145980][ T314] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 298.154093][ T314] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 298.164304][ T314] usb 2-1: config 0 has no interface number 0 [ 298.171734][ T314] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 298.180828][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.188950][ T314] usb 2-1: Product: syz [ 298.193094][ T314] usb 2-1: Manufacturer: syz [ 298.197696][ T314] usb 2-1: SerialNumber: syz [ 298.202964][ T314] usb 2-1: config 0 descriptor?? [ 298.260567][T15205] tipc: Started in network mode [ 298.265500][T15205] tipc: Node identity 7f000001, cluster identity 4711 [ 298.272350][T15205] tipc: Enabling of bearer rejected, failed to enable media [ 298.617986][ T314] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 298.624384][ T314] usb 2-1: No valid video chain found. [ 298.630737][ T314] usb 2-1: USB disconnect, device number 28 [ 299.379586][ T9] usb 5-1: USB disconnect, device number 25 [ 299.401650][T15213] 9pnet_fd: Insufficient options for proto=fd [ 299.764927][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 299.915864][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 299.916300][T15220] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿßÿÿÿÿÿÿÿÿ) failed with errno=-22 [ 299.922145][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 299.939343][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 299.947978][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 299.956979][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 299.966700][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 299.976364][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.989352][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 299.998394][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.007108][ T9] usb 5-1: config 0 descriptor?? [ 300.034936][T15225] wg2: left promiscuous mode [ 300.039573][T15225] wg2: left allmulticast mode [ 300.045814][T15225] wg2: entered promiscuous mode [ 300.050744][T15225] wg2: entered allmulticast mode [ 300.141004][T15230] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 300.150226][T15230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.150249][T15230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 300.217520][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 300.301641][T15240] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 300.301668][T15240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 300.310410][T15240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:429 [ 300.416806][ T588] usb 5-1: USB disconnect, device number 26 [ 300.432518][ T588] usblp0: removed [ 306.988985][T15250] fuse: Bad value for 'user_id' [ 306.997195][T15248] wg2: left promiscuous mode [ 307.003501][T15250] fuse: Bad value for 'user_id' [ 307.009084][T15248] wg2: left allmulticast mode [ 307.020519][T15247] @: renamed from bridge0 (while UP) [ 307.036796][T15248] wg2: entered promiscuous mode [ 307.041696][T15248] wg2: entered allmulticast mode [ 307.105446][T15256] tipc: Started in network mode [ 307.110365][T15256] tipc: Node identity 8e9b1e82396e, cluster identity 4711 [ 307.125170][T15258] overlayfs: failed to clone upperpath [ 307.130067][T15256] tipc: Enabled bearer , priority 0 [ 307.141246][T15256] tipc: Resetting bearer [ 307.162935][T15256] tipc: Disabling bearer [ 307.170991][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5170'. [ 307.184604][T15261] rust_binder: Write failure EINVAL in pid:436 [ 307.244048][T15259] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.257302][T15259] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.264592][T15259] bridge_slave_0: entered allmulticast mode [ 307.271030][T15259] bridge_slave_0: entered promiscuous mode [ 307.277331][T15259] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.284348][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.291421][T15259] bridge_slave_1: entered allmulticast mode [ 307.297586][T15259] bridge_slave_1: entered promiscuous mode [ 307.335765][T15259] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.342823][T15259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.350216][T15259] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.357258][T15259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.377053][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.384566][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.393875][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.401046][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.409850][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.416918][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.440296][T15259] veth0_vlan: entered promiscuous mode [ 307.450212][T15259] veth1_macvtap: entered promiscuous mode [ 307.474968][ T314] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 307.484727][T15279] 9pnet_fd: Insufficient options for proto=fd [ 307.492005][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 307.524811][T15284] wg2: entered promiscuous mode [ 307.530097][T15284] wg2: entered allmulticast mode [ 307.600359][T15288] rust_binder: Write failure EFAULT in pid:10 [ 307.624982][ T9] usb 2-1: device descriptor read/64, error -71 [ 307.638199][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.649107][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.658867][ T314] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 307.667902][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.676628][ T314] usb 5-1: config 0 descriptor?? [ 307.761912][T15296] veth1_to_bond: entered allmulticast mode [ 307.768007][T15296] veth1_to_bond: entered promiscuous mode [ 307.774424][T15296] veth1_to_bond: left promiscuous mode [ 307.780070][T15296] veth1_to_bond: left allmulticast mode [ 307.816162][T15302] overlayfs: failed to clone upperpath [ 307.841260][T15306] wg2: left promiscuous mode [ 307.845959][T15306] wg2: left allmulticast mode [ 307.852048][T15306] wg2: entered promiscuous mode [ 307.857127][T15306] wg2: entered allmulticast mode [ 307.875105][ T9] usb 2-1: device descriptor read/64, error -71 [ 308.082810][T15272] binder: Unknown parameter '000000000000000000030x000000000000000718446744073709551615' [ 308.084055][ T314] playstation 0003:054C:0DF2.000B: item fetching failed at offset 3/5 [ 308.101143][ T314] playstation 0003:054C:0DF2.000B: Parse failed [ 308.107476][ T314] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 308.124937][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 308.198242][ T45] usb 5-1: USB disconnect, device number 27 [ 308.265166][ T9] usb 2-1: device descriptor read/64, error -71 [ 308.418802][T15319] overlayfs: conflicting options: nfs_export=on,index=off [ 308.422515][T15321] : renamed from bond_slave_0 [ 308.448840][T15328] overlayfs: failed to clone upperpath [ 308.471365][T15332] wg2: left promiscuous mode [ 308.476046][T15332] wg2: left allmulticast mode [ 308.481904][T15332] wg2: entered promiscuous mode [ 308.486863][T15332] wg2: entered allmulticast mode [ 308.504947][ T9] usb 2-1: device descriptor read/64, error -71 [ 308.553974][T15343] tipc: Started in network mode [ 308.558882][T15343] tipc: Node identity 4, cluster identity 4711 [ 308.565116][T15343] tipc: Node number set to 4 [ 308.615040][ T9] usb usb2-port1: attempt power cycle [ 308.903392][T15347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 308.903771][T15347] rust_binder: Error while translating object. [ 308.912988][T15347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 308.919200][T15347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 308.938944][T15350] exFAT-fs (rnullb0): invalid boot record signature [ 308.954697][T15350] exFAT-fs (rnullb0): failed to read boot sector [ 308.961081][T15350] exFAT-fs (rnullb0): failed to recognize exfat type [ 308.964949][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 308.968222][T15350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=15350 comm=syz.4.5202 [ 308.988762][T15350] exFAT-fs (rnullb0): invalid boot record signature [ 308.995580][T15350] exFAT-fs (rnullb0): failed to read boot sector [ 309.002074][T15350] exFAT-fs (rnullb0): failed to recognize exfat type [ 309.006083][ T9] usb 2-1: device descriptor read/8, error -71 [ 309.036588][T15357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 309.036623][T15357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:354 [ 309.046154][T15357] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 309.055336][T15357] rust_binder: Read failure Err(EFAULT) in pid:354 [ 309.063553][T15363] wg2: left promiscuous mode [ 309.079333][T15363] wg2: left allmulticast mode [ 309.086501][T15363] wg2: entered promiscuous mode [ 309.091618][T15363] wg2: entered allmulticast mode [ 309.146002][ T9] usb 2-1: device descriptor read/8, error -71 [ 309.196031][T15379] overlayfs: failed to clone upperpath [ 309.325163][ T64] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 309.384985][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 309.402792][T15391] wg2: left promiscuous mode [ 309.405992][ T9] usb 2-1: device descriptor read/8, error -71 [ 309.407676][T15391] wg2: left allmulticast mode [ 309.420951][T15391] wg2: entered promiscuous mode [ 309.425902][T15391] wg2: entered allmulticast mode [ 309.466048][T15395] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 309.467718][T15396] SELinux: failed to load policy [ 309.481747][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.491911][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.502738][ T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.511804][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.519867][ T64] usb 5-1: Product: syz [ 309.524645][ T64] usb 5-1: Manufacturer: syz [ 309.529337][ T64] usb 5-1: SerialNumber: syz [ 309.546012][ T9] usb 2-1: device descriptor read/8, error -71 [ 309.568848][T15404] rust_binder: Error while translating object. [ 309.568879][T15404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 309.575138][T15404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:42 [ 309.655005][ T9] usb usb2-port1: unable to enumerate USB device [ 309.739475][ T64] usb 5-1: 0:2 : does not exist [ 309.748109][ T64] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 309.759946][ T64] usb 5-1: USB disconnect, device number 28 [ 309.772840][T15269] udevd[15269]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 309.808164][ T6441] tipc: Subscription rejected, illegal request [ 309.820044][T15417] wg2: left promiscuous mode [ 309.824763][T15417] wg2: left allmulticast mode [ 309.830813][T15417] wg2: entered promiscuous mode [ 309.835974][T15417] wg2: entered allmulticast mode [ 309.875970][T15427] overlayfs: failed to clone upperpath [ 310.310795][T15442] wg2: left promiscuous mode [ 310.315490][T15442] wg2: left allmulticast mode [ 310.321499][T15442] wg2: entered promiscuous mode [ 310.326937][T15442] wg2: entered allmulticast mode [ 310.426596][T15453] overlayfs: failed to clone upperpath [ 310.494927][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 310.644955][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 310.651185][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 310.659579][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 310.668219][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 310.677189][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.686841][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.696487][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.709452][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 310.718493][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.726993][ T45] usb 5-1: config 0 descriptor?? [ 310.754975][ T64] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 310.904942][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 310.911138][ T64] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 310.919286][ T64] usb 2-1: config 0 has no interface number 0 [ 310.926739][ T64] usb 2-1: New USB device found, idVendor=0424, idProduct=6a01, bcdDevice=c2.2f [ 310.934975][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 310.935824][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.954449][ T64] usb 2-1: Product: syz [ 310.958660][ T64] usb 2-1: Manufacturer: syz [ 310.963269][ T64] usb 2-1: SerialNumber: syz [ 310.970770][ T64] usb 2-1: config 0 descriptor?? [ 311.135248][ T45] usb 5-1: USB disconnect, device number 29 [ 311.141762][ T45] usblp0: removed [ 311.181507][ T1327] usb 2-1: USB disconnect, device number 33 [ 311.203094][T15469] wg2: left promiscuous mode [ 311.207733][T15469] wg2: left allmulticast mode [ 311.213699][T15469] wg2: entered promiscuous mode [ 311.218869][T15469] wg2: entered allmulticast mode [ 311.434977][ T45] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 311.501495][T15478] overlayfs: failed to clone upperpath [ 311.554923][ T1327] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 311.584899][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 311.590964][ T45] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 311.601140][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.611377][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.620470][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.628922][ T45] usb 5-1: Product: ж [ 311.633009][ T45] usb 5-1: Manufacturer: Л [ 311.637525][ T45] usb 5-1: SerialNumber: Ђ [ 311.684905][ T1327] usb 2-1: device descriptor read/64, error -71 [ 311.924927][ T1327] usb 2-1: device descriptor read/64, error -71 [ 312.045048][ T45] usb 5-1: 0:2 : does not exist [ 312.054443][ T45] usb 5-1: USB disconnect, device number 30 [ 312.056993][T15487] overlayfs: failed to clone lowerpath [ 312.069657][T15269] udevd[15269]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 312.091479][T15491] wg2: left promiscuous mode [ 312.096160][T15491] wg2: left allmulticast mode [ 312.102120][T15491] wg2: entered promiscuous mode [ 312.107168][T15491] wg2: entered allmulticast mode [ 312.122950][T15493] tipc: Can't bind to reserved service type 2 [ 312.175053][ T1327] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 312.304903][ T1327] usb 2-1: device descriptor read/64, error -71 [ 312.544862][ T1327] usb 2-1: device descriptor read/64, error -71 [ 312.655354][ T1327] usb usb2-port1: attempt power cycle [ 312.689094][T15512] wg2: left promiscuous mode [ 312.693774][T15512] wg2: left allmulticast mode [ 312.699951][T15512] wg2: entered promiscuous mode [ 312.704929][T15512] wg2: entered allmulticast mode [ 312.732448][T15517] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 312.794547][ T36] audit: type=1400 audit(2000000001.540:850): avc: denied { mounton } for pid=15534 comm="syz.7.5275" path="/30/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 312.795070][T15535] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 312.833169][T15535] rust_binder: Write failure EINVAL in pid:80 [ 312.833175][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 312.861925][ T36] audit: type=1400 audit(2000000001.610:851): avc: denied { map } for pid=15536 comm="syz.7.5276" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 312.954831][ T9] usb 5-1: device descriptor read/64, error -71 [ 312.961319][T15543] wg2: left promiscuous mode [ 312.966025][T15543] wg2: left allmulticast mode [ 312.972076][T15543] wg2: entered promiscuous mode [ 312.977147][T15543] wg2: entered allmulticast mode [ 312.994838][ T1327] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 313.016864][ T1327] usb 2-1: device descriptor read/8, error -71 [ 313.147104][ T1327] usb 2-1: device descriptor read/8, error -71 [ 313.159322][T15552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.160130][T15553] rust_binder: Error in use_page_slow: ESRCH [ 313.166740][T15553] rust_binder: use_range failure ESRCH [ 313.172775][T15553] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 313.178359][T15553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 313.186410][T15553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:97 [ 313.194820][ T9] usb 5-1: device descriptor read/64, error -71 [ 313.384831][ T1327] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 313.405909][ T1327] usb 2-1: device descriptor read/8, error -71 [ 313.454809][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 313.544612][ T1327] usb 2-1: device descriptor read/8, error -71 [ 313.594793][ T9] usb 5-1: device descriptor read/64, error -71 [ 313.654865][ T1327] usb usb2-port1: unable to enumerate USB device [ 313.834819][ T9] usb 5-1: device descriptor read/64, error -71 [ 313.944897][ T9] usb usb5-port1: attempt power cycle [ 314.010414][T15557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.053091][T15565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.253328][T15570] wg2: left promiscuous mode [ 314.258030][T15570] wg2: left allmulticast mode [ 314.264008][T15570] wg2: entered promiscuous mode [ 314.268921][T15570] wg2: entered allmulticast mode [ 314.284792][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 314.288025][T15573] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 314.304763][ T1327] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 314.305714][ T9] usb 5-1: device descriptor read/8, error -71 [ 314.445737][ T9] usb 5-1: device descriptor read/8, error -71 [ 314.468163][ T1327] usb 8-1: unable to get BOS descriptor or descriptor too short [ 314.476595][ T1327] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 314.484200][ T1327] usb 8-1: can't read configurations, error -71 [ 314.634766][ T64] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 314.684743][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 314.705717][ T9] usb 5-1: device descriptor read/8, error -71 [ 314.784741][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 314.790954][ T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 314.800842][ T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 314.811195][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.820298][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 314.828296][ T64] usb 2-1: SerialNumber: syz [ 314.833771][T15576] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 314.841045][T15576] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 314.849065][ T9] usb 5-1: device descriptor read/8, error -71 [ 314.964813][ T9] usb usb5-port1: unable to enumerate USB device [ 315.037126][T15578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.037217][T15578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.054247][ T64] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 315.062688][ T64] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 315.077021][ T64] usb 2-1: USB disconnect, device number 38 [ 315.091732][ T36] audit: type=1400 audit(2000000003.840:852): avc: denied { setopt } for pid=15582 comm="syz.7.5293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.112446][ T36] audit: type=1400 audit(2000000003.840:853): avc: denied { setopt } for pid=15582 comm="syz.7.5293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.183284][T15594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5297'. [ 315.524719][ T1327] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 315.566008][T15597] wg2: left promiscuous mode [ 315.571175][T15597] wg2: left allmulticast mode [ 315.580318][T15597] wg2: entered promiscuous mode [ 315.585395][T15597] wg2: entered allmulticast mode [ 315.600878][ T36] audit: type=1326 audit(2000000000.410:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.4.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 315.611962][T15603] binder: Unknown parameter 'context' [ 315.625272][ T36] audit: type=1326 audit(2000000000.410:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.4.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 315.654536][ T36] audit: type=1326 audit(2000000000.420:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.4.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 315.658907][ T1327] usb 8-1: device descriptor read/64, error -71 [ 315.679129][ T36] audit: type=1326 audit(2000000000.420:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.4.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 315.707820][ T36] audit: type=1326 audit(2000000000.420:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.4.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 315.731266][ T36] audit: type=1326 audit(2000000000.420:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.4.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 315.814195][T15626] wg2: left promiscuous mode [ 315.818949][T15626] wg2: left allmulticast mode [ 315.824984][T15626] wg2: entered promiscuous mode [ 315.829920][T15626] wg2: entered allmulticast mode [ 315.924691][ T1327] usb 8-1: device descriptor read/64, error -71 [ 315.932087][T15642] rust_binder: Write failure EINVAL in pid:372 [ 315.973219][T15644] lo: entered promiscuous mode [ 316.035618][ T1327] usb usb8-port1: attempt power cycle [ 316.338909][T15655] wg2: left promiscuous mode [ 316.343541][T15655] wg2: left allmulticast mode [ 316.349419][T15655] wg2: entered promiscuous mode [ 316.354811][T15655] wg2: entered allmulticast mode [ 316.375245][ T1327] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 316.405740][ T1327] usb 8-1: device descriptor read/8, error -71 [ 316.535594][ T1327] usb 8-1: device descriptor read/8, error -71 [ 316.713789][T15675] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 316.720998][T15675] rust_binder: Write failure EINVAL in pid:385 [ 316.730932][T15678] wg2: entered promiscuous mode [ 316.742059][T15678] wg2: entered allmulticast mode [ 316.750076][T15640] lo: left promiscuous mode [ 316.774659][ T1327] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 316.783457][T15683] incfs: Error accessing: ./file0. [ 316.788698][T15683] incfs: mount failed -20 [ 316.805614][ T1327] usb 8-1: device descriptor read/8, error -71 [ 316.935615][ T1327] usb 8-1: device descriptor read/8, error -71 [ 317.024631][ T314] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 317.044790][ T1327] usb usb8-port1: unable to enumerate USB device [ 317.103977][T15695] overlayfs: missing 'lowerdir' [ 317.175926][ T314] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 317.183530][ T314] usb 5-1: can't read configurations, error -61 [ 317.314610][ T314] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 317.322588][T15709] wg2: left promiscuous mode [ 317.327380][T15709] wg2: left allmulticast mode [ 317.333323][T15709] wg2: entered promiscuous mode [ 317.338349][T15709] wg2: entered allmulticast mode [ 317.485960][ T314] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 317.493529][ T314] usb 5-1: can't read configurations, error -61 [ 317.500045][ T314] usb usb5-port1: attempt power cycle [ 317.844614][ T314] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 317.866253][ T314] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 317.873905][ T314] usb 5-1: can't read configurations, error -61 [ 317.880526][T15740] wg2: left promiscuous mode [ 317.885218][T15740] wg2: left allmulticast mode [ 317.891106][T15740] wg2: entered promiscuous mode [ 317.896160][T15740] wg2: entered allmulticast mode [ 318.004611][ T314] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 318.026248][ T314] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 318.033884][ T314] usb 5-1: can't read configurations, error -61 [ 318.040368][ T314] usb usb5-port1: unable to enumerate USB device [ 318.201399][T15756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.202705][T15756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.209520][T15756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 318.448605][T15760] overlayfs: failed to resolve './file0': -2 [ 318.478955][T15764] wg2: left promiscuous mode [ 318.483571][T15764] wg2: left allmulticast mode [ 318.489508][T15764] wg2: entered promiscuous mode [ 318.494505][T15764] wg2: entered allmulticast mode [ 318.574548][ T1327] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 318.725588][ T1327] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 318.733732][ T1327] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.744016][ T1327] usb 8-1: config 0 has no interface number 0 [ 318.750191][ T1327] usb 8-1: too many endpoints for config 0 interface 64 altsetting 0: 48, using maximum allowed: 30 [ 318.760998][ T1327] usb 8-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 318.775529][ T1327] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 318.784671][ T1327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.792667][ T1327] usb 8-1: Product: syz [ 318.796889][ T1327] usb 8-1: Manufacturer: syz [ 318.801476][ T1327] usb 8-1: SerialNumber: syz [ 318.806996][ T1327] usb 8-1: config 0 descriptor?? [ 319.040972][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 319.040990][ T36] audit: type=1400 audit(2000000000.510:886): avc: denied { link } for pid=15771 comm="syz.5.5365" name="file1" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 319.075082][T15778] overlayfs: failed to resolve './file0': -2 [ 319.104011][T15784] wg2: left promiscuous mode [ 319.108656][T15784] wg2: left allmulticast mode [ 319.114510][T15784] wg2: entered promiscuous mode [ 319.119450][T15784] wg2: entered allmulticast mode [ 319.214865][ T1519] usb 8-1: USB disconnect, device number 6 [ 319.661212][T15791] tc_dump_action: action bad kind [ 319.675430][T15795] overlayfs: failed to clone upperpath [ 319.704348][T15801] overlayfs: failed to resolve './file0': -2 [ 319.732774][T15808] wg2: left promiscuous mode [ 319.737479][T15808] wg2: left allmulticast mode [ 319.743825][T15808] wg2: entered promiscuous mode [ 319.748835][T15808] wg2: entered allmulticast mode [ 319.908121][T15823] overlayfs: failed to resolve './file1': -2 [ 320.234520][ T314] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 320.297513][T15834] wg2: left promiscuous mode [ 320.302199][T15834] wg2: left allmulticast mode [ 320.308399][T15834] wg2: entered promiscuous mode [ 320.313338][T15834] wg2: entered allmulticast mode [ 320.337802][ T36] audit: type=1400 audit(2000000000.560:887): avc: denied { listen } for pid=15837 comm="syz.5.5393" lport=27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.396029][ T314] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 320.404287][ T314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.414544][ T314] usb 5-1: config 0 has no interface number 0 [ 320.420692][ T314] usb 5-1: too many endpoints for config 0 interface 64 altsetting 0: 48, using maximum allowed: 30 [ 320.431608][ T314] usb 5-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 320.446312][ T314] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 320.455533][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.463696][ T314] usb 5-1: Product: syz [ 320.468045][ T314] usb 5-1: Manufacturer: syz [ 320.472719][ T314] usb 5-1: SerialNumber: syz [ 320.478224][ T314] usb 5-1: config 0 descriptor?? [ 320.888463][ T314] usb 5-1: USB disconnect, device number 39 [ 320.906462][T15853] overlayfs: failed to resolve './file1': -2 [ 320.920587][T15855] tmpfs: Unknown parameter 'Bime' [ 321.276938][T15858] wg2: left promiscuous mode [ 321.281606][T15858] wg2: left allmulticast mode [ 321.288128][T15858] wg2: entered promiscuous mode [ 321.293194][T15858] wg2: entered allmulticast mode [ 321.363622][T15875] overlayfs: failed to resolve './file1': -2 [ 321.433360][T15886] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 321.442962][T15886] wg2: left promiscuous mode [ 321.452139][T15886] wg2: left allmulticast mode [ 321.458799][T15886] wg2: entered promiscuous mode [ 321.463680][T15886] wg2: entered allmulticast mode [ 321.579951][T15895] wg2: left promiscuous mode [ 321.585647][T15895] wg2: left allmulticast mode [ 321.594421][T15895] wg2: entered promiscuous mode [ 321.601078][T15895] wg2: entered allmulticast mode [ 321.624499][T14044] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 321.642410][T15898] wg2: left promiscuous mode [ 321.647213][T15898] wg2: left allmulticast mode [ 321.663980][T15898] FAULT_INJECTION: forcing a failure. [ 321.663980][T15898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.677129][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.4.5414 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 321.677157][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.677168][T15898] Call Trace: [ 321.677175][T15898] [ 321.677183][T15898] __dump_stack+0x21/0x30 [ 321.677218][T15898] dump_stack_lvl+0x10c/0x190 [ 321.677240][T15898] ? __cfi_dump_stack_lvl+0x10/0x10 [ 321.677264][T15898] ? has_cap_mac_admin+0xd0/0xd0 [ 321.677295][T15898] dump_stack+0x19/0x20 [ 321.677315][T15898] should_fail_ex+0x3d9/0x530 [ 321.677338][T15898] should_fail+0xf/0x20 [ 321.677358][T15898] should_fail_usercopy+0x1e/0x30 [ 321.677382][T15898] _copy_from_user+0x22/0xb0 [ 321.677406][T15898] sock_do_ioctl+0x18b/0x330 [ 321.677431][T15898] ? sock_show_fdinfo+0xd0/0xd0 [ 321.677454][T15898] ? __cfi_vfs_write+0x10/0x10 [ 321.677478][T15898] ? __kasan_check_write+0x18/0x20 [ 321.677501][T15898] ? mutex_unlock+0x8b/0x240 [ 321.677523][T15898] sock_ioctl+0x634/0x7b0 [ 321.677544][T15898] ? __cfi_sock_ioctl+0x10/0x10 [ 321.677567][T15898] ? __fget_files+0x2c5/0x340 [ 321.677593][T15898] ? bpf_lsm_file_ioctl+0xd/0x20 [ 321.677615][T15898] ? security_file_ioctl+0x34/0xd0 [ 321.677642][T15898] ? __cfi_sock_ioctl+0x10/0x10 [ 321.677665][T15898] __se_sys_ioctl+0x135/0x1b0 [ 321.677694][T15898] __x64_sys_ioctl+0x7f/0xa0 [ 321.677721][T15898] x64_sys_call+0x1878/0x2ee0 [ 321.677747][T15898] do_syscall_64+0x58/0xf0 [ 321.677774][T15898] ? clear_bhb_loop+0x50/0xa0 [ 321.677795][T15898] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.677816][T15898] RIP: 0033:0x7f44a458e929 [ 321.677833][T15898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.677850][T15898] RSP: 002b:00007f44a54d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.677872][T15898] RAX: ffffffffffffffda RBX: 00007f44a47b5fa0 RCX: 00007f44a458e929 [ 321.677887][T15898] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000007 [ 321.677902][T15898] RBP: 00007f44a54d7090 R08: 0000000000000000 R09: 0000000000000000 [ 321.677915][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.677929][T15898] R13: 0000000000000000 R14: 00007f44a47b5fa0 R15: 00007fff6e5579d8 [ 321.677945][T15898] [ 321.704382][T15908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 321.721876][T15909] overlayfs: failed to resolve './file1': -2 [ 321.945552][T14044] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 321.953668][T14044] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.965350][T14044] usb 8-1: config 0 has no interface number 0 [ 321.971472][T14044] usb 8-1: too many endpoints for config 0 interface 64 altsetting 0: 48, using maximum allowed: 30 [ 321.982338][T14044] usb 8-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 321.995561][T15922] wg2: left promiscuous mode [ 321.996869][T14044] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 322.000158][T15922] wg2: left allmulticast mode [ 322.009247][T14044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.022013][T15922] wg2: entered promiscuous mode [ 322.022090][T14044] usb 8-1: Product: syz [ 322.027777][T15922] wg2: entered allmulticast mode [ 322.031421][T14044] usb 8-1: Manufacturer: syz [ 322.044601][T14044] usb 8-1: SerialNumber: syz [ 322.049927][T14044] usb 8-1: config 0 descriptor?? [ 322.095436][ T1519] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 322.116494][T15934] wg2: left promiscuous mode [ 322.121130][T15934] wg2: left allmulticast mode [ 322.156933][T15936] overlayfs: failed to resolve './file1': -2 [ 322.172712][T15938] wg2: entered promiscuous mode [ 322.178152][T15938] wg2: entered allmulticast mode [ 322.203526][T15943] wg2: left promiscuous mode [ 322.208208][T15943] wg2: left allmulticast mode [ 322.215511][T15943] wg2: entered promiscuous mode [ 322.220841][T15943] wg2: entered allmulticast mode [ 322.234486][ T1519] usb 5-1: device descriptor read/64, error -71 [ 322.244371][T15945] overlayfs: failed to clone upperpath [ 322.262734][T15947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5435'. [ 322.304676][ T36] audit: type=1400 audit(2000000000.910:888): avc: denied { mount } for pid=15954 comm="syz.5.5439" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.339961][T15957] overlayfs: failed to resolve './file1': -2 [ 322.358404][T15960] wg2: left promiscuous mode [ 322.363041][T15960] wg2: left allmulticast mode [ 322.369854][T15960] wg2: entered promiscuous mode [ 322.374928][T15960] wg2: entered allmulticast mode [ 322.408506][T15966] wg2: left promiscuous mode [ 322.413195][T15966] wg2: left allmulticast mode [ 322.450543][T15976] overlayfs: failed to resolve './file0': -2 [ 322.465899][T15978] wg2: entered promiscuous mode [ 322.470793][T15978] wg2: entered allmulticast mode [ 322.479635][ T1327] usb 8-1: USB disconnect, device number 7 [ 322.486107][ T1519] usb 5-1: device descriptor read/64, error -71 [ 322.724486][ T1519] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 322.854469][ T1519] usb 5-1: device descriptor read/64, error -71 [ 323.094507][ T1519] usb 5-1: device descriptor read/64, error -71 [ 323.204528][ T1519] usb usb5-port1: attempt power cycle [ 323.544465][ T1519] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 323.566419][ T1519] usb 5-1: device descriptor read/8, error -71 [ 323.572891][T16001] wg2: left promiscuous mode [ 323.577555][T16001] wg2: left allmulticast mode [ 323.632550][T16008] overlayfs: failed to resolve './file0': -2 [ 323.676568][T16012] binder: Bad value for 'stats' [ 323.695675][ T1519] usb 5-1: device descriptor read/8, error -71 [ 323.772990][T16016] wg2: left promiscuous mode [ 323.777699][T16016] wg2: left allmulticast mode [ 323.783605][T16016] wg2: entered promiscuous mode [ 323.788835][T16016] wg2: entered allmulticast mode [ 323.806184][T16018] 9pnet_fd: Insufficient options for proto=fd [ 323.828458][T16022] wg2: left promiscuous mode [ 323.833086][T16022] wg2: left allmulticast mode [ 323.854966][T16027] overlayfs: failed to resolve './file0': -2 [ 323.877495][ T36] audit: type=1326 audit(2000000000.180:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 323.900998][ T36] audit: type=1326 audit(2000000000.180:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 323.911078][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5472'. [ 323.924487][ T36] audit: type=1326 audit(2000000000.180:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 323.933661][ T1327] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 323.956705][ T36] audit: type=1326 audit(2000000000.180:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 323.964648][ T1519] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 323.987630][ T36] audit: type=1326 audit(2000000000.180:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 323.995620][T16035] netlink: 'syz.1.5472': attribute type 4 has an invalid length. [ 324.019417][ T36] audit: type=1326 audit(2000000000.180:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.045518][ T1519] usb 5-1: device descriptor read/8, error -71 [ 324.050068][ T36] audit: type=1326 audit(2000000000.180:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.079855][ T36] audit: type=1326 audit(2000000000.180:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.103425][ T36] audit: type=1326 audit(2000000000.180:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.127351][ T36] audit: type=1326 audit(2000000000.180:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.150951][T16043] vcan0: entered allmulticast mode [ 324.150970][ T36] audit: type=1326 audit(2000000000.180:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.176437][T16048] overlayfs: failed to resolve './file0': -2 [ 324.186138][ T36] audit: type=1326 audit(2000000000.180:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.192118][T16050] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5477'. [ 324.210022][T16048] overlayfs: failed to resolve './file0': -2 [ 324.225600][ T36] audit: type=1326 audit(2000000000.180:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.226181][T16048] overlayfs: failed to resolve './file0': -2 [ 324.250086][ T1519] usb 5-1: device descriptor read/8, error -71 [ 324.255767][ T36] audit: type=1326 audit(2000000000.180:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.261984][ T1327] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 324.291654][ T36] audit: type=1326 audit(2000000000.180:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.295246][ T1327] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.320044][ T36] audit: type=1326 audit(2000000000.180:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16032 comm="syz.1.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 324.361460][ T1327] usb 8-1: config 0 has no interface number 0 [ 324.367657][ T1327] usb 8-1: too many endpoints for config 0 interface 64 altsetting 0: 48, using maximum allowed: 30 [ 324.378772][ T1327] usb 8-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 324.394535][ T1519] usb usb5-port1: unable to enumerate USB device [ 324.405369][ T1327] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 324.414536][ T1327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.422535][ T1327] usb 8-1: Product: syz [ 324.426973][ T1327] usb 8-1: Manufacturer: syz [ 324.431696][ T1327] usb 8-1: SerialNumber: syz [ 324.440480][ T1327] usb 8-1: config 0 descriptor?? [ 324.860385][ T1519] usb 8-1: USB disconnect, device number 8 [ 324.891334][T16068] binder: Binderfs stats mode cannot be changed during a remount [ 324.918545][T16072] wg2: entered promiscuous mode [ 324.923535][T16072] wg2: entered allmulticast mode [ 325.055708][T16093] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5494'. [ 325.386736][T16122] can: request_module (can-proto-0) failed. [ 325.494401][ T1519] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 325.655479][ T1519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.668887][ T1519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.679065][T16141] wg2: entered promiscuous mode [ 325.683984][T16141] wg2: entered allmulticast mode [ 325.689823][ T1519] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 325.709974][ T1519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.718107][ T1327] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 325.731541][ T1519] usb 5-1: config 0 descriptor?? [ 325.874417][ T1327] usb 8-1: Using ep0 maxpacket: 16 [ 325.881034][ T1327] usb 8-1: unable to get BOS descriptor or descriptor too short [ 325.889757][ T1327] usb 8-1: config 9 has an invalid interface number: 63 but max is 1 [ 325.897916][ T1327] usb 8-1: config 9 has an invalid interface number: 159 but max is 1 [ 325.906147][ T1327] usb 8-1: config 9 has no interface number 0 [ 325.912216][ T1327] usb 8-1: config 9 has no interface number 1 [ 325.918335][ T1327] usb 8-1: config 9 interface 63 has no altsetting 0 [ 325.926635][ T1327] usb 8-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 325.935748][ T1327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.943837][ T1327] usb 8-1: Product: syz [ 325.948202][ T1327] usb 8-1: Manufacturer: syz [ 325.952803][ T1327] usb 8-1: SerialNumber: syz [ 326.145770][ T1519] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 326.153502][ T1519] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 326.173892][ T1519] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 326.181220][ T1519] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 326.188595][ T1519] hid-led 0003:27B8:01ED.000C: unknown main item tag 0x0 [ 326.202981][ T1327] usb 8-1: USB disconnect, device number 9 [ 326.210838][T15269] udevd[15269]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 326.288293][T16169] wg2: left promiscuous mode [ 326.292927][T16169] wg2: left allmulticast mode [ 326.299134][T16169] wg2: entered promiscuous mode [ 326.304066][T16169] wg2: entered allmulticast mode [ 326.345461][T16120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.353983][T16120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.366391][ T1519] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 326.377086][ T1519] usb 5-1: USB disconnect, device number 44 [ 326.504156][T16181] overlayfs: missing 'lowerdir' [ 326.705961][T16188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.944391][ T1519] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 327.104403][ T1519] usb 8-1: Using ep0 maxpacket: 8 [ 327.110570][ T1519] usb 8-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 327.120941][ T1519] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 327.132306][ T1519] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 33814, setting to 1024 [ 327.143648][ T1519] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.156668][ T1519] usb 8-1: config 0 interface 0 has no altsetting 0 [ 327.163278][ T1519] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 327.172339][ T1519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.180855][ T1519] usb 8-1: config 0 descriptor?? [ 327.186090][T16188] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 327.369060][T16207] wg2: left promiscuous mode [ 327.373696][T16207] wg2: left allmulticast mode [ 327.380358][T16207] wg2: entered promiscuous mode [ 327.385634][T16207] wg2: entered allmulticast mode [ 327.598130][ T1519] ryos 0003:1E7D:3232.000D: hidraw0: USB HID vff.ff Device [HID 1e7d:3232] on usb-dummy_hcd.7-1/input0 [ 327.644380][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 327.795401][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 327.803573][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.813733][ T9] usb 5-1: config 0 has no interface number 0 [ 327.821272][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 327.830461][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.838475][ T9] usb 5-1: Product: syz [ 327.842634][ T9] usb 5-1: Manufacturer: syz [ 327.847245][ T9] usb 5-1: SerialNumber: syz [ 327.852787][ T9] usb 5-1: config 0 descriptor?? [ 327.853585][T16229] rust_binder: Error in use_page_slow: ESRCH [ 327.858527][T16229] rust_binder: use_range failure ESRCH [ 327.864781][T16229] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 327.870335][T16229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 327.878403][T16229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:175 [ 327.889159][ T1519] usb 8-1: USB disconnect, device number 10 [ 328.887578][T16243] wg2: left promiscuous mode [ 328.892291][T16243] wg2: left allmulticast mode [ 328.898251][T16243] wg2: entered promiscuous mode [ 328.903185][T16243] wg2: entered allmulticast mode [ 328.982491][T16245] sock: sock_timestamping_bind_phc: sock not bind to device [ 329.436998][T16261] netlink: 'syz.7.5558': attribute type 4 has an invalid length. [ 329.446895][T16261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.447240][T16261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 329.453670][T16261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:186 [ 329.523089][T16268] wg2: left promiscuous mode [ 329.536929][T16268] wg2: left allmulticast mode [ 329.543376][T16268] wg2: entered promiscuous mode [ 329.548435][T16268] wg2: entered allmulticast mode [ 329.554666][T16272] fuse: Bad value for 'fd' [ 329.555899][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 329.555914][ T36] audit: type=1400 audit(2000000002.140:908): avc: denied { read } for pid=16267 comm="syz.7.5560" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.589339][ T36] audit: type=1400 audit(2000000002.170:909): avc: denied { open } for pid=16267 comm="syz.7.5560" path="/71/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.610964][T16284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=7 sclass=netlink_audit_socket pid=16284 comm=syz.1.5566 [ 329.613827][ T36] audit: type=1400 audit(2000000002.170:910): avc: denied { ioctl } for pid=16267 comm="syz.7.5560" path="/71/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.712578][T16295] overlay: Unknown parameter 'audit' [ 329.731511][T16299] netlink: 324 bytes leftover after parsing attributes in process `syz.5.5572'. [ 329.734556][T16301] overlayfs: missing 'lowerdir' [ 329.781079][T16314] wg2: entered promiscuous mode [ 329.786202][T16314] wg2: entered allmulticast mode [ 329.791893][T16316] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5578'. [ 329.840664][T16331] overlayfs: missing 'lowerdir' [ 329.856597][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5586'. [ 329.905639][T16347] wg2: left promiscuous mode [ 329.910315][T16347] wg2: left allmulticast mode [ 329.915065][ T315] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 329.922759][T16347] wg2: entered promiscuous mode [ 329.927698][T16347] wg2: entered allmulticast mode [ 329.987516][T16362] overlayfs: missing 'lowerdir' [ 330.065363][ T315] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 330.073496][ T315] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 330.083695][ T315] usb 8-1: config 0 has no interface number 0 [ 330.091123][ T315] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 330.100205][ T315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.108218][ T315] usb 8-1: Product: syz [ 330.112382][ T315] usb 8-1: Manufacturer: syz [ 330.116994][ T315] usb 8-1: SerialNumber: syz [ 330.122121][ T315] usb 8-1: config 0 descriptor?? [ 330.424789][ T315] usb 5-1: USB disconnect, device number 45 [ 330.463124][T16376] binder: Bad value for 'max' [ 330.507354][T16397] wg2: left promiscuous mode [ 330.511993][T16397] wg2: left allmulticast mode [ 330.519099][T16397] wg2: entered promiscuous mode [ 330.524035][T16397] wg2: entered allmulticast mode [ 330.554926][T16410] overlayfs: missing 'lowerdir' [ 330.894370][ T315] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 331.045297][ T315] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 331.053506][ T315] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 331.063807][ T315] usb 5-1: config 0 has no interface number 0 [ 331.071488][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 331.080566][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.088587][ T315] usb 5-1: Product: syz [ 331.092742][ T315] usb 5-1: Manufacturer: syz [ 331.097338][ T315] usb 5-1: SerialNumber: syz [ 331.102467][ T315] usb 5-1: config 0 descriptor?? [ 331.471143][T16430] overlayfs: missing 'lowerdir' [ 331.485105][T16432] wg2: left promiscuous mode [ 331.489804][T16432] wg2: left allmulticast mode [ 331.496144][T16432] wg2: entered promiscuous mode [ 331.501496][T16432] wg2: entered allmulticast mode [ 331.620586][T16457] overlayfs: missing 'lowerdir' [ 331.641709][T16461] wg2: left promiscuous mode [ 331.646524][T16461] wg2: left allmulticast mode [ 331.652324][T16461] wg2: entered promiscuous mode [ 331.657542][T16461] wg2: entered allmulticast mode [ 332.042221][T16483] overlayfs: missing 'workdir' [ 332.108612][T16486] overlay: Unknown parameter '/' [ 332.254403][T16499] wg2: left promiscuous mode [ 332.259092][T16499] wg2: left allmulticast mode [ 332.672641][ T315] usb 8-1: USB disconnect, device number 11 [ 332.714699][T16504] binder: Unknown parameter 'defcontext01777777777777777777777' [ 332.723319][T16506] binder: Unknown parameter 'defcontext01777777777777777777777' [ 332.754497][T16510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.755000][T16510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 332.771909][T16515] overlayfs: missing 'workdir' [ 332.881250][T16530] binder: Unknown parameter 'defcontext01777777777777777777777' [ 332.882946][T16532] overlayfs: failed to resolve './file1': -2 [ 332.922063][T16539] wg2: left promiscuous mode [ 332.926801][T16539] wg2: left allmulticast mode [ 332.936344][T16537] SELinux: security_context_str_to_sid (sytem_uÝGй_device) failed with errno=-22 [ 332.946921][T16541] overlayfs: missing 'workdir' [ 333.024020][ T36] audit: type=1326 audit(2000000002.420:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16562 comm="syz.7.5662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3de18e929 code=0x0 [ 333.030457][T16566] fuse: Bad value for 'group_id' [ 333.047608][ T36] audit: type=1326 audit(2000000002.450:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16562 comm="syz.7.5662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3de18e929 code=0x0 [ 333.051965][T16566] fuse: Bad value for 'group_id' [ 333.092943][T16568] wg2: entered promiscuous mode [ 333.097955][T16568] wg2: entered allmulticast mode [ 333.123566][T16572] overlayfs: missing 'lowerdir' [ 333.178024][T16588] /dev/loop0: Can't lookup blockdev [ 333.198916][T16592] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 333.207040][T16594] batadv_slave_1: entered promiscuous mode [ 333.214991][T16593] batadv_slave_1: left promiscuous mode [ 333.340647][T16597] overlayfs: missing 'lowerdir' [ 333.373782][T16602] wg2: entered promiscuous mode [ 333.378888][T16602] wg2: entered allmulticast mode [ 333.381660][T16604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.596151][ T315] usb 5-1: USB disconnect, device number 46 [ 333.604760][ T36] audit: type=1400 audit(2000000003.000:913): avc: denied { append } for pid=16616 comm="syz.4.5684" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.618940][T16617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.632506][T16617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 333.667292][T16621] overlayfs: missing 'lowerdir' [ 333.691481][T16623] netlink: 'syz.4.5687': attribute type 12 has an invalid length. [ 333.714195][T16626] rust_binder: Error in use_page_slow: ESRCH [ 333.714209][T16626] rust_binder: use_range failure ESRCH [ 333.720272][T16626] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 333.725981][T16626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 333.734021][T16626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:528 [ 333.746413][T16628] wg2: left promiscuous mode [ 333.760161][T16628] wg2: left allmulticast mode [ 333.766499][T16628] wg2: entered promiscuous mode [ 333.771382][T16628] wg2: entered allmulticast mode [ 333.777254][ T1519] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 333.778319][T16628] No source specified [ 333.831393][T16636] fuse: Unknown parameter '0x0000000000000004' [ 333.848284][ T36] audit: type=1107 audit(2000000000.030:914): pid=16637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Þ]ê<ÅHYÏßÃ^âoT)?`0g†6×Ë0_hÜ·í' [ 333.904843][T16646] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 333.913569][T16646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 333.932510][T16648] wg2: left promiscuous mode [ 333.937338][T16648] wg2: left allmulticast mode [ 333.943764][T16648] wg2: entered promiscuous mode [ 333.949243][ T1519] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 333.950675][T16648] wg2: entered allmulticast mode [ 333.957598][ T1519] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 333.973810][ T1519] usb 8-1: config 0 has no interface number 0 [ 333.981525][ T1519] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 333.990618][ T1519] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.003484][ T1519] usb 8-1: Product: syz [ 334.007840][ T1519] usb 8-1: Manufacturer: syz [ 334.012455][ T1519] usb 8-1: SerialNumber: syz [ 334.021141][ T1519] usb 8-1: config 0 descriptor?? [ 334.339724][T16674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 334.348543][T16674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 334.374202][T16680] overlayfs: failed to resolve './file1': -2 [ 334.388637][T16682] netlink: 'syz.5.5710': attribute type 1 has an invalid length. [ 334.396459][T16682] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5710'. [ 334.434333][T16685] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5711'. [ 334.443388][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5711'. [ 334.453854][T16685] netlink: 'syz.5.5711': attribute type 11 has an invalid length. [ 334.453861][T16686] netlink: 'syz.5.5711': attribute type 11 has an invalid length. [ 334.478808][T16691] overlayfs: failed to clone upperpath [ 334.977117][T16701] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 334.985942][T16701] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 335.635311][T16713] 8021q: VLANs not supported on ip_vti0 [ 335.641567][T16713] binder: Unknown parameter '€A' [ 335.694989][ T36] audit: type=1400 audit(2000000001.190:915): avc: denied { view } for pid=16714 comm="syz.4.5722" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 335.793604][T16726] overlayfs: failed to clone upperpath [ 336.359386][T16754] overlayfs: failed to clone upperpath [ 336.388275][T16761] netlink: 296 bytes leftover after parsing attributes in process `syz.5.5739'. [ 336.549998][ T9] usb 8-1: USB disconnect, device number 12 [ 336.576008][ T36] audit: type=1400 audit(2000000000.010:916): avc: denied { append } for pid=16764 comm="syz.4.5741" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.665910][T16767] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 336.665934][T16767] rust_binder: Read failure Err(EFAULT) in pid:596 [ 336.674197][T16767] rust_binder: Write failure EINVAL in pid:596 [ 336.691285][T16769] SELinux: security_context_str_to_sid () failed with errno=-22 [ 336.715335][T16771] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 336.758533][ T36] audit: type=1400 audit(2000000000.190:917): avc: denied { connect } for pid=16778 comm="syz.4.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.914266][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 336.914798][T16787] fuse: Bad value for 'group_id' [ 336.926841][T16787] fuse: Bad value for 'group_id' [ 336.934635][T16787] 9pnet_fd: p9_fd_create_tcp (16787): problem connecting socket to 127.0.0.1 [ 337.024278][ T1519] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 337.075212][ T9] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 337.083334][ T9] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 337.093568][ T9] usb 8-1: config 0 has no interface number 0 [ 337.100892][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 337.109970][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.118001][ T9] usb 8-1: Product: syz [ 337.122144][ T9] usb 8-1: Manufacturer: syz [ 337.126744][ T9] usb 8-1: SerialNumber: syz [ 337.131895][ T9] usb 8-1: config 0 descriptor?? [ 337.175247][ T1519] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 337.183390][ T1519] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 337.193626][ T1519] usb 5-1: config 0 has no interface number 0 [ 337.201063][ T1519] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 337.210141][ T1519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.218151][ T1519] usb 5-1: Product: syz [ 337.222292][ T1519] usb 5-1: Manufacturer: syz [ 337.226887][ T1519] usb 5-1: SerialNumber: syz [ 337.231967][ T1519] usb 5-1: config 0 descriptor?? [ 337.440165][ T1519] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 337.446575][ T1519] usb 5-1: No valid video chain found. [ 337.452936][ T1519] usb 5-1: USB disconnect, device number 47 [ 337.508141][T16799] overlayfs: failed to clone upperpath [ 337.550957][ T36] audit: type=1326 audit(2000000000.980:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.5.5760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc254d8e929 code=0x0 [ 337.976389][T16826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617 [ 338.049059][T16831] fuse: Unknown parameter '' [ 338.881800][T16831] 9pnet_fd: p9_fd_create_tcp (16831): problem connecting socket to 127.0.0.1 [ 338.934958][ T36] audit: type=1400 audit(2000000002.370:919): avc: denied { write } for pid=16839 comm="syz.4.5772" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.958510][ T36] audit: type=1400 audit(2000000002.370:920): avc: denied { mounton } for pid=16839 comm="syz.4.5772" path="mnt:[4026532304]" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 338.982489][ T36] audit: type=1326 audit(2000000002.370:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 339.006252][ T36] audit: type=1326 audit(2000000002.370:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 339.030083][ T36] audit: type=1326 audit(2000000002.370:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 339.053509][ T36] audit: type=1326 audit(2000000002.370:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 339.239267][T16848] overlayfs: failed to clone upperpath [ 339.264207][ T1519] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 339.338559][T16869] overlayfs: failed to clone upperpath [ 339.378682][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5788'. [ 339.425367][ T1519] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 339.433509][ T1519] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 339.443951][ T1519] usb 5-1: config 0 has no interface number 0 [ 339.451622][ T1519] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 339.460700][ T1519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.468707][ T1519] usb 5-1: Product: syz [ 339.472857][ T1519] usb 5-1: Manufacturer: syz [ 339.477468][ T1519] usb 5-1: SerialNumber: syz [ 339.482573][ T1519] usb 5-1: config 0 descriptor?? [ 339.573191][ T315] usb 8-1: USB disconnect, device number 13 [ 339.689727][ T1519] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 339.696266][ T1519] usb 5-1: No valid video chain found. [ 339.702484][ T1519] usb 5-1: USB disconnect, device number 48 [ 339.904252][ T315] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 339.920570][T16885] fuse: Bad value for 'group_id' [ 339.925667][T16885] fuse: Bad value for 'group_id' [ 340.004770][T16895] overlayfs: failed to clone upperpath [ 340.044264][ T315] usb 8-1: device descriptor read/64, error -71 [ 340.284199][ T315] usb 8-1: device descriptor read/64, error -71 [ 340.444203][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 340.524185][ T315] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 340.595222][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 340.603346][ T9] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 340.613587][ T9] usb 5-1: config 0 has no interface number 0 [ 340.621169][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 340.630306][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.638346][ T9] usb 5-1: Product: syz [ 340.642559][ T9] usb 5-1: Manufacturer: syz [ 340.647200][ T9] usb 5-1: SerialNumber: syz [ 340.652681][T16919] overlayfs: failed to clone upperpath [ 340.654404][ T9] usb 5-1: config 0 descriptor?? [ 340.658696][ T315] usb 8-1: device descriptor read/64, error -71 [ 340.914198][ T315] usb 8-1: device descriptor read/64, error -71 [ 341.024233][ T315] usb usb8-port1: attempt power cycle [ 341.112132][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5811'. [ 341.121162][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5811'. [ 341.130136][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5811'. [ 341.216453][T16953] overlayfs: failed to clone upperpath [ 341.230263][T16957] overlayfs: failed to clone upperpath [ 341.244650][T16959] netlink: 'syz.1.5816': attribute type 4 has an invalid length. [ 341.364169][ T315] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 341.385119][ T315] usb 8-1: device descriptor read/8, error -71 [ 341.515166][ T315] usb 8-1: device descriptor read/8, error -71 [ 341.730139][T16961] overlayfs: failed to clone upperpath [ 341.736112][T16961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5817'. [ 341.754226][ T315] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 341.775135][ T315] usb 8-1: device descriptor read/8, error -71 [ 341.905175][ T315] usb 8-1: device descriptor read/8, error -71 [ 342.014218][ T315] usb usb8-port1: unable to enumerate USB device [ 342.295462][T16982] overlayfs: failed to clone upperpath [ 342.616831][T16992] netlink: 5052 bytes leftover after parsing attributes in process `syz.7.5829'. [ 342.626704][T16994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:250 [ 343.221168][T14044] usb 5-1: USB disconnect, device number 49 [ 343.229322][T17010] FAT-fs (rnullb0): bogus number of reserved sectors [ 343.230803][ T9] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 343.236668][T17010] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 343.285050][T17019] rust_binder: Write failure EFAULT in pid:649 [ 343.394136][ T9] usb 8-1: Invalid ep0 maxpacket: 32 [ 343.534168][ T9] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 343.694180][ T9] usb 8-1: Invalid ep0 maxpacket: 32 [ 343.699745][ T9] usb usb8-port1: attempt power cycle [ 344.044174][ T9] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 344.064495][ T9] usb 8-1: Invalid ep0 maxpacket: 32 [ 344.194171][ T9] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 344.214598][ T9] usb 8-1: Invalid ep0 maxpacket: 32 [ 344.220020][ T9] usb usb8-port1: unable to enumerate USB device [ 344.338040][T17043] overlayfs: failed to clone upperpath [ 344.404225][ T64] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 344.556515][ T64] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 344.565638][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.573616][ T64] usb 5-1: Product: syz [ 344.577826][ T64] usb 5-1: Manufacturer: syz [ 344.582415][ T64] usb 5-1: SerialNumber: syz [ 344.587604][ T64] usb 5-1: config 0 descriptor?? [ 345.394920][T17039] rust_binder: Write failure EFAULT in pid:663 [ 345.396329][ T64] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 345.412586][ T64] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 345.423521][ T64] asix 5-1:0.0: probe with driver asix failed with error -71 [ 345.431810][ T64] usb 5-1: USB disconnect, device number 50 [ 345.872409][T17083] overlayfs: failed to clone upperpath [ 346.184142][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 346.334750][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 346.340974][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 346.349702][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.359828][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.370522][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.379591][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.387616][ T64] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 346.395198][ T9] usb 5-1: Product: syz [ 346.399339][ T9] usb 5-1: Manufacturer: syz [ 346.403905][ T9] usb 5-1: SerialNumber: syz [ 346.431293][T17114] overlayfs: failed to clone upperpath [ 346.565236][ T64] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 346.573393][ T64] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 346.583596][ T64] usb 8-1: config 0 has no interface number 0 [ 346.591067][ T64] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 346.600161][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.608173][ T64] usb 8-1: Product: syz [ 346.612424][ T64] usb 8-1: Manufacturer: syz [ 346.617055][ T64] usb 8-1: SerialNumber: syz [ 346.622212][ T64] usb 8-1: config 0 descriptor?? [ 346.812767][ T9] usb 5-1: 0:2 : does not exist [ 347.225094][T17139] overlayfs: failed to clone upperpath [ 348.980652][ T9] usb 5-1: USB disconnect, device number 51 [ 349.019535][ T1519] usb 8-1: USB disconnect, device number 22 [ 349.022780][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5890'. [ 349.053202][T17173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.186310][T17184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.593504][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 349.593523][ T36] audit: type=1326 audit(2000000000.070:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.1.5906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 349.629736][ T36] audit: type=1326 audit(2000000000.070:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.1.5906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dfd8e929 code=0x7ffc0000 [ 350.145369][T17213] overlayfs: failed to resolve './file0': -2 [ 362.255158][T17226] fuse: Bad value for 'fd' [ 362.264404][T17228] overlayfs: failed to clone upperpath [ 362.335856][T17237] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.342900][T17237] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.350201][T17237] bridge_slave_0: entered allmulticast mode [ 362.356498][T17237] bridge_slave_0: entered promiscuous mode [ 362.362718][T17237] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.369764][T17237] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.376855][T17237] bridge_slave_1: entered allmulticast mode [ 362.382969][T17237] bridge_slave_1: entered promiscuous mode [ 362.423611][T17237] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.430681][T17237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.438001][T17237] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.445039][T17237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.465088][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.472405][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.481307][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.488372][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.497661][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.504725][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.527087][T17237] veth0_vlan: entered promiscuous mode [ 362.534115][ T64] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 362.538912][T17237] veth1_macvtap: entered promiscuous mode [ 362.695130][ T64] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 362.703284][ T64] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 362.713584][ T64] usb 8-1: config 0 has no interface number 0 [ 362.721156][ T64] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 362.730308][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.738508][ T64] usb 8-1: Product: syz [ 362.742724][ T64] usb 8-1: Manufacturer: syz [ 362.747384][ T64] usb 8-1: SerialNumber: syz [ 362.752995][ T64] usb 8-1: config 0 descriptor?? [ 362.791654][T17256] overlayfs: failed to resolve './file1': -2 [ 362.814065][T14044] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 362.850673][T17268] Invalid ELF header type: 2 != 1 [ 362.850673][ T36] audit: type=1400 audit(2000000000.540:933): avc: denied { module_load } for pid=17267 comm="syz.4.5930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 362.895120][T17274] overlayfs: failed to clone lowerpath [ 362.984759][T14044] usb 9-1: Invalid ep0 maxpacket: 32 [ 363.124039][T14044] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 363.168620][ T64] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 363.175082][ T64] usb 8-1: No valid video chain found. [ 363.184583][ T64] usb 8-1: USB disconnect, device number 23 [ 363.274068][T14044] usb 9-1: Invalid ep0 maxpacket: 32 [ 363.279808][T14044] usb usb9-port1: attempt power cycle [ 363.348272][T17279] overlayfs: failed to clone upperpath [ 363.437599][T17290] overlayfs: failed to clone upperpath [ 363.624044][T14044] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 363.644366][T14044] usb 9-1: Invalid ep0 maxpacket: 32 [ 363.775284][T14044] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 363.794422][T14044] usb 9-1: Invalid ep0 maxpacket: 32 [ 363.799874][T14044] usb usb9-port1: unable to enumerate USB device [ 363.814922][ T36] audit: type=1400 audit(2000000001.510:934): avc: denied { shutdown } for pid=17318 comm="syz.7.5948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 363.843434][T17324] tipc: Enabling of bearer rejected, media not registered [ 364.114182][T14044] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 364.265081][T14044] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 364.273249][T14044] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 364.283670][T14044] usb 8-1: config 0 has no interface number 0 [ 364.291158][T14044] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 364.300313][T14044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.308473][T14044] usb 8-1: Product: syz [ 364.312648][T14044] usb 8-1: Manufacturer: syz [ 364.317295][T14044] usb 8-1: SerialNumber: syz [ 364.322469][T14044] usb 8-1: config 0 descriptor?? [ 364.604333][T17336] overlayfs: failed to resolve './file0': -2 [ 364.645985][ T36] audit: type=1400 audit(2000000000.780:935): avc: denied { mounton } for pid=17341 comm="syz.4.5956" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 364.646017][T17343] overlay: filesystem on ./bus is read-only [ 364.683425][T17347] netlink: 'syz.4.5957': attribute type 64 has an invalid length. [ 364.703693][T17350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=17350 comm=syz.4.5958 [ 364.746696][T14044] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 364.754899][T14044] usb 8-1: No valid video chain found. [ 364.761661][T14044] usb 8-1: USB disconnect, device number 24 [ 364.790599][T17350] netlink: 'syz.4.5958': attribute type 4 has an invalid length. [ 364.798547][T17350] netlink: 'syz.4.5958': attribute type 27 has an invalid length. [ 364.806648][T17350] netlink: 3609 bytes leftover after parsing attributes in process `syz.4.5958'. [ 365.349792][T17378] exFAT-fs (rnullb0): invalid boot record signature [ 365.365673][T17378] exFAT-fs (rnullb0): failed to read boot sector [ 365.372105][T17378] exFAT-fs (rnullb0): failed to recognize exfat type [ 365.558742][T17391] binder: Unknown parameter 'sYats' [ 365.804162][ T1327] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 365.933990][ T1519] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 365.953973][ T1327] usb 8-1: Using ep0 maxpacket: 16 [ 365.960141][ T1327] usb 8-1: config 1 has an invalid interface number: 214 but max is 0 [ 365.968361][ T1327] usb 8-1: config 1 has no interface number 0 [ 365.974469][ T1327] usb 8-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 365.984411][ T1327] usb 8-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 365.994556][ T1327] usb 8-1: config 1 interface 214 has no altsetting 0 [ 366.002845][ T1327] usb 8-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 366.012046][ T1327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.020143][ T1327] usb 8-1: Product: syz [ 366.024311][ T1327] usb 8-1: Manufacturer: syz [ 366.028897][ T1327] usb 8-1: SerialNumber: syz [ 366.034398][T17394] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 366.041558][T17394] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 366.049178][ T1327] ums-alauda 8-1:1.214: USB Mass Storage device detected [ 366.058501][ T1327] scsi host1: usb-storage 8-1:1.214 [ 366.095599][ T1519] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 366.103810][ T1519] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 366.114013][ T1519] usb 9-1: config 0 has no interface number 0 [ 366.121423][ T1519] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 366.130507][ T1519] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.138564][ T1519] usb 9-1: Product: syz [ 366.142701][ T1519] usb 9-1: Manufacturer: syz [ 366.147301][ T1519] usb 9-1: SerialNumber: syz [ 366.152342][ T1519] usb 9-1: config 0 descriptor?? [ 366.260330][T17394] IPv6: syztnl1: Disabled Multicast RS [ 366.295983][ T1327] usb 8-1: USB disconnect, device number 25 [ 366.368544][ T1519] usb 9-1: Found UVC 0.00 device syz (046d:0823) [ 366.375077][ T1519] usb 9-1: No valid video chain found. [ 366.382503][ T1519] usb 9-1: USB disconnect, device number 6 [ 367.134055][ T64] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 367.163942][T17431] fuse: Unknown parameter '¹}0x0000000000000007' [ 367.295032][ T64] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 367.303192][ T64] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 367.313911][ T64] usb 9-1: config 0 has no interface number 0 [ 367.321892][ T64] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 367.333924][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.341929][ T64] usb 9-1: Product: syz [ 367.348209][ T64] usb 9-1: Manufacturer: syz [ 367.352820][ T64] usb 9-1: SerialNumber: syz [ 367.361144][ T64] usb 9-1: config 0 descriptor?? [ 367.773229][ T64] usb 9-1: Found UVC 0.00 device syz (046d:0823) [ 367.780753][ T64] usb 9-1: No valid video chain found. [ 367.790853][ T64] usb 9-1: USB disconnect, device number 7 [ 367.839823][T17461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.840490][T17461] rust_binder: Error while translating object. [ 367.847029][T17461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 367.853197][T17461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 367.870335][T17465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.939515][T17479] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 367.993559][T17494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17494 comm=syz.4.6006 [ 368.007301][T17494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6006'. [ 368.344300][T17502] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 368.835401][T17514] binder: Unknown parameter 'defcontext01777777777777777777777' [ 368.867204][ T36] audit: type=1400 audit(2000000000.830:936): avc: denied { setcurrent } for pid=17516 comm="syz.7.6015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 368.919841][T17524] netlink: 'syz.1.6017': attribute type 11 has an invalid length. [ 368.927900][T17524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6017'. [ 368.937853][T17524] overlayfs: failed to clone upperpath [ 369.055895][T17530] vcan0: MTU too low for tipc bearer [ 369.061372][T17530] tipc: Enabling of bearer rejected, failed to enable media [ 369.204009][ T45] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 369.299430][T17545] 9pnet_fd: Insufficient options for proto=fd [ 369.384843][T17552] overlayfs: failed to clone upperpath [ 369.394941][ T45] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 369.403349][ T45] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 369.415404][ T45] usb 8-1: config 0 has no interface number 0 [ 369.423809][ T45] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 369.433342][T17556] overlayfs: failed to clone upperpath [ 369.438948][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.444862][T17555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.446957][T17555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 369.448351][ T45] usb 8-1: Product: syz [ 369.470284][ T45] usb 8-1: Manufacturer: syz [ 369.479954][ T45] usb 8-1: SerialNumber: syz [ 369.486248][ T45] usb 8-1: config 0 descriptor?? [ 369.519396][T17564] can: request_module (can-proto-0) failed. [ 369.893961][ T45] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 369.900413][ T45] usb 8-1: No valid video chain found. [ 369.907151][ T45] usb 8-1: USB disconnect, device number 26 [ 370.422567][T17585] overlayfs: failed to resolve './file1': -2 [ 370.434371][T17585] binder: Binderfs stats mode cannot be changed during a remount [ 370.495424][T17587] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 370.505106][T17587] SELinux: failed to load policy [ 370.658569][T17590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 370.667579][ T36] audit: type=1400 audit(2000000000.080:937): avc: denied { lock } for pid=17588 comm="syz.7.6042" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.667971][T17590] overlayfs: failed to resolve './file1': -2 [ 370.761019][ T36] audit: type=1400 audit(2000000000.170:938): avc: denied { map } for pid=17594 comm="syz.7.6043" path="socket:[64344]" dev="sockfs" ino=64344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 371.033930][ T45] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 371.173915][ T45] usb 8-1: device descriptor read/64, error -71 [ 371.433924][ T45] usb 8-1: device descriptor read/64, error -71 [ 371.665248][T17627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17627 comm=syz.1.6054 [ 371.677802][ T45] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 371.678462][T17627] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6054'. [ 371.813871][ T45] usb 8-1: device descriptor read/64, error -71 [ 372.053862][ T45] usb 8-1: device descriptor read/64, error -71 [ 372.163924][ T45] usb usb8-port1: attempt power cycle [ 372.503844][ T45] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 372.524837][ T45] usb 8-1: device descriptor read/8, error -71 [ 372.655222][ T45] usb 8-1: device descriptor read/8, error -71 [ 372.893825][ T45] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 372.914781][ T45] usb 8-1: device descriptor read/8, error -71 [ 373.044847][ T45] usb 8-1: device descriptor read/8, error -71 [ 373.153882][ T45] usb usb8-port1: unable to enumerate USB device [ 373.831751][T17638] overlayfs: failed to clone upperpath [ 373.846039][T17638] overlayfs: failed to clone upperpath [ 373.853374][T17638] netlink: 'syz.4.6060': attribute type 4 has an invalid length. [ 373.861199][T17638] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6060'. [ 374.165403][T17658] : renamed from bond_slave_0 [ 374.403777][ T45] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 374.554735][ T45] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.564869][ T45] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.575600][ T45] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.584677][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.592683][ T45] usb 8-1: Product: syz [ 374.596882][ T45] usb 8-1: Manufacturer: syz [ 374.601506][ T45] usb 8-1: SerialNumber: syz [ 374.637616][ T36] audit: type=1326 audit(2000000000.790:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.661062][ T36] audit: type=1326 audit(2000000000.790:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.684483][ T36] audit: type=1326 audit(2000000000.790:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.707917][ T36] audit: type=1326 audit(2000000000.840:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.731332][ T36] audit: type=1326 audit(2000000000.840:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.754936][ T36] audit: type=1326 audit(2000000000.840:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44a458e52b code=0x7ffc0000 [ 374.778301][ T36] audit: type=1326 audit(2000000000.840:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.801693][ T36] audit: type=1326 audit(2000000000.840:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.808792][T17658] rust_binder: Write failure EINVAL in pid:395 [ 374.825304][ T36] audit: type=1326 audit(2000000000.840:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.831672][ T45] usb 8-1: 0:2 : does not exist [ 374.854871][ T36] audit: type=1326 audit(2000000000.840:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44a458e929 code=0x7ffc0000 [ 374.862532][ T45] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 374.897812][ T45] usb 8-1: USB disconnect, device number 31 [ 374.907904][T17676] udevd[17676]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 374.951472][T17681] bpf: Bad value for 'mode' [ 375.214370][ T37] INFO: task syz.0.4593:13575 blocked for more than 122 seconds. [ 375.222232][ T37] Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 [ 375.229378][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.238140][ T37] task:syz.0.4593 state:D stack:0 pid:13575 tgid:13574 ppid:6406 flags:0x00004004 [ 375.248378][ T37] Call Trace: [ 375.251662][ T37] [ 375.254618][ T37] __schedule+0x145b/0x1f10 [ 375.259121][ T37] ? __sched_text_start+0x10/0x10 [ 375.264150][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 375.269620][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 375.275433][ T37] schedule+0xc6/0x240 [ 375.279500][ T37] super_lock+0x150/0x300 [ 375.283829][ T37] ? user_get_super+0x350/0x350 [ 375.288669][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 375.294172][ T37] ? __kasan_check_write+0x18/0x20 [ 375.299272][ T37] iterate_supers+0x8a/0x560 [ 375.303871][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 375.309068][ T37] ? security_quotactl+0x3b/0xf0 [ 375.314004][ T37] __se_sys_quotactl+0x308/0x7d0 [ 375.318944][ T37] ? __fget_files+0x2c5/0x340 [ 375.323613][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 375.328658][ T37] ? __kasan_check_write+0x18/0x20 [ 375.333784][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 375.339064][ T37] ? __kasan_check_read+0x15/0x20 [ 375.344177][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 375.350232][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 375.355087][ T37] x64_sys_call+0x2818/0x2ee0 [ 375.359754][ T37] do_syscall_64+0x58/0xf0 [ 375.364219][ T37] ? clear_bhb_loop+0x50/0xa0 [ 375.368884][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 375.374774][ T37] RIP: 0033:0x7f1488b8e929 [ 375.379175][ T37] RSP: 002b:00007f148997b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 375.387586][ T37] RAX: ffffffffffffffda RBX: 00007f1488db5fa0 RCX: 00007f1488b8e929 [ 375.395559][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 375.403519][ T37] RBP: 00007f1488c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 375.411575][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.419552][ T37] R13: 0000000000000001 R14: 00007f1488db5fa0 R15: 00007ffcd03fef58 [ 375.427531][ T37] [ 375.433652][ T37] NMI backtrace for cpu 1 [ 375.433666][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 375.433692][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.433703][ T37] Call Trace: [ 375.433710][ T37] [ 375.433717][ T37] __dump_stack+0x21/0x30 [ 375.433743][ T37] dump_stack_lvl+0x10c/0x190 [ 375.433764][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 375.433788][ T37] dump_stack+0x19/0x20 [ 375.433807][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 375.433833][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 375.433851][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 375.433875][ T37] ? sched_show_task+0x379/0x560 [ 375.433894][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 375.433910][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.433931][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.433951][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 375.433978][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 375.433999][ T37] watchdog+0xd8f/0xed0 [ 375.434022][ T37] ? __cfi_watchdog+0x10/0x10 [ 375.434042][ T37] ? __kasan_check_read+0x15/0x20 [ 375.434064][ T37] ? __kthread_parkme+0x138/0x180 [ 375.434089][ T37] ? schedule+0xc6/0x240 [ 375.434106][ T37] kthread+0x2ca/0x370 [ 375.434132][ T37] ? __cfi_watchdog+0x10/0x10 [ 375.434161][ T37] ? __cfi_kthread+0x10/0x10 [ 375.434187][ T37] ret_from_fork+0x64/0xa0 [ 375.434208][ T37] ? __cfi_kthread+0x10/0x10 [ 375.434234][ T37] ret_from_fork_asm+0x1a/0x30 [ 375.434260][ T37] [ 375.588956][ T37] Sending NMI from CPU 1 to CPUs 0: [ 375.594249][ C0] NMI backtrace for cpu 0 [ 375.594263][ C0] CPU: 0 UID: 0 PID: 6441 Comm: kworker/u8:12 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 375.594286][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.594297][ C0] Workqueue: 0x0 (events_unbound) [ 375.594318][ C0] RIP: 0010:update_curr_task+0x61/0x1f0 [ 375.594341][ C0] Code: 4c 89 ff e8 b1 e8 7e 00 4d 8b 2f 4d 8d bd 58 01 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 c8 00 00 00 41 83 3f 00 <74> 3c 4d 8d be a0 08 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 [ 375.594355][ C0] RSP: 0018:ffffc900101bf688 EFLAGS: 00000046 [ 375.594368][ C0] RAX: 0000000000000000 RBX: 0000000000001c56 RCX: dffffc0000000000 [ 375.594380][ C0] RDX: 0000000000000009 RSI: 0000000000001c56 RDI: ffff888115a71300 [ 375.594392][ C0] RBP: ffffc900101bf6b0 R08: 0000000080000009 R09: 0000000000000004 [ 375.594403][ C0] R10: 0000000000000000 R11: ffffffff815dde40 R12: dffffc0000000000 [ 375.594415][ C0] R13: ffff88811ca73200 R14: ffff888115a71300 R15: ffff88811ca73358 [ 375.594427][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 375.594441][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.594452][ C0] CR2: 00007f44a47aa3e8 CR3: 0000000122086000 CR4: 00000000003526b0 [ 375.594467][ C0] Call Trace: [ 375.594472][ C0] [ 375.594480][ C0] update_curr+0x5d1/0xc60 [ 375.594502][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 375.594524][ C0] dequeue_entity+0x8c/0x1750 [ 375.594540][ C0] ? __kasan_slab_free+0x6a/0x80 [ 375.594563][ C0] ? kmem_cache_free+0x1c1/0x4c0 [ 375.594582][ C0] ? __kfree_skb+0x18f/0x210 [ 375.594605][ C0] ? tg_unthrottle_up+0x980/0x980 [ 375.594620][ C0] ? calc_wheel_index+0x1a7/0x8e0 [ 375.594642][ C0] ? __kasan_check_write+0x18/0x20 [ 375.594660][ C0] ? timer_update_keys+0xd0/0xd0 [ 375.594681][ C0] dequeue_entities+0x1f2/0x1380 [ 375.594699][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 375.594719][ C0] dequeue_task_fair+0x2ae/0x690 [ 375.594737][ C0] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 375.594757][ C0] ? update_irq_load_avg+0xcb/0xe60 [ 375.594774][ C0] ? __cfi_dequeue_task_fair+0x10/0x10 [ 375.594792][ C0] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 375.594811][ C0] ? update_rq_clock+0x31b/0x7c0 [ 375.594830][ C0] dequeue_task+0x445/0x8f0 [ 375.594847][ C0] ? __cfi_dequeue_task+0x10/0x10 [ 375.594867][ C0] ? __queue_delayed_work+0x1b0/0x240 [ 375.594884][ C0] __schedule+0x3d1/0x1f10 [ 375.594900][ C0] ? __sched_text_start+0x10/0x10 [ 375.594914][ C0] ? process_scheduled_works+0xfbe/0x1020 [ 375.594935][ C0] ? kthread_data+0x54/0xc0 [ 375.594955][ C0] ? wq_worker_sleeping+0x69/0x260 [ 375.594969][ C0] schedule+0xc6/0x240 [ 375.594983][ C0] worker_thread+0xf6b/0x1250 [ 375.595003][ C0] ? try_to_wake_up+0xdd2/0x1aa0 [ 375.595028][ C0] kthread+0x2ca/0x370 [ 375.595049][ C0] ? __cfi_worker_thread+0x10/0x10 [ 375.595069][ C0] ? __cfi_kthread+0x10/0x10 [ 375.595099][ C0] ret_from_fork+0x64/0xa0 [ 375.595116][ C0] ? __cfi_kthread+0x10/0x10 [ 375.595138][ C0] ret_from_fork_asm+0x1a/0x30 [ 375.595160][ C0]