last executing test programs: 1.590532264s ago: executing program 0 (id=454): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x3, 0x0, 0x100, 0x4, 0x61600c2}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0xc0000000, 0x4, 0x0, 0x8, 0x6, 0x0, 0x3}, {0xc0000000, 0x8, 0x7, 0x1, 0x0, 0x1}, {0xc0000000, 0x3ff, 0x5, 0x2, 0x9, 0xf6, 0x2}]}) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB='stats=globQl,\x00']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 1.577396594s ago: executing program 0 (id=455): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}], 0x6}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 1.467677856s ago: executing program 0 (id=456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1001, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0xb}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 1.450281586s ago: executing program 0 (id=458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000000)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={0x2}) 1.421718617s ago: executing program 0 (id=459): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect$uac1(0x4, 0x121, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x6}, [@selector_unit={0xb, 0x24, 0x5, 0x1, 0x4, "1eee24b838a4"}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0xfff8, 0x97, "60480919fe"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x5, 0xff, 0x800, 0x4, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xc, 0x4, 0x1b, 0x3, "e27931"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x5, 0x4}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x1, 0x5d, 0x70, "6f641d4911303ad8bd"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0xfbff, 0xd, "ed182e9e30"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5d, 0x2, 0x3, 0x7, "1d1d84d2179f369fba"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x6, "", '-q'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x2, 0x2, {0x7, 0x25, 0x1, 0x0, 0x3, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xc, 0x4, 0x2, 0xe4, "c8388a", "d2ede8"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x3, 0x10, "11"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0xffff, 0xfa, "2acf063fb07a9580"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x800, 0xc, 0xcc, "bb91625c684e02d4"}, @as_header={0x7, 0x24, 0x1, 0xfa, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x1, 0xaf, {0x7, 0x25, 0x1, 0x0, 0x7, 0x6}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x4, 0x9, 0x9, 0x8, 0x8}, 0x52, &(0x7f0000000180)={0x5, 0xf, 0x52, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "180d4a75f9cb617316989c2a8d873840"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "be3cfe9ac1bc2b1cb1a99ca947c6f819"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xc, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x2, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "be0ddea92a697afd70cafae3cb6c4e30"}]}, 0x4, [{0x80, &(0x7f0000000300)=@string={0x80, 0x3, "af11e475936a0968bb18c26492e74a1d498cdcc748b36a025219d19e7bb2be111d80be1fe9227009ca9ad7a30cfa393625f13f826a7591809fb17e4eced36f3017139d751a85a0e405d4e8627d4fa24fa510a47abda937559b59a76bca8269855702649dff7ab0bc43ed5b60e2d449c74d9d1e11b72e0000000000000000"}}, {0x15, &(0x7f0000000640)=@string={0x15, 0x3, "ad935c727f8e06bbabc2a8a566a059f8ca062f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1c01}}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x400e) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550d, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="793ee8124cae238514b8c25ae999ed25fc14bf8b7b98a25a245fcba38072b1fedc29513a368f3753c8cd311777db79f9a772985bc9efa1243c41f1eeb4e1a07e2b57a390d4913acd4034182074ab783d616673714d72e8a273101c78ddc61411334318894a156cd2cc34f3f42052dd7e79c5c9c1ca3f59ee651bd294bf4d262b31cbe8f8f23a5504a804a083084d5519637e97e94880f549394676c0edec1af036823ea8c423a7792330b8491a5a4a01deb4660d6b420b1e394fb1cb9cde473f2000fe3c4acd591851c258cf231df8c46dd18cc78dbb72189af635ce08b35374c567aebce0303b716c9cacffb6f60e102f9172e0e1a91760c558b580a3c56b5682ade32ad42e7df55faa4e056f3568abf5dea4415018c211637c362ec3c40afa47a2960a2bb4b6936a83223898564e2667bbc1fb774199c99701a726073070c0e19f57a63f4a38d1b03a0c98f8fd20666abd5e66768182c4df12343bce3e617f62d29f2faa1d5fa831a0a582f4708b547aac5129985fa32b345a82aa89958370c1d331935b304a8ad2eeff24f520e667a37b7c0d8f93d35546b8300ec3dfebb32933938e32bfa54d563ef22bfeb6aa8f16765a3f4788e03477fe9236e3d5869335ec18058779c5e63ff5877369898fab14e58cd0608f6f4d423eb1bf09a6eff87d999fc9e7be28390d471acde8543d571246138da540956867a32f3bb1d2d91931dbcfb8ade5cc313dc54f64ad96b7ada7ff63ba1702576d2bc48a1c6cc4cec815e0b8aee9c31d5c5cb119952b8d321181c1a14793266df2cab56d161111caf86d4a7eafd42c2622a63862533d1ddbec5fdaa888d0a03240bb08476198ba789aa552d0ab149a07977da16d1ed4bc635d94225d1ac84c788407fd4425f5a56f687dcbe688b9d0b26cf86671f985028e2ae3592ffb82fd5587ccc3dcb406969e11be470b519eca6114895fd8a4b93b1c4d1a9ca4e0001a62185e72b6cff213c7ded22effa555b45aad686bf2b388c0530058feade244e0672b02128946c190b4c076fcde7e0bb6941852e2c2b90d5ebf53771583e749dc07627f840808ba034474da51eed8b04cbab8981fed4a96fbd4b7ce98e93afab9040581ee91eb42f5d5d8ada63cae87711aa82f8493ae3a64883b99a1a8466a5bdcb753927f22487f01f7782f7e8278ce98da8e76b5230d1f21fa89e02a5f59ec8ceb7b5bb90518a8745d9a43047cb74e9591ea0a0db79601656e784a9321c3d7ab6a14b3d030e3deb7aaff2a2c89cf7ee0e2072936dc7b43ccd6233fc75eca52994a6e9f8c7929f6c370c93aff6f46bbcf05c1d85cd5b126fc08cf1cad82d3218f4127be9aa6e21bba7f1fb9cc4ffe5fc293b903f5ab407d67418a24579704f9df8e08ea157c480b3115d48a9109138f6b391901367e66a7f7573bf20a6d12de0bdad082f08599f912e8860aa4b6a6ef2a5ea071af07be64925bea34913660918032b72b55d01f1d8e09a4e79d70b4bf9f43fa0862fa75d1a0eabe3a769d3df7bf5ce7e0449d54295c06d5396a8f049294e9ff6d60687786d7143e8cbd23c30e36ff7dbeb266f6e63952d65998d844251dcab1cac0669bd0561b5dfefd1c7e0ebbc1567526797b64c97a4f31f87de4e034071b2d48fcbd15ef386ca172c0af3d71aa98744047ee463b3a20a1ef9b8bf1753f83d0f3ca9604e2234a71c3d00f78fb8a0d093af48f2ac0a15ba0c7c21ddab80ce394dc6e6245784ea17dd3949b76e3ca91fd29ea51afe5e50d71ac1067b665d8f57ae49a7fd635146e04861406681637fcf6b53c1404b9b69f4743a93874f2953aa827aac1b5462c852beba5d1080889d05741a11b86436589e9d9e6ebbb3fe89da9dede91731ee70851c9e1501beaa155844f238b299216e69cb88153d20f113faa9a51fc147dd31c5820b46c0cf5136d08761a6cbbfab1652c656d6f7dc7ce1e6a084962ca9e07ebbf949392482b9fb942b6025b71a903c199ac858d99b7eb46e92360de03a0631bf77763d8c098879a9b50907bbf0d6868ea23eb8e471700214d984d661040c51a4b01488718dcf09b3cd50c720b627d664fee7a1ea50ae6951bc0d0f6f59839ebefc18b99c844ccbfb3c4c04d19f07879ce06a3137b59ebf4c7daa52e1d850924d4cf76630101d37881f30e914346ff4f6e73cdcfd56dd81058cb6763110d88d34cca16cbc7b51953d44e09c57b3565e6527aea04949cc28dc502811e82c8cd8ae181dedfca4a47d3b22626eac388f272995add71bb5504a38c03b5ca8381ce09f10acb5f5fade0942f30334a0ffd03dec00fc7a4976a95851d0f347fff16e5e6f663c5feefaf7efa743b2766f1d442ef882f4852318c25a81b3d2bd4fb5b683e3837ea7d4df69fcb8a87788a3a0a759c86877cf56caa98f5fa04c71652d44bf5250ee6f9c54794bed3b48e33a063161eb324456da5e28ebb5ba271dcc826bf7b646b6c89da67605cbb953c35c070e76be46ca66ccdd060fa07af82d53c525c19eb8eb6e08426f160340ec8ec6a57a5aa146f5b67d84184a46b4b8a1373669070123f8346cb607be14a4d5b9124b369289b0ee7f184d498ae3043b14f3ecad6e2b9e71661e85e2dc0b6b053300468d53e36f1e99545a33fc1b84da6fc20d8f7f7f9ae614588f351fa59c818ba833920164d9b434052f4e788bbdaf1e9913c822fca65e0cfad203bedc6be2abac264a0cec0dd4e813dd84d28d853cd9b85d9dc94b96a80643dd3e2aaf73ec85566124204f7b98abc8c5e354a66dc838c080d26cebd3bf388eb8018a06b15708311043a785a937e63c09465ffc71d1658d2a84ed6b346b68e98459cd0725efde386cce85928eaf90641c5ad4a7f1c733fd5238bdfe348456704546afc4a982b42e3a5bb473cd71dfef785473ff88175d92d2f72f1ac5cf77344c8dcc07a78be9575f1cde05e8c5e2950b1f597a21b4351295e9f59e926a8b03551934c73f090ca3fb644a4e95dfa91bad452f59a5cde71b50e8da90ead55ea96181cc1b5c6deea431f27666bc67d36b26004aac6c02c29c80c0d6de163660bf56c48bbd7c5a06d1ef622d5aab46a746b6fad00ef47ddad8290ee81509ebc19cb85acff4ffe3d9123774b76ef96db3cb942776eadad084bd7351c340fc219ea696df3657a992792890bece7dd84e08af3800535b0a0946f9af6ea30dc20916e133f8eda3aef83082c1497d606fb99e81bbeedb70d9d32f93fee0a2090136746fde09038d1f8a7ae494ac012665f3db1119c49650012ae7e172f9be15622d0e2458c431bf386b5163c444e2515f1c99d56d2843863eb5487bb346d324bcb163891b10db02cde5003c111c984c690927580964b9afcf6c6cd1d9ccf30339f3d7fb8ac348604634848c85bb9a11969152d2b1bbd870c3fd95251d38f39a5ee0d48962e414ef7225150dd3134a87cc954eadf8e1a78ff8914de38f4d9dbbcc01553d2992f64b14377e21658cf2573393301bd0a46654cf5fb5d6a1a6f452450db63300b3dd037c5678c85f84b69cf52036bde51f6af406b82b8ce0c3bb64dbd538dab2e6ecbf4da5a57d43ac5aa0e2aa1cf466167662d088a09e109a95040865fd6bcfd68e5f6d6f3990c82f201da1bd0f4a5332bf6155584afbb70197d4e59e829312a3db47a7095c08251a7f574d4869177ab8c0a380adf87be8a1a016bcb8061e3f2a3f69661cfdb54a48e951c45d257fd3efb8dcda01d25274df0adcc0bf797caeb9296322738a972d8e40b07509e3505ffeb2c08793c75783a4c65fd11dc5af607dc3700cbd44f431eb4eec603185dfa8cc5e4693b737bae7c8b1ecf24798a3c72da8d688f5454947c99c339b752d027248ec9c08fb42df0a302ddd3c823ca1ad9cbfc2b2bdf3e7c9181da0ba1878ec434b5049163ef309892652ccd365df8d8260dce74e0d9a0aff0e1e56ab831bffc582f5d13d288dde7c3bc1548cb446d54f360b6656b99ad812d7f98e71cc21918336b1592ff22cacf28b602c4f3053a619899a5903ce80dbba757f6012ee4dbaa375fed540fe02fb66c82841606429ad00685c6fabc130b9b556020fd04b39b1fd0aab194c85a0fc95fc51ea8838ccf388e77cc85744e6770e75f570c0abd0834135192a9e1a54fd90db93b2ed733e3c2491adfb3bd9078b9c75f6157c7af332d7a3f3f2354539083b05100b9dd3ca90e073df2c2ba3f348c780151ae629afa20870dd7842f5c71f163accc6376370a7c5cab922d09d87d89aa451c47e8f54ee5d761d83b057d31120ccb26c818ea1ebc0683ad26e3b3cc62cd3be1f622203c87f39f0c5789be119589cc9ea57f0b04592bbde0a18bb59e36b6e92f4f7ccd01789b58adac60c803c8f072a4e9c280f3245604a2dbfa8ba7c21a918654c75fe48b5748d91112f5b61af65da4b355bb8f0a180254c7af66b56a7b1790afb8d589fb386db3cf84c5f41545a6a1a65ddb6f9888b5a08787626792bc609f397978310263858c2209230ad88965aeb1f533ee3271c8cc033ea128a181032e0fb469ab8e4e5453ea92444e02d4c8cb2dd7289225d070d6a0f22fa73512466d458b343ae80a950a92e0df66817d25ce5ca5fa64e5b31e3ffebdd8ce49d66fb31d01ac3d096889b30c6a7f50b7d50f422d2442ec56c10e61a41054c150c6fa922ae176e4aa82eaede99a5e6249edec0b066fac5caf6280079babdd528d2f4c0556f74f3329e7f57e6f56b8a5423894bcf87246e7db449784d88c9e459549ca7e4670504427d95a9505ca2a243a28475ebcb2c0380b9825bcb9eab3a4a7fbdcc85ce514b8e839761526508d4d782691605bf326297d5ceed21e6832462194dd8dbe6976f4a3049e48a0aa52318f49be25933eb3d9ca9b0916c90a17dfb22f8066dc95d0dd25925e1ddbe46e589523051a34514f3ab114154e0ffd9ee0a463f4c6d0e0734863d081049ffb02f906fa30eef1d15b6dc95fd71a7fe148504ee1d532d81aae2e783746c821a40db2dc03119d8b51e56e8624473c709ce339171737660add577066960031b6f7a1d871a1c6b46f678a85ece774aca728ceebdb4a3f9b6ea169cde4bc390536f71ccfb63afcaf7c8e02cc90d47a238747d341508754dba5eec12cbf3c1dd38a56bdb15161709297308f0d4aaa878078b9978cf1760a3d81ddef482baaa47d4578fb492d749a824868ea6de3a51a17a0dbefc4046156e0dd28f59ec4d5099b33e66cfa369438c7503e5c9a4aa7a779422c51154c21cf12ecf3233e3112751a29bec131d50fd434bc9825dbf528e725cd4299d9d3adb3b4d20adb4a721ec7e4d2d4f1b3254a059b24ac500cd11871098c016394b5679a696869035dd14fecf924a2eb20dab48f86270c08e19f41034a07c3cdae33e0322052f5fc74bcda7731ceb5eae50de0e3643e326f7d40d76ca124e59fd6eab80e0c40a4a1729081f2078c878f506800189b4068064f8003fc38c20fc666a525ee19b128cb0b341988868d07988b175fca82ffe8da18edce9dc1e3df170d774cf39b740d153a903497701bd71be079dd8211ad2d3a9eaaabb2402823cb8979797af079979c1355d923896e598132fc991e4e532310d0e25c5ae227d22c014400127f37a1828474a53dac446c508c3e94808cc5ad2b2ed756cf2f04dd62692db1d83019d1500d146c3e0d765b8f12ff650d0fa8f83358a761f1e54c041b134703d8c3059aa1f3106f6011b4df33f2dd738c2da81b43cdf9da65b5033c829d4f5a1a6c1cf8ea2e74fd5fdf2e751b62d138fa6672a12fad88d128872e6c958f4902a6b444b17bd24dc2dc0b9d27dfa5d11ba700de9b116ad2679c71e8d4d7de323e33f1b5ef967e87c7cb1ddccfc1a36ab7c27a6b969751307b55f9237040afa34ec6d45f575841afee0053b985b889ae3e016202fe93012104e13e99e9c2f62bb978f0b217fb1f5ae4b1e93845f381c47529f77f7b642ce8cffdabd1429bd1b95174c33c144fd00cff2fe538e5837d62b593a9afc7aecd2efc25b565dbf9420348d20169b4f556d87cd415a7002690ddc8332099043f34b32e83dfe9651f94745645ea379d97f82eb1fc24ccb9ff51a880ca28016235ec9ab7e9a23d05f48013ad867920cb5974e06ef48e73c46e57ad248ed70442d3e0575b232c21c84eef0f84edcc714deca1cc4fb6fb5b201fbbd94e9dcb6094bd4cebbecc690d00bb940c6c840f69e1f9e2babe60c014d3f5b292c2c45bfdbed136c08a11d2e1aa7df5839cd7156f670a542ca8ad23ae0e564e8f87b30407cfd498191b902539585ca241bd4a4106a4712383140c6ec6283a2bf74454b959b8677c23561c73f9feac98a7b28fda204a87984570558ab269cdb23184d374ab172d3d9faac113c450f2faca565007b7c5013f02c66c408c81bc731f8559802fa452a0028bbcfc387389a00958b9adb83517940dd6b8f1386b971b2d92a4980e486d7954889323f6f8ba4452ba0002c984e6aa91d7642e0f8e92321494394b264cfa30cbaf9df96bd62d9b098554a8a8554fe84c95699a87b0da4e541d9395c5a4a69302bd3503ff763467beb111a3650287cebc4cd0804841f3990899992d2aacaff2bc1f7464fd9670450cad2ee153e8ed45331f694048fc0c4e2e7d034ab69e159226542fdb90449da050363bf7b683a2215bf5272d4c18fd2ebee8bd29dc180f448b1f85f4429d066c692a350aa9f036ee43ee74f942bba2164f692cfa70b79cb8149a6a79fbf3197101f75933cb0458dc2b9ffd7a987cd9a139cbb853064bc62343e305052a4f77e72c98760b972ac3ac84b374f4422bf44d15334f38291c61ff630a818a34d33d516da256e1ad5e187a79846dcc087a761df9e664afc9785115a6b78dca0908d0957be795a3001ca2d3ad9fc544f992660b643da5edade7890217d07452ffa7454fa59907cb325c9dd445fee201bcffc8dce888da13059bee2286a5ef0e863dc107478f12baf983209060b1aee7286bee1e699b84332327c845a1574b8a0897eb1cd31b4a7498a33fe1e2dc4f8afcafff76eeee019c8c73cf8de0285e342e08ad0a9a43f7260bd5fbc903ebe099c73850982e2e8533c97a26f67855c155a3bfb025b2277e9b627a0bc860c1be18875241a9f8b4fc61039f9d71f7bbc537d2f51f1a5e840dbff7786f4a374f51cb2e657a6f2c8052cfc3ffa7e603a1266df3eec49c00a40d6f82b1b4a670b99534f401866ed6401602f8da9bb7243a97321cfb7540734aee1b75cab753db13f81a4bc67bf01bd467c44852bca45e699bfeb783326f631deb5d22c47b97d9d0c2adbe97c373e149321613a0d6f25dd822d8fa76431b97e88aa397eb467ffaead4fe9c196fd69b81db3906f3b4eb40fdaa19bd5607f7a3bd442c88731014da0af1d33be3e63f3967b00f193e37419f18df4f013017bd280091679e14428cdab0a8a77522a2b6a3337021d3bbc8b7e8774fdd2f387d5d455d10d91bb7c05a15e2950a51b00edea2b5723539770d321c8f9d4e5d24f291e033acb2e4a5c1f8671fe91150d023dd031cadead806bcfa69bc44946935d1e49a628bfcbffaedebd5789a6828950414052d9f7d261e69c841da3291270d7387662f74e20651b6c75722b530aef69cae0c2c9ef5663bedfa37e0192369c3aea78991e0ffef0bff4157d25edd29acd148a3b255157a84c4dfa25b5af681fbe93015382bdf742c1a5076caa52b5370943d02fb98531be900ed3687b4dd076daeebbd3025db56a8c7628a0542a4ac23626b3549abf114127627e44f5df17a81328bd84132e36cb6127c4081199b4fca0dff46021396038c37c832c9bf2fe43729ea45b6ee6aa5f34b2869965f78481d56e6f8ca913301e4fc61b2616c9ea23dcce1f9ec2a0ad97959f00e6c1a99fe5c9be180e1d03826b433a120c654171afedabd20fa42b8bfd3d0bfe64a560cccb9cd001220965576e6f1664097cd3e28d9bbb63c84c801f832e7ca8afff3bae368b66b3b62907881a3c3ae821d5a8725cd11fb3219eb956dd586254a88ab4788e432da28db60a4fe97f203e27d4052cbee48d2edb022d8c72e2a3499378f4ef7076abf712c3a24ba10e43f8b0efdc226c8b10788f0160d1ed23ddc002ea200a4825dc9bf25f56d2d134d25cb2603fa28df93c58820a7ceb690a950f7a6fd1b893ef414d50b57468343a96f55625a141293e6a4e8d0a6aa824a0c31b206c75b48540dc46b20f0f55e5adf8c2514b01ccf4f15faa43df71aa711f8d76ba335a881887c0648aafc434810bbf808eebc1cc9161ac4e111496e4d68400d52c96dc93abdb47ef1901b1674888bb836362786444916135e22f9b10d37400748d6a11fee36b75e6caeba02790665045a274e50ded6fa969fe715751d429c2ace6c2faa5848ab1417e003c49c29d0efe18f1d157c5ac8cd3db4d7209fec82c77b7de669e8d0034eff8c2e49f731f76b0fccc9b65b6a8ed1efe50e407570d73c61403eabb8c376bd3326e57d490bcd74bc1a520cc4522ae65aa025e4782d54a4f82a042da6f9273678de3621527a6f4bab529c7e17726e094d00eacb739e931f3afa8dad84a6d1e89f8024c194833742b967e4cfc8f63fcbf591fb469e25bc6a9267b85d4031bb4b434f2f0b2c1e38dd27c894b029b41455477b8d69f95b8dfb7a22890ce7d71660c6f4a84dfb843172d711f9520063a7f935dffbc10abfb0f44f95af6fa49b2f0fdeef56fa960a98f369b574435cbb18b14b96b8937cd2f6737075c04dad79b77b786f203b2951e4bdf1228449a83306cb0e5a98c3976ce8b63a389be9ce4a5adaedd30a4e069152c35e49bb0e42a3873fd3c88e277cdefb816b0286ad1f12d6ca33805e90e4391f5a59bbc86479c9bea9d71fbc5253cf3017fd6862daf0f72d52c2bb44247b6a303722387cd01cefcb14e79bb6fd507daf09833aa094868132df358725a4db57dd1e2e37bcb37536ad59d8b68e4293d15f38715c68885126c0fff1eafe295aeb4a88919561e03cd4f7436cea1ee69bd66e308425e41eee1dc9e9609ec211aca2cae25ed4369c9fcd7bfe316c9f2b9707b6e3789f6c41a70e28121a26d5591ce94cd60900b27ebfb995d34cd509fd0c8fe204969e5ef6ccd9c1605c47da01a437cbfe612d928a63c83d998dc2de6ea4695f36865febbe065db2f75c2a700c4b23251fec61bedf33e45eb8fde785178647999b9a0069aa45fa01f4ed8ecb072de1e256a8b95365831aa975b249f57bd38064edc6886620ad24ddd589dbe3587c23bf12a71a7edf34b8c46a079adbe410fe32abb408a264a01f3ecaa115e4ad2e47e9bed54df1fcff145222c544c89b15b2943e5e6ce37477ecf4e17fbe33d74e60461c52c3682cdb7b0d1ba016cf7756ae9042b296c308da630b7021a20c71600b21198221a3fb905c2716ea4b6a35af3fc204dceb81bb4270b51a7f552e33aecf4a704b5c6e3538e7d91da4166d747ed854de3dc15ef3b07a04d9237ce0351b446c09cd2b4e87aae02e08dceab1d35c31334520eb3979617928048d3510d9f3d5db36477fb1ec21ad57e7d757eb7accfb1875b59bd1627b62f33ca853e11b211f3a02500e43c5655dac4c8ba62247da245453cb690700de3b9521e5d2841fcdb73d550f4ad20f53b3f0ec2f229e7bc564daf94a42044c2a8f93b13d11e9e27562c290f47017e507275f12932f3c608b2ac955c15cfa100fd5df86a223d4acd4350dedfa26d15c3e3595cb003b1187a77f784385b59e582308cecfd6e53a4be286e6b27b2e66dff8a578f30bd89f5cee1014a55423b5297dc23c5d9e0fef458d8c5df03c989ff7f1f0ca8ed10e97c1040e07bcccb3e4bf5cf8e6ca08a23fc75fc861e6749fa29ac8a8be70c341627b0b8a75f02eb1493ca574c98fa69efb5d76261391195687d947dc785a712d61a7e1a9b954d5b4c159fb4ac0710eacb0086419d12176681a911c10364011b151edaa0323d1a1ae040f9f26be099465a8c67fa522b6805df36ac81cd422e4c34028882ceec4b4fb08d86c05aa4c16a02fe99eea84c75a0821373188489198c2296f290efd5c905e1a5ce0091b4da05e376a416d80720e14c17d2bb84b91cf989fa72c3822d37661467e811b0b1fa6e4948dab66911f5e0394d211e773d66ab2c94a4a14329abb1e9307ff36701908ef85cea4d8ceeaf24520b53ed0e401a166aa05f821cbbc5d1f0d16e4e5d14a4d04e5e5224a2b5a7f34dfc03b691487e1d7199675f00b137c37a87cfed418e013d0b3c3862da3f812d2adda99cc8ab4da10d3ab9d392bef7c9b11ca49fcf7f7af9f6010772b1a04b143eaf940d56865887b202fe0b8f70fe2d45bcb0c20e95abdf2e76d32160df1fcef36aff0ce2e9af3453904f7b2eb43a1bad754e3f1216258f49d34fe6462354366e82a86c4ed81a4021afce5b66039622c6b9c9a24c5f0e57ade4b8e64104e6bd4237fb98c55a6f3c2a5128e96c14bdb1615a0b9c0da306454b76d5f698e321d48719a3171083b41455f59f28560dc616250be61a598b1e753943ead0ca5270bd2039b2f5e480349455011f86d2d8f46ec562f8b1e57872576127f3a050fc6e32e7c4c4c7ab1d2855e8c8d649b8eb00f1d8d02c80a39eb6c1b23fb1d5ba28742e217a02276c724b8b32ca2d39bd3f71cc7fc2a9dd52a28c4ca566038fa2967881c9303ba138bc8054761651e7ee7e6b8960346f227a07007c74280f8419e6baf856e2473cb91ad9c206df2f7a8073ca3462cdb23ba5dd538efa2af2b0b43049a29931e315c4c9290b99c7edeb7b938ea05bfe3744735fb2e550a7e15b7d7d6a17dbd87add165d7a13668884fb235b1fd70e4c3a67895ea0c9b8824b8b14d41a9ce80debc8ee3bef4a57d40994d2d422e2621dd9fdcbe1edb712ffe43774cbbe5839a8146a936317310c3be4daa693685262ee3a44aabe86281b0927e78df3ca4086a81e8d7af261fc51d3eb75cd8852729adfd68579958b61aec37f4f6bbecb4a3f09eea3ce0a49d35666d1050f65da5d5e917d79390d0133e81d07aa285c53d3c7d3bfb82d7cb8e6ecf4f8203b78787963277e98c5dd8cdeb2d83b049d9671b98563eb006ae8148215eb87004551aa357016cf88caba47d4fe3f4209ba0190f5020c5a8ae6e37e60c9a3fe856fbbfa0acf3dd1a2953fb31f0c913a9f8bc6a7bd4feffb8dcacbd764f84eb370cc7baaafd48c9a8972b22c989a49b9f5ca332a1331fd591d412892f45a080d6a3f5effc802364d0ddf03cb391d97ba4fc8371a91650a8a28c5e6221f66d15b4a4b0afe7502034a60c9a1bab525b51225ef9d40ba9a5e870faf19fab07933f2840c4ba52b9a82442c207147bd7327da8468ff6ce98c3de6f7092db9e1673dfbd54d31c4f0462524483edc8f73274137ab5770230a87118751f97d915644f793da732cbb2936c08595209fc42a1ee095591ca9ab503e27ff19b5ee3375a79921f3ffae984a89b1e49eaf21a9d6c1d7c14138b97fdbbf824e3bfb06457aaf1b78ff393bde10b7bbd9bd2d632013d6dd33a12be84dc33afaef1a6f259439356e89290de74007e1bf127594db485b9d07c2dd67876401922bc943a45c743377c", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 1.347281698s ago: executing program 2 (id=460): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$inet(0x2, 0xa, 0xfffffffc) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x218000, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 1.342577278s ago: executing program 2 (id=461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) ioprio_get$pid(0x2, 0x0) r1 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x404200, 0xe0}, 0x18) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x1000) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x68, 0x0, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x82}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) open_tree(r2, &(0x7f00000002c0)='./file0\x00', 0x8000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000180)=0x7) r10 = syz_clone(0x4000400, &(0x7f0000000680)="e12615a3570f3fa469132bf6e6de08f79c5953f495133306d5a9e28fee57b7a7ee9b7a591516a4e2f0f16570991f5c10f3dda9f10e6a287e1f3e4eb626416dac2bb7dc6f4677bbfb5af8450918807b35df8a47be900832c9872ab6e38f38e45e45b6d702de2391f9ed784c9f1e1656e173c111452fdf0d5feadf97abb079249a1175656d186df355fa6bf3bff3b3a86030f61cf99fe68b8b373457b345c7acdc37cf05890f108dd519d4861c31c934c52c921711ffe75f531e9700ef81c80a1bd906a8a13c1e8d432ff2", 0xca, &(0x7f0000000780), &(0x7f0000000800), &(0x7f0000000840)="cb1b7330a253c8462051d066e9efd3860a7238b8c5d9c7136d072c56cdae0e9531721868af5723aa4fcb0d9f62c756c09ce5") rt_tgsigqueueinfo(r9, r10, 0x1c, &(0x7f0000000880)={0x1f, 0x0, 0x9}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 1.315716798s ago: executing program 2 (id=462): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) socket$inet(0x2, 0x2, 0x3) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x105002, 0x200) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x80, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x0, &(0x7f00000000c0)=']\x00') 1.302013429s ago: executing program 2 (id=463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000080)) (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x1c, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) 1.279134139s ago: executing program 2 (id=464): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$binfmt_script(r1, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000040)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\b\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbj\a\x00\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfd\xdb~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\x01\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4y\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xcc.\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x8bF\x84\xbd\xd9\xcc\x06d\xef\xc0\x04\xc0\xdb\x03l\\YI\xd8v\xd6N\x8c\x86\x01k\xbe\x0f:\xc8\f\xa9\xb5\xf0\xf2\xb6av\x15\x03\xc5\xee\xcc~\x8b#\xb01`\x04R\x89\xc4\xcd\x02A\x94\x86\x17\x00\x00\x00\x00\x00') 1.2311462s ago: executing program 2 (id=465): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800, 0x100, 0x14}, 0x18) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xff, 0x280) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x10205, 0x3, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000180)={0xc5, 0x0, r0}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0x10000, 0x10000}) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0x2}) syz_usb_connect$uac1(0x4, 0xb4, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x1, 0x0, 0x82, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x71, 0x0, 0x7, "daf0655982ff44da"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x81, 0x3, 0x6, {0x7, 0x25, 0x1, 0x80, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x5, 0xa, "e8"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xa5, 0x1, 0x0, 0x5, "b93843b6a838"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0xde, 0x6, "8dabe2"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0xa}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x2, 0x9}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x3, 0x6, 0x3, 0x8, 0x79}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x1, [{0x5c, &(0x7f0000000400)=@string={0x5c, 0x3, "61321e1297808cd92936d3d069a8198a0bcb23af10793160307cdcbe85f2185b4d8ac630dd7c50307ab18fcaf8df613573caf5fa75cb9dcd8d632d56313d4f4eea171566a75c401cfdd44728a3f11623c81b1cd3bbad34693b11"}}]}) recvfrom$unix(r0, &(0x7f00000004c0)=""/247, 0xf7, 0x10000, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000680)=@attr_other={0x0, 0x2, 0x10, &(0x7f0000000640)=0x7}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r3, 0x101, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff3b}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x2004c080) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x8000000) timer_create(0x2, &(0x7f00000008c0)={0x0, 0x8, 0x2, @tid=r1}, &(0x7f0000000900)=0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000980)={{0x0, 0x3938700}, {r7, r8+10000000}}, &(0x7f00000009c0)) syz_usb_connect(0x2, 0x6d9, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xca, 0x9e, 0xc4, 0x20, 0x403, 0xf44a, 0x7210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c7, 0x3, 0x5, 0x1, 0x40, 0x0, [{{0x9, 0x4, 0x2e, 0x80, 0xe, 0x5c, 0xb, 0x3d, 0x6, [@hid_hid={0x9, 0x21, 0x8c, 0x1, 0x1, {0x22, 0xd8d}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "239ec655fa"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0xab, 0x0, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x200, 0x4, 0xe, 0xde, 0x84, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x80, 0xfffc, 0x7, 0x8, 0x60ec, 0x71}, @network_terminal={0x7, 0x24, 0xa, 0xc, 0x9, 0x8, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x6, 0xfc}]}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0xa, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x3}, @generic={0x76, 0x5, "1ccf4e89886d82f4b012e68ae4ed9b90fc9de9354d8c881a9375555907945a0282ae2c902763ecec5b7a6cf69996dd8cb5e3df8b42ba6b35b686bf5492f390d093c45b9ab5d968ed1a1daa8e78f5f0ca59a0e02a1d1a88f350b0f3cf479a0a08562412f90d97bb8bba73d5bed281aea903e50ef2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0xbc, 0xfd, [@generic={0x8c, 0xc, "d47577e8b61a22c84e8a4b9261cea8ef3b4e132280bef5fb4b398577dd7b99f83221baceef936ea3035fecbfbf3abf942c9aad64c22a4411816e1ac9fd822084c9ca94cfbe414a3da3041cf730b8d35d788b46dcf543ade9e2c82ccde73a504e609ec01eae09f37cb1223746f26265420979df36a857ae29ba7b624c7345d20fc234fef3e84f3a314ff3"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x6, 0x0, 0x80}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x2, 0x1, 0x2}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x3, 0x1, 0x9}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x29, 0x46, 0x81}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0xa, 0x6, 0xff, [@generic={0x9, 0x0, "8847c19fcee853"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xc, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, [@generic={0x66, 0xf, "c22d47ac4e3df49d5ba1fa29e95fcdd104ed3be248197c93e25751a9a4cd2ba53a70f8e850dc51cb1ae8f009287429d54696dba74122b9b30787a08e057581b7c62c635d621dc3e24bd25509803ef3b93c79b36f60a7761def12e66dcbe53fa112d456ba"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x5}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0x6, 0x2, [@generic={0xa8, 0x3, "1d371e69383934b98b2dd0924fb20526d2a91b3eb17b7d36adbf09cecb3b84a8e4d99ca70a21b4f624859342f9f24c6135a360831f02ad9e5860f2d583f9c69e5ee6caccb6512ba6c6041bc7350f59127a98ddc522ea6d5c5a04209d18cc1607f501bfb05ddaab6f7982051fc9bbc4276c80529acf820aa08964ba36e67348da5ca1891ec6b7d5de94893aade215bdf162c47835e457f9554a16356529bfe78067dbc3c0400c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x4, 0xff}}, {{0x9, 0x5, 0xf, 0x2, 0x0, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf0, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0xb0, 0x5, 0xda}}]}}, {{0x9, 0x4, 0x65, 0x9, 0x9, 0x10, 0xb5, 0xb8, 0x9, [], [{{0x9, 0x5, 0x6, 0x4, 0x0, 0x0, 0xff, 0x6, [@generic={0x29, 0xf, "6865d3041a8b4424d924246f5162b3cbc4dd9db727abc37a3a0fbb84b79ff14e4b6bcf008c08f2"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x100}]}}, {{0x9, 0x5, 0xd, 0xd, 0x3ff, 0x2, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x200}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x7, 0x13, 0x0, [@generic={0x65, 0x22, "2509bd1cdd6d48aba964d6c8b7ec038b1f6295f3703962793be951e8d274801a44c3cf78374f55fd786a56bf7576e35fe98fab9b868884924e24d13b8efea5dd3efbc4cd4b22470e826172c3dd830b35b3e276de8feb37382414f4a96093dfdd22c31b"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x7, 0x9, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x5, 0xff, 0x0, [@generic={0x72, 0xc, "6f2b6b9cfbcab35cd459ff77f14a5b188a819d31e473c1f34a259079aa7206675c32418237725cc1896e582b59b8be9956543b002918ad5862a7ffc716587aecd1c8b1756516572297393547709977457cfc07078fda3c4b201a0ae61e45157490abcba83e68d745e9ab100e16357158"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x8, 0x4, 0x1f, [@generic={0xb0, 0x22, "370ea39f1a84ebd9c5ce56e03757fda5b4bc034690d6fc3282571e869fc272358d282ca97732b35375d76ba1eb70ce0daa4120404544646cadf565822d0092bda59295dffd0e968fecfda62ad7f904480f2b7846c0bebba96bb9020d87f1c6faeabd1ef246170e03b279220b4b460c725631aaa992a44db47fe6ef549bbc02a840290004f93ca4eda5ab7a919c3308bf5b83f9e4ce768d1d4b3c08aa233140c099f41bbb71cd7b6f4c1ae3d47a36"}, @generic={0x7f, 0x23, "a498bd66a27d52712e1cef61c4de61b878901311f7bde29bfd2163de09a4ab45a72df51d862f215dbc636722b30fbe29001b34b9cfeb487dac7797592e1699f3369542828cf41954819abf293e650a500dd63c8555ac2a63422d6572f7f587ecf96cf3099125586ea653a32c275906054ce0926ce6ca22264af6c8dc4c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf5, 0x3}, @generic={0xc8, 0x5, "be9507576733e2e0d412f72eddf8164f0ddae4a6984102999c55e54ca28b36ac95c131d2d787eef3f3dd6365922344f55a9ff24bb07d42645a1591d9f99d06fd20fdb6b629da70b0eea59c5bcf220604751528afd11eca5df5560241d0035a626c31af46881c67520e397943f92e44f66b7ed6e523b1dd897cab12a2da6e7755f88be2e72abb927c6ccd577f545635e3e798a0e053775f6f869086c5ff46b7e7a34b3cecbad0079ad8dd50cc0add431530e975845d374b913d0afc7da5379b47fafd9d575263"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0xa, 0xd9, 0xd4}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x1, 0xd, 0x3}}]}}, {{0x9, 0x4, 0xd, 0x2, 0x2, 0xe, 0x1, 0x0, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x6, 0xd, 0x1, 0xea}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x5, 0x0, "06b4a00e49"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x2f07}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9f, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x48, 0x2, 0x56, 0x8b}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x110, 0x80, 0x40, 0x9, 0x40}, 0x5, &(0x7f0000001140)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x810}}, {0xdf, &(0x7f00000011c0)=@string={0xdf, 0x3, "7cf54703aa29f45b70cc1a96821ce34110a7574ea3e85e60508c3aa7d60cdafcbb8975aa524ce823f25ea98b692ae483c7cd75ee349199249852ec3462badc089c65c9d5e74642f76388702ffb0bde75a61048afb0718a2d9b037585ea3814830b05d6eacb32cdf314981f2fe0f57df1cfc6f48a9419e9d273af1e86cda6eaf226813afa9a0522ddc85567e95b0376426ea32074d44e0f25134080cfb00a48c5c6bc9b4e258c98ea18b7554b3ee4bc51f1828e59061fd1d95ea54d9aabe5bd528140f3288e7c678bf70ca8068a7e2d13d806eec958cc8b53cae84f38b2"}}, {0x47, &(0x7f00000012c0)=@string={0x47, 0x3, "98ee2cad18c5b9cfe4e5be127fd4a7abc64ce376b814d9077d5660848951c9b2a4fceec5fbe407d1d6eabd25aeb9edb8a91ed7d98cadf33ab1463ea6f37cabd2b6cb850b2c"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x804}}]}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000001400)={'pimreg\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x41}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4) timer_gettime(r6, &(0x7f0000001540)) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000001580)=0x1) gettid() ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000015c0)={0x2, 0x1, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) splice(r2, &(0x7f0000001600)=0x2991, r9, &(0x7f0000001640)=0x5, 0x8000, 0x2) 793.170657ms ago: executing program 1 (id=472): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) keyctl$revoke(0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 782.162237ms ago: executing program 1 (id=473): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x2) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000510000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r1, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 710.843538ms ago: executing program 1 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYBLOB="3af21ed496f03361d6281aa7975ed159"]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, 0x0, 0xffdd) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x6, 0x2, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 341.893324ms ago: executing program 3 (id=477): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}], [], 0x6b}}) ioctl$TCFLSH(r1, 0x800455c9, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 273.329106ms ago: executing program 3 (id=478): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/238, 0xee, 0x1, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/136, 0x88, 0x2, 0x39}, @fda={0x66646185, 0x4, 0x2, 0x3}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 255.020806ms ago: executing program 3 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/packet\x00') preadv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000640)=""/130, 0x82}], 0x3, 0x3, 0x9e0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x49, 0x0, 0x1}]}) select(0x40, &(0x7f0000000100)={0x10, 0xe425, 0x5, 0x1, 0x4, 0x8000, 0x9, 0x3}, &(0x7f0000000240)={0x3c05, 0x1, 0xf0d, 0x2f4a, 0x7fffffff, 0x5, 0x8, 0xd88}, &(0x7f00000002c0)={0x7, 0x8000000000000001, 0x1, 0x4, 0x4, 0x9, 0x10, 0xffffffffffff8000}, &(0x7f0000000300)={0x0, 0x2710}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xd, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x6, 0x7ff, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000c00)={'#! ', './file0', [], 0xa, "889414fcf92d7cea3083b6fac47e4cb3e477a50112ccd5fd2c4e7f811da878cb47c0a1e0b63b0dc945b0b21383bcb77906b627d02ac7884cf8864ef5779a097faacbbabc3e8e197a2ff91494fcc1b2a0b11a173bd881ba25394506f7f21fee75fbf402496b411ccc1bc21c93f91d10b3c8a98f8a1b09414fcd281901709a24f8908c2b79d377e1f95865f591dc8eaf8c96416222c4fb8288db65f6eed0f77eb60c762d9fc9826e2549c64bda7a9000841fb91f2a3cea501d08164613fc1bc4e3458675496d5635497331fb5aff5f21047411748b18a96a5655fa0bd9b25312eb3bbebd74eae06cb799a102fd0abe7ed9e7898750b2c9297d1c078d425eea991a1d614b68961782b95733ea65b87d2699f8a975c588ad9c55c3ccfd554be5e9f53dddb71d0a2477afd4e4f391dfed9a8f944fff1b4f2743808943c670df837ba3c7f1909f9f5c90a1769b84b48bd438e42b7b301b413e9196aa4c905400612117eed241574cf85c15f33af2e0bce609345347c1ecff010066bc1bbb005ebf9738bf5e8dfaccf33ceecb4c97c9f6f6e49b30b9645dc964ae9f0fb30b3edea0c0de8e21156beffe417ef02df54c32282549920f6aa3d6e0f849c9d061428e96046624d8b6e7"}, 0x2) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x303}, "04bfd57e54b83b87", "9d75243432b099f403e918305fb9461f", "b779126c", "78b4c24ab3fba483"}, 0x28) ioctl$int_in(r7, 0x5421, 0x0) sendfile(r7, r9, &(0x7f0000000100)=0x2, 0x100000000010001) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x4, 0xa}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)={0xea33a4d2372162eb, 0x8, [@local, @local, @remote, @broadcast, @random="f8191462a3a7", @multicast, @broadcast, @local]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) 63.212239ms ago: executing program 3 (id=480): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) (async) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r3}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0]) (async, rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 64) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async, rerun: 64) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x8000000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000006, 0x10010, r7, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f00000005c0), 0x4) (async) inotify_add_watch(r9, 0x0, 0x3000004) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000130007000000ea1fe766b4d2b50550f5fd6786a96371939009d0e0000000000000007a28e8e7c30ed640097229ceb81763552107a5132370343a723d"], 0x14}}, 0x20000000) mmap(&(0x7f00006c5000/0x1000)=nil, 0x1000, 0x3, 0x10010, r5, 0x2000) (async) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000000)) madvise(&(0x7f00006c4000/0x2000)=nil, 0x2000, 0xa) 62.451799ms ago: executing program 3 (id=481): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7fff, 0x3}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) clock_gettime(0x766293fdc5a3d1b3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) sync_file_range(r4, 0xdc0, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a000000000000000007000002"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') move_mount(r5, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x201) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) io_setup(0xa, &(0x7f00000003c0)=0x0) io_pgetevents(r6, 0x66e, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x2]}, 0x8}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000240)=0xff, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}}, 0x0) 43.962179ms ago: executing program 1 (id=482): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2b0002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)=']\\#-\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xffff}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000820}, 0x20000010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4080) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={0x0, 0x10000, 0x3, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000800)={r5, 0x7, 0x1, 0x1}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000c00)={0x8001, 0x811a}) syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), 0xffffffffffffffff) close(r1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000c80)={{0x0, 0x8000000000000000, 0x3, 0x1, 0x7e1fcb13, 0x81, 0x800, 0xa4, 0x8, 0xfffffe00, 0xc4, 0x10, 0x4, 0x0, 0x8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000d40)={{r6, 0x52c, 0x8, 0xfe, 0x0, 0x7, 0x4, 0x9, 0xffffffff, 0x6, 0x6c, 0x7fffffffffffffff, 0x5, 0x2, 0x2}, 0x8, [0x0]}) r7 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000e40)=0x60) accept4$nfc_llcp(r7, &(0x7f0000000e80), &(0x7f0000000f00)=0x60, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r1) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000fc0)={@remote, 0x0}, &(0x7f0000001000)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000010c0)={'syztnl2\x00', &(0x7f0000001040)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2a, 0xffff8001, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8, 0x8000, 0x5, 0x9}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001100)={@initdev, @loopback, 0x0}, &(0x7f0000001140)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000014c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001180)={0x2fc, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfb, 0x4, "db2a71a74acf34058aec813ac6f1be149efec84c2088c0e7453c8cd16784969a21b3bdd1484d105a0cb88fbd32a725385c2f247db25b4fde54b8643e0762951b00e2edb6b258f014387c974a3eebcae1c9228e0c9ebb34ac35ef69e0285e38fad23ab422dc821cdea076e37ebd0782f3fb0343f557566b946457223be39471368f41e67328ed68ead3a31ab327219a6321a7f44683cae0edffe8f03715fc2a413e5cdc9369b2a335f39fce5a0f10c9164907c78db8adfbd8032e89f15922e12fc4063e719a7ab98e9de0636473fff26b84f6085c4075ff4e82652cb4d8f5386a0d99dc4175b8ae07c4c68362d2051fac29929bca9b8550"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "c6f6eeffc121d44a325286f9"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!].\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[,\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x24, 0x2, '\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "1ff9d1d06a7a196fe3d91e80ce7c1ed4e8806abcbd1d700f5cc5ad35604056eb1fbc4fcf4e4dd6c49a1553e2f7be9d5559d95b6c12fdd7d4fe20a5bd9469e8f015f90c916bda1b78b2eee3d42aa45aba47172b25f9a6269212d36c5bbc"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x9c, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x5c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x49}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1b05, 0x3a}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r13, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}}, 0x80) r14 = socket$netlink(0x10, 0x3, 0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r14, 0x40086607, &(0x7f00000019c0)=0x8) getsockname$netlink(r1, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) 30.850809ms ago: executing program 1 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0xe8, 0x0, 0x0, [{{0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7, 0x0, 0x173d4, {0x0, 0x8000, 0x3f8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8000, 0x0, 0x2, 0x0, r2, 0x2, 0xdffffffd}}, {0x4, 0x0, 0x3e, 0x0, '.&^\'\x9b\x8e\xf1\x8a\xbb\xbe\xddn=@\x9bE\xe4c\xfd\xcc\xba\xed\x0f\xd1\xb5}v-\xccq\x91\xe6\xbdw5\x06\x15\xd5\xf8\xec\"|\x00\x00\x00\x7f\xdf\xdf\xac&{d)v\x94\xd4B\xfd\'\xbc@\x95'}}]}, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) openat$cgroup_int(r3, &(0x7f00000001c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 1.47733ms ago: executing program 3 (id=484): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) lseek(0xffffffffffffffff, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x51) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000002880), 0x4) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="f8200b6e93f6ae3e0cbd", 0xa, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)) unshare(0x20040600) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103fcffffff000000002b0000000c00060001000000"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r5, r5, 0x21) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file1\x00') ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 926.86µs ago: executing program 1 (id=485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x48) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x5000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=486): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x0, 0x3, 0x1, 0x100000001}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@private0, 0x3501, 0x7, 0x0, 0xb7, 0xffffffff}}, 0xe8) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x3, 0xc206, 0x6, 0xb, 0x14, 0x7, 0x9, 0x9, 0x5, 0x3, 0x4, 0x4, 0xa0}, {0x8001, 0x8, 0x9, 0x2, 0xf1, 0x3, 0x9, 0x3, 0xff, 0x1, 0x0, 0x8, 0x4}, {0x5, 0x5320, 0x9, 0x6, 0x7, 0xff, 0x9d, 0x4, 0x9, 0x2, 0x4, 0x87, 0x4}]}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) mmap(&(0x7f00006b0000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0xe47fb000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 21.238296][ T36] audit: type=1400 audit(1750758850.430:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.240141][ T281] cgroup: Unknown subsys name 'net' [ 21.260990][ T36] audit: type=1400 audit(1750758850.430:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.288242][ T36] audit: type=1400 audit(1750758850.460:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.288359][ T281] cgroup: Unknown subsys name 'devices' [ 21.491978][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.497567][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.672592][ T36] audit: type=1400 audit(1750758850.870:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.695752][ T36] audit: type=1400 audit(1750758850.870:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.707297][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.720452][ T36] audit: type=1400 audit(1750758850.870:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.752373][ T36] audit: type=1400 audit(1750758850.920:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.753074][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.777858][ T36] audit: type=1400 audit(1750758850.920:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.811985][ T36] audit: type=1400 audit(1750758850.950:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.837602][ T36] audit: type=1400 audit(1750758850.950:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.634092][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.641278][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.648328][ T288] bridge_slave_0: entered allmulticast mode [ 22.654582][ T288] bridge_slave_0: entered promiscuous mode [ 22.660790][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.667827][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.674907][ T290] bridge_slave_0: entered allmulticast mode [ 22.681130][ T290] bridge_slave_0: entered promiscuous mode [ 22.689717][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.696813][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.703878][ T288] bridge_slave_1: entered allmulticast mode [ 22.710155][ T288] bridge_slave_1: entered promiscuous mode [ 22.716126][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.723198][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.730283][ T290] bridge_slave_1: entered allmulticast mode [ 22.736482][ T290] bridge_slave_1: entered promiscuous mode [ 22.764705][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.771764][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.778822][ T291] bridge_slave_0: entered allmulticast mode [ 22.785132][ T291] bridge_slave_0: entered promiscuous mode [ 22.798348][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.805444][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.812523][ T289] bridge_slave_0: entered allmulticast mode [ 22.818695][ T289] bridge_slave_0: entered promiscuous mode [ 22.824861][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.831907][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.838949][ T291] bridge_slave_1: entered allmulticast mode [ 22.845225][ T291] bridge_slave_1: entered promiscuous mode [ 22.854569][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.861619][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.868658][ T289] bridge_slave_1: entered allmulticast mode [ 22.874895][ T289] bridge_slave_1: entered promiscuous mode [ 23.037943][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.045018][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.052312][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.059348][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.075631][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.082694][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.090013][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.097055][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.106341][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.113391][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.120671][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.127689][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.137538][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.144574][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.151837][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.158859][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.205863][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.213108][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.220823][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.227992][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.235521][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.242762][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.250393][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.266123][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.273193][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.280821][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.287851][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.295382][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.302419][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.317427][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.324485][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.332168][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.339203][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.348411][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.355461][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.365777][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.372828][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.416039][ T290] veth0_vlan: entered promiscuous mode [ 23.425925][ T288] veth0_vlan: entered promiscuous mode [ 23.448290][ T289] veth0_vlan: entered promiscuous mode [ 23.455780][ T290] veth1_macvtap: entered promiscuous mode [ 23.467225][ T288] veth1_macvtap: entered promiscuous mode [ 23.481229][ T291] veth0_vlan: entered promiscuous mode [ 23.500990][ T289] veth1_macvtap: entered promiscuous mode [ 23.532853][ T291] veth1_macvtap: entered promiscuous mode [ 23.533559][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.579803][ T310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.629281][ T310] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 23.639079][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.657077][ T324] batadv_slave_1: entered promiscuous mode [ 24.492391][ T323] batadv_slave_1: left promiscuous mode [ 24.687616][ T347] syzkaller0: entered promiscuous mode [ 24.693186][ T347] syzkaller0: entered allmulticast mode [ 24.768363][ T360] capability: warning: `syz.0.20' uses 32-bit capabilities (legacy support in use) [ 24.778109][ T360] tmpfs: Unknown parameter 'usrquota' [ 24.815429][ T372] /dev/rnullb0: Can't open blockdev [ 24.878247][ T377] vcan0: entered allmulticast mode [ 24.884568][ T377] rust_binder: 374 RLIMIT_NICE not set [ 25.139905][ T306] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.319876][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 25.326171][ T306] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 25.334590][ T306] usb 4-1: config 0 has no interface number 0 [ 25.340922][ T306] usb 4-1: config 0 interface 196 has no altsetting 0 [ 25.349204][ T306] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 25.358482][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.366610][ T306] usb 4-1: Product: syz [ 25.370987][ T306] usb 4-1: Manufacturer: syz [ 25.375645][ T306] usb 4-1: SerialNumber: syz [ 25.381981][ T306] usb 4-1: config 0 descriptor?? [ 25.602070][ T378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 25.630630][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.830460][ T405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 25.830494][ T405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 25.839978][ T405] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.849008][ T405] rust_binder: Read failure Err(EFAULT) in pid:32 [ 25.938030][ T413] =: renamed from lo (while UP) [ 25.954622][ T413] syz.2.36: attempt to access beyond end of device [ 25.954622][ T413] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 26.381262][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 26.381280][ T36] audit: type=1400 audit(1750758855.580:167): avc: denied { write } for pid=419 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 26.413399][ T36] audit: type=1400 audit(1750758855.610:168): avc: denied { write } for pid=419 comm="syz.0.38" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.692443][ T36] audit: type=1400 audit(1750758855.890:169): avc: denied { bind } for pid=424 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.881311][ T36] audit: type=1400 audit(1750758856.080:170): avc: denied { mount } for pid=429 comm="syz.2.40" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 26.912381][ T430] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 26.927261][ T36] audit: type=1400 audit(1750758856.110:171): avc: denied { ioctl } for pid=429 comm="syz.2.40" path="socket:[3732]" dev="sockfs" ino=3732 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.977284][ T36] audit: type=1400 audit(1750758856.110:172): avc: denied { unlink } for pid=429 comm="syz.2.40" name="#1" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.016371][ T36] audit: type=1400 audit(1750758856.120:173): avc: denied { mount } for pid=429 comm="syz.2.40" name="/" dev="overlay" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.059941][ T36] audit: type=1400 audit(1750758856.160:174): avc: denied { ioctl } for pid=429 comm="syz.2.40" path="socket:[3737]" dev="sockfs" ino=3737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.109866][ T36] audit: type=1400 audit(1750758856.160:175): avc: denied { write } for pid=429 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.149349][ T36] audit: type=1400 audit(1750758856.200:176): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 27.258198][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.290531][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.317093][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.330009][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.352372][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.380010][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.410006][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.429470][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.442580][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.454829][ T437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=437 comm=syz.2.43 [ 27.923627][ T306] ipheth 4-1:0.196: Unable to find endpoints [ 27.934294][ T306] usb 4-1: USB disconnect, device number 2 [ 27.951103][ T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 27.951600][ T457] batadv_slave_1: entered promiscuous mode [ 27.983053][ T457] rust_binder: Error while translating object. [ 27.983091][ T457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.989310][ T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 28.051719][ T456] batadv_slave_1: left promiscuous mode [ 28.079539][ T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.079567][ T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23 [ 28.155422][ T467] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 28.345660][ T478] cgroup: none used incorrectly [ 28.359192][ T478] overlayfs: missing 'lowerdir' [ 28.377955][ T480] capability: warning: `syz.1.58' uses deprecated v2 capabilities in a way that may be insecure [ 29.240101][ T31] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 29.390515][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 29.414282][ T522] syzkaller0: entered promiscuous mode [ 29.419791][ T522] syzkaller0: entered allmulticast mode [ 29.519905][ T31] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 29.546914][ T524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.669879][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 29.681814][ T31] usb usb4-port1: attempt power cycle [ 29.792549][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.951520][ T524] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 29.952102][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.968269][ T306] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 29.975889][ T306] usb 3-1: can't read configurations, error -71 [ 30.019883][ T31] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 30.040245][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 30.139861][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.169875][ T31] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 30.190241][ T31] usb 4-1: Invalid ep0 maxpacket: 16 [ 30.195604][ T31] usb usb4-port1: unable to enumerate USB device [ 30.289854][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 30.295858][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.306733][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.316480][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 30.325509][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.334310][ T45] usb 1-1: config 0 descriptor?? [ 30.743114][ T45] wacom 0003:056A:0002.0001: unknown main item tag 0x0 [ 30.750263][ T45] wacom 0003:056A:0002.0001: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 30.819896][ T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.943631][ T529] Invalid ELF header type: 2 != 1 [ 30.969891][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 30.976103][ T306] usb 3-1: config 9 has an invalid interface number: 46 but max is 2 [ 30.984279][ T306] usb 3-1: config 9 has an invalid interface number: 110 but max is 2 [ 30.992588][ T306] usb 3-1: config 9 has an invalid interface number: 152 but max is 2 [ 31.000816][ T306] usb 3-1: config 9 has an invalid interface number: 121 but max is 2 [ 31.009091][ T306] usb 3-1: config 9 has an invalid interface number: 109 but max is 2 [ 31.017301][ T306] usb 3-1: config 9 has 5 interfaces, different from the descriptor's value: 3 [ 31.026346][ T306] usb 3-1: config 9 has no interface number 0 [ 31.032468][ T306] usb 3-1: config 9 has no interface number 1 [ 31.038616][ T306] usb 3-1: config 9 has no interface number 2 [ 31.044746][ T306] usb 3-1: config 9 has no interface number 3 [ 31.050925][ T306] usb 3-1: config 9 has no interface number 4 [ 31.057073][ T306] usb 3-1: config 9 interface 46 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 31.067886][ T306] usb 3-1: config 9 interface 46 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 31.078863][ T306] usb 3-1: config 9 interface 46 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 31.089679][ T306] usb 3-1: config 9 interface 46 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 31.102777][ T306] usb 3-1: config 9 interface 110 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 31.113885][ T306] usb 3-1: config 9 interface 152 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 31.124752][ T306] usb 3-1: config 9 interface 152 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 31.135753][ T306] usb 3-1: config 9 interface 152 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 31.146642][ T306] usb 3-1: config 9 interface 152 altsetting 11 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 31.159929][ T306] usb 3-1: too many endpoints for config 9 interface 121 altsetting 102: 198, using maximum allowed: 30 [ 31.171151][ T306] usb 3-1: config 9 interface 121 altsetting 102 bulk endpoint 0x5 has invalid maxpacket 64 [ 31.181285][ T306] usb 3-1: config 9 interface 121 altsetting 102 has an invalid descriptor for endpoint zero, skipping [ 31.192421][ T306] usb 3-1: config 9 interface 121 altsetting 102 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 31.203599][ T306] usb 3-1: config 9 interface 121 altsetting 102 has 3 endpoint descriptors, different from the interface descriptor's value: 198 [ 31.217096][ T306] usb 3-1: too many endpoints for config 9 interface 109 altsetting 8: 228, using maximum allowed: 30 [ 31.228110][ T306] usb 3-1: config 9 interface 109 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 31.238875][ T306] usb 3-1: config 9 interface 109 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 31.249621][ T306] usb 3-1: config 9 interface 109 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 31.260727][ T306] usb 3-1: config 9 interface 109 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 31.271743][ T306] usb 3-1: config 9 interface 109 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 31.282555][ T306] usb 3-1: config 9 interface 109 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 31.293304][ T306] usb 3-1: config 9 interface 109 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 31.304350][ T306] usb 3-1: config 9 interface 109 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 31.315089][ T306] usb 3-1: config 9 interface 109 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 31.325917][ T306] usb 3-1: config 9 interface 109 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 228 [ 31.339181][ T306] usb 3-1: config 9 interface 110 has no altsetting 0 [ 31.346074][ T306] usb 3-1: config 9 interface 152 has no altsetting 0 [ 31.352896][ T306] usb 3-1: config 9 interface 121 has no altsetting 0 [ 31.359775][ T306] usb 3-1: config 9 interface 109 has no altsetting 0 [ 31.368125][ T306] usb 3-1: New USB device found, idVendor=0930, idProduct=0a08, bcdDevice=b9.5d [ 31.377240][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.385310][ T306] usb 3-1: Product: ь [ 31.389500][ T306] usb 3-1: Manufacturer: Н [ 31.394087][ T306] usb 3-1: SerialNumber: syz [ 31.499951][ T543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.602262][ T531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.617198][ T531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.652497][ T306] usb 3-1: USB disconnect, device number 3 [ 31.665612][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 31.665709][ T36] audit: type=1400 audit(1750758860.860:218): avc: denied { setopt } for pid=557 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.692873][ T36] audit: type=1400 audit(1750758860.890:219): avc: denied { create } for pid=557 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 32.053155][ T36] audit: type=1400 audit(1750758861.250:220): avc: denied { create } for pid=560 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.073079][ T36] audit: type=1400 audit(1750758861.250:221): avc: denied { write } for pid=560 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.092877][ T36] audit: type=1400 audit(1750758861.250:222): avc: denied { nlmsg_write } for pid=560 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.175375][ T567] overlayfs: failed to resolve './file1/file0': -2 [ 32.183363][ T36] audit: type=1400 audit(1750758861.380:223): avc: denied { unlink } for pid=566 comm="syz.2.89" name="#3" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.220391][ T36] audit: type=1400 audit(1750758861.380:224): avc: denied { mount } for pid=566 comm="syz.2.89" name="/" dev="overlay" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.243402][ T36] audit: type=1400 audit(1750758861.410:225): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.450128][ T582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 32.468314][ T36] audit: type=1400 audit(1750758861.660:226): avc: denied { write } for pid=583 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.501733][ T582] 9pnet_fd: Insufficient options for proto=fd [ 32.511935][ T36] audit: type=1400 audit(1750758861.710:227): avc: denied { getopt } for pid=585 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.644984][ T591] binder: Bad value for 'max' [ 32.905521][ T45] usb 1-1: USB disconnect, device number 2 [ 32.971409][ T597] netlink: 'syz.0.98': attribute type 12 has an invalid length. [ 32.979900][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.051116][ T601] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 33.077818][ T604] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 33.129859][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 33.136552][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.147499][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.157334][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.166410][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.174995][ T31] usb 4-1: config 0 descriptor?? [ 33.180926][ T31] hub 4-1:0.0: USB hub found [ 33.381399][ T31] hub 4-1:0.0: 1 port detected [ 33.635128][ T613] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 33.635152][ T613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 33.643216][ T613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:75 [ 33.661992][ T616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.677846][ T617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.684356][ T616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.838970][ T624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.865358][ T629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.876946][ T629] rust_binder: Write failure EINVAL in pid:80 [ 34.000255][ T657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.057194][ T658] rust_binder: Error in use_page_slow: ESRCH [ 34.063698][ T658] rust_binder: use_range failure ESRCH [ 34.069718][ T658] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 34.075293][ T658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.083219][ T658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:97 [ 34.289880][ T31] hub 4-1:0.0: activate --> -90 [ 34.436386][ T661] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.484056][ T672] 9pnet_fd: Insufficient options for proto=fd [ 34.586037][ T595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.594660][ T595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.724716][ T676] SELinux: failed to load policy [ 34.751194][ T680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 34.851135][ T684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.865721][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:100 [ 34.974663][ T691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.999892][ T306] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.038533][ T698] rust_binder: Error in use_page_slow: ESRCH [ 35.038558][ T698] rust_binder: use_range failure ESRCH [ 35.044661][ T698] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 35.050287][ T698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.058116][ T698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:107 [ 35.115942][ T9] usb 4-1: USB disconnect, device number 7 [ 35.159880][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 35.166090][ T306] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 35.177042][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.186946][ T306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 35.203299][ T306] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 35.218825][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.227653][ T306] usb 3-1: config 0 descriptor?? [ 35.233517][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.234543][ T711] rust_binder: Error in use_page_slow: ESRCH [ 35.241411][ T710] rust_binder: Write failure EINVAL in pid:111 [ 35.247420][ T711] rust_binder: use_range failure ESRCH [ 35.253846][ T711] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 35.260401][ T711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.269063][ T711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:111 [ 35.321123][ T714] bridge0: port 3(vlan0) entered blocking state [ 35.340133][ T714] bridge0: port 3(vlan0) entered disabled state [ 35.346442][ T714] vlan0: entered allmulticast mode [ 35.352909][ T714] veth0_vlan: entered allmulticast mode [ 35.358882][ T714] vlan0: entered promiscuous mode [ 35.364201][ T714] bridge0: port 3(vlan0) entered blocking state [ 35.370506][ T714] bridge0: port 3(vlan0) entered forwarding state [ 35.502642][ T728] fuse: Unknown parameter 'rootmode?0000000000010040040000' [ 35.523235][ T730] fuse: Bad value for 'group_id' [ 35.528240][ T730] fuse: Bad value for 'group_id' [ 35.617531][ T740] binder: Unknown parameter 'defcontext01777777777777777777777' [ 35.635954][ T742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.644151][ T306] samsung 0003:0419:0001.0002: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 35.687601][ T744] rust_binder: Error in use_page_slow: ESRCH [ 35.687615][ T744] rust_binder: use_range failure ESRCH [ 35.693642][ T744] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 35.699120][ T744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.706961][ T744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:136 [ 35.716547][ T744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 35.813956][ T758] selinux_netlink_send: 62 callbacks suppressed [ 35.813973][ T758] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=758 comm=syz.1.151 [ 35.829893][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.909496][ T763] Zero length message leads to an empty skb [ 35.957925][ T306] usb 3-1: USB disconnect, device number 4 [ 36.019869][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 36.026084][ T45] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 36.034317][ T45] usb 4-1: config 0 has no interface number 0 [ 36.040564][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 36.051692][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8244, setting to 1024 [ 36.062886][ T45] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 36.072050][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.090137][ T45] usb 4-1: config 0 descriptor?? [ 36.523668][ T781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.527755][ T781] input: syz1 as /devices/virtual/input/input8 [ 36.548094][ T781] rust_binder: Error in use_page_slow: ESRCH [ 36.548113][ T781] rust_binder: use_range failure ESRCH [ 36.556671][ T779] input: syz0 as /devices/virtual/input/input9 [ 36.560007][ T781] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 36.568444][ T781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 36.576883][ T781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:141 [ 36.616081][ T795] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.643185][ T801] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.169'. [ 36.674261][ T807] 9p: Unknown access argument : -22 [ 36.699577][ T45] uclogic 0003:28BD:0094.0003: pen parameters not found [ 36.707397][ T45] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring [ 36.743155][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 36.743170][ T36] audit: type=1400 audit(1750758865.940:254): avc: denied { mount } for pid=812 comm="syz.2.174" name="/" dev="ramfs" ino=8715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.800680][ T36] audit: type=1400 audit(1750758866.000:255): avc: denied { setopt } for pid=820 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.828055][ T36] audit: type=1400 audit(1750758866.020:256): avc: denied { create } for pid=825 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.848850][ T36] audit: type=1400 audit(1750758866.020:257): avc: denied { create } for pid=825 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.868621][ T36] audit: type=1400 audit(1750758866.040:258): avc: denied { map } for pid=825 comm="syz.2.177" path="socket:[7873]" dev="sockfs" ino=7873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.869910][ T306] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.891923][ T36] audit: type=1400 audit(1750758866.040:259): avc: denied { read } for pid=825 comm="syz.2.177" path="socket:[7873]" dev="sockfs" ino=7873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.922743][ T36] audit: type=1400 audit(1750758866.040:260): avc: denied { write } for pid=825 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.949614][ T36] audit: type=1400 audit(1750758866.140:261): avc: denied { ioctl } for pid=837 comm="syz.2.180" path="net:[4026532387]" dev="nsfs" ino=4026532387 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.051403][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.059931][ T306] usb 1-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 37.070504][ T306] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.081348][ T306] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.090450][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.098570][ T306] usb 1-1: Product: syz [ 37.102949][ T306] usb 1-1: Manufacturer: syz [ 37.107582][ T306] usb 1-1: SerialNumber: syz [ 37.315069][ T36] audit: type=1400 audit(1750758866.510:262): avc: denied { setattr } for pid=794 comm="syz.0.166" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.318099][ T795] rust_binder: Error in use_page_slow: ESRCH [ 37.337806][ T795] rust_binder: use_range failure ESRCH [ 37.343864][ T795] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 37.349340][ T795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.357276][ T795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:143 [ 37.371293][ T306] usb 1-1: 0:2 : does not exist [ 37.388354][ T306] usb 1-1: USB disconnect, device number 3 [ 37.395619][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.632281][ T36] audit: type=1400 audit(1750758866.830:263): avc: denied { getopt } for pid=848 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.119865][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 38.270872][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 38.281789][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 38.294656][ T45] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 38.303700][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.312335][ T45] usb 1-1: config 0 descriptor?? [ 38.317542][ T854] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 38.524582][ T306] usb 4-1: USB disconnect, device number 8 [ 38.635807][ T876] cgroup: Unknown subsys name '#' [ 38.734849][ T45] input: HID 28bd:1903 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.0004/input/input10 [ 38.750075][ T45] uclogic 0003:28BD:1903.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0 [ 38.869853][ T306] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.933699][ T854] rust_binder: Error in use_page_slow: ESRCH [ 38.933714][ T854] rust_binder: use_range failure ESRCH [ 38.939764][ T854] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 38.945330][ T854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.953225][ T854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:145 [ 38.963119][ T63] usb 1-1: USB disconnect, device number 4 [ 39.020909][ T306] usb 4-1: config 1 has an invalid interface association descriptor of length 3, skipping [ 39.030885][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.041075][ T306] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 39.055301][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=26.40 [ 39.064445][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 39.072467][ T306] usb 4-1: SerialNumber: syz [ 39.280785][ T63] usb 4-1: USB disconnect, device number 9 [ 39.389895][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.564559][ T907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.564711][ T907] rust_binder: Error in use_page_slow: ESRCH [ 39.569894][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 39.571382][ T907] rust_binder: use_range failure ESRCH [ 39.578750][ T45] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 39.582826][ T907] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 39.596237][ T907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.598196][ T45] usb 3-1: config 0 has no interface number 0 [ 39.604165][ T907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:154 [ 39.625133][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 39.643557][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.651632][ T45] usb 3-1: Product: syz [ 39.657582][ T45] usb 3-1: Manufacturer: syz [ 39.669344][ T45] usb 3-1: SerialNumber: syz [ 39.683627][ T45] usb 3-1: config 0 descriptor?? [ 39.691938][ T914] ======================================================= [ 39.691938][ T914] WARNING: The mand mount option has been deprecated and [ 39.691938][ T914] and is ignored by this kernel. Remove the mand [ 39.691938][ T914] option from the mount to silence this warning. [ 39.691938][ T914] ======================================================= [ 39.699535][ T45] smsc95xx v2.0.0 [ 39.727578][ T914] overlayfs: conflicting options: userxattr,verity=on [ 39.788322][ T916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.802807][ T916] 9pnet_fd: Insufficient options for proto=fd [ 39.820948][ T917] rust_binder: Error in use_page_slow: ESRCH [ 39.820976][ T917] rust_binder: use_range failure ESRCH [ 39.827407][ T917] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 39.844322][ T917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.852284][ T917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:163 [ 39.921605][ T933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:56 [ 40.131410][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 40.151230][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.161374][ T45] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 40.172321][ T45] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 40.182373][ T45] usb 3-1: USB disconnect, device number 5 [ 40.195148][ T944] raw_sendmsg: syz.2.216 forgot to set AF_INET. Fix it! [ 40.599876][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.721120][ T955] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 40.749874][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 40.758057][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 40.766459][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 40.775085][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 40.785241][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.794932][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.804642][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.818331][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.830191][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.831062][ T962] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 40.839100][ T964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.846367][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.846674][ T45] usb 3-1: config 0 descriptor?? [ 40.856706][ T962] overlay: filesystem on ./bus not supported as upperdir [ 41.070549][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.119873][ T880] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.269867][ T880] usb 4-1: Using ep0 maxpacket: 16 [ 41.275261][ T884] usb 3-1: USB disconnect, device number 6 [ 41.278245][ T880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.282703][ T884] usblp0: removed [ 41.293410][ T880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.305743][ T880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.317989][ T880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.326103][ T880] usb 4-1: Product: syz [ 41.330502][ T880] usb 4-1: Manufacturer: syz [ 41.335140][ T880] usb 4-1: SerialNumber: syz [ 41.545769][ T880] usb 4-1: USB disconnect, device number 10 [ 41.553738][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.039863][ T880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.139298][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 42.139314][ T36] audit: type=1400 audit(1750758871.330:277): avc: denied { ioctl } for pid=1017 comm="syz.3.240" path="socket:[9298]" dev="sockfs" ino=9298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.202425][ T880] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 42.216981][ T880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.226162][ T880] usb 3-1: Product: syz [ 42.239901][ T880] usb 3-1: Manufacturer: syz [ 42.244533][ T880] usb 3-1: SerialNumber: syz [ 42.407873][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 42.639922][ T880] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 42.801274][ T880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.809325][ T880] usb 4-1: not running at top speed; connect to a high speed hub [ 42.817024][ T1028] fuse: Bad value for 'fd' [ 42.817971][ T880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.831679][ T880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.842112][ T880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.851295][ T880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.859447][ T880] usb 4-1: Product: syz [ 42.864065][ T880] usb 4-1: Manufacturer: syz [ 42.868668][ T880] usb 4-1: SerialNumber: syz [ 42.909887][ T320] Bluetooth: hci0: command 0x1003 tx timeout [ 42.909978][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.934165][ T36] audit: type=1326 audit(1750758872.130:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.0.248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe132b8e929 code=0x0 [ 42.991850][ T1045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.074957][ T1023] rust_binder: Error while translating object. [ 43.081462][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.087640][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 43.099852][ T880] usb 4-1: 0:2 : does not exist [ 43.113783][ T880] usb 4-1: unit 6 not found! [ 43.120730][ T880] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 43.130229][ T880] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 43.139538][ T880] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 43.148915][ T880] usb 4-1: USB disconnect, device number 11 [ 43.157084][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.660187][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 43.669236][ T36] audit: type=1400 audit(1750758872.860:279): avc: denied { write } for pid=1050 comm="syz.3.250" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.683422][ T1051] binder: Bad value for 'stats' [ 43.702258][ T36] audit: type=1400 audit(1750758872.860:280): avc: denied { open } for pid=1050 comm="syz.3.250" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.731518][ T36] audit: type=1326 audit(1750758872.930:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x7fc00000 [ 43.796732][ T1070] /dev/nullb0: Can't lookup blockdev [ 43.829941][ T36] audit: type=1400 audit(1750758873.020:282): avc: denied { read } for pid=1074 comm="syz.0.258" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.855019][ T36] audit: type=1400 audit(1750758873.020:283): avc: denied { open } for pid=1074 comm="syz.0.258" path="/59/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.916880][ T1085] fuse: Bad value for 'fd' [ 43.936605][ T1091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.936777][ T1091] rust_binder: Error in use_page_slow: ESRCH [ 43.943281][ T1091] rust_binder: use_range failure ESRCH [ 43.949325][ T1091] rust_binder: Failed to allocate buffer. len:168, is_oneway:true [ 43.954863][ T1091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.962862][ T1091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:191 [ 43.983003][ T36] audit: type=1400 audit(1750758873.180:284): avc: denied { connect } for pid=1095 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.983513][ T1096] Invalid ELF header type: 2 != 1 [ 44.159860][ T884] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 44.289872][ T884] usb 4-1: device descriptor read/64, error -71 [ 44.529873][ T884] usb 4-1: device descriptor read/64, error -71 [ 44.769866][ T884] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 44.793853][ T45] usb 3-1: USB disconnect, device number 7 [ 44.805671][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 44.814906][ T1111] FAT-fs (rnullb0): bogus number of reserved sectors [ 44.821788][ T1111] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 44.838828][ T1113] tipc: MTU too low for tipc bearer [ 44.891246][ T1121] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 65) [ 44.891266][ T1121] rust_binder: Error while translating object. [ 44.899916][ T884] usb 4-1: device descriptor read/64, error -71 [ 44.902039][ T1121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.916169][ T1121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 44.928230][ T1121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:157 [ 44.983010][ T1134] rust_binder: Error while translating object. [ 44.992243][ T1134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.998420][ T1134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:164 [ 45.036606][ T36] audit: type=1400 audit(1750758874.230:285): avc: denied { bind } for pid=1137 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.069065][ T1142] rust_binder: Error while translating object. [ 45.069087][ T1142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 45.075565][ T1142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170 [ 45.149889][ T884] usb 4-1: device descriptor read/64, error -71 [ 45.199890][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.270057][ T884] usb usb4-port1: attempt power cycle [ 45.349867][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 45.356329][ T45] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.364809][ T45] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.373425][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.382425][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.392377][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.402027][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.414997][ T45] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.424036][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.432562][ T45] usb 1-1: config 0 descriptor?? [ 45.609362][ T36] audit: type=1400 audit(1750758874.800:286): avc: denied { mount } for pid=1150 comm="syz.1.285" name="/" dev="configfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.636384][ T884] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 45.660773][ T884] usb 4-1: device descriptor read/8, error -71 [ 45.702265][ T1157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.730872][ T1157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.791882][ T884] usb 4-1: device descriptor read/8, error -71 [ 45.820007][ T45] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.021339][ T10] usb 1-1: USB disconnect, device number 5 [ 46.027788][ T10] usblp0: removed [ 46.039880][ T880] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 46.059890][ T884] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.080906][ T884] usb 4-1: device descriptor read/8, error -71 [ 46.191271][ T880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.202454][ T880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.213367][ T880] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 46.221035][ T884] usb 4-1: device descriptor read/8, error -71 [ 46.224248][ T880] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 46.242478][ T880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.251547][ T880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.259529][ T880] usb 3-1: Product: syz [ 46.263702][ T880] usb 3-1: Manufacturer: syz [ 46.268297][ T880] usb 3-1: SerialNumber: syz [ 46.273811][ T1161] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 46.339968][ T884] usb usb4-port1: unable to enumerate USB device [ 46.481594][ T1161] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 46.488786][ T1161] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 46.787568][ T1172] process 'syz.0.290' launched './file1' with NULL argv: empty string added [ 46.896871][ T880] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 46.902955][ T880] cdc_ncm 3-1:1.0: bind() failure [ 46.909029][ T880] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 46.915851][ T880] cdc_ncm 3-1:1.1: bind() failure [ 46.966415][ T884] usb 3-1: USB disconnect, device number 8 [ 46.982285][ T1174] binder: Unknown parameter '' [ 47.186580][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 47.186598][ T36] audit: type=1400 audit(1750758876.380:294): avc: denied { read } for pid=1177 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.247535][ T36] audit: type=1400 audit(1750758876.440:295): avc: denied { getopt } for pid=1185 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.349885][ T880] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.500896][ T880] usb 4-1: config 4 has an invalid interface number: 95 but max is 0 [ 47.508986][ T880] usb 4-1: config 4 has no interface number 0 [ 47.529874][ T880] usb 4-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 47.541171][ T880] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 47.550427][ T880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.558568][ T880] usb 4-1: Product: syz [ 47.562975][ T880] usb 4-1: Manufacturer: syz [ 47.564478][ T1191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.567642][ T880] usb 4-1: SerialNumber: syz [ 47.568540][ T1191] rust_binder: Error in use_page_slow: ESRCH [ 47.575243][ T1176] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 47.578717][ T1191] rust_binder: use_range failure ESRCH [ 47.591809][ T1191] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 47.597285][ T1191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.605203][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:208 [ 47.626722][ T1193] 8021q: VLANs not supported on ip_vti0 [ 47.641669][ T1194] netlink: 72 bytes leftover after parsing attributes in process `syz.0.300'. [ 47.789967][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.830151][ T36] audit: type=1400 audit(1750758877.020:296): avc: denied { nlmsg_read } for pid=1205 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 47.959963][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 47.966353][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 47.974914][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 47.983727][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 47.992818][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.002655][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.012446][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.025657][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.034861][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.044265][ T45] usb 3-1: config 0 descriptor?? [ 48.323177][ T1209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.341464][ T1209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.503429][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 48.528189][ T884] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 48.565366][ T884] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.724837][ T880] usb 4-1: MIDIStreaming interface descriptor not found [ 48.752244][ T1213] SELinux: policydb string length 14080 does not match expected length 8 [ 48.753198][ T880] usb 4-1: USB disconnect, device number 16 [ 48.764002][ T1220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.309'. [ 48.776096][ T1213] SELinux: failed to load policy [ 48.786320][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.802909][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.803076][ T1217] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.809505][ T1217] rust_binder: Read failure Err(EFAULT) in pid:217 [ 48.817908][ T36] audit: type=1400 audit(1750758878.000:297): avc: denied { read } for pid=1212 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.928192][ T36] audit: type=1326 audit(1750758878.120:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1236 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x7ffc0000 [ 48.954194][ T36] audit: type=1326 audit(1750758878.120:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1236 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x7ffc0000 [ 48.977591][ T36] audit: type=1326 audit(1750758878.120:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1236 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb6fc58e929 code=0x7ffc0000 [ 49.001961][ T36] audit: type=1326 audit(1750758878.120:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1236 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x7ffc0000 [ 49.026317][ T36] audit: type=1326 audit(1750758878.120:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1236 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x7ffc0000 [ 49.056908][ T36] audit: type=1326 audit(1750758878.120:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1236 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x7ffc0000 [ 49.080810][ T45] usb 3-1: USB disconnect, device number 9 [ 49.089079][ T45] usblp0: removed [ 49.384733][ T1250] rust_binder: Write failure EINVAL in pid:191 [ 50.190161][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 50.230620][ T1286] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.230641][ T1286] rust_binder: Read failure Err(EFAULT) in pid:194 [ 50.308454][ T1293] rust_binder: Write failure EINVAL in pid:201 [ 50.319897][ T306] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 50.350867][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 50.359985][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.368493][ T10] usb 1-1: config 0 descriptor?? [ 50.459858][ T306] usb 4-1: device descriptor read/64, error -71 [ 50.699983][ T306] usb 4-1: device descriptor read/64, error -71 [ 50.776183][ T10] usb 1-1: Cannot set MAC address [ 50.781344][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 50.793541][ T10] usb 1-1: USB disconnect, device number 6 [ 50.939899][ T306] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 51.069864][ T306] usb 4-1: device descriptor read/64, error -71 [ 51.292116][ T1308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.292464][ T1309] rust_binder: Write failure EINVAL in pid:227 [ 51.298997][ T1308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227 [ 51.310939][ T306] usb 4-1: device descriptor read/64, error -71 [ 51.429970][ T306] usb usb4-port1: attempt power cycle [ 51.460331][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 51.769891][ T306] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 51.790915][ T306] usb 4-1: device descriptor read/8, error -71 [ 51.920837][ T306] usb 4-1: device descriptor read/8, error -71 [ 52.159862][ T306] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 52.180959][ T306] usb 4-1: device descriptor read/8, error -71 [ 52.310968][ T306] usb 4-1: device descriptor read/8, error -71 [ 52.419956][ T306] usb usb4-port1: unable to enumerate USB device [ 53.206349][ T1340] rust_binder: Error while translating object. [ 53.206395][ T1340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.212818][ T1340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 53.261979][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 53.261991][ T36] audit: type=1400 audit(1750758882.460:379): avc: denied { mount } for pid=1362 comm="syz.1.354" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.263913][ T1363] cgroup: Unknown subsys name '#' [ 53.499932][ T884] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 53.649899][ T884] usb 4-1: Using ep0 maxpacket: 32 [ 53.656014][ T884] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.664363][ T884] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.672968][ T884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.681922][ T884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.691561][ T884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.701194][ T884] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.714140][ T884] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.723178][ T884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.732003][ T884] usb 4-1: config 0 descriptor?? [ 53.999706][ T1366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.008974][ T1366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.125630][ T884] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.328072][ T884] usb 4-1: USB disconnect, device number 21 [ 54.335608][ T884] usblp0: removed [ 63.797401][ T1373] binder: Unknown parameter '0177777777777777777777701777777777777777777777' [ 63.807182][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 63.818119][ T1374] rust_binder: Error while translating object. [ 63.818155][ T1374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.826131][ T1374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 63.870472][ T36] audit: type=1400 audit(1750758893.070:380): avc: denied { getopt } for pid=1371 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.353352][ T36] audit: type=1326 audit(1750758893.550:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x0 [ 64.454783][ T36] audit: type=1326 audit(1750758893.650:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x0 [ 64.477609][ T36] audit: type=1326 audit(1750758893.650:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.1.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6fc58e929 code=0x0 [ 64.527424][ T1411] overlay: ./file0 is not a directory [ 64.576721][ T36] audit: type=1400 audit(1750758893.770:384): avc: denied { lock } for pid=1414 comm="syz.1.372" path="socket:[10089]" dev="sockfs" ino=10089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.619040][ T36] audit: type=1400 audit(1750758893.810:385): avc: denied { accept } for pid=1419 comm="syz.1.373" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.646793][ T1423] overlayfs: failed to clone upperpath [ 64.654293][ T36] audit: type=1400 audit(1750758893.860:386): avc: denied { validate_trans } for pid=1424 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.669803][ T1427] binder: Bad value for 'stats' [ 64.707741][ T1433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 64.757010][ T36] audit: type=1400 audit(1750758893.950:387): avc: denied { ioctl } for pid=1447 comm="syz.3.380" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.826340][ T36] audit: type=1400 audit(1750758894.020:388): avc: denied { accept } for pid=1466 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.907316][ T36] audit: type=1400 audit(1750758894.100:389): avc: denied { shutdown } for pid=1472 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.163285][ T1486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.163944][ T1486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 65.201296][ T1491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.201598][ T1491] rust_binder: Error in use_page_slow: ESRCH [ 65.208141][ T1491] rust_binder: use_range failure ESRCH [ 65.214389][ T1491] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 65.220069][ T1491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 65.228193][ T1491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:256 [ 65.649865][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 65.809906][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 65.815547][ T31] usb 4-1: too many configurations: 236, using maximum allowed: 8 [ 65.824335][ T31] usb 4-1: config 0 has no interfaces? [ 65.830667][ T31] usb 4-1: config 0 has no interfaces? [ 65.836899][ T31] usb 4-1: config 0 has no interfaces? [ 65.848354][ T31] usb 4-1: config 0 has no interfaces? [ 65.860170][ T1513] kvm: kvm [1512]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 65.860732][ T31] usb 4-1: config 0 has no interfaces? [ 65.875734][ T1513] rust_binder: Read failure Err(EAGAIN) in pid:238 [ 65.886254][ T31] usb 4-1: config 0 has no interfaces? [ 65.899585][ T31] usb 4-1: config 0 has no interfaces? [ 65.905860][ T31] usb 4-1: config 0 has no interfaces? [ 65.913998][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 65.923228][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 65.931396][ T31] usb 4-1: Product: syz [ 65.935631][ T31] usb 4-1: Manufacturer: syz [ 65.941830][ T31] usb 4-1: SerialNumber: syz [ 65.947167][ T31] usb 4-1: config 0 descriptor?? [ 66.219896][ T63] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 66.294149][ T1522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.294478][ T1522] rust_binder: Error in use_page_slow: ESRCH [ 66.300994][ T1522] rust_binder: use_range failure ESRCH [ 66.306982][ T1522] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 66.312506][ T1522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 66.320530][ T1522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:265 [ 66.371266][ T63] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 66.387907][ T63] usb 3-1: can't read configurations, error -61 [ 66.408032][ T1524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 66.426992][ T1526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.519888][ T63] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 66.711326][ T63] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 66.718999][ T63] usb 3-1: can't read configurations, error -61 [ 66.725582][ T63] usb usb3-port1: attempt power cycle [ 67.089907][ T63] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 67.111770][ T63] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 67.119479][ T63] usb 3-1: can't read configurations, error -61 [ 67.250008][ T63] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 67.292173][ T63] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 67.310263][ T63] usb 3-1: can't read configurations, error -61 [ 67.323186][ T63] usb usb3-port1: unable to enumerate USB device [ 67.419116][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.439073][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.492366][ T1543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 67.531130][ T1550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.819877][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 67.990941][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 68.001370][ T10] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 68.010595][ T10] usb 1-1: too many endpoints for config 220 interface 0 altsetting 63: 127, using maximum allowed: 30 [ 68.021682][ T10] usb 1-1: config 220 interface 0 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 127 [ 68.035008][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 68.043164][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 68.052315][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.060320][ T10] usb 1-1: Product: syz [ 68.064483][ T10] usb 1-1: Manufacturer: syz [ 68.069056][ T10] usb 1-1: SerialNumber: syz [ 68.276217][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.283603][ T1551] rust_binder: Error in use_page_slow: ESRCH [ 68.283619][ T1551] rust_binder: use_range failure ESRCH [ 68.289633][ T1551] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 68.295152][ T1551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 68.302993][ T1551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:282 [ 68.421417][ T63] usb 4-1: USB disconnect, device number 22 [ 68.439049][ T1558] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 68.769870][ T63] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 68.919845][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 68.925985][ T63] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 68.934420][ T63] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 68.943039][ T63] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 68.952024][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.961687][ T63] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.971358][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.985934][ T63] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.995051][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.005158][ T63] usb 4-1: config 0 descriptor?? [ 69.157298][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 69.157312][ T36] audit: type=1400 audit(1750758898.350:393): avc: denied { append } for pid=1577 comm="syz.2.418" name="001" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.232038][ T36] audit: type=1400 audit(1750758898.430:394): avc: denied { ioctl } for pid=1582 comm="syz.2.419" path="socket:[11829]" dev="sockfs" ino=11829 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.256603][ T36] audit: type=1400 audit(1750758898.430:395): avc: denied { ioctl } for pid=1582 comm="syz.2.419" path="socket:[12594]" dev="sockfs" ino=12594 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.287407][ T1586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.296555][ T1586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.336036][ T1589] incfs: Can't find or create .index dir in ./file0 [ 69.342719][ T36] audit: type=1400 audit(1750758898.530:396): avc: denied { mounton } for pid=1588 comm="syz.2.420" path="/85/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.365119][ T1589] incfs: mount failed -1 [ 69.399993][ T63] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.736103][ T45] usb 4-1: USB disconnect, device number 23 [ 69.744866][ T45] usblp0: removed [ 69.754246][ T1589] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 69.787101][ T1592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.808364][ T1594] vcan0: entered allmulticast mode [ 69.820257][ T1594] vcan0: left allmulticast mode [ 69.826998][ T1594] netlink: 88 bytes leftover after parsing attributes in process `syz.2.422'. [ 69.835974][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 69.845765][ T36] audit: type=1400 audit(1750758899.040:397): avc: denied { lock } for pid=1593 comm="syz.2.422" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.149531][ T36] audit: type=1400 audit(1750758899.340:398): avc: denied { execute } for pid=1614 comm="syz.2.429" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.379865][ T45] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 70.479846][ T63] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 70.530982][ T45] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 70.539212][ T45] usb 3-1: config 0 has no interface number 0 [ 70.545433][ T45] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 70.549167][ T10] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 70.557501][ T45] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 70.566669][ T10] usb 1-1: No valid video chain found. [ 70.574106][ T45] usb 3-1: config 0 interface 230 has no altsetting 0 [ 70.584399][ T10] usb 1-1: USB disconnect, device number 7 [ 70.597620][ T45] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 70.606854][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.614982][ T45] usb 3-1: Product: syz [ 70.619182][ T45] usb 3-1: Manufacturer: syz [ 70.624033][ T45] usb 3-1: SerialNumber: syz [ 70.630130][ T45] usb 3-1: config 0 descriptor?? [ 70.635383][ T1615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.642585][ T1615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.643000][ T63] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 70.650520][ T45] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 70.658780][ T63] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.675659][ T63] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 70.683385][ T45] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 70.693668][ T63] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 70.702870][ T63] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 70.711076][ T63] usb 4-1: Product: syz [ 70.715346][ T63] usb 4-1: Manufacturer: syz [ 70.723881][ T63] usb 4-1: SerialNumber: syz [ 70.731832][ T1625] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 70.733708][ T63] usb 4-1: config 0 descriptor?? [ 70.740124][ T1625] rust_binder: Write failure EINVAL in pid:287 [ 70.757706][ T1628] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 70.949038][ T63] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 70.958818][ T1631] udevd[1631]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.959057][ T63] usb 4-1: USB disconnect, device number 24 [ 71.029849][ T305] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 71.181006][ T305] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 71.189397][ T305] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 71.201851][ T305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.211962][ T305] usb 1-1: config 0 has no interfaces? [ 71.217431][ T305] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 71.226472][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.235089][ T305] usb 1-1: config 0 descriptor?? [ 71.441727][ T10] usb 1-1: USB disconnect, device number 8 [ 71.739984][ T63] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 71.889849][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 71.896048][ T63] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.904429][ T63] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.913047][ T63] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.922018][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.931668][ T63] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.941312][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.954431][ T63] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.963633][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.972183][ T63] usb 4-1: config 0 descriptor?? [ 72.235890][ T1657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.244772][ T1657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.321487][ T63] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.505590][ T884] usb 4-1: USB disconnect, device number 25 [ 72.512209][ T884] usblp0: removed [ 72.846375][ T1673] rust_binder: Write failure EFAULT in pid:303 [ 72.858021][ T1675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.864289][ T1676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.889527][ T1678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.453'. [ 72.905473][ T36] audit: type=1400 audit(1750758902.100:399): avc: denied { append } for pid=1677 comm="syz.0.453" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.931261][ T1680] binder: Bad value for 'stats' [ 72.948558][ T1682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.950719][ T1682] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 72.964023][ T1682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 72.972652][ T1682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:312 [ 72.984446][ T45] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 73.004426][ T1689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.004894][ T1690] rust_binder: Error in use_page_slow: ESRCH [ 73.011601][ T1690] rust_binder: use_range failure ESRCH [ 73.019102][ T1690] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 73.024806][ T36] audit: type=1400 audit(1750758902.220:400): avc: denied { remount } for pid=1691 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.052433][ T1690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.052458][ T1690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:314 [ 73.110699][ T10] usb 3-1: USB disconnect, device number 14 [ 73.136457][ T1700] syz.2.460 uses obsolete (PF_INET,SOCK_PACKET) [ 73.223973][ T1710] rust_binder: Write failure EINVAL in pid:301 [ 73.359902][ T63] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 73.519877][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 73.526021][ T63] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 73.534433][ T63] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 73.543147][ T63] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 73.552111][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.561760][ T63] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.571408][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 73.584382][ T63] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 73.593527][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.601546][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 73.610392][ T63] usb 1-1: config 0 descriptor?? [ 73.712302][ T1732] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 73.750641][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 73.759492][ T10] usb 3-1: config 5 has an invalid interface number: 46 but max is 2 [ 73.767651][ T10] usb 3-1: config 5 has an invalid interface number: 101 but max is 2 [ 73.775868][ T10] usb 3-1: config 5 has an invalid interface number: 13 but max is 2 [ 73.783970][ T10] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 73.792691][ T10] usb 3-1: config 5 has an invalid descriptor of length 255, skipping remainder of the config [ 73.802968][ T10] usb 3-1: config 5 has no interface number 0 [ 73.809132][ T10] usb 3-1: config 5 has no interface number 1 [ 73.815456][ T10] usb 3-1: config 5 has no interface number 2 [ 73.821590][ T10] usb 3-1: config 5 interface 46 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 73.832654][ T10] usb 3-1: config 5 interface 46 altsetting 128 has an endpoint descriptor with address 0x1C, changing to 0xC [ 73.844313][ T10] usb 3-1: config 5 interface 46 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 73.855108][ T10] usb 3-1: config 5 interface 46 altsetting 128 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 73.866165][ T10] usb 3-1: config 5 interface 46 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 73.877148][ T10] usb 3-1: config 5 interface 46 altsetting 128 endpoint 0xB has an invalid bInterval 41, changing to 4 [ 73.888316][ T10] usb 3-1: config 5 interface 46 altsetting 128 endpoint 0xB has invalid maxpacket 1024, setting to 1023 [ 73.898122][ T1740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.899642][ T10] usb 3-1: config 5 interface 46 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 73.918891][ T1740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.928754][ T10] usb 3-1: config 5 interface 46 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 73.949671][ T36] audit: type=1400 audit(1750758903.140:401): avc: denied { getopt } for pid=1742 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.972179][ T10] usb 3-1: config 5 interface 46 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 73.984042][ T10] usb 3-1: config 5 interface 46 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 73.995029][ T36] audit: type=1400 audit(1750758903.140:402): avc: denied { bind } for pid=1738 comm="syz.1.474" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.014999][ T10] usb 3-1: config 5 interface 46 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 74.025925][ T10] usb 3-1: config 5 interface 46 altsetting 128 endpoint 0xF has invalid wMaxPacketSize 0 [ 74.036759][ T10] usb 3-1: config 5 interface 46 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 74.047710][ T10] usb 3-1: config 5 interface 46 altsetting 128 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 74.061218][ T10] usb 3-1: config 5 interface 101 altsetting 9 endpoint 0x6 has invalid wMaxPacketSize 0 [ 74.071232][ T10] usb 3-1: config 5 interface 101 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 74.084982][ T10] usb 3-1: config 5 interface 101 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 74.096067][ T10] usb 3-1: config 5 interface 101 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 74.109896][ T10] usb 3-1: config 5 interface 101 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 74.131753][ T10] usb 3-1: config 5 interface 101 altsetting 9 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 74.143753][ T10] usb 3-1: config 5 interface 101 altsetting 9 endpoint 0x8E has an invalid bInterval 103, changing to 4 [ 74.155385][ T10] usb 3-1: config 5 interface 101 altsetting 9 endpoint 0x8E has invalid maxpacket 22279, setting to 1023 [ 74.167193][ T10] usb 3-1: config 5 interface 101 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 74.180442][ T10] usb 3-1: config 5 interface 101 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 74.191210][ T10] usb 3-1: config 5 interface 101 altsetting 9 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 74.204482][ T10] usb 3-1: config 5 interface 13 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.217947][ T10] usb 3-1: config 5 interface 46 has no altsetting 0 [ 74.225028][ T10] usb 3-1: config 5 interface 101 has no altsetting 0 [ 74.232051][ T10] usb 3-1: config 5 interface 13 has no altsetting 0 [ 74.255685][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=f44a, bcdDevice=72.10 [ 74.279853][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.287902][ T10] usb 3-1: Product: 괬씘쾹ኾ푿ꮧ䳆監ᒸߙ噽葠冉닉ﲤ엮턇▽릮룭ẩ권㫳䚱꘾糳튫쮶அ [ 74.300388][ T10] usb 3-1: Manufacturer: ͇⦪寴챰阚ᲂ䇣꜐乗恞豐Ꜻೖﳚ覻ꩵ䱒⏨廲让⩩菤췇鄴⒙劘㓬멢ࣜ斜헉䛧衣⽰௻痞Ⴆ꽈熰ⶊΛ蕵㣪茔ԋ㋋頔⼟웏諴ᦔ틩꽳蘞ꛍ脦墨֚嗈͛䉶ꍮ琠仔┏䀓쾀ર안볆些谥뜘䭕冼英妎ἆꕞ驍劽䂁⣳粎譧೷ڨ纊ጭۘ짮챘压㡏 [ 74.332487][ T10] usb 3-1: SerialNumber: ࠄ [ 74.338480][ T1715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.346070][ T1715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.402284][ T63] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 74.414997][ T63] usb 1-1: USB disconnect, device number 9 [ 74.421925][ T1755] binder: Unknown parameter '00000000000000000000003' [ 74.428979][ T63] usblp0: removed [ 74.522577][ T1240] ------------[ cut here ]------------ [ 74.528110][ T1240] WARNING: CPU: 0 PID: 1240 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 74.536186][ T1240] Modules linked in: [ 74.540135][ T1240] CPU: 0 UID: 0 PID: 1240 Comm: syz.3.314 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 74.553558][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.563671][ T1240] RIP: 0010:drop_nlink+0xce/0x110 [ 74.568741][ T1240] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 5f 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 74.588466][ T1240] RSP: 0018:ffffc9000f70f860 EFLAGS: 00010293 [ 74.594683][ T1240] RAX: ffffffff81ed3d2e RBX: ffff8881215bc428 RCX: ffff8881312f5f00 [ 74.602711][ T1240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.610720][ T1240] RBP: ffffc9000f70f888 R08: 0000000000000003 R09: 0000000000000004 [ 74.618721][ T1240] R10: dffffc0000000000 R11: fffff52001ee1efc R12: dffffc0000000000 [ 74.626765][ T1240] R13: 1ffff110242b788e R14: ffff8881215bc470 R15: 0000000000000000 [ 74.634782][ T1240] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 74.643827][ T1240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.650488][ T1240] CR2: 0000000000000000 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 74.658494][ T1240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.666514][ T1240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.674527][ T1240] Call Trace: [ 74.677829][ T1240] [ 74.680814][ T1240] shmem_rmdir+0x5f/0x90 [ 74.685103][ T1240] vfs_rmdir+0x3e0/0x560 [ 74.689388][ T1240] incfs_kill_sb+0x109/0x230 [ 74.694032][ T1240] deactivate_locked_super+0xd5/0x2a0 [ 74.699423][ T1240] deactivate_super+0xb8/0xe0 [ 74.704123][ T1240] cleanup_mnt+0x3f1/0x480 [ 74.708567][ T1240] __cleanup_mnt+0x1d/0x40 [ 74.713157][ T1240] task_work_run+0x1e0/0x250 [ 74.717781][ T1240] ? __cfi_task_work_run+0x10/0x10 [ 74.722952][ T1240] ? free_nsproxy+0x223/0x290 [ 74.727661][ T1240] do_exit+0x9b4/0x2630 [ 74.731864][ T1240] ? __sched_text_start+0x10/0x10 [ 74.736906][ T1240] ? __cfi_do_exit+0x10/0x10 [ 74.741522][ T1240] ? __kasan_check_write+0x18/0x20 [ 74.746652][ T1240] ? _raw_spin_lock_irq+0x8d/0x120 [ 74.751831][ T1240] ? __kasan_check_read+0x15/0x20 [ 74.756863][ T1240] ? cgroup_update_frozen+0x160/0x990 [ 74.762253][ T1240] do_group_exit+0x22a/0x300 [ 74.766854][ T1240] ? cgroup_leave_frozen+0x16c/0x2b0 [ 74.772161][ T1240] get_signal+0x139d/0x14f0 [ 74.776679][ T1240] arch_do_signal_or_restart+0x96/0x720 [ 74.782274][ T1240] ? common_nsleep+0x93/0xb0 [ 74.786904][ T1240] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.793108][ T1240] ? __se_sys_clock_nanosleep+0x300/0x390 [ 74.798860][ T1240] ? __kasan_check_read+0x15/0x20 [ 74.803933][ T1240] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 74.810061][ T1240] syscall_exit_to_user_mode+0x58/0xb0 [ 74.815540][ T1240] do_syscall_64+0x64/0xf0 [ 74.819995][ T1240] ? clear_bhb_loop+0x50/0xa0 [ 74.824702][ T1240] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.830627][ T1240] RIP: 0033:0x7fafaa7c11e5 [ 74.835075][ T1240] Code: Unable to access opcode bytes at 0x7fafaa7c11bb. [ 74.842120][ T1240] RSP: 002b:00007fafab618f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 74.850576][ T1240] RAX: fffffffffffffdfc RBX: 00007fafaa9b5fa0 RCX: 00007fafaa7c11e5 [ 74.858555][ T1240] RDX: 00007fafab618fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.866556][ T1240] RBP: 00007fafaa810b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.874555][ T1240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 74.882548][ T1240] R13: 0000000000000001 R14: 00007fafaa9b5fa0 R15: 00007ffd8e229518 [ 74.890556][ T1240] [ 74.893580][ T1240] ---[ end trace 0000000000000000 ]--- [ 74.899797][ T1240] ================================================================== [ 74.907911][ T1240] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 74.914172][ T1240] Write of size 4 at addr 0000000000000168 by task syz.3.314/1240 [ 74.921975][ T1240] [ 74.924293][ T1240] CPU: 0 UID: 0 PID: 1240 Comm: syz.3.314 Tainted: G W 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 74.924316][ T1240] Tainted: [W]=WARN [ 74.924320][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.924329][ T1240] Call Trace: [ 74.924333][ T1240] [ 74.924339][ T1240] __dump_stack+0x21/0x30 [ 74.924358][ T1240] dump_stack_lvl+0x10c/0x190 [ 74.924374][ T1240] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.924390][ T1240] ? preempt_schedule_common+0x2d/0x60 [ 74.924405][ T1240] print_report+0x3d/0x70 [ 74.924417][ T1240] kasan_report+0x163/0x1a0 [ 74.924438][ T1240] ? ihold+0x24/0x70 [ 74.924457][ T1240] ? _raw_spin_unlock+0x5c/0x60 [ 74.924477][ T1240] ? ihold+0x24/0x70 [ 74.924495][ T1240] kasan_check_range+0x299/0x2a0 [ 74.924516][ T1240] __kasan_check_write+0x18/0x20 [ 74.924532][ T1240] ihold+0x24/0x70 [ 74.924550][ T1240] vfs_rmdir+0x26a/0x560 [ 74.924563][ T1240] incfs_kill_sb+0x109/0x230 [ 74.924580][ T1240] deactivate_locked_super+0xd5/0x2a0 [ 74.924595][ T1240] deactivate_super+0xb8/0xe0 [ 74.924607][ T1240] cleanup_mnt+0x3f1/0x480 [ 74.924627][ T1240] __cleanup_mnt+0x1d/0x40 [ 74.924646][ T1240] task_work_run+0x1e0/0x250 [ 74.924660][ T1240] ? __cfi_task_work_run+0x10/0x10 [ 74.924673][ T1240] ? free_nsproxy+0x223/0x290 [ 74.924694][ T1240] do_exit+0x9b4/0x2630 [ 74.924708][ T1240] ? __sched_text_start+0x10/0x10 [ 74.924728][ T1240] ? __cfi_do_exit+0x10/0x10 [ 74.924748][ T1240] ? __kasan_check_write+0x18/0x20 [ 74.924769][ T1240] ? _raw_spin_lock_irq+0x8d/0x120 [ 74.924788][ T1240] ? __kasan_check_read+0x15/0x20 [ 74.924804][ T1240] ? cgroup_update_frozen+0x160/0x990 [ 74.924823][ T1240] do_group_exit+0x22a/0x300 [ 74.924836][ T1240] ? cgroup_leave_frozen+0x16c/0x2b0 [ 74.924855][ T1240] get_signal+0x139d/0x14f0 [ 74.924871][ T1240] arch_do_signal_or_restart+0x96/0x720 [ 74.924889][ T1240] ? common_nsleep+0x93/0xb0 [ 74.924907][ T1240] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.924925][ T1240] ? __se_sys_clock_nanosleep+0x300/0x390 [ 74.924944][ T1240] ? __kasan_check_read+0x15/0x20 [ 74.924959][ T1240] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 74.924973][ T1240] syscall_exit_to_user_mode+0x58/0xb0 [ 74.924990][ T1240] do_syscall_64+0x64/0xf0 [ 74.925008][ T1240] ? clear_bhb_loop+0x50/0xa0 [ 74.925022][ T1240] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.925035][ T1240] RIP: 0033:0x7fafaa7c11e5 [ 74.925046][ T1240] Code: Unable to access opcode bytes at 0x7fafaa7c11bb. [ 74.925053][ T1240] RSP: 002b:00007fafab618f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 74.925068][ T1240] RAX: fffffffffffffdfc RBX: 00007fafaa9b5fa0 RCX: 00007fafaa7c11e5 [ 74.925078][ T1240] RDX: 00007fafab618fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.925087][ T1240] RBP: 00007fafaa810b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.925095][ T1240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 74.925104][ T1240] R13: 0000000000000001 R14: 00007fafaa9b5fa0 R15: 00007ffd8e229518 [ 74.925115][ T1240] [ 74.925120][ T1240] ================================================================== [ 75.229494][ T10] ftdi_sio 3-1:5.46: FTDI USB Serial Device converter detected [ 75.232967][ T1240] Disabling lock debugging due to kernel taint [ 75.237693][ T10] ftdi_sio ttyUSB0: unknown device type: 0x7210 [ 75.243309][ T1240] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 75.252828][ T10] ftdi_sio 3-1:5.101: FTDI USB Serial Device converter detected [ 75.257239][ T1240] #PF: supervisor write access in kernel mode [ 75.268182][ T10] ftdi_sio ttyUSB1: unknown device type: 0x7210 [ 75.270899][ T1240] #PF: error_code(0x0002) - not-present page [ 75.270915][ T1240] PGD 0 P4D 0 [ 75.270947][ T1240] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 75.279102][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 75.279115][ T36] audit: type=1400 audit(1750758904.470:405): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 75.283129][ T1240] CPU: 1 UID: 0 PID: 1240 Comm: syz.3.314 Tainted: G B W 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 75.283160][ T1240] Tainted: [B]=BAD_PAGE, [W]=WARN [ 75.283168][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.288425][ T10] ftdi_sio 3-1:5.13: FTDI USB Serial Device converter detected [ 75.292569][ T1240] RIP: 0010:ihold+0x2a/0x70 [ 75.292604][ T1240] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 75.298576][ T36] audit: type=1400 audit(1750758904.490:406): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.320245][ T1240] RSP: 0018:ffffc9000f70f8a0 EFLAGS: 00010246 [ 75.320268][ T1240] RAX: ffff8881312f5f00 RBX: 0000000000000000 RCX: ffff8881312f5f00 [ 75.336418][ T10] ftdi_sio ttyUSB2: unknown device type: 0x7210 [ 75.340098][ T1240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.340116][ T1240] RBP: ffffc9000f70f8b0 R08: ffffffff88957947 R09: 1ffffffff112af28 [ 75.340134][ T1240] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff8881215bc434 [ 75.353516][ T10] usb 3-1: USB disconnect, device number 15 [ 75.357708][ T1240] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 75.364003][ T10] ftdi_sio 3-1:5.46: device disconnected [ 75.381782][ T1240] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.381803][ T1240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.381818][ T1240] CR2: 0000000000000168 CR3: 000000010ea62000 CR4: 00000000003526b0 [ 75.403476][ T36] audit: type=1400 audit(1750758904.490:407): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.409126][ T1240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.417254][ T36] audit: type=1400 audit(1750758904.490:408): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.423294][ T1240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.423309][ T1240] Call Trace: [ 75.423317][ T1240] [ 75.431508][ T36] audit: type=1400 audit(1750758904.490:409): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.439229][ T1240] vfs_rmdir+0x26a/0x560 [ 75.448955][ T10] ftdi_sio 3-1:5.101: device disconnected [ 75.453060][ T1240] incfs_kill_sb+0x109/0x230 [ 75.453089][ T1240] deactivate_locked_super+0xd5/0x2a0 [ 75.461269][ T36] audit: type=1400 audit(1750758904.490:410): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.466659][ T1240] deactivate_super+0xb8/0xe0 [ 75.476526][ T10] ftdi_sio 3-1:5.13: device disconnected [ 75.482140][ T1240] cleanup_mnt+0x3f1/0x480 [ 75.490513][ T36] audit: type=1400 audit(1750758904.490:411): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.511365][ T1240] __cleanup_mnt+0x1d/0x40 [ 75.511397][ T1240] task_work_run+0x1e0/0x250 [ 75.662934][ T1240] ? __cfi_task_work_run+0x10/0x10 [ 75.668124][ T1240] ? free_nsproxy+0x223/0x290 [ 75.672795][ T1240] do_exit+0x9b4/0x2630 [ 75.677089][ T1240] ? __sched_text_start+0x10/0x10 [ 75.682113][ T1240] ? __cfi_do_exit+0x10/0x10 [ 75.686701][ T1240] ? __kasan_check_write+0x18/0x20 [ 75.691808][ T1240] ? _raw_spin_lock_irq+0x8d/0x120 [ 75.696920][ T1240] ? __kasan_check_read+0x15/0x20 [ 75.701944][ T1240] ? cgroup_update_frozen+0x160/0x990 [ 75.707323][ T1240] do_group_exit+0x22a/0x300 [ 75.711918][ T1240] ? cgroup_leave_frozen+0x16c/0x2b0 [ 75.717207][ T1240] get_signal+0x139d/0x14f0 [ 75.721715][ T1240] arch_do_signal_or_restart+0x96/0x720 [ 75.727260][ T1240] ? common_nsleep+0x93/0xb0 [ 75.731852][ T1240] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 75.738004][ T1240] ? __se_sys_clock_nanosleep+0x300/0x390 [ 75.743724][ T1240] ? __kasan_check_read+0x15/0x20 [ 75.748745][ T1240] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 75.754806][ T1240] syscall_exit_to_user_mode+0x58/0xb0 [ 75.760262][ T1240] do_syscall_64+0x64/0xf0 [ 75.764677][ T1240] ? clear_bhb_loop+0x50/0xa0 [ 75.769344][ T1240] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.775234][ T1240] RIP: 0033:0x7fafaa7c11e5 [ 75.779640][ T1240] Code: Unable to access opcode bytes at 0x7fafaa7c11bb. [ 75.786651][ T1240] RSP: 002b:00007fafab618f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 75.795057][ T1240] RAX: fffffffffffffdfc RBX: 00007fafaa9b5fa0 RCX: 00007fafaa7c11e5 [ 75.803035][ T1240] RDX: 00007fafab618fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.811002][ T1240] RBP: 00007fafaa810b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.818975][ T1240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.826930][ T1240] R13: 0000000000000001 R14: 00007fafaa9b5fa0 R15: 00007ffd8e229518 [ 75.834888][ T1240] [ 75.837890][ T1240] Modules linked in: [ 75.841778][ T1240] CR2: 0000000000000168 [ 75.845910][ T1240] ---[ end trace 0000000000000000 ]--- [ 75.851349][ T1240] RIP: 0010:ihold+0x2a/0x70 [ 75.855843][ T1240] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 75.875431][ T1240] RSP: 0018:ffffc9000f70f8a0 EFLAGS: 00010246 [ 75.881484][ T1240] RAX: ffff8881312f5f00 RBX: 0000000000000000 RCX: ffff8881312f5f00 [ 75.889461][ T1240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.897415][ T1240] RBP: ffffc9000f70f8b0 R08: ffffffff88957947 R09: 1ffffffff112af28 [ 75.905371][ T1240] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff8881215bc434 [ 75.913330][ T1240] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 75.921286][ T1240] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.930215][ T1240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.936787][ T1240] CR2: 0000000000000168 CR3: 000000010ea62000 CR4: 00000000003526b0 [ 75.944750][ T1240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.952706][ T1240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.960670][ T1240] Kernel panic - not syncing: Fatal exception [ 75.966898][ T1240] Kernel Offset: disabled [ 75.971218][ T1240] Rebooting in 86400 seconds..